Skip to content
MICHELIN 2026 A MICHELIN Key for our hospitality.

Experience, identity and care behind every stay.

Discover more

Privacy Policy

This policy is drafted based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679, and explains how we use and manage your personal data. We will also explain how to contact us if you have questions regarding your personal data. Data Controller Villa Le Prata s.s. Società Agricola Registered Office: Loc. Le Prata 261 Montalcino 53024 SI Email: info@villaleprata.com Data Processor Villa Le Prata s.s. Società Agricola Registered Office: Loc. Le Prata 261 Montalcino 53024 SI Definitions Data Processor (or Processor) The natural person, legal entity, public authority, or any other body, association or organization authorized by the Controller to process Personal Data, as provided in this privacy policy. Data Controller (or Controller) The natural person or legal entity, public authority, service, or other body that, individually or jointly with others, determines the purposes and means of processing personal data and the tools adopted, including security measures regarding the operation and use of this Application. The Data Controller, unless otherwise specified, is the holder of this Application. User The individual using this Application, who must correspond with the Data Subject or be authorized by them, and whose Personal Data is subject to processing. Data Subject The natural or legal person to whom Personal Data refers. Personal Data (or Data) Any information relating to an identified or identifiable natural person, directly or indirectly, by reference to any other information, including a personal identification number, constitutes personal data. Usage Data Information collected automatically by this Application (or by third-party applications that this Application uses), including: the IP addresses or domain names of the computers used by the User connecting to this Application, the addresses in URI notation (Uniform Resource Identifier), the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example, time spent on each page) and details regarding the route followed within the Application, with particular reference to the sequence of pages consulted, parameters related to the operating system and the User's computing environment. This Application The hardware or software tool by which the Personal Data of the Users are collected. Service The Service provided by this Application as defined in the respective terms (if any) on this site/application. Cookie Small portion of data stored within the User's device. Cookie policy Cookies are pieces of information placed in the browser when you visit a website or use a social network with your PC, tablet, or smartphone. Each Cookie contains different pieces of information that assist the Controller in providing the service based on the purposes described. Cookies may remain in the system for the duration of a session (i.e. when the browser is closed) or for an extended period. Some of the purposes of setting may require the User's consent. How can I control Cookies? Through the browser preferences, the User can manage Cookie preferences directly within their browser and prevent third parties from installing them. It is important to note that disabling all Cookies may compromise the functioning of this site. More information on online advertising For more information on how companies usually use cookies and on the available choices, you can check the following resources: Digital Advertising Alliance Digital Advertising Alliance of Canada European Interactive Digital Advertising Alliance Browser cookie control option Additionally, the browser or device may contain settings that allow you to choose whether to set cookies and delete them. For more information on these control options, consult the help materials of your browser or device. Why do we use cookies? Cookies allow us to provide, secure, and improve the Service, such as personalizing content and providing a safer experience. While the cookies we use may vary periodically due to improvements and updates to the Service, we use cookies for the following purposes: Strictly Necessary Activities for Operation This Application uses session Cookies to carry out strictly necessary activities for its operation. Preferences Saving, Optimization, and Statistics Activities This Application uses Cookies to save User preferences and optimize the browsing experience by reducing wait times. Between these Cookies are, for example, those to set language and currency, login information for private sections or for managing statistics by the site Controller. Site Functions and Services We use cookies to enable functionalities that allow us to provide the Service. For more details see the section Details on Data Processing. Details on Data Processing Personal Data is collected for the following purposes and using the following services: Registration and Authentication With registration or authentication, the User allows the Application to identify them and grant access to dedicated services. Facebook Authentication (Facebook Inc.) Facebook Authentication is a registration and authentication service provided by Facebook Inc. and linked to the social network Facebook. Personal Data collected: Public profile and Email Processing location: 1601 Willow Road Menlo Park – CA 94025 USA service details privacy policy Google OAuth (Google Inc.) Google OAuth is a registration and authentication service provided by Google Inc. and linked to the Google network. Personal Data collected: Public profile and Email Processing location: 1600 Amphitheatre Parkway Mountain View – CA94043 USA service details privacy policy revocation Payment Management Payment management services allow this Application to process payments via credit card, bank transfer, or other tools. The data used for payment is collected directly from the required payment service provider without being processed in any way by this Application. Some of these services may also allow the scheduling of messages to the User, such as emails containing invoices or