The purpose of this document (hereinafter the “Privacy Policy”) is to inform Users about personal data, understood as any information that allows the identification of a natural person (hereinafter the “Personal Data”), collected by the website (hereinafter the “Application”).

The Data Controller, as subsequently identified, may amend or simply update all or part of this Policy by informing Users. The amendments and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Policy each time the Application is accessed.

In the event of non-acceptance of the changes made to the Privacy Policy, the User must cease to use this Application and may request the Data Controller to remove his/her Personal Data.

Personal data collected by the Application

The Data Controller collects the following types of Personal Data:


The Personal Data collected may be used for the performance of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:

Treatment modes

The processing of Personal Data is carried out by means of computer and/or telematic tools, with organisational methods and logics strictly related to the purposes indicated.

In some cases, subjects involved in the organization of the Data Controller (such as, for example, personnel management personnel, sales staff, system administrators, etc.) or external subjects (such as IT companies, service providers, postal couriers, hosting providers, etc.) may also have access to Personal Data. These subjects, if necessary, may be appointed as Data Processors by the Data Controller, as well as have access to the Personal Data of the Users whenever necessary and will be contractually obliged to keep the Personal Data confidential.

An up-to-date list of Responsible Persons can be obtained by emailing

However, it is always possible to ask the Controller to clarify the legal basis of each processing operation at


Personal Data are processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller at the following email address or at the following postal address Via di Cerreta 6/a, Frazione: Località Caiano, 50060 Londa (FI)

Security measures

The Processing is carried out according to methods and with tools suitable to guarantee the security and confidentiality of Personal Data, the Data Controller having adopted adequate technical and organisational measures that guarantee, and allow to demonstrate, that the Processing is carried out in compliance with the reference legislation.

Period of Data Retention

Personal Data will be kept for the period of time necessary to fulfil the purposes for which they were collected.

In particular, Personal Data will be retained for the entire duration of the contractual relationship, for the performance of the inherent and consequent fulfilments thereof, for compliance with applicable legal and regulatory obligations, as well as for own or third party defence purposes.

Where the processing of Personal Data is based on the User’s consent, the Controller may retain the Personal Data until the consent is revoked.

Personal Data may be kept for a longer period if necessary to fulfil a legal obligation or by order of an authority.

All Personal Data will be deleted or stored in a form that does not allow the User to be identified within 30 days of the end of the storage period. Upon expiry of this period, the right of access, cancellation, rectification and the right to portability of Personal Data may no longer be exercised.

Automated decision-making processes

All Personal Data collected will not be subject to any automated decision-making process, including profiling, which may produce legal effects for the individual or which may significantly affect the individual.

User rights

Users may exercise certain rights with regard to Personal Data processed by the Data Controller. In particular, the User has the right to:

In order to exercise their rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are made free of charge and processed by the Controller as quickly as possible, in any case within 30 days.

Data Controller

The data controller of your personal data is IL GIGLIO DI LEONARDO SPAGNOLI &C S.N.C, Via di Cerreta 6/a, Frazione: Località Caiano, 50060 Londa (FI),, Tax Code/VAT Number IT 05060430484, e-mail address

Last updated: 02/02/2023