Privacy Policy

1. Who we are

Girotondo SRL Benefit is a benefit corporation registered in Italy (P.IVA 02987090350), operating a regenerative retreat and innovation hub at Cervarezza Terme, Ventasso (RE), Italy. We trade as Girotondo Horizons.

This privacy policy applies to all personal data collected through our website at girotondo.earth, through our contact and enquiry forms, and in the course of operating our retreat, residency and cultural programmes.

For any questions about how we handle your data, contact us at ciao@girotondo.earth.

2. What data we collect and why

Enquiry and contact forms

When you submit an enquiry through our website, we collect your name, email address, and the content of your message. If you choose to provide them, we also collect your phone number, organisation name, and details about the programme you are interested in. We use this data to respond to your enquiry. Our legal basis is legitimate interest (responding to your request) or pre-contractual measures (taking steps before entering a contract).

Programme bookings and residencies

If you book a retreat, residency or workshop with us, we collect the personal data necessary to manage your stay — name, contact details, dietary requirements, emergency contact, and payment information. Payment processing is handled by our payment provider and we do not store card details. Our legal basis is performance of a contract.

Website analytics

We may use privacy-respecting website analytics to understand how visitors use our site (pages visited, session duration, referral source). We do not use Google Analytics by default. If we do use analytics, we will update this policy to specify the provider and the data collected. Our legal basis is legitimate interest in understanding how our website performs.

Photographs and testimonials

If you provide a written testimonial or we photograph you during a programme, we will ask for your explicit consent before publishing this content. You can withdraw consent at any time by contacting us at ciao@girotondo.earth. Our legal basis is consent.

Email communications

If you have enquired about or booked a programme with us, we may send you relevant updates about similar programmes. We will always include an easy way to opt out. We do not send unsolicited marketing email. Our legal basis is legitimate interest.

3. How long we keep your data

4. Who we share your data with

We do not sell or rent your personal data to any third party. We share data only where necessary to operate our services:

• Our contact form provider (currently WordPress hosted form on our own server) — processes enquiry data on our behalf.
• Our accountant / commercialista — receives invoice and booking data as required for Italian tax compliance.
• Payment processors — handle payment transactions. They operate under their own GDPR-compliant privacy policies.
• Google — we use Google Maps embed on our site. Google's privacy policy applies to data processed by this feature. See google.com/privacy.

All third parties we work with are required to handle your data in accordance with GDPR. We do not transfer personal data outside the European Economic Area except as noted above (Google Maps).

5. Cookies

Our website uses only essential technical cookies necessary for the site to function. We do not use advertising cookies, tracking cookies or third-party analytics cookies by default.

The Google Maps embed may set cookies when you interact with the map. These are subject to Google's cookie policy.

If we add any non-essential cookies in the future, we will implement a cookie consent banner and update this policy.

6. Your rights under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data where there is no overriding legal reason to keep it.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interest, including for direct marketing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at ciao@girotondo.earth. We will respond within 30 days.

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website is served over HTTPS. Access to personal data is restricted to Julia Lydall Pisano and Antonio Pisanò, and to service providers who require it to operate our services.

8. Links to other websites

Our website contains links to third-party websites — local activity providers, partner institutions and others. We are not responsible for the privacy practices of those sites and we encourage you to read their privacy policies.

9. Changes to this policy

We may update this privacy policy from time to time to reflect changes in how we operate or in applicable law. We will update the "last updated" date at the top of this page when we do so. For significant changes we will notify guests and residency residents directly.

10. Contact

For any questions, requests or complaints relating to your personal data:

Girotondo SRL Benefit (trading as Girotondo Horizons)
Cervarezza Terme, Ventasso, Reggio Emilia 42032, Italy
P.IVA 02987090350
ciao@girotondo.earth
+39 320 727 355