Privacy Policy
Last updated: July 28, 2026
This Privacy Policy explains how Società Agricola MONTAGNA VERDE S.S. collects, uses, stores and protects personal data through the following websites:
- https://www.montagnaverde.it
- https://shop.montagnaverde.it
- https://virtualtour.montagnaverde.it
This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the applicable Italian data protection legislation.
1. Data Controller
Società Agricola MONTAGNA VERDE S.S.
Via Apella, 19
54016 Licciana Nardi (MS)
Italy
VAT No. 01431430451
Email: [email protected]
2. Scope of this Policy
This Privacy Policy applies to all personal data processed through the websites listed above.
The website virtualtour.montagnaverde.it is intended exclusively for viewing virtual tours and does not require user registration or the completion of any online forms.
3. Categories of Personal Data Collected
Depending on the services used, the following categories of personal data may be processed:
- First name and last name;
- Email address;
- Telephone number;
- Information submitted through contact forms;
- Billing and shipping information relating to online purchases;
- Technical browsing data (IP address, browser type, device information, operating system, date and time of access);
- Cookies and anonymised or pseudonymised statistical data, where applicable.
Providing personal data through contact forms is voluntary; however, failure to provide the requested information may prevent the Data Controller from responding to enquiries or providing the requested services.
4. Purposes of Processing
Personal data are processed exclusively for the following purposes:
- Responding to enquiries submitted through the websites;
- Managing orders, shipments and communications relating to purchases made through the online shop;
- Complying with legal, tax and accounting obligations;
- Ensuring the proper technical operation and security of the websites;
- Analysing website traffic through Google Analytics 4;
- Allowing users to contact the company via WhatsApp;
- Protecting the legitimate rights and interests of the Data Controller where necessary.
5. Legal Basis for Processing
Personal data are processed on one or more of the following legal grounds:
- Performance of pre-contractual measures requested by the data subject;
- Performance of a sales contract;
- Compliance with legal obligations;
- The legitimate interests of the Data Controller relating to website management and security;
- The consent of the data subject, where required by applicable law.
6. Methods of Processing
Personal data are processed using electronic and IT systems in accordance with the principles of lawfulness, fairness, transparency, data minimisation, integrity and confidentiality established by the GDPR.
Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
7. Data Retention
Personal data are retained only for the period necessary to fulfil the purposes for which they were collected and, where required, for the period established by applicable laws and regulations.
- Data submitted through contact forms are retained for the time required to process the request and, in any case, for no longer than 24 months, unless a longer retention period is required by law.
- Data relating to online orders are retained for the period required by tax, accounting and civil legislation.
- Technical browsing data are retained only for the time necessary to ensure the proper functioning and security of the websites.
- Statistical data collected through analytics services are retained in accordance with the retention periods established by the respective service providers.
8. Recipients of Personal Data
Personal data may be processed by authorised personnel of the Data Controller and, where necessary, by external service providers acting on behalf of the Data Controller for purposes strictly related to the operation of the websites and the provision of the requested services.
Recipients may include:
- the hosting service provider;
- IT service providers responsible for website maintenance and technical support;
- administrative, tax and legal consultants;
- public authorities where disclosure is required by law;
- shipping companies or logistics providers involved in delivering online orders.
Personal data are never disclosed to the public.
9. International Data Transfers
Personal data are primarily processed within the European Economic Area (EEA).
Where the use of specific services involves the transfer of personal data to countries outside the EEA, such transfers will take place only in accordance with Articles 44 and following of the GDPR and by adopting the safeguards required under applicable data protection legislation.
10. Hosting Services
The websites are hosted on infrastructure provided by Hostinger, which processes technical data necessary for the operation, maintenance and security of the hosting environment.
Such information may include IP addresses, server logs, browser information, timestamps and other technical data required to ensure the proper functioning and security of the websites.
11. Contact Forms
The contact forms available on the websites allow users to communicate directly with the Data Controller.
The information submitted is used solely for the purpose of responding to enquiries and providing the requested information or assistance.
Personal data submitted through the contact forms are not used for marketing activities, advertising purposes or newsletter subscriptions.
12. Online Shop
The website shop.montagnaverde.it is powered by WooCommerce for the management of online orders.
Customers may place orders exclusively as guests, without creating a personal account.
