PRIVACY POLICY
WHO ARE WE?
This website (“Site”) is operated by Ela Roots Retreats SRL, a company registered at the Chamber of Commerce in Siena, Italia under number (REA SI): 220386. At Via IV Novembre 98/1, 53011 Castellina in Chianti (SI) Italia – VAT Number: IT01602290528 – Fiscal Code (C.F.): 00933350522.
You can contact us using the information provided under the “Contact” section below.
WHAT IS THIS PRIVACY POLICY FOR?
This privacy policy (“Privacy Policy”) outlines how we handle personal data collected from users of this Site, as well as from our customers and members. It details what personal data we gather, the reasons for collecting it, how it is utilized, the legal basis for processing your data, and your rights under relevant data protection laws, including the General Data Protection Regulation (“GDPR”).
‘Personal data’ refers to any information that can identify you.
By accessing our Site or providing your personal data, you accept the terms outlined in this Privacy Policy. Please read it carefully.
LEGAL BASIS
We process your personal data based on the following legal grounds:
Consent: When you have given explicit consent for processing your personal data for specific purposes.
Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services and ensuring the security of our website.
PERSONAL DATA WE COLLECT
When browsing our website, we do not collect personal data. However, we do gather personal data in the following contexts:
Reservation Information: We collect details such as your first and last name, email address, date and place of birth, address, phone number, document number, billing, and payment information. This data is collected to process reservations and will be handled according to a specific privacy policy presented at the time of your reservation. Please ensure you read the provided privacy notice when we collect or process your personal data.
Other Information: Any personal information you choose to share when corresponding with us via phone or email, participating in surveys, or interacting with our Site in other ways. We may combine this data with information collected from third-party sources when you make a reservation.
Automatically Collected Data: Our Site employs cookies and similar technologies to distinguish you from other users. This helps us provide you with a better user experience and improves the features of our Site.
Data for Online Purchases: When you purchase goods or services online, we collect your name, email address, billing and shipping address, phone number, and payment information to process your transaction and deliver the purchased items. This data is essential for fulfilling your order and managing any related customer service inquiries.
Data for Account Creation: If you create an account to access our content library or participate in moon circles, we collect your name, email address, and any additional information you provide to set up and manage your account.
HOW WE USE YOUR PERSONAL DATA
We use your personal data in the following ways:
To complete and manage your reservation and stay, including processing payments, ensuring room availability, and providing related customer services such as sending confirmation or pre-arrival messages and assisting with events or celebrations. This is necessary for fulfilling the contract between you and us.
To process your online purchases, including managing payments, shipping products, and handling customer service inquiries.
To set up and manage your account for accessing our content library and participating in moon circles.
To contact you for surveys and to use any information you provide, with your consent, when you gave us your personal data.
Ela Roots Holistic Tuscan Retreats may inform you about events and promotions that may interest you.
For legitimate business interests, including:
Conducting analytics to inform our marketing strategies and enhance the personalized experiences we offer.
Sending postal communications that may interest you.
If you request data deletion or removal from our marketing lists, keeping basic data to identify you and prevent further processing.
Additionally, your personal data will be shared with individual teachers when you submit a booking request. This data is emailed directly to the teacher, who is responsible for managing your personal data. Ela Roots Retreats does not keep records of these requests and the personal data they contain.
DISCLOSURE OF YOUR INFORMATION
Service Providers: Ela Roots Holistic Tuscan Retreats engages selected third parties to support our operations. These include IT suppliers such as sender.net, Google, and one.com, among others. These third parties act as data processors on our behalf and handle your data according to our instructions.
PAYMENT INFORMATION
Payments made through our Site are processed by third-party payment providers. These providers securely store and encrypt your payment data using up-to-date industry standards. We do not directly process or store your credit/debit card information.
SECURITY
If we provide you with a password or log-in details to access restricted parts of our Site, you are responsible for keeping this information confidential. You must not share these details with anyone else.
While we take appropriate technical and organizational measures to safeguard your personal data, please note that no internet transmission can be entirely secure. We strive to protect your personal data from unauthorized access or loss but cannot guarantee absolute security.
DATA BREACH NOTIFICATION
In the event of a data breach, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.
PERSONAL DATA RETENTION
We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law, regulatory, accounting, or reporting requirements. You may unsubscribe from our communications or request account deletion at any time, in compliance with GDPR requirements.
To determine the appropriate retention period for your personal data, we consider the data’s amount, nature, sensitivity, the purposes for processing it, and legal requirements. After the retention period, we will securely destroy your personal data in accordance with applicable laws and regulations.
YOUR RIGHTS
Under GDPR, you have the following rights regarding your personal data:
Right to Access: You can request access to your personal data and obtain information about how we process it.
Right to Rectification: You can request correction of inaccurate or incomplete personal data.
Right to Erasure: You can request deletion of your personal data, subject to certain conditions.
Right to Restrict Processing: You can request restriction of processing your personal data in certain circumstances.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit it to another controller.
Right to Object: You can object to the processing of your personal data based on legitimate interests or direct marketing.
Right to Withdraw Consent: If you have given consent for processing, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
CHANGES TO OUR PRIVACY POLICY
Any updates or changes to our Privacy Policy will be posted on this page. Please check back periodically to stay informed of any modifications. If required by law, we will notify you of any significant changes.
CONTACT
For questions, comments, or requests regarding this Privacy Policy, please contact us at info@elaroots.it.