Privacy Policy
Last updated: February 2026
Data Controller
The data controller for your personal data is:
- Business name: Agriturismo Riva dei Coz
- Address: Via Riva Secca 100, 31040 Segusino (TV), Italy
- VAT/Tax ID: 05373040269
- Email: info@rivadeicoz.com
- Phone: +39 340-5387036
Personal Data We Collect
We collect the following types of personal data:
- Contact form: Name, email address, phone number and message content when you contact us through our form.
- Booking data: Name and contact details processed through our external booking platform (TeamSystem).
- Analytics data: Anonymous site usage data via Google Analytics (GA4), including pages visited, visit duration and device type.
- Cookies: Technical cookies and, with your consent, preference, statistical and marketing cookies. See our Cookie Policy for details.
Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR): For non-essential cookies, newsletters and marketing communications.
- Contract performance (Art. 6(1)(b) GDPR): To process bookings and provide the requested hospitality services.
- Legitimate interest (Art. 6(1)(f) GDPR): For website operation and security, fraud prevention and improvement of our services.
Data Processors
We share your data with the following third-party service providers acting as data processors:
| Service | Purpose | Country |
|---|---|---|
| Google Analytics (GA4) | Web analytics and statistics | USA (Standard Contractual Clauses) |
| Supabase | Database and authentication | EU (Frankfurt) |
| Booking.com | Booking calendar synchronisation | Netherlands (EU) |
Data Retention
- Contact form data: Retained for 12 months from the enquiry, then deleted.
- Booking data: Retained for 10 years as required by Italian tax regulations.
- Analytics data: Anonymised data retained for up to 26 months by Google Analytics.
- Cookies: See our Cookie Policy for specific durations of each cookie.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can request correction of inaccurate or incomplete data.
- Right to erasure: You can request deletion of your personal data when it is no longer necessary.
- Right to data portability: You can request your data in a structured, commonly used and machine-readable format.
- Right to object: You can object to the processing of your data on legitimate grounds.
- Withdrawal of consent: You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali.
International Transfers
Some of our service providers are based in the United States. Data transfers to third countries are protected by Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR), ensuring an adequate level of data protection.
Contact Us
For any privacy questions or to exercise your rights, please contact us at info@rivadeicoz.com