Information on the processing of personal data of users who visit the Corte Celestiale website pursuant to Article 13 of Regulation (EU) 2016/679.
Pursuant to Regulation (EU) 2016/679 (hereinafter, the “Regulation”), this page describes how the personal data of users visiting the website www.cortecelestiale.com (hereinafter, the “Site”) are processed.
This information does not concern other websites, pages or online services that may be reached via hyperlinks published on the Site but referring to external resources.
Following consultation of the Site, data relating to identified or identifiable natural persons may be processed. This Privacy Policy refers exclusively to data collected through the Site and to cookies used for browsing web pages, and does not extend to data collected by sites operated by other parties to which the Site may link.
Data Controller
The Data Controller is, pursuant to Art. 4 GDPR:
Az. Agricola Ca’ di Campo
Località Ca’ di Campo n. 2 – 17031 Salea d’Albenga (SV)
VAT No.: 01640050090
E-mail: info@cortecelestiale.com
Legal Basis for Processing
The personal data indicated on this page are processed by the Data Controller on the basis of the legitimate interest in the proper functioning of the Site and the provision of services requested by users (Art. 6(1)(b) and (f) of the Regulation), as well as, where applicable, upon the data subject’s prior consent (Art. 6(1)(a) of the Regulation).
General Principles of Processing
The Data Controller implements adequate technical and organisational measures to ensure that the processing of the data provided is carried out in compliance with the Regulation, taking into account the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of natural persons. This document is subject to periodic review in order to ensure full compliance with the practices followed by the Data Controller.
Types of Data Processed and Purposes of Processing
Browsing Data
The computer systems and software procedures used to operate this Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the devices used by users, the URI/URL addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, and other parameters relating to the user’s operating system and computer environment.
This data is processed exclusively in aggregate and anonymised form for the purpose of:
- obtaining statistical information on the use of the Site (most visited pages, number of visitors, geographical areas of origin, etc.);
- checking the correct functioning of the services offered;
- understanding how to improve the quality of navigation on the Site.
Data Provided Voluntarily by Users
The optional, explicit and voluntary sending of messages through the contact forms on the Site (requests for information, availability checks, bookings) involves the acquisition of the sender’s contact data — such as first name, last name, e-mail address, phone number, stay dates and free-text messages — necessary to respond to the requests received and to manage bookings.
This data is processed exclusively for the following purposes:
- responding to requests for information and quotes;
- managing bookings and stays at the property;
- fulfilling legal obligations relating to guest registration (mandatory reporting to public security authorities pursuant to Art. 109 of the Consolidated Public Security Act – T.U.L.P.S.);
- sending communications relating to the booked stay.
Data Processed Through Third-Party Booking Platforms
If the booking is made through third-party platforms (such as Booking.com, Airbnb, or similar portals), personal data will also be processed in accordance with the respective privacy policies of those platforms, to which reference should be made. Az. Agricola Ca’ di Campo will receive from these platforms only the data necessary to manage the stay.
Data Recipients
The personal data collected may be disclosed to:
- the manager of the booking system and website, acting as data processor pursuant to Art. 28 of the Regulation;
- public security authorities, in cases provided for by law (mandatory disclosure pursuant to the T.U.L.P.S.);
- suppliers of services strictly connected to the provision of the stay (e.g. payment services), where necessary.
The personal data collected will never be sold or disclosed to third parties for commercial or marketing purposes without the prior consent of the data subject.
Processing Methods
The Data Controller will process the data in compliance with the guarantees of confidentiality and the appropriate security measures required by current legislation, using IT tools with logic strictly related to the purposes of the processing and, in any case, in such a way as to guarantee the security and confidentiality of the data.
Communication and Transfer of Personal Data
Personal data is processed within the European Union and stored on servers located within the European Union. Personal data will never be transferred to third countries without the guarantees required by Regulation (EU) 2016/679.
Data Retention Period
Browsing data is processed for the duration of the browsing session and, at the end of it, made anonymous and aggregated for statistical purposes only.
Data provided voluntarily through the contact and booking forms is retained for the time strictly necessary to manage the request and, in the case of a confirmed stay, for the period required by applicable legal obligations (tax, administrative and public security), in any case not exceeding 10 years from the last processing, unless otherwise required by law.
Rights of Data Subjects
With regard to their personal data, pursuant to Articles 15–22 of the GDPR, the user has the right to:
- access their personal data and request a copy of it;
- request the rectification of inaccurate or incomplete data;
- request the erasure of data (“right to be forgotten”), in the cases provided for by law;
- obtain the restriction of processing, in the cases provided for;
- object to processing, where processing is based on legitimate interest;
- receive their data in a structured, commonly used and machine-readable format (portability);
- withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
To exercise the rights listed above, the user may contact the Data Controller by writing to: info@cortecelestiale.com. The request will be responded to as soon as possible and, in any case, within the timeframes provided for by the Regulation (normally 30 days).
Right to Lodge a Complaint
Data subjects who believe that the processing of their personal data carried out through this Site violates the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), as provided for by Art. 77 of the Regulation, or to bring the matter before the competent courts (Art. 79 of the Regulation).
Cookie Policy
This Cookie Policy describes the types of cookies installed on the Site www.cortecelestiale.com, their purposes and methods of use, as well as instructions for changing or withdrawing consent to the use of cookies.
What Are Cookies?
Cookies are text strings that websites visited by the user place and store on the user’s terminal device. The information contained in cookies may include personal data (such as an IP address or a unique identifier) or non-personal data (such as language settings or information about the type of device). Cookies can perform various functions, including session tracking, storing preferences and statistical analysis of traffic.
What Types of Cookies Does Corte Celestiale Use?
The Site uses exclusively technical cookies, necessary for the correct functioning of the Site and for safe and efficient browsing, and anonymous (or pseudo-anonymous) analytics cookies, aimed at producing aggregated statistics on traffic and use of the Site, which do not allow direct identification of users. Prior consent from data subjects is not required for the use of these cookies.
The Site does not use profiling cookies or employ other tracking methods for advertising or commercial profiling purposes.
How Are Cookies Managed?
Users can change their cookie settings at any time by acting directly on the settings of the browser they are using. It is possible to disable all or some cookies, although this setting may make some features of the Site unavailable or limit their use.
Below are links to instructions for managing cookies in the main browsers:
Changes to the Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy at any time. Changes will take effect from the date of publication on the Site. Users are advised to check this page periodically for any updates.
This notice was drawn up on 23 March 2026.