Privacy Policy | Il Borro Toscana

Privacy Policy

Privacy Policy

Privacy Policy


Il Borro S.r.l. – Societá Agricola, Loc. Borro 1 – 52024 San Giustino , Tel.: 055.977053 Fax: 055.977864, Reg. Reg. N° AR-94016 VAT N°: 01261410516 (Company);


1. Personal data processed for website operation purposes
During normal use, the information systems and software procedures used to operate the Website acquire some information whose transfer is implicit in the use of Internet communication protocols. Though this information is not collected so as to be linked to identified data subjects, due to the very nature of the data, it could allow identifying the users of the website, by processing and linking with data stored by the Company or by third parties.
This category includes IP addresses or domain names of the computers used by the users browsing the Website, URI (Uniform Resource Identifier) notation addresses of the requested resources, the request time, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters regarding the operating system and the computer environment of the user.

1. Data submitted directly by the user
As provided for by various sections of this Website data submission is on optional, explicit and voluntary basis. In addition, the data is used for meeting the user’s requests (for example strictly by way of non-exhaustive example: when requesting information or clarification by calling the numbers indicated in the Website or by email through the addresses provided therein, for booking our facilities, taking part in events or purchasing online).
We hereby declare that the website is reserved to adults only.

2. Geolocation information
This website can process data regarding your geographic position, with the aim of providing services based on the position. Most browsers provide the user, in a predefined manner, with some tools aimed at disabling geographic tracking. Should the user have expressly authorised the geolocation, this website could receive information on the actual geographic position.


How the Website works
The data collected while browsing is used for creating anonymous statistical information on the use of the website and verifying the correct operation thereof.
Legal basis of the purposes: performing a contract you are part of (using the website). Personal data storage period: over the entire duration of the Website browsing session. For further information, read the Cookie policy

Contract purposes
The data submitted directly by the user is used for the following purposes:
a. meeting the data subject’s requests (e.g. contact request);
a. booking accommodation and/or experience in our facilities;
b. making online payments;
c. shipping purchased goods/products/services;
d. taking charge and examining spontaneous collaboration applications;
Legal basis of the purposes: performing a contract you are part of / taking pre-contract actions.
Personal data storage period: as concerns purposes from a. to d. the entire duration of the contract relationship and beyond based on the limitation periods established by the law. As concerns purpose e. the data will be stored for a period of 2 years from the time of application.

Marketing and profiling purposes
Direct marketing (including subscribing to newsletters): by way of example, sending – by means of automated contact methods (such as sms, mms, email, including subscribing to newsletters strictly containing advertising and marketing content, instant messenger and social network apps) and conventional methods (such as phone calls with operator and conventional mail) – advertising and marketing notifications regarding services/products offered by the Company or notifications regarding Company events, as well as creating market surveys and statistical analysis.
Legal basis of the purpose: consent by the data subject (optional, voluntary and revocable at any time).
Personal data storage period: up to withdrawal of consent

Profiling: by way of example, analysing your preferences, habits, behaviour, interests with the aim of sending you customised marketing notifications/targeted advertising actions/offers and services matching your needs/preferences.
Legal basis of the purpose: consent by the data subject (optional, voluntary and revocable at any time).
Personal data storage period: for a maximum of 24 months from date of collection of any data or up to withdrawal of consent

Disclosure/transfer of personal data to Third parties and in particular to Il Borro S.r.l. partner or subsidiary companies. (Osteria del Borro S.r.l., Arpa S.r.l., Viesca S.r.l.) for marketing purposes regarding products and/or services of each third party.

Legal obligation-related purposes
Data submitted directly by the user is used to meet obligations provided for by regulations and by the applicable national and international regulations (e.g. for tax obligations purposes).
Legal basis of the purpose: need to meet law obligations
Personal data storage period: Duration provided for by the law (10 years as concerns administrative/accounting obligations)

Purposes related to legitimate interest of the Controller
Data submitted directly by the user is used, if necessary, for verifying, exercising or defending the Controller’s rights in judicial and/or extra-judicial proceedings. Legal basis of the purpose: legitimate interest of the Controller (in judicial and/or extra-judicial proceedings)
Personal data storage period: over the entire duration of the dispute, up to the termination of the enforceability period of appeal actions.

Personal data concerning spontaneous applications will be stored for 2 years so as to be able to assess them for potential future recruitment.
Legal basis of the purpose: legitimate interest of the Controller (assessment of future job opportunity)
Personal data storage period: 2 years

Once the aforementioned storage period expires, your data will be destroyed, deleted or made anonymous.


Save for browsing data, required for implementing computer and electronic protocols, users shall submit personal data on voluntary and optional basis. However, failure to submit the data requested and marked as compulsory will necessarily entail hindering the service requested by user.


Your data could be disclosed to entities operating as Data Controllers (such as, by way of example, supervisory and monitoring bodies and any other public entity authorised to request the data) or processed, on behalf of the Company, by entities designated as Data Processors, who will be given appropriate operating instructions.
In particular, the data may be disclosed to the following categories of entities:
a) Il Borro srl partner or subsidiary companies, which act as independent data controllers (after disclosure consent thereof) or external processing officers;
a) natural or legal persons providing services of various types to the Company (e.g. Website management services providers, such as system outsourcers, companies providing internet connection services, companies providing email delivery services, technical support companies, companies providing market survey support services, companies providing online booking services). Such entities may act as data processing officers;
b) public and private entities and/or bodies to whom data will be disclosed with the aim of meeting or enforcing compliance with specific obligations provided for by the European Union laws, regulations and standards. Such entities will operate as independent Data controllers.


Data will be processed by in-house employees, collaborators of the company or external entities that provide website technical and organisation services on behalf of the Company.


Some browsing-related data may be transferred abroad in non-European Union countries, and in particular in the USA, a country whose data protection level was deemed appropriate by the European Commission pursuant to article 45 of the GDPR (Privacy Shield) For further information on the European Commission’s appropriateness decision see the following link:


By contacting the Company, by email to, the data subjects can request permission from the Controller to access data related thereto, to delete it, to correct inaccurate data, to supplement incomplete data, to limit processing in the cases provided for by article 18 GDPR, as well as object to the processing in case of legitimate interest of the owner.

Furthermore, should the processing be based on consent or contract and be carried out using automated means, the data subjects have the right to receive the Data in a format that is structured, commonly used and readable by an automatic device and, as well as transfer the data to another data controller without any hindrances whatsoever if technically feasible. The data subjects have the right to withdraw consent granted for marketing and/or profiling purposes, as well as object to the processing of data for marketing purposes, including direct marketing-related profiling. This without prejudice to the data subject’s right of preference to be contacted for the aforementioned purpose exclusively through conventional means for expressing the objection thereof solely upon receipt of communications through automated means. Withdrawal of consent does not jeopardise the lawfulness of the processing based on consent prior to withdrawal of consent.
The data subjects have the right to lodge a complaint before the due Supervisory body in the member country of residence or work or the country where the alleged breach occurred.

The advantages of direct booking
When booking directly on our website, we offer:

- Our most competitive rates
- a bottle of wine from Il Borro Cellar
Select the accommodation
Il Borro Relais & Châteaux
I Borrigiani
Adults: 2
Rooms: 1
Please select an accommodation
Please select a maximum of 8 people
Please select a maximum of 4 rooms