Only the personal data strictly necessary for order management, invoicing, shipping and customer communications are collected.
Payments are made exclusively by bank transfer. The websites do not collect, process or store credit card details or any other electronic payment credentials.
13. Google Analytics 4
The websites may use Google Analytics 4, a web analytics service provided by Google Ireland Limited, to collect aggregated information about how visitors use the websites in order to improve their content, performance and user experience.
The information collected may include pages visited, browsing duration, approximate geographical location, device type, browser, operating system and general interactions with the websites.
Where required by applicable legislation, analytical cookies are activated only after the user has expressed the appropriate consent through the cookie banner.
14. WhatsApp Contact Service
The websites may provide a WhatsApp Business contact button allowing users to voluntarily initiate a conversation with the Data Controller.
By choosing to use this service, users acknowledge that the communication will be managed through the WhatsApp platform in accordance with the privacy policy and terms of service provided by Meta Platforms.
The activation of this service always takes place on the user’s initiative.
15. Virtual Tour
The website virtualtour.montagnaverde.it is intended exclusively for the online viewing of interactive virtual tours created by Società Agricola MONTAGNA VERDE S.S.
The Virtual Tour does not require user registration, does not provide contact forms and does not intentionally collect personal information.
Only the technical data strictly necessary to ensure the proper operation, security and stability of the service may be processed during navigation.
16. Cookies
The websites use technical cookies required for their proper operation and, subject to the user’s consent where required by law, analytical cookies intended to collect statistical information on website usage.
Users may manage or withdraw their cookie preferences at any time through the cookie banner or by changing their browser settings.
Further information is available in the dedicated Cookie Policy published on the websites.
17. Data Security
The Data Controller adopts appropriate technical and organisational measures designed to ensure a level of security appropriate to the risks associated with the processing of personal data.
Such measures are intended to prevent unauthorised access, accidental loss, destruction, alteration or unlawful disclosure of personal data.
Access to personal data is limited exclusively to authorised personnel or external service providers who require such access in order to perform their assigned duties.
18. Children’s Privacy
The websites are not intended for the intentional collection of personal data relating to children under the age established by applicable data protection legislation.
Should the Data Controller become aware that personal data relating to a child have been collected inadvertently and without the required legal basis, such data will be deleted without undue delay.
19. Rights of the Data Subject
In accordance with Articles 15 to 22 of Regulation (EU) 2016/679 (GDPR), data subjects have the right to:
- obtain confirmation as to whether or not personal data concerning them are being processed;
- request access to their personal data;
- request the rectification of inaccurate or incomplete personal data;
- request the erasure of personal data where the conditions established by law are met;
- request the restriction of processing in the cases provided for by the GDPR;
- object to the processing of personal data where permitted by applicable legislation;
- receive their personal data in a structured, commonly used and machine-readable format and, where technically feasible, request that such data be transmitted to another data controller (right to data portability);
- withdraw any consent previously given, where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal.
Requests relating to the exercise of these rights may be submitted at any time using the contact details provided below.
20. Right to Lodge a Complaint
If a data subject believes that the processing of their personal data infringes the GDPR or any other applicable data protection legislation, they have the right to lodge a complaint with the competent Supervisory Authority, without prejudice to any other administrative or judicial remedy available.
21. Third-Party Websites
The websites may contain links to external websites or online services operated by third parties.
The Data Controller has no control over such websites and accepts no responsibility for their content, availability or privacy practices. Users are encouraged to consult the privacy policies of any third-party websites they visit.
22. Changes to this Privacy Policy
The Data Controller reserves the right to amend or update this Privacy Policy at any time in order to reflect changes in applicable legislation, technological developments or modifications to the services provided.
Any updated version will be published on this page and will become effective from the date of publication unless otherwise specified.
23. Contact Details
For any questions regarding this Privacy Policy or the processing of personal data, or to exercise any of the rights described above, you may contact:
Società Agricola MONTAGNA VERDE S.S.
Via Apella, 19
54016 Licciana Nardi (MS)
Italy
VAT No. 01431430451
Email: [email protected]
This Privacy Policy applies to the following websites:
www.montagnaverde.it
shop.montagnaverde.it
virtualtour.montagnaverde.it
Last updated: July 28, 2026
