PRIVACY POLICY

Last updated: 5 October 2026

1. Data Controller

The Data Controller is MONTE PAPA SOCIETÀ AGRICOLA A RESPONSABILITÀ LIMITATA, with registered office at Località Monte Papa, 72013 Ceglie Messapica (BR), Italy, VAT/Tax Code 02227530744.

Tellua Places is the hospitality brand through which Monte Papa Estate and its related hospitality services are presented.

For privacy-related enquiries or requests, you can contact us at:

enquiries@telluaplaces.com
PEC: montepapa@pec.it

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use and protect personal data when you visit telluaplaces.com, contact us, make an enquiry, request information about a stay, event or service, or book accommodation at Monte Papa Estate.

3. Personal data we may collect

Depending on how you interact with us, we may collect:

Browsing and technical data
Information generated when you visit the Website, such as IP address, browser and device information, access times, pages visited and technical logs required for the operation and security of the Website.

Enquiries and communications
Information you provide when contacting us by email, enquiry form, telephone or other communication channels, including your name, email address, telephone number, requested dates, number of guests, event information and the contents of your message.

Booking and stay information
Information necessary to manage your booking and stay, such as guest details, accommodation dates, services requested, billing and invoicing information and information required to comply with applicable legal obligations.

Event enquiries
Where you enquire about weddings, private events, corporate retreats or other events, we may process the information required to respond to your enquiry and organise the requested services.

Please avoid providing sensitive personal data unless it is necessary for us to provide a service you have specifically requested.

4. Purposes and legal bases for processing

We may process personal data for the following purposes:

To respond to enquiries and provide information or quotations
Legal basis: steps taken at your request prior to entering into a contract.

To manage bookings and provide accommodation and related services
Legal basis: performance of a contract or pre-contractual measures.

To manage enquiries and services relating to events, experiences and additional hospitality services
Legal basis: pre-contractual measures and/or performance of a contract.

To comply with legal, accounting and tax obligations
Legal basis: compliance with legal obligations.

To maintain the security and proper functioning of the Website and protect our rights
Legal basis: our legitimate interests.

To send marketing communications
Only where you have expressly consented to receive them. You may withdraw your consent at any time.

5. Cookies and similar technologies

The Website may use cookies and similar technologies for its operation, security and, where applicable, analytics or other optional functionality.

For further information, please see our Cookie Policy.

6. Recipients of personal data

Where necessary, personal data may be shared with:

  • Squarespace and other providers used to host and operate the Website;

  • providers used to manage email communications and enquiries;

  • booking, payment or reservation service providers, where applicable;

  • suppliers and service providers involved in fulfilling services specifically requested by you;

  • IT and technical support providers;

  • accountants, legal advisers and other professional advisers;

  • competent public authorities where required by law.

Recipients may act as data processors on our behalf or as independent data controllers, depending on the circumstances.

7. International data transfers

Some service providers used in connection with the Website may process personal data outside the European Economic Area.

Where required by applicable law, such transfers will be made using appropriate safeguards, including Standard Contractual Clauses or other recognised transfer mechanisms.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected and in accordance with applicable legal requirements.

In particular:

  • enquiry and communication data is retained for the period reasonably necessary to manage and follow up the enquiry;

  • booking, invoicing and administrative records are retained for the periods required by applicable law;

  • technical and security data is retained only for the period necessary for operational and security purposes;

  • marketing data is retained until consent is withdrawn or the data is no longer required for that purpose.

9. Your rights

Under applicable data protection law, including the GDPR, you may have the right to request:

  • access to your personal data;

  • rectification of inaccurate data;

  • erasure of your data;

  • restriction of processing;

  • data portability;

  • objection to certain processing activities.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact:

enquiries@telluaplaces.com
or montepapa@pec.it

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali.

10. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access or other unauthorised processing.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, Website or applicable legal requirements.

The most recent version will always be published on this page.