Privacy Policy

At Tenuta Legaro, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, make an enquiry or reservation, subscribe to our newsletter, or stay at Tenuta Legaro.

This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR) and applicable Italian data protection legislation.

1. Who is responsible for your personal data?

The data controller responsible for processing your personal data is:

Tenuta del Barone SRL
trading as Tenuta Legaro

Registered address: Contrada Cozzana KM. 453, Monopoli (BA), Italy
Registered with the Italian Business Register of the Chamber of Commerce, Industry, Handicrafts and Agriculture of Bari
Fiscal Code: 08641610723
VAT number: 08641610723
R.E.A. number: BA–640353

Email: [email protected]

For questions concerning this Privacy Policy or the processing of your personal data, please contact us at the email address above.

2. What personal data do we collect?

Depending on how you interact with Tenuta Legaro, we may collect and process the following information:

Identity and contact information
Your name, address, email address, telephone number, nationality and other contact details.

Reservation and stay information
Arrival and departure dates, room preferences, number and identity of guests, special requests, travel information and information relating to services and experiences booked during your stay.

Payment and transaction information
Information relating to payments, deposits, invoices and transactions. Payment card information may be processed directly by our payment service providers and is not necessarily stored by Tenuta Legaro.

Information required by law
Identification and other information that we are legally required to collect in connection with guest registration, accounting, taxation or public security requirements.

Communications
Information you provide when contacting us by email, telephone, through our website, social media or other communication channels.

Marketing information
Your email address and marketing preferences where you have subscribed to our newsletter or otherwise consented to receiving communications from us.

Technical and website information
Information such as IP address, browser type, device information, website activity and cookie identifiers where applicable.

Special requests
You may voluntarily provide information concerning dietary requirements, allergies, accessibility requirements or other personal preferences. Some of this information may constitute special-category personal data under the GDPR. Where required, we will process such information only with your explicit consent or where another lawful basis applies.

3. Why do we use your personal data?

We may process your personal data for the following purposes:

Reservations and providing our services

We use your information to:

  • respond to enquiries;

  • manage reservations;

  • process deposits and payments;

  • prepare for your arrival;

  • provide accommodation, dining and other services;

  • organise experiences, transfers and activities;

  • communicate with you before, during and after your stay; and

  • deal with requests, complaints or other matters relating to your reservation.

The legal basis for this processing is normally the performance of a contract with you or taking steps at your request before entering into a contract.

Legal obligations

We process certain information where required to comply with Italian or European law, including obligations relating to guest registration, public security, accounting, taxation and record keeping.

The legal basis for this processing is compliance with our legal obligations.

Operating and protecting Tenuta Legaro

We may process information where reasonably necessary to operate our business, protect our property, maintain the security of our systems, prevent fraud, handle legal claims and improve our services.

Where applicable, the legal basis is our legitimate interest in operating and protecting Tenuta Legaro, provided that these interests do not override your fundamental rights and freedoms.

Marketing and newsletters

If you subscribe to our newsletter or otherwise consent to receiving marketing communications, we may use your contact information to send you news, offers, stories and information about Tenuta Legaro.

You may withdraw your consent and unsubscribe at any time by using the unsubscribe link contained in our emails or by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Newsletter tracking

Our newsletter provider may process information relating to the delivery of and interaction with our emails.

Where technologies such as tracking pixels are used to determine whether an email has been opened or whether links have been selected, we will provide the information required by applicable data protection legislation and, where required, obtain the appropriate consent.

5. Cookies and website technologies

Our website may use cookies and similar technologies.

Cookies that are strictly necessary for the operation and security of the website may be used without your consent where permitted by law.

Analytics, advertising, profiling and other non-essential cookies or tracking technologies will only be activated where the applicable legal requirements have been satisfied, including obtaining your consent where required.

When you first visit our website, you may be asked to manage your cookie preferences. You can subsequently change or withdraw your consent through our cookie settings.

Further information about the cookies and technologies used on our website can be found in our Cookie Policy.

6. Who may receive your personal data?

We do not sell your personal data.

Where necessary for the purposes described in this Privacy Policy, information may be shared with trusted third parties, including:

  • booking and reservation system providers;

  • payment service providers and banks;

  • website hosting and IT providers;

  • email and newsletter providers;

  • accountants, legal advisers and other professional advisers;

  • travel agents, tour operators or booking platforms involved in your reservation;

  • providers of transfers, excursions, restaurants and other experiences requested by you; and

  • public authorities where disclosure is required by law.

These parties may process personal data on our behalf as data processors or, where applicable, as independent data controllers.

We require service providers processing personal data on our behalf to protect it appropriately and to process it only in accordance with our instructions and applicable law.

7. International transfers

Some of our technology, booking, communication or marketing providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of data protection, we will use appropriate safeguards as required by the GDPR, such as the European Commission's Standard Contractual Clauses, where applicable.

You may contact us if you would like further information about the safeguards used for international transfers of your personal data.

8. How long do we keep your information?

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting and tax requirements.

Retention periods vary depending on the type of information and the reason for processing it.

Reservation, transaction and accounting information may be retained for the period required under applicable Italian law.

Marketing information will normally be retained until you withdraw your consent or unsubscribe, subject to reasonable administrative retention periods.

Information that is no longer required will be deleted, anonymised or otherwise securely disposed of.

9. How do we protect your information?

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal information is limited to employees, contractors and service providers who reasonably require it to perform their duties.

However, no internet-based system can be guaranteed to be completely secure, and we continually review the measures used to protect personal information.

10. Your rights

Under the GDPR, and subject to the conditions provided by law, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain types of processing;

  • receive certain personal data in a structured, commonly used and machine-readable format and request its transfer to another controller where applicable;

  • withdraw consent at any time where processing is based on consent; and

  • lodge a complaint with a data protection supervisory authority.

In Italy, the competent supervisory authority is the Garante per la Protezione dei Dati Personali.

You may exercise your rights by contacting us at [email protected].

We may need to verify your identity before responding to a request.

11. Third-party websites and services

Our website may contain links to websites or services operated by third parties, including social media platforms, booking providers and other partners.

These third parties have their own privacy practices and policies. Tenuta Legaro is not responsible for the privacy practices of independent third-party websites, and we recommend reviewing their privacy policies before providing personal information.

12. Social media

Tenuta Legaro maintains profiles on social media platforms.

When you interact with us through these platforms, your personal data may also be processed by the relevant social media provider in accordance with its own privacy policy and terms.

13. Children

Our website and marketing communications are not intended to collect personal information directly from children.

Where information concerning children is required in connection with a family reservation or stay, it should be provided by a parent, guardian or other authorised adult and will be processed only where necessary for the relevant service or legal requirement.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or applicable law.

The latest version will always be available on our website, together with the date on which it was last updated.

15. Contact us

If you have any questions about this Privacy Policy, how we process your personal data or how to exercise your rights, please contact:

Tenuta del Barone SRL
trading as Tenuta Legaro

Registered address: Contrada Cozzana KM. 453, Monopoli (BA), Italy
Registered with the Italian Business Register of the Chamber of Commerce, Industry, Handicrafts and Agriculture of Bari
Fiscal Code: 08641610723
VAT number: 08641610723
R.E.A. number: BA–640353

Email: [email protected]

Newsletter subscription

By subscribing to our newsletter, you consent to receiving news, offers and information from Tenuta Legaro by email. You can unsubscribe at any time using the link in our emails.