Privacy policy

This page describes how the nobilismontepulciano.it website (hereinafter also the “Website”) is managed with regard to the processing of personal data of users who visit it. This information is provided pursuant to and for the purposes set forth in EU Regulation No. 679/2016 (“GDPR”), on the protection of natural persons with regard to the processing of personal data. It is intended to explain our practices regarding the personal information of those who browse the Website, so that they understand how their personal information is handled and can provide their express and informed consent to the processing of data entered on the Website through the voluntary completion of forms on the Website or provided by them in any other way.

All personal data submitted by users (name, surname, email address, etc.) is collected, stored, and processed in accordance with the GDPR.
Processing of personal data means any operation or set of operations, performed even without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure, and destruction of data, even if not recorded in a database.

This information applies only to this Website and not to other websites that may be accessed by the user via links.

By accessing and using the Website, the user acknowledges having carefully read this Privacy Policy and accepts the purposes and methods of processing described therein.

I. DATA CONTROLLER
The personal data provided or collected through the operations performed by users on the Website will be processed by Rag. Soc. Luminella Societa’ Agricola a R. L., with registered office in Viale Piero Calmandrei, 115, 53045 Montepulciano (SI) and VAT number 01482490529 as Data Controller.

II. DATA PROCESSED
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information, by its very nature, could allow users to be identified through processing and association with data held by third parties.
This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the site and to verify its correct functioning, and is deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical cybercrimes against the site: except for this eventuality, web contact data is currently not retained for more than seven days.
Data relating to the user’s geographic location may be used to provide information, suggestions, and other personalized location-based content. Users who do not wish to share information about their geographic location must disable location services on their device.
Data provided voluntarily by the user
Personal data entered on the Website as well as data sent by the user via email to the email addresses indicated on the Website. Such data includes, for example, the sender’s email address, first name and last name, postal address, and telephone number included in the message. The optional, explicit, and voluntary sending of emails via the Website and/or to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message sent.
Cookies
To ensure the proper functioning of the Website and improve the service offered, the Website uses both first-party and third-party cookies. Cookies are small text files that websites visited by users send to their terminal (usually the browser), where they are stored before being re-transmitted to the same websites upon the same user’s next visit.
For more information, to learn about the cookies used on the Website and to disable them and/or refuse consent, please refer to the Cookie Policy.

III. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is collected and processed by Rag. Soc. Luminella Societa’ Agricola a R. L. for the following purposes:
A. As part of the availability check, booking, and purchase processes for services offered on the Website, personal data is requested (such as email address, personal details, postal address, credit card details and bank details, and telephone number);
B. To provide customer support services and other technical, commercial, or other information specifically requested by users, personal data is collected (such as email address, first and last name, and telephone number);
Furthermore, with the prior consent of users, Personal Data may be entered into Rag. Soc.’s customer database. Luminella Societa’ Agricola a R. L. and processed for the following purposes:
C. Marketing purposes: to contact users and send them (by post, telephone, email, and other forms of electronic communication) newsletters and/or other promotional messages, including commercial ones, relating to Rag. Soc. Luminella Societa’ Agricola a R. L.’s services;
D. Profiling purposes: to conduct studies, surveys, statistical and/or market analyses and research, in relation to preferences for Rag. Soc. Luminella Societa’ Agricola a R. L.’s services, in order to offer a personalized service to users’ needs and to promote cultural and recreational initiatives and activities.
The processing of personal data will be used solely for the aforementioned purposes and to the extent strictly necessary to achieve the specific purpose.
The legal bases for processing your personal data are based on the purposes for which such data was provided and collected and include processing the information as required to fulfill contractual obligations, comply with legal obligations, protect the safety of Rag. Soc. Luminella Societa’ Agricola a R. L. employees, guests, and other individuals, for the legitimate business interests of Rag. Soc. Luminella Societa’ Agricola a R. L., and in accordance with the consent
provided by the user.