notifications regarding the payment. PayPal (PayPal) PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments using their PayPal credentials. Personal Data collected: Various types of Data according to the privacy policy of the service privacy policy Viewing Content from External Platforms These services allow for viewing content hosted on external platforms directly from the pages of this Application and interacting with them. If a service of this kind is installed, it is possible that, even if Users do not use the service, it collects traffic data related to the pages in which it is installed. GoogleFonts (Google Inc.) Google Fonts is a font style display service managed by Google Inc. that allows this Application to integrate such content into its pages. Personal Data collected: Cookies and Usage Data Processing location: 1600 Amphitheatre Parkway Mountain View – CA94043 USA privacy policy revocation Contacting the User Contact form (This Application) By filling in their Data in the contact form, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the header of the form. Personal Data collected: Name, Surname, Phone Number, Address, ZIP code, Province, Country, State, and Email Processing location: Europe Infrastructure Monitoring These services allow this Application to monitor the use and behavior of its components to enable performance improvement and functionality, maintenance, or problem resolution. Azure Applications Insights (Microsoft Inc.) Azure Applications is a monitoring service provided by Microsoft Inc. The method of integration of the service involves filtering all traffic of this Application, i.e., communications between this Application and the User's browser or device, allowing for the collection of statistical data about it. Personal Data collected: Cookies and Usage Data Processing location: USA privacy policy Statistics The services contained in this section allow the Data Controller to monitor and analyze traffic data, and serve to keep track of User behavior. Google Analytics (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network. Google AdWords Conversion Tracking (Google Inc.) Google AdWords conversion tracking is a statistics service provided by Google Inc. that links data from the Google AdWords advertising network with actions taken within this Application. Personal Data collected: Cookies and Usage Data Processing location: 1600 Amphitheatre Parkway Mountain View – CA94043 USA privacy policy revocation Remarketing and Behavioral Targeting These services allow this Application and its partners to communicate, optimize, and serve advertisements based on the past use of this Application by the User. This activity is performed through tracking Usage Data and the use of Cookies, information that is transferred to the partners with whom the remarketing and behavioral targeting activity is associated. AdWords Remarketing (Google Inc.) AdWords Remarketing is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the activity of this Application with the AdWords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Usage Data Processing location: 1600 Amphitheatre Parkway Mountain View – CA94043 USA privacy policy revocation Widgets and Third-Party Services Some of the services listed below aggregate statistics and may not require consent from the User. These may – in addition to what is specified and even unbeknownst to the Controller – engage in User tracking activities. For information regarding this, it is advisable to consult the privacy policies of the listed services. Google Maps (Google Inc.) The Google Maps service allows for viewing and interacting with maps provided by Google Inc. Personal Data collected: Cookies and Usage Data Processing location: 1600 Amphitheatre Parkway Mountain View – CA94043 USA privacy policy Data Subject's Right of Access The Data Subject has the right to obtain from the Controller or Processor confirmation as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to personal data and the following information: The purposes of processing; The categories of personal data in question; The recipients or categories of recipients to whom the personal data have been or will be communicated, particularly if recipients in third countries or international organizations; When possible, the period for which the personal data will be stored or, if not, the criteria used to determine that period; The existence of the right of the Data Subject to request from the Data Controller the rectification or erasure of personal data or the restriction of processing of personal data concerning him or her or to object to their processing; The right to lodge a complaint with a supervisory authority; Where the data are not collected from the Data Subject, all available information as to their origin; The existence of automated decision-making processes, including profiling. Where personal data are transferred to a third country or an international organization, the Data Subject has the right to be informed of the existence of adequate safeguards in accordance with relevant current regulations regarding the transfer. The Controller or Processor shall provide a copy of the personal data being processed. In the case of further copies requested by the Data Subject, the Controller or Processor may charge a reasonable fee based on the administrative costs. If the Data Subject makes the request by electronic means, and unless otherwise specified by the Data Subject, the information is provided in a commonly used electronic format. The right to obtain a copy of the personal data being processed shall not adversely affect the rights and freedoms of others. Changes to the policy The Data Controller reserves the right to make changes to this policy at any time by informing Users on this page. Please therefore consult this page often, taking into consideration the date of the last modification indicated at the bottom. In the event of non-acceptance of changes made to this privacy policy, the User is required to cease the use of this Application and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until that point.