Privacy Policy

Last updated: 19 October 2026

Data controller

Azienda Agricola San Giusto, Via Forcile 18, 50025 Montespertoli (FI), Italy, tax code and VAT number 05065460486. For any question about this policy or your data, write to agricolasangiusto@libero.it.

What data we collect

Through the forms on the site (booking a wine tasting, cooking class, olive harvest day or farm stay, asking about our products) you can send us:

  • Your name, email address and, if you wish, a phone or WhatsApp number
  • Date, time and number of people for a booking, whether you need transport, and any notes
  • The products you are interested in, for a product request

Name and email are required: without them we cannot answer you or handle the booking. Phone and notes are optional. If you tell us about an allergy or intolerance in the notes, we use it only to prepare your food and keep it under the same rules as the booking.

How requests reach us: when you press «Send request» on a booking page, our server (Aruba, in Italy) forwards the form to us by email and, so that we can answer faster, also as a private message on our Telegram; it also keeps a copy until about three months after the booked date, only to manage the booking, and then deletes it. If you choose WhatsApp instead (or email, for products), the site prepares a ready-written message and opens it in your app: you decide whether to send it. Bookings we agree with you on WhatsApp or by phone are noted on the same server, to send you a confirmation and a reminder.

Visit statistics

Only if you accept it in the cookie banner, we use Google Analytics to learn, in aggregate form, how many people visit the site, from which country, on which device and which pages they read, and how many requests are prepared with the forms (without their content). We do not use this data for advertising. You can withdraw your consent at any time from «Cookie preferences» at the bottom of every page.

For all visitors we also count visits with an anonymous counter on our server (Aruba, in Italy), without cookies: it records no IP addresses and nothing that identifies a person, only daily totals (pages viewed, referring site, browser language, time zone, type of device and clicks on the buttons to contact us).

Technical server data

As for every website, the company that hosts ours (Aruba) automatically records some technical data of each request: IP address, date and time, requested page and browser type. They are needed for the security and proper working of the server, Aruba keeps them for a limited time under the rules of its service, and we do not use them to identify visitors.

Why we use your data

Only to answer your booking requests or product enquiries and, once a booking is confirmed, to send you a confirmation email and, the day before, a reminder with the address and directions. After your visit we may write to you once, on WhatsApp or by email, to thank you and ask, if you like, for a review. We do not use your data for marketing, and we never sell it or share it with others for commercial purposes.

Legal basis

We answer your booking or quote requests because you ask us to (steps prior to a contract, Art. 6(1)(b) GDPR). The single thank-you message after your visit and the technical server data rely on our legitimate interest (Art. 6(1)(f)): hearing your opinion and keeping the site secure; if you would rather not receive the message, just tell us. Google Analytics statistics and the Google Maps map rely on your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who processes data with us

To run the site and answer requests we rely on these providers, each with its own privacy policy:

  • Aruba S.p.A. (Italy): hosts the site, sends the form emails, keeps the copy of bookings and the counter totals
  • Italiaonline S.p.A. (Italy): runs our Libero mailbox, where requests arrive and from which we reply
  • Telegram: sends us a private alert when a new booking request arrives from the site, with the name, contacts and notes of the request. Telegram is run by a company based outside the European Union, so this alert is also processed outside the EU
  • Google (Google Ireland Limited): Google Analytics and Google Maps, only if you accept them in the cookie banner (the map also if you press «Show the map»); data may be transferred to the United States, where Google takes part in the EU-US Data Privacy Framework
  • WhatsApp (Meta): only if you choose to write to us on WhatsApp; the conversation is handled by WhatsApp under its own privacy policy
  • Instagram, YouTube, TikTok: the links on the site take you to these external platforms, each with its own privacy rules

For details about the cookies these services use, read our Cookie Policy.

How long we keep data

  • The copy of bookings on our server: until about three months after the booked date, then it is deleted automatically
  • Emails and WhatsApp and Telegram messages about your request: up to 2 years after the last message, so we can find your booking if you come back or write again; then we delete them
  • Invoices and receipts, if any: for the 10 years required by Italian tax law

Your rights

Under Regulation (EU) 2016/679 (GDPR) you can ask us at any time, by writing to agricolasangiusto@libero.it, for:

  • Access to the data about you
  • Correction or deletion of the data
  • Restriction of, or objection to, the processing
  • Data portability
  • Withdrawal of a consent you gave (for example to statistics cookies), without affecting what was done before

We reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it), or with the authority of the EU country where you live.

Other information

We have not appointed a Data Protection Officer (DPO): a business like ours is not required to. Bookings for children are made by an adult: we do not collect data directly from minors. We make no automated decisions about people.

Changes to this policy

We may update this policy over time, for example if the services used on the site change. The date at the top of the page shows the latest update. If the English and Italian versions differ, the Italian version prevails.