1. Data Controller

The Data Controller for personal data is La Corte di Laura, located at Via Nicola Dorati 44, Località Granaiola (Bagni di Lucca), Bagni di Lucca (LU), Italy.

For any requests regarding your personal data, you can contact us at: info@lacortedilaura.it

2. Types of Data Collected

Our website collects and processes the following categories of personal data:

2.1 Navigation Data

During your visit to our site, our computer systems and software procedures automatically collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This data includes: IP addresses, browser type, operating system, domain name, access times, pages visited.

2.2 Voluntarily Provided Data

Personal data that you voluntarily provide through contact or booking forms (name, surname, email, phone number, number of guests, preferred date and time) are collected only with your explicit consent and used exclusively for the purposes indicated at the time of collection.

2.3 Cookies and Tracking Technologies

Our site uses Google Tag Manager to manage analytics and tracking tags. Through this platform, technical and analytical cookies may be installed to improve browsing experience and analyze site traffic. For more information, please see our Cookie Policy.

3. Purpose of Processing and Legal Basis

Your personal data is processed for the following purposes:

Reservation management: to respond to table booking requests (legal basis: execution of pre-contractual measures).
Communications: to respond to your contact requests and provide information about our services (legal basis: consent or legitimate interest).
Analytics and statistics: to improve user experience on our website through analysis of traffic data in aggregate and anonymous form (legal basis: legitimate interest).
Legal obligations: to comply with obligations provided by law, regulations, or European legislation (legal basis: legal obligation).

4. Method of Processing

Personal data is processed using manual and automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are implemented to prevent data loss, illicit or improper use, and unauthorized access.

5. Communication and Disclosure of Data

Your personal data may be communicated to:

Entities that provide services for the management of computer systems and the website (hosting, maintenance).
Google LLC, as provider of Google Tag Manager and Google Analytics services, for statistical analysis purposes.
Public authorities and law enforcement, in case of legitimate requests and in cases provided by law.

Your data will never be disclosed to third parties without your explicit consent, except in cases provided by law.

6. International Data Transfer

Some of the service providers we use (such as Google) may transfer personal data outside the European Economic Area (EEA). In such cases, we ensure that the transfer takes place in compliance with GDPR and with appropriate safeguards (e.g., Standard Contractual Clauses approved by the European Commission).

7. Retention Period

Personal data will be retained for the period strictly necessary to achieve the purposes for which it was collected:

Reservation data: for the duration necessary for managing the reservation and for any subsequent legal obligations.
Contact data: until you request deletion or for the time necessary to fulfill your request.
Navigation data and cookies: according to the terms indicated in the Cookie Policy.

8. Data Subject Rights

Under Regulation (EU) 2016/679 (GDPR), you have the right to:

Access: obtain confirmation of the existence of personal data concerning you and receive a copy.
Rectification: request correction of inaccurate data or integration of incomplete data.
Erasure: request deletion of your personal data in cases provided by law.
Restriction: request restriction of processing of your personal data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing of your personal data for legitimate reasons.
Withdrawal of consent: withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before withdrawal.

To exercise your rights, you can contact us at: info@lacortedilaura.it

You also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing of your data violates GDPR.

9. Changes to Privacy Policy

This Privacy Policy may be subject to changes over time. We invite you to regularly consult this page to stay updated on how we protect your personal data.