IV. USER CONSENT
By browsing the Website and/or entering personal data, the user declares that he or she has read this privacy policy pursuant to the GDPR and accepts it. Furthermore, by selecting the consent flag or other similar confirmation, the user gives explicit consent to the processing of his or her data, as well as to its transfer to third parties for the purposes set out above.
By entering his or her data on the Website, the user specifically consents to:
a. transmitting his or her email address to third-party automatic email forwarding systems for advertising purposes;
b. receiving advertising emails or other correspondence from Rag. Soc. Luminella Societa’ Agricola a R. L.
c. collecting, storing, and processing his or her personal data;
d. having his or her data stored in databases by Rag. Luminella Societa’ Agricola a R.L. and/or third-party companies or individuals contractually associated with the Company and specifically appointed to process users’ personal data.
The user may withdraw their consent to data processing at any time by sending an email to info@nobilismontepulciano.it

V. LOCATION OF DATA PROCESSING AND COMMUNICATION OF DATA TO THIRD PARTIES
The processing operations related to the Website’s web services may take place on the servers of third-party companies that offer hosting services on behalf of Rag. Soc. Luminella Societa’ Agricola a R. L., including cloud services.
The user’s data may also be processed by third-party companies used by Rag. Soc. Luminella Societa’ Agricola a R. L. to perform activities on its behalf (for example, analyzing data, archiving data, sending newsletters or other commercial and non-commercial communications, providing marketing assistance, and conducting market analysis).
With regard to the scope of communication of personal data, the personal data provided by the user or otherwise collected may be communicated to the following entities or categories of entities:
a. public administrations, for the fulfillment of obligations established by law, regulations, or national or EU legislation. In such cases, there is no obligation to obtain the data subject’s prior consent for such communications;
b. Parent companies, subsidiaries, or affiliates of Rag. Soc. Luminella Societa’ Agricola a R. L.;
c. Other companies or individuals contractually associated with the Company and specifically appointed to process personal data on behalf of Rag. Soc. Luminella Societa’ Agricola a R. L.
relies on third-party companies and individuals to perform certain activities on its behalf (e.g., data processing, sending automatic emails, etc.). These entities have access only to the personal data necessary to perform their tasks on behalf of Rag. Soc. Luminella Societa’ Agricola a R. L. They have been selected because they are deemed to have adequate experience, capacity, and reliability, as well as being capable of ensuring full compliance with applicable privacy regulations.
By browsing the Website, the user consents to the disclosure of their data to third-party service providers on our behalf and to this data processing method.
In cases other than those indicated above, the user will be informed if his/her personal data must be communicated to third parties and will be able to choose whether or not to authorize the communication of his/her personal data to third parties.

VI. DATA PROCESSING METHODS
Personal Data will be processed using appropriate electronic or automated, computerized, and telematic tools, or through manual processing on paper, using methods strictly related to the purposes for which the personal data was collected and, in any case, in a manner that guarantees the security and confidentiality of the data and for the time strictly necessary to achieve the purposes for which it was collected.
Rag. Soc. Luminella Societa’ Agricola a R. L. has adopted technical solutions and security measures that guarantee the security of personal data and prevent their alteration, loss, incorrect processing, or unauthorized access.
Rag. Soc. Luminella Societa’ Agricola a R. L. reserves the right to appoint third parties (companies or individuals) to process personal data on its behalf and may share personal data with such third parties. However, it will require such third parties to comply with the principles and applicable privacy legislation when processing the aforementioned data.
Personal Data will be collected and processed by Rag. Soc. Luminella Societa’ Agricola a R. L. and its internal staff (employees) and/or collaborators authorized to process such data as data processors and, where necessary and/or instrumental to the purposes indicated above, by external third parties (such as service providers, consultants and professional firms, companies that provide assistance and/or consultancy services or that perform, on behalf of Rag. Soc. Luminella Societa’ Agricola a R. L., technological maintenance and website management services, services related and instrumental to the purposes of data processing, and which Rag. Soc. Luminella Societa’ Agricola a R. L. may also use for the creation and/or management of promotional offers for its services, etc.).
Any use of the user’s credit card data for purposes other than verifying the existence of payment methods, charging and managing payments, as well as managing any complaints and litigation is expressly excluded. To this end, the aforementioned data will also be processed by the bank providing online payment management services and by the institution that issued the credit card the user enters to validate the purchase of services.

