Privacy Policy
Who we are
San Vincenzo is operated by FATTORIA SAN VINCENZO SOCIETA' AGRICOLA SRL, an Italian limited liability agricultural company (Società Agricola S.r.l.), registered under Italian Tax Code (Codice Fiscale) No. 00518950464 and VAT No. 01344680507, with its registered office at Località Al Casalino, Ghizzano, 56037 Peccioli (PI), Italy.
For the purposes of the European Union General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Italian Legislative Decree No. 196/2003, as amended, FATTORIA SAN VINCENZO SOCIETA' AGRICOLA SRL acts as the data controller for all personal data collected and processed through this website.
If you have any questions about how your data is handled, please write to privacy@SVTuscany.it.
What we collect and why
We try to collect as little as possible. The categories below are the only personal data we process through this website.
Inquiry form. If you write to us through the inquiry form, we collect the information you choose to give: your name, your email address, the country you are writing from, and the message itself. We collect this so we can answer you and have a record of our correspondence. Lawful basis: legitimate interest in conducting a private referral-based business (Article 6(1)(f) GDPR), and where you go on to engage with us, the performance of a pre-contractual relationship at your request (Article 6(1)(b) GDPR).
Correspondence by email. If you write to us by email, we keep the email and any documents you send. Lawful basis as above.
Server logs. Our web server records, for each request, an IP address, a timestamp, the requested URL, the response status, and a user-agent string. These logs are kept for limited purposes: security, abuse prevention, and basic site reliability. Lawful basis: legitimate interest in maintaining the security and integrity of the site (Article 6(1)(f) GDPR).
Cookies. This site uses a small number of strictly necessary cookies to remember your cookie preference and to maintain the integrity of the inquiry form (anti-spam, session). It does not set analytics, advertising, retargeting, social media, or third-party marketing cookies or tags. A separate Cookie Notice section below lists what is set, by whom, and for how long.
What we do not do
We feel it is useful to say this plainly. We do not run advertising on this site, and we do not place advertising about this site elsewhere. We do not sell or rent your data to anyone. We do not run an email-marketing list. We do not use your data to build behavioural profiles, to score you, or to make automated decisions about you. We do not enrich your record with information bought from data brokers. We do not share your details with introducers, advisors, or third parties without your express knowledge.
If you progress beyond an initial inquiry
San Vincenzo is a private, referral-based offering. Readers who go on to engage with us substantively will be invited into a documented buyer-qualification process. That process includes a mutual non-disclosure agreement, a written statement of motivation, and, before any transaction is contemplated, identity verification and anti-money-laundering checks under Italian Legislative Decree 231/2007 (D.Lgs. 231/2007) and EU AML directives as transposed.
At that stage, and only at that stage, we will process additional personal data including identity documents, proof of address, evidence of source of funds, sanctions and politically-exposed-person screening, and adverse-media checks. We will explain at the point of collection what is being collected, why, how long it is kept, and the legal basis. The lawful bases at that stage typically include legal obligation (Article 6(1)(c) GDPR — AML and tax compliance), performance of a contract (Article 6(1)(b)), and legitimate interest in the prudent conduct of a private offering (Article 6(1)(f)).
None of that material is collected through this website.
Who sees your data
Inside the estate, your data is seen only by the small team responsible for replying to you and, where relevant, the principals. Outside the estate, we share data only with the categories of recipient below, and only where strictly necessary:
-
The provider that hosts this website, on our instructions, as a processor under a data-processing agreement.
-
The provider that handles our email, on our instructions, as a processor under a data-processing agreement.
-
Italian counsel and accountants, when a question requires their advice.
-
Anti-money-laundering and identity-verification providers, only at the stage described above and only with notice.
Regulators, courts, or law enforcement, where we are required by law to do so.
We do not transfer your data to any other recipient without telling you.
International transfers
Our hosting and email providers are listed in the Cookie Notice below and may process data inside or outside the European Economic Area. Where data is transferred outside the EEA, we rely on transfer mechanisms recognised under the GDPR, including the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions. A copy of the safeguards in place is available on request.
How long do we keep your data
Inquiry form submissions and email correspondence: for as long as the conversation remains live, and for a further three years after the last contact, unless you ask us to delete sooner. If the correspondence becomes a transaction, the retention rules below apply.
-
Server logs: ninety days.
-
Cookies: as described in the Cookie Notice below.
-
AML / KYC records, where collected, for the period required by Italian law — currently ten years from the end of the business relationship under D.Lgs. 231/2007.
-
Tax and accounting records, where applicable, for the period required by Italian and EU tax law.
After the relevant period, records are deleted or anonymized.
Your rights
Under the GDPR you have the right to:
-
ask us what data we hold about you (right of access);
-
ask us to correct data that is wrong (right to rectification);
-
ask us to delete data we no longer need (right to erasure, sometimes called the right to be forgotten);
-
ask us to restrict how we use your data while a question is being resolved (right to restriction);
-
ask us for a copy of the data you provided to us, in a portable format (right to data portability);
-
object to processing based on legitimate interest (right to object);
-
not be subject to a solely automated decision with legal effect; we do not make such decisions.