Privacy Policy

1. Data Controller

The Data Controller is Vinifera Studio Enologico, with registered office at Via C. Cavour 6, 64027 Garrufo di Sant'Omero (TE), Italy — VAT No. IT02583560442.

For any questions regarding the processing of your data, please write to info@viniferastudioenologico.it or call +39 340 5411749.

2. Types of personal data collected

The website collects the following categories of personal data:

• Data provided voluntarily by the user: by filling in the contact or enquiry forms, the user provides data such as full name, email address, phone number, company name and message content.
• Browsing data: the IT systems operating the website automatically collect certain technical data (IP address, browser type, operating system, pages visited, access times) whose transmission is implicit in the use of Internet protocols.
• Cookies: the website uses technical cookies and, with the user's consent, analytical cookies. For full details please refer to the Cookie Policy.

3. Purposes of processing

Personal data are processed for the following purposes:

• Responding to contact and information requests sent by the user through the website forms
• Managing and fulfilling consultancy and quotation requests
• Analysing website usage in aggregate and anonymous form to improve content and functionality (only with the user's consent)
• Ensuring the security and correct functioning of the website
• Complying with legal obligations under applicable laws and EU regulations

4. Legal basis for processing

The processing of personal data is based on the following legal grounds under Art. 6 of the GDPR:

• Consent (Art. 6(1)(a)) — for the activation of analytical cookies
• Performance of pre-contractual measures (Art. 6(1)(b)) — for responding to contact and consultancy requests
• Legal obligation (Art. 6(1)(c)) — for compliance with applicable legal requirements
• Legitimate interest of the Controller (Art. 6(1)(f)) — for ensuring the security and correct operation of the website

5. Processing methods

Personal data are processed using electronic and automated means for the time strictly necessary to achieve the purposes for which they were collected. Appropriate technical and organisational security measures are adopted to prevent data loss, unlawful use, unauthorised access and unauthorised processing.

6. Data recipients

Personal data may be disclosed to third parties acting as Data Processors, as necessary for the provision of services:

• Vercel Inc. — website hosting and distribution
• Resend Inc. — sending transactional emails related to contact requests
• PostHog Inc. (EU servers) — website statistical analysis, activated only with user consent
• Google LLC / Firebase — infrastructure and backend services

Data will under no circumstances be disclosed, sold or transferred to third parties for direct marketing purposes.

7. International data transfers

Personal data are processed predominantly within the European Union and the European Economic Area (EEA). Where certain service providers are located outside the EU/EEA, data transfers are carried out in compliance with the safeguards provided for in Chapter V of the GDPR, such as Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.

8. Data retention period

Personal data are retained for the time strictly necessary for the purposes for which they were collected:

• Contact form data: retained for a maximum of 24 months from the request, unless otherwise required for the establishment of a contractual relationship
• Browsing data: retained for the time strictly necessary for the technical management of the website and deleted within 14 days
• Cookies: according to the durations specified in the Cookie Policy

9. Data subject rights

Under Articles 15–22 of the GDPR, the user has the right to:

• Access their personal data and obtain a copy (Art. 15)
• Rectify inaccurate or incomplete data (Art. 16)
• Obtain the erasure of their data — right to be forgotten (Art. 17)
• Obtain restriction of processing (Art. 18)
• Receive their data in a structured, machine-readable format — data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal

To exercise these rights, the user may send a request to info@viniferastudioenologico.it.

The user also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).

10. Changes to this policy

The Data Controller reserves the right to amend this privacy policy at any time. Any changes will be published on this page with an updated date. Users are advised to check this page periodically to stay informed about how their personal data are processed.