Privacy Policy

Last updated: 7 October 2026

This notice explains how we process the personal data of users who visit iuta.farm, send us enquiries, book a stay or buy products, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.

1. Data controller

Azienda Agricola IUTA di Elena Cicciù & Giulio Costa
Contrada Bochini snc – 96012 Avola (SR), Italy
VAT no. IT01923610891
Email: hello@iuta.farm

2. Data processed, purposes and legal bases

a) Enquiries (contact form, email, phone, WhatsApp): name, email, phone number, stay dates, number of guests and any other information you choose to share. We use it to answer your enquiry and send quotes. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

b) Bookings and purchases: identification, contact, billing and shipping details, booking or order details. We use them to manage your booking or order, payment, shipping and customer support. Legal basis: performance of a contract (Art. 6(1)(b)). Payment details (card, PayPal account) are entered directly on the payment providers’ systems and are not stored by us.

c) Legal obligations: data required for invoicing, accounting and, for guests of the property, registration with the Italian police authorities (Alloggiati Web) and tourist tax obligations. Legal basis: legal obligation (Art. 6(1)(c)).

d) Newsletter: email address (and possibly your name), only if you subscribe. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link in every email.

e) Statistics and marketing: browsing data collected through cookies and similar technologies (Google Analytics, Google Ads, Meta Pixel), used only with your consent given through the cookie banner (Art. 6(1)(a)). See the Cookie Policy for details.

f) Website security and operation: technical data (IP address, server logs) processed to keep the website secure and working. Legal basis: our legitimate interest (Art. 6(1)(f)).

3. Service providers and recipients

Data may be processed, as processors or independent controllers, by:

our website hosting and email providers;
Octorate (property management and booking engine);
Stripe and PayPal (payment processing);
Packlink and couriers (shipping of shop orders);
Mailchimp – Intuit Inc. (newsletter);
Google Ireland Ltd (Google Workspace/Gmail, Google Tag Manager, Google Analytics 4, Google Ads, Google Maps);
Meta Platforms Ireland Ltd (Meta Pixel, only with your consent);
our accountant and advisers, for tax and accounting purposes;
public authorities, where required by law.

We do not sell or publish your data.

4. Transfers outside the EU

Some providers (e.g. Google, Meta, Stripe, PayPal, Mailchimp) may transfer data to the United States. Such transfers rely on the EU-US Data Privacy Framework, for certified providers, or on the Standard Contractual Clauses approved by the European Commission.

5. Retention

Enquiries not followed by a booking: up to 24 months.
Contract, accounting and tax data: 10 years, as required by law.
Newsletter: until you unsubscribe.
Cookies and tracking technologies: as stated in the Cookie Policy.

6. Whether providing data is mandatory

Data needed to answer enquiries, manage bookings and orders and meet legal obligations is required: without it we cannot provide the service. Consent to the newsletter and to statistics and marketing cookies is optional.

7. Your rights

You may at any time request access to, rectification or erasure of your data, restriction of processing, data portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR). You may withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights, write to hello@iuta.farm.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country of residence.

8. Changes

This notice may be updated. The version in force is always the one published on this page, with its last-updated date.