Privacy Policy

Last updated: August 8, 2026

Data Controller

La Grancia APS Association
Via La Grancia, Fraz. Serre, 53040 Serre di Rapolano (SI)
Data Controller’s email address: info@livingrancia.it

Types of Data Collected

The personal data processed by this website, either directly or through third parties, includes: usage data, online identifiers, IP address, and usage data. Full details on each category are provided in the sections dedicated to the individual services. The data may be provided voluntarily by the user (for example, by filling out a contact form) or collected automatically while browsing (for example, usage data and technical identifiers).

Users who do not wish to provide certain information may not be able to use the corresponding services (for example, it is not possible to respond to a contact request without contact information).

Purposes and Legal Bases for Data Processing

The data is processed for the following purposes:

• Website Operation and Security: Legal Basis—the Data Controller’s legitimate interest (Art. 6.1.f of the GDPR);
• Statistics: Legal basis—consent (Art. 6.1.a of the GDPR);
• Display of external content and marketing: legal basis—consent (Art. 6.1.a of the GDPR);
• Response to user requests (contact forms, emails): legal basis—the implementation of precontractual measures requested by the data subject (Art. 6.1.b of the GDPR);
• Compliance with legal obligations: legal basis—Article 6(1)(c) of the GDPR.

For processing based on consent (Art. 6.1.a of the GDPR), such as non-technical cookies, consent may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.

Methods and Location of Processing

Data processing is carried out using IT and telecommunications tools, with appropriate security measures in place to prevent unauthorized access, disclosure, alteration, or destruction of the data. In addition to the Data Controller, authorized internal personnel and external vendors—who, if necessary, are appointed as data processors (Art. 28 of the GDPR)—such as hosting and technical service providers, may have access to the data. The data is processed at the Data Controller’s operational facilities and at the data centers of the vendors listed in this privacy notice.

If a service involves the transfer of data to countries outside the EU (in particular, the United States), the transfer is carried out on the basis of adequacy decisions by the European Commission or standard contractual clauses (Articles 45 and 46 of the GDPR).

Shelf Life

Data is retained for as long as necessary to fulfill the purposes for which it was collected: data provided in response to a request is retained for as long as necessary to process the request and to comply with any legal obligations; data collected based on consent is retained until consent is withdrawn, subject to any additional retention requirements.

Third-Party Services Used by This Site

Google Analytics 4

Provider: Google Ireland Limited. Purpose: Aggregated statistics on website usage. Data processed: Usage data, online identifiers. Transfer to Google LLC (U.S.) covered by the EU-U.S. Data Privacy Framework. Provider’s privacy policy: https://policies.google.com/privacy.

YouTube (embedded video)

Provider: Google Ireland Limited. Purpose: Display of embedded video content. Data processed: usage data, online identifiers. Transfer to Google LLC (U.S.) covered by the EU-U.S. Data Privacy Framework. Provider’s privacy policy: https://policies.google.com/privacy.

Instagram (embedded content)

Provider: Meta Platforms Ireland Ltd. Purpose: Display of embedded Instagram content. Data processed: usage data, online identifiers. Possible transfer to Meta Platforms Inc. (U.S.), DPF. Provider’s privacy policy: https://www.facebook.com/privacy/policy.

SiteGround Hosting

Provider: SiteGround Spain S.L. Purpose: Website hosting and technical infrastructure (including security logs). Data processed: IP address, usage data. Provider’s privacy policy: https://it.siteground.com/privacy.htm.

User Rights

Pursuant to Articles 15–22 of the GDPR, you have the right to request from the Data Controller access to your personal data, rectification, erasure, restriction of processing, and data portability, as well as the right to object to the processing and to withdraw your consent. Requests should be sent to info@livingrancia.it.

The user also has the right to file a complaint with the competent supervisory authority: in Italy, the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

This site uses cookies and similar technologies. The full information is available in the Cookie Policy.

Changes to This Privacy Policy

The Data Controller may amend this privacy policy at any time by posting the updated version on this page. The date of the last update is indicated at the top.