What we do with your data

01Who is responsible for the data

The data controller is Ga.Vi Srl, with registered office at Via San Matteo 55, 53037 San Gimignano (SI), VAT number 06204730482, which runs Volte Alte. For anything concerning your data you can write to info@voltealte.com or call +39 0577 179 61 00.

02What data we collect, and why

The contact form. When you write to us from the site we collect your name, your email, your phone number if you leave it, what kind of event you have in mind, when and for how many people, and your message. We need them to reply to you and to prepare, if you wish, a site visit or a quote: the legal basis is the taking of steps at your request prior to entering into a contract (Article 6(1)(b) of the European Regulation 2016/679). Together with the enquiry we save the date, the wording of the privacy-notice checkbox as it read that day, the browser you used and the page you wrote from, a fingerprint of your network address — a code that does not show the address in plain text — and, if you came from one of our advertisements, the campaign details (name, source, medium, content and keyword): they help us protect the form from automated programs and understand which campaigns bring real enquiries.

Browsing data. Like every website, the server records network addresses, the type of browser and the pages requested, in the hosting provider’s technical logs: this is our legitimate interest in keeping the site secure and working (Article 6(1)(f)), and we do not use that data to identify you.

Measurement and marketing cookies. Only if you say yes in the banner, we use Google Analytics to count visits and the Meta Pixel to show the villa to people who have already seen it on Instagram and Facebook. The legal basis is your consent (Article 6(1)(a)), which you can withdraw whenever you like from the foot of the site, under “Cookie preferences”. Which cookies they are, and how long they last, is in the cookie policy.

The consent register. When you choose in the banner, we save your choice with a random identifier, the date, the version of the text, the language of the page, the browser you use and a fingerprint of your network address: the law asks us to be able to show that consent was given (Article 7(1)).

The site’s panel. The people who work at the villa and those who look after the site for us sign in to a panel with their own email and a password the site keeps only as a fingerprint, never in clear; every sign-in attempt is recorded with the email and the fingerprint of the address, to stop anyone trying passwords. That data concerns them alone.

Bookings for the Gala Dinner on 12 November 2026. When you book from the dinner’s page we collect your first name, surname, phone number, email and the number of people, and from them we work out the amount and the reference for the bank transfer. We need them to hold your seat, recognise your transfer, send you the details for the transfer, a reminder before the booking expires and the confirmation or the notice that it has expired, and to call you if needed: the legal basis is the performance of the booking, that is of the contract you enter into with us (Article 6(1)(b)). Together with the booking we save the date, the wording of the privacy-notice checkbox as it read that day, whether and when you tell us you have made the transfer, and a fingerprint of your network address, which serves to stop bookings made in bulk by automated programs. The dinner’s page does not load Google Analytics or the Meta Pixel.

03Who sees the data

We read the enquiries and the Gala Dinner bookings ourselves at the villa. The site is built and maintained by Joem Creative Studio, which processes the data on our behalf as data processor and sees it only to keep the site and the campaigns working. The site sits on a server in Italy, with a hosting provider that in turn processes the data on our behalf.

If you have said yes to measurement and marketing cookies, browsing data reaches Google (Google Analytics) and Meta (the Pixel), which process it according to their own notices and may transfer it to the United States on the basis of the EU–US Data Privacy Framework. With your yes to marketing, when you write to us from the form we also send Meta your name, email and phone as fingerprints — codes that do not show the data in plain text, but that Meta uses to recognise people who have an account with it — together with your network address and browser: it tells us whether the enquiry came from one of our advertisements. For the collection of data through the Pixel and the form, and its transmission to Meta, we and Meta Platforms Ireland Limited are joint controllers (Article 26 of the Regulation), under the agreement Meta calls the Controller Addendum; what Meta does with the data once it has received it is decided by Meta as an independent controller, and for that part you can also exercise your rights with Meta. When you open the Google map or a YouTube or Vimeo video inside the site, those services receive the browsing data of that page and may transfer it in the same way.

We do not sell your data and we do not give it to anyone else for their own purposes.

04How long we keep it

Enquiries from the form stay in our archive for twenty-four months from when you write, then the site deletes them by itself; if a contract comes out of the enquiry, the data follows that contract’s retention periods. The server’s technical logs are kept for the time set by the hosting provider. The consent register is kept for as long as the consent is valid and for six months after, then it is deleted by itself. The site deletes the Gala Dinner bookings by itself on 31 December 2026; the bank transfers, with their reference, stay in our accounts for as long as the law requires.

05Which data is necessary

To reply to you we need your name, your email, a few words about the event and the tick on the privacy notice: without them the form does not go through. The phone, the date and the number of people you can leave empty. To book the Gala Dinner every field of the form is needed, and the tick on the privacy notice.

06Your rights

You can ask us at any time what data we hold about you, have it corrected or erased, restrict its use, object to the processing, receive it in a machine-readable format, and withdraw the consent you have given, without this affecting what was done before. Just write to info@voltealte.com. If you think we are handling your data wrongly you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali, www.garanteprivacy.it.

07Automated decisions

On the site no decision about your data is taken by a program, and we do no profiling of our own. Google and Meta, with your consent, use their cookies for their own purposes, described in their notices.

08If this notice changes

If we change something — a provider, a cookie, a retention period — we update this page and the date at the top. For anything concerning cookies, the banner comes back and asks you again.