Privacy notice | Valdarte

Who is responsible

The data controller is Valdarte Società Agricola S.r.l., Località Borselli, Caffarelli 56, 50060 Pelago (FI), Italy, VAT 07538770483. Contact: info@valdarte.com · PEC valdarte@pec.it.

What we collect

Bookings: the organiser's name, email, phone and invoicing details, the dates, group size and retreat details, and the arrival details you send us afterwards. Card details are entered on Stripe's page and never reach us.
Tailored-offer requests: your name, email, and optionally phone and website, with the details of your retreat.
Emails you send us: whatever you choose to include.
Technical data: our hosting provider records standard server logs (such as IP address and browser type) to keep the site secure and working.

We do not use advertising or tracking cookies.

Why, and on what legal basis

To take and manage your booking, and to reply to requests: performing a contract or steps before one (Art. 6(1)(b) GDPR).
To meet our legal duties, including invoicing, accounting and the guest registration Italian law requires (Art. 6(1)(c)).
To keep the website secure: our legitimate interest (Art. 6(1)(f)).

Who else handles it

We use a few service providers who process data only on our instructions: Vercel Inc. (website hosting), Supabase (the database that holds bookings, hosted in the EU), Stripe (card payments), Postmark / ActiveCampaign (booking and request emails), and our email provider. Some of these providers are based in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell your data.

How long we keep it

Requests that don't lead to a booking are deleted within 24 months of our last exchange. Booking records are kept for as long as Italian tax and accounting law requires (generally 10 years).

Your rights

You can ask us to access, correct, delete or export your data, or to restrict or object to how we use it. Write to info@valdarte.com. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).