Loc. San Donato, 6
53037 San Gimisgnano (Siena), Italy
Skype: fattoria.san.donato
Phone: +39 0577 941616 / +39 0577 942281
Mobile: +39 3357258010

Follow us

Privacy Policy

Data Controller

Umberto Fenzi per Fattoria San Donato di Umberto Fenzi
Loc. San Donato, 6 – San Gimignano (Siena) Italy
Owner email address:

Type of data collected

Among the Personal data collected from this website, either independently or through third parties, there are: Cookies, Usage Data, Name, Surname, Address, Zip Code, Province, Telephone Number, Email, Country, State.

Personal data may be provided freely by the user or, in the instance of Usage Data, collected automatically during website usage. Unless otherwise specified, all the data requested by this website are mandatory. If the User refuses to provide them, it may be impossible for this website to provide the service. Any cookie usage – or other tracking tools –used by this website or third-party service providers, unless otherwise specified, is intended to provide the Service requested by the User, along with the additional purposes described in this document and in the Cookie Policy.

The User is responsible for the Personal Information, obtained by third parties, published or shared through this website and guarantees to have the right to communicate and share them, relieving the Data Controller from any third-party liability.

Collected data – Method and location processing

Processing method

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, Data may be accessed by other subjects involved in the organisation of this website (administration, commercial, marketing, legal, system administrator staff) or external parties (such as suppliers of third party technical services, postal couriers, hosting providers, IT companies, communication agencies) appointed as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.


The Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the owner. The User’s Personal Data, may be transferred to a country other than that in which the User is located.

Conservation Period

The Data is processed and stored for the time required by the purposes for which they were collected. When the processing is based on User consent, the Data Controller may retain the Personal Data for a longer period until such consent it revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with legal requirements or as ordered by an authority. At any time, the user can ask the Data Controller to interrupt the processing or delete the Data.

Collected Data Processing purposes

Data concerning the User is collected to allow the Data Controller to provide its Services, as well as for: Contacting the User, Statistics, Hosting and backend infrastructure, remarketing and behavioural targeting, displaying content from external platforms.

To obtain further detailed information on processing purposes and on the Personal Data relevant for each purpose, the User can refer to the pertinent sections of this document.

Details on Personal Data processing

Personal Data is collected the following purposes and using the following services:

Contact the User

Contact via telephone

Users who provided their telephone number may be contacted for commercial or promotional purposes connected to this website, as well as to satisfy requests for support.
Personal Data collected: telephone number.

Contact Form

By filling out the contact form with their Data, the User consents to their use in order to respond to information requests, quotes or any other kind of activity indicated in the form’s header.
Personal Data collected: Name, Surname, Address, Post code, Province, Telephone number, email, Country, State.


The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses collected Personal Data for the purpose of evaluating the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network.
Place of processing: United States – Privacy Policy – Opt Out. Subject to appropriate Privacy Shield.

Google Analytics with anonymous IP (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses collected Personal Data for the purpose of evaluating the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network. This Google Analytics integration makes your IP address anonymous. Anonymisation works by shortening the Users IP address within the borders of the European Union member states or in other countries participating in the European Economic Area Agreement. Only in exceptional circumstances, the IP address will be sent to Google’s servers and shortened within the United States.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Subject to appropriate Privacy Shield.

Hosting and backend infrastructure

This type of service has the function of hosting data and files that permit this website to work, allows distribution and provides a ready-to-use infrastructure to run specific features of this website.

OVHCloud (OVH S.R.L.)

OVHCloud is a hosting service provided by OVH S.R.L.
Personal Data collected: various types of Data as specified in the service’s Privacy Policy.
Place of processing: France – Privacy Policy.

Remarketing e behavioral targeting

This type of service allows this website and its partners to communicate, optimise and provide advertisements based on the User’s past use of this website. This activity is carried out by tracking Usage Data and using Cookies, information that is transferred to the connected partners who manage remarketing and behavioural targeting activity. In addition to being offered the possibility of opting out of these services, the User may choose to be excluded from receiving related third-party service cookies, by visiting the Network Advertising Initiative opt-out page.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. which connects activity from this website with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Subject to appropriate Privacy Shield.

Displaying content from external platforms

This type of service allows you to view and interact with content hosted on external platforms directly from the pages of this websites. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, they may collect traffic data relating to the pages on which it is installed.

Google Fonts (Google Inc.)

Google Fonts is a service for displaying font styles managed by Google Inc. that allows this website to integrate such content within its pages.
Personal Data collected: Usage data and various types of Data as specified in the service’s.
Place of processing: United States – Privacy Policy. Subject to appropriate Privacy Shield.

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

  • withdraw consent at any time. The User can withdraw consent to their Personal Data processing as previously expressed.
  • oppose the processing of your Data. The User may object to the processing of their Data when it occurs on a legal basis other than consent.
  • access your data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
  • verify and request correction. The User can verify the accuracy of the Data and request its updating or correction.
  • obtain limitation to processing. When certain conditions are met, the User can request the limitation of their Data processing. In this case, the Data Controller will not process the Data for any purpose other than their conservation.
  • obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Data Controller.
  • receive your data or have it transferred to another Data Controller. You have the right to receive your data in an organised format, commonly used and readable by an automatic device, and, where technically feasible, to obtain the unrestricted transfer to another Data Controller. This provision is applicable when the Data is processed with automated tools and the processing is based; on the User’s consent, on a contract to which the User is a party, or on contractual measures connected to it.
  • submit a complaint. The User may lodge a complaint with the competent personal data protection authority or in court.

How to exercise your rights

To exercise User rights, Users can direct a request using the contact details of the Data Controller indicated in this document. The requests are consigned free of charge and processed by the Data Controller as soon as possible, in any case within a month.

Cookie Policy

This website uses cookies. To learn more and read the detailed report, the User can consult the Cookie Policy of this website.

Further information on processing

Defence in court

The User’s Personal Data may be used by the Data Controller in court or in the preparatory stage leading to possible legal defence against the improper use of this website or related services by the User. The User declares to be aware that the Data Controller may be obliged to disclose the Data by public authority orders.

Specific Information

At the User’s request, in addition to the information contained in this privacy policy, this website may provide the User with addition and contextual information regarding specific services, or Personal Data collection and processing.

System logs and maintenance

For operational and maintenance needs, this website and any third-party services it uses may collect system logs, which are files that record the interactions and may also contain personal data, such as the User’s IP address.

Information not contained in this policy

Further information in relation to Personal Data processing may be requested at any time from the Data Controller using the contact details.

Legal references

This privacy statement was prepared based on multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy statement only applies to this website.

You don't have permission to register