Cookie and Privacy Policy

Last updated: 22 September 2026

This page explains how cadalfieri.it processes visitors' personal data under Regulation (EU) 2016/679 (GDPR), and which cookies or technical storage tools it uses.

1. Data controller

Società Agricola Ca' d'Alfieri S.R.L. — Agriturismo Ca' d'Alfieri
Località Predario, 29 — 43032 Bardi (PR), Italy
VAT number: IT03129580340
Contact person: Jacques Korczak
E-mail: info@cadalfieri.it

2. What data we collect

2.1 Contact form

You can send us a message from the Contact page. The form collects:

• first and last name and e-mail address (required so that we can reply);
• telephone number (optional);
• the message;
• language, date, time and IP address of submission, included in the e-mail for security and traceability.

The message is delivered by e-mail to info@cadalfieri.it. The website does not store contact messages in a database.

2.2 Purchase and management of Gift Cards

When you purchase a Gift Card, we collect the selected product or amount, language, recipient's name and the message to be printed on the voucher, if provided. Payment takes place on secure Stripe pages. Stripe collects the purchaser details and the data required to process the payment. Full card details neither pass through nor are stored on our servers.

After payment, Stripe provides us with the purchaser's name and e-mail address, the amount, payment status and technical transaction identifiers. We store these together with the Gift Card code, expiry date and status, any recipient details and operational redemption notes. We use them to issue and deliver the voucher, manage its use, provide support and comply with administrative, accounting and tax obligations. A copy of the issue e-mail is also sent to info@cadalfieri.it for internal management.

2.3 Bookings

The booking form at the bottom of the pages is provided by WuBook. Its code is loaded from WuBook's servers when the page is displayed, so WuBook receives ordinary connection data such as the IP address. The details entered during a booking are processed by WuBook on behalf of the property under its privacy notice.

2.4 Browsing data and administration area

The server automatically records technical data such as IP address, request date and time, requested page, browser type, operating system and any errors. These data are used for security, troubleshooting and the proper operation of the website. The administration area also uses a separate session, restricted to /admin, to authenticate authorised staff.

3. Cookies and other technical tools

We do not use profiling cookies, analytics or behavioural advertising: there is no Google Analytics, Facebook Pixel or equivalent service. The tools listed below are necessary for the operation of the website, booking or payment and do not require prior consent. For this reason, no consent banner is currently displayed.

You can block or delete cookies and local data in your browser settings, but some website, administration, payment or booking functions may stop working. If non-technical tools are introduced in future, this policy will be updated and those tools will remain blocked until consent is given, where required.

4. Providers and third-party services

We use the following providers to deliver the services described above:

• Netsons S.r.l. (Italy) — website hosting, database and e-mail service, acting as a technical provider and processor for activities carried out on our behalf. Privacy policy
• WuBook S.r.l. (Italy) — booking engine and management of the details entered during the booking process. Guest privacy notice
• Stripe — payment platform, fraud prevention and processing of Gift Card transactions. Stripe also processes some data to meet its own financial and security obligations. Privacy policy

The website's fonts are hosted on our servers; the WuBook widget loads its own scripts, stylesheets and fonts from WuBook domains. Facebook, WhatsApp and Google Maps are simple links: no content from those platforms is loaded before you click.

5. Purposes and legal bases

• Replying to enquiries sent by form or e-mail — taking steps at the data subject's request before entering into a contract (Article 6(1)(b) GDPR).
• Selling, issuing and managing Gift Cards, including payment, delivery, support and redemption — performance of a contract (Article 6(1)(b) GDPR).
• Managing bookings requested through WuBook — pre-contractual steps and performance of a contract (Article 6(1)(b) GDPR).
• Meeting administrative, accounting and tax obligations — compliance with a legal obligation (Article 6(1)(c) GDPR).
• Protecting and operating the website, preventing abuse and fraud and managing the administration area — the controller's legitimate interests (Article 6(1)(f) GDPR).

Data marked as required must be provided so that we can reply, complete the purchase or manage the booking. Other details are optional. We do not use data collected through these services for advertising communications.

6. Retention periods

• Contact enquiries: for the time needed to handle the request and any resulting relationship; afterwards only where required by law or to establish, exercise or defend legal claims.
• Gift Cards and payments: throughout the Gift Card's validity and management and, after the relationship ends, for the period required by administrative, accounting and tax obligations; relevant records may be kept for up to ten years, unless a dispute or a different legal requirement applies.
• Booking data: for the periods needed to manage the stay and comply with the property's legal obligations, and as specified by WuBook.
• Technical logs: for the period configured by the hosting provider and in any event for as long as necessary for security, troubleshooting and protection of the website.
• Technical sessions: for the durations shown in the table in section 3.

Stripe and WuBook may retain data they process directly for the periods described in their own notices and as required by the laws that apply to them.

7. Recipients and international transfers

Data are not sold or made public. They may be processed by authorised staff, the providers listed in section 4, appointed professional advisers and public authorities where required by law.

Netsons and WuBook operate in Italy. Stripe is an international group and may process data outside the European Economic Area, including in the United States, using the mechanisms provided by law, such as adequacy decisions, the Data Privacy Framework and Standard Contractual Clauses. Details and information on how to obtain further information about the safeguards are available in Stripe's Privacy Center.

8. Your rights

Where applicable under Articles 15–22 GDPR, you may:

• access your data and obtain a copy;
• ask for rectification or erasure;
• ask us to restrict processing or object to processing based on legitimate interests;
• receive your data in a structured, machine-readable format, where applicable;
• withdraw consent, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to info@cadalfieri.it. We will normally reply within one month. You may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in your country.

9. Changes to this policy

We update this policy when the website, the services used or the law changes. The date at the top of the page shows the latest revision.