Privacy Policy

This privacy notice describes how the personal data of users who visit the website of Hotel Ristorante Le Capanne and/or use the contact and information request services available on the website are processed.

1. Data Controller

The Data Controller is:

Hotel Le Capanne di Francioni Giampaolo
Loc. Il Matto, 44/45 – 52100 Arezzo
VAT Number: 00877850511
CIN: IT051002A1YWUEE7C3
Phone: +39 0575/959634
Fax: +39 0575998674
Email: info@hotellecapanne.com

2. Types of Data Processed

The website may collect and process the following categories of personal data:

• identification data, such as name and surname;
• contact data, such as email address and telephone number;
• data voluntarily entered in contact or information request forms;
• technical browsing data, such as IP address, browser data, operating system and information relating to the use of the website;
• any data necessary for managing booking, stay or commercial information requests.

3. Purposes of Processing

Personal data are processed for the following purposes:

• to respond to information requests sent through the website, by email or by telephone;
• to manage availability, booking or stay requests;
• to fulfil administrative, tax, accounting and legal obligations;
• to ensure the proper technical functioning of the website;
• to improve the browsing experience and the quality of the services offered;
• to prevent abuse, fraud or improper use of the website.

4. Legal Basis for Processing

The processing of personal data is carried out on the basis of one or more of the following legal bases:

• performance of pre-contractual or contractual measures requested by the data subject;
• compliance with legal obligations;
• the legitimate interest of the Data Controller in ensuring the security and proper functioning of the website;
• the consent of the data subject, where required, for example for any promotional activities or non-technical cookies.

5. Processing Methods

Data are processed using IT, electronic and, where necessary, paper-based tools, adopting appropriate technical and organisational measures to protect data from unauthorised access, loss, unlawful use or unauthorised disclosure.

6. Provision of Data

The provision of data requested in the contact forms is necessary in order to receive a response or use the requested services. Failure to provide such data may make it impossible to manage the request.

7. Data Retention

Personal data will be retained for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period required by current civil, tax, accounting and administrative legislation.

Data collected through contact requests will be retained for the time necessary to manage the request and any subsequent relationship.

8. Communication of Data to Third Parties

Personal data may be communicated to third parties only when necessary for the provision of the requested services or to comply with legal obligations. By way of example, data may be processed by:

• IT service providers, hosting providers and website maintenance providers;
• tax, administrative or legal consultants;
• booking, payment or hotel management service providers, where present;
• public authorities, in the cases provided for by law.

Personal data will not be disseminated or sold to third parties.

9. Transfer of Data Outside the European Union

Should certain technical services or third-party tools involve the transfer of personal data to countries outside the EU, such transfer will take place in compliance with the safeguards provided for by Regulation EU 2016/679, where applicable.

10. Cookies and Tracking Tools

The website may use technical cookies necessary for the proper functioning of the pages and, subject to the user’s consent, any analytical, statistical, marketing or third-party cookies.

For more information on the use of cookies, users are invited to consult the Cookie Policy of the website, where available.

11. Rights of the Data Subject

The data subject may exercise at any time the rights provided for by Regulation EU 2016/679, including:

• the right of access to personal data;
• the right to rectify inaccurate data;
• the right to erasure of data, in the cases provided for by law;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability, where applicable;
• the right to withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise their rights, the data subject may contact the Data Controller at the following email address: info@hotellecapanne.com.

12. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their personal data is being carried out in breach of current legislation.

13. Changes to This Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time. Updates will be published on this page.

Last update: 8 giugno 2026