VII. OPTIONAL DATA PROVISION

Except as specified for navigation data, the provision of Personal Data is optional.
However, if the user wishes to access the services offered by the Website and/or receive information on the services and/or promotions and/or discounts offered by Rag. Soc. Luminella Societa’ Agricola a R. L. and/or receive assistance and/or specific information, it is necessary to complete all fields indicated as mandatory in the relevant forms. The processing of user data for the purposes referred to in paragraph III, letters (A), (C), and (D) is subject to the user’s explicit consent.
Failure to provide personal data and explicit consent to their processing may make it impossible to access the services offered by the Website, receive the newsletter, and/or other informational and advertising materials.
By entering personal data on the Website, the user guarantees that the personal information provided is accurate and up-to-date. Furthermore, you acknowledge that you are solely responsible for the data you provide, whether personal data, photos, comments, or otherwise, and you hereby release Rag. Soc. Luminella Societa’ Agricola a R. L. from any liability.

VIII. RETENTION OF PERSONAL DATA

Rag. Soc. Luminella Societa’ Agricola a R. L. will retain the personal data processed for the period of time necessary to fulfill the purposes indicated in this policy, unless a longer retention period is required or permitted by applicable law.

IX. RIGHTS OF DATA SUBJECTS
The data subjects to whom the personal data refers have the following rights:

A) Right of access, correction, erasure, and restriction. The user has the right to: request Rag. Soc. Luminella Societa’ Agricola a R. L. access to their personal data and related information; verify the accuracy of their personal data or request completion of incomplete data or updating or rectification of inaccurate data;
request Rag. Soc. Luminella Societa’ Agricola a R. L. erasure of their personal data when the conditions set out in Article 17, paragraph 1 of the GDPR are met and in compliance with the exceptions set out in paragraph 3 of the same article);

request restriction of the processing of their personal data (in the circumstances set out in Article 18, paragraph 1 of the GDPR).

B) Right to object to processing. The user has the right to request Rag. Luminella Societa’ Agricola a R. L. ceases to process your personal information: for marketing purposes, including profiling; for statistical purposes;
where such processing is based on the legitimate commercial interests of Rag. Soc. Luminella Societa’ Agricola a R. L., unless we demonstrate a legitimate reason for such processing or the processing of your personal information is necessary for the establishment, exercise, or defense of legal claims.

C) Right to withdraw consent. You have the right to withdraw your consent at any time to any processing conducted by Rag. Soc. Luminella Societa’ Agricola a R. L. solely on the basis of your consent (such as, for example, the sending of direct marketing materials to your personal email address). Processing based on consent and carried out before its withdrawal remains lawful.
D) Right to data portability. You have the right to request from Rag. Luminella Societa’ Agricola a R. L. and to obtain, where the legal basis for processing is consent or a contract, and where processing is carried out by automated means, your personal data in a commonly used electronic format, including for the purpose of communicating such data to another data controller.
E) Complaint to a supervisory authority
You have the right to lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).
Requests should be addressed:
by email to info@nobilismontepulciano.it
or by post to Rag. Soc. Luminella Societa’ Agricola a R. L., with registered office at Viale Piero Calmandrei, 115, 53045 Montepulciano (SI).

X. LINKS TO THIRD-PARTY WEBSITES AND SERVICES
This Website may contain links to third-party websites.
Rag. Soc. Luminella Societa’ Agricola a R. L. is not responsible for the collection, use, management, sharing, or disclosure of personal data by these third parties. If you provide personal data on and use third-party websites, their privacy policies and terms of service will apply. We therefore encourage you to read the privacy policies of the websites you visit before submitting your personal data.

XI. CHANGES TO THE POLICY
This policy may be subject to change. The version published on the Website is the one currently in effect, last updated on July 15, 2025.