Legal information

Privacy notice

Last updated: October 2026

Data controller

Società Agricola San Lodovico S.a.s. di Arianna Santoro & C., registered office Via Adrianopoli 7, 00188 Roma (RM), VAT no. 01696410537. Contact: info@tenutasanlodovico.it · PEC sanlodovico@pec.it.

What data we process

• Data you send us through request forms, email or WhatsApp: name, email, phone, dates and number of guests, message content
• Technical browsing data needed for the site to work (such as IP address and server logs), processed by the hosting provider

Why, and on what legal basis

• Replying to your requests and managing bookings for experiences and stays: pre-contractual and contractual measures (Art. 6.1.b GDPR)
• Meeting legal obligations, such as tax rules and reporting guests to the authorities: legal obligation (Art. 6.1.c GDPR)
• Keeping the site secure: legitimate interest (Art. 6.1.f GDPR)

We do not use your data for marketing without your specific consent.

How long we keep it

Request data is kept for as long as needed to handle it and, if it leads to a booking, for the period required by civil and tax law (normally 10 years). Requests that do not lead to a booking are deleted within 24 months. FormSubmit also retains a copy of submissions in its archive for 30 days, according to the service documentation.

Who may receive the data

Suppliers who help us provide the service, appointed as processors where required: website hosting, FormSubmit for form handling and delivery, email, the eviivo booking system, the restaurant booking form, tax advisers. External booking platforms process data under their own privacy notices. Some suppliers may be based outside the European Union; any transfer takes place with the safeguards set out in Articles 44 ff. GDPR.

Your rights

You may at any time request access, rectification, erasure, restriction or portability of your data, and object to processing (Articles 15–22 GDPR), by writing to info@tenutasanlodovico.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).