Privacy Policy

This Privacy Policy describes how Fratelli paglia s.r.l (hereinafter “we,” “our,” or “the Data Controller”) collects, uses, processes, and protects the personal data of users (hereinafter ‘you’ or “the User”) who visit our website www.quintanaexperience.com and use our booking services.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Italian legislation.

Data Controller

The Data Controller of personal data collected through this website is:

Fratelli paglia s.r.l
Contrà Manin, 20 – 36100 (VI)
website@quintanaexperience.com

Types of Data Collected

We collect different types of personal data, depending on the User’s interactions with our website and services:

Data provided directly by the User:
- For reservations: First name, Last name, Email address, Phone number, Reservation dates, [any other specific information necessary for the reservation, e.g., number of participants, special requests, etc.]. This data is essential for completing and managing your reservation.
- To subscribe to the newsletter: Email address, First name, Last name.
- Communications: Data provided when you contact us via contact forms, email, or telephone.
Browsing data:
- Information collected automatically while browsing the site, such as IP addresses, browser type, operating system, pages visited, access times. This data is anonymous and is used for statistical purposes and to improve the user experience.
Cookies and similar technologies:
- Our website uses cookies to improve navigation and personalize your experience.

Purpose of Data Processing

Your personal data is collected and processed for the following purposes:

Reservation Management and Completion: To process, confirm, and manage your reservations, send communications related to your reservation (e.g., confirmations, reminders, changes), and provide you with the services you have requested.
Customer Service: To respond to your requests, questions, or complaints and provide you with support before, during, and after your booking.
Sending the Newsletter: With your explicit consent, to send you periodic communications about special offers, news, promotions, and updates related to our services. You can revoke your consent at any time by clicking on the “unsubscribe” link in each newsletter.
Legal and Contractual Obligations: To comply with legal, regulatory, or contractual obligations (e.g., billing, accounting).
Service Improvement: To analyze the use of the site and services, improve our offering, optimize functionality, and develop new services. This data is generally processed in aggregate and anonymous form.
Fraud Prevention: To prevent and detect fraudulent activity or abuse of our services.

Legal Basis for Processing

The processing of your personal data is based on the following legal grounds, depending on the purpose:

Performance of a contract: The processing of data for the management of reservations is necessary for the performance of the service contract you enter into with us.
Consent: The sending of the newsletter and the use of cookies that are not strictly necessary require your explicit consent, which you can revoke at any time.
Compliance with a legal obligation: Data processing for accounting and tax purposes is necessary to comply with legal obligations.
Legitimate interest: The processing of data for website usage analysis and fraud prevention is based on our legitimate interest in improving our services and ensuring the security of our operations.

Treatment Methods and Safety

Your personal data is processed using manual and/or computerized tools, adopting appropriate security measures to prevent data loss, illicit or incorrect use, and unauthorized access.

Nature of Data Provision

The provision of the data requested for booking purposes is mandatory. Without it, we will not be able to complete your booking and provide you with the requested services.

Providing data for newsletter subscription is optional. Failure to provide such data will not prevent you from using the booking services.

Payment Details

Please note that our website does not collect or store your payment details directly (e.g., bank details for bank transfers or PayPal credentials).

When you make a payment:

Bank Transfer: The information required for the transfer (IBAN, account holder) will be provided at the time of booking. The payment transaction is carried out directly through your bank, outside of our website.
PayPal: You will be redirected to the PayPal website to complete the transaction. All payment details are handled directly by PayPal, in accordance with their privacy and security policies. Please refer to PayPal’s Privacy Policy for more information.

Communication and Dissemination of Data

Your personal data will not be disclosed. However, for the purposes indicated above, your data may be communicated to:

Third-party service providers: Entities that support us in managing the website and providing services (e.g., IT service providers, hosting providers, newsletter delivery platforms). These entities act as Data Processors and are bound by specific contractual agreements that guarantee security and compliance with the GDPR.
Competent authorities: When required by law or court order.

Data Retention Period

We retain your personal data for the time strictly necessary to achieve the purposes for which it was collected and to comply with legal obligations. In particular:

Booking data: This will be stored for the time necessary to manage the booking and for any tax and accounting obligations (usually 10 years from the date of the transaction).
Newsletter data: This will be stored until you withdraw your consent (unsubscribe).
Browsing data: This will be stored for the time necessary for statistical analysis and service improvement, generally for a limited period.

Rights of the Data Subject

As a data subject, you have the right to exercise the following rights at any time:

Right of access: Obtain confirmation as to whether personal data concerning you are being processed and, if so, access your personal data and information relating to the processing.
Right to rectification: Obtain the rectification of inaccurate personal data concerning you and the integration of incomplete data.
Right to erasure: Obtain the erasure of your personal data in certain circumstances.
Right to restriction of processing: Obtain restriction of the processing of your personal data in certain circumstances.
Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
Right to object: Object at any time to the processing of your personal data based on legitimate interest or for direct marketing purposes (including profiling).
Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you can contact us at the following email address: website@www.quintanaexperience.com

Changes to this Privacy Policy

This Privacy Policy may be subject to changes and updates over time. We encourage you to check this page regularly to stay up to date on our privacy practices. You will be notified of any substantial changes.

Date of last revision: June 22, 2025