{"id":323345,"date":"2026-06-20T16:24:05","date_gmt":"2026-06-20T14:24:05","guid":{"rendered":"https:\/\/www.aziendalevigne.com\/?page_id=323345"},"modified":"2026-06-20T16:24:59","modified_gmt":"2026-06-20T14:24:59","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.aziendalevigne.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"lv-legal\">\n<h1>Privacy Notice on the Processing of Personal Data<\/h1>\n<p>  <span class=\"lv-update\">Pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) \u2014 Last updated: 20\/06\/2026 <\/span><\/p>\n<h2>1. Data Controller<\/h2>\n<div class=\"lv-header\">\n    <strong>AZ. AGR. LE VIGNE DI PETTINI ANDREA<\/strong><br \/>\n    Podere Le Vigne, 39 \u2013 Montenero d&#8217;Orcia, 58033 (GR), Italy<br \/>\n    VAT No.: IT01148770538 | Tax Code: PTTNDR69D30E202S<br \/>\n    REA No.: GR-98787 \u2013 Grosseto Chamber of Commerce<br \/>\n    Email: <a href=\"mailto:info@aziendalevigne.com\">info@aziendalevigne.com<\/a> &nbsp;|&nbsp;<br \/>\n    Certified email (PEC): <a href=\"mailto:aziendalevigne@pec.it\">aziendalevigne@pec.it<\/a><br \/>\n    Telephone: <a href=\"tel:+393289710663\">+39 328 971 0663<\/a>\n  <\/div>\n<h2>2. Types of data processed and methods of collection<\/h2>\n<h3>2.1 Data provided directly by the user<\/h3>\n<ul>\n<li><strong>Personal and contact details<\/strong>: first name, surname, email address, telephone number, delivery and billing addresses;<\/li>\n<li><strong>Login details<\/strong>: customer account credentials (email and encrypted password);<\/li>\n<li><strong>Order details<\/strong>: products purchased, quantities, delivery preferences;<\/li>\n<li><strong>Quotation details<\/strong>: for the Wine category, details entered in the quotation request form;<\/li>\n<li><strong>Returns\/withdrawals details<\/strong>: details entered during the digital withdrawal procedure;<\/li>\n<li><strong>Payment data<\/strong>: card details do not pass through the Data Controller\u2019s servers but are managed directly by Stripe.<\/li>\n<\/ul>\n<h3>2.2 Data collected automatically<\/h3>\n<ul>\n<li>The device\u2019s IP address;<\/li>\n<li>Browser type and operating system;<\/li>\n<li>Pages visited and duration of the visit;<\/li>\n<li>Date and time of access.<\/li>\n<\/ul>\n<p>This data is collected via cookies and analytics tools (see Article 6 and <a href=\"https:\/\/www.aziendalevigne.com\/en\/cookie-policy\/\">Cookie Policy<\/a>).<\/p>\n<h2>3. Purposes and legal bases for processing<\/h2>\n<table>\n<thead>\n<tr>\n<th>Purpose<\/th>\n<th>Legal basis<\/th>\n<th>Data processed<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td data-label=\u2018Purpose\u2019>Management of purchase orders<\/td>\n<td data-label=\u2018Legal basis\u2019>Performance of the contract (Art. 6(1)(b) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, order, payment<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Management of quotation requests (Wine)<\/td>\n<td data-label=\u2018Legal basis\u2019>Pre-contractual measures (Art. 6(1)(b) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, products requested<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Management of shipments and deliveries<\/td>\n<td data-label=\u2018Legal basis\u2019>Performance of the contract (Art. 6(1)(b) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, address, order<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Management of returns, cancellations and refunds<\/td>\n<td data-label=\u2018Legal basis\u2019>Contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, order, cancellation details<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Tax and accounting obligations<\/td>\n<td data-label=\u2018Legal basis\u2019>Legal obligation (Art. 6(1)(c) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, invoicing data<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Statistical traffic analysis (Google Analytics 4)<\/td>\n<td data-label=\u2018Legal basis\u2019>Legitimate interest \/ Consent for analytical cookies (Art. 6(1)(f) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Anonymised browsing data<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Order source attribution (Sourcebuster)<\/td>\n<td data-label=\u2018Legal basis\u2019>Legitimate interest (Art. 6(1)(f) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Anonymous session data<\/td>\n<\/tr>\n<tr>\n<td data-label=\u2018Purpose\u2019>Management of customer support communications<\/td>\n<td data-label=\u2018Legal basis\u2019>Legitimate interest (Art. 6(1)(f) GDPR)<\/td>\n<td data-label=\u2018Data processed\u2019>Personal details, content of request<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The Data Controller does not process data on the basis of consent for the purposes of direct marketing or profiling. Should any marketing activities (e.g. newsletters) be introduced in the future, the user will be informed and consent will be obtained separately.<\/p>\n<h2>4. Data retention periods<\/h2>\n<ul>\n<li><strong>Order and invoicing data<\/strong>: 10 years from the end of the financial year;<\/li>\n<li><strong>Customer account data<\/strong>: until the account is deleted, or for a maximum of 3 years from the last login;<\/li>\n<li><strong>Data relating to non-converted quote requests<\/strong>: 12 months from the request;<\/li>\n<li><strong>Data relating to returns\/cancellations<\/strong>: 2 years from the conclusion of the case;<\/li>\n<li><strong>Browsing data and technical logs<\/strong>: 12 months from collection;<\/li>\n<li><strong>Analytical cookies (GA4)<\/strong>: in accordance with the settings configured in Google Analytics (see Cookie Policy).<\/li>\n<\/ul>\n<h2>5. Recipients and disclosure of data<\/h2>\n<p>Personal data is not sold or transferred to third parties for commercial purposes. It may be disclosed to the following categories of recipients:<\/p>\n<ul>\n<li><strong>Couriers and freight forwarders<\/strong> (GLS, BRT) \u2014 for the delivery of orders;<\/li>\n<li><strong>Sendcloud<\/strong> \u2014 for the management and tracking of shipments;<\/li>\n<li><strong>Stripe<\/strong> \u2014 for the processing of card payments;<\/li>\n<li><strong>Ergonet<\/strong> \u2014 the Website\u2019s hosting provider;<\/li>\n<li><strong>Google Ireland Ltd \/ Google LLC<\/strong> \u2014 for Google Analytics 4 and Tag Manager;<\/li>\n<li><strong>Accountant\/tax adviser<\/strong> \u2014 for accounting and tax compliance;<\/li>\n<li><strong>Public authorities<\/strong> \u2014 upon request and within the limits provided for by law.<\/li>\n<\/ul>\n<h2>6. Google Analytics 4 and Google Tag Manager<\/h2>\n<p>The Website uses <strong>Google Analytics 4<\/strong> (GA4) and <strong>Google Tag Manager<\/strong>, services provided by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4). GA4 collects anonymous and aggregated data on users\u2019 browsing behaviour.<\/p>\n<p><strong>Transfer outside the EU<\/strong>: Google LLC is based in the USA. The transfer is governed by the Standard Contractual Clauses (SCCs) approved by the European Commission. <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Google\u2019s privacy policy<\/a>.<\/p>\n<p>The Data Controller has configured GA4 with IP anonymisation and a retention period set to the minimum permitted. Users may object via the browser add-on available at <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">tools.google.com\/dlpage\/gaoptout<\/a>.<\/p>\n<h2>7. Data Processors (Article 28 of the GDPR)<\/h2>\n<h3>Ergonet (Hosting)<\/h3>\n<p>Provider of hosting and infrastructure services for the Website. Registered office: Italy \u2014 <a href=\"https:\/\/www.ergonet.it\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">www.ergonet.it<\/a><\/p>\n<h3>Stripe (Payments)<\/h3>\n<p>Processing of card payments. Contractual entity: <strong>Stripe Payments Europe Ltd<\/strong>, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Card details do not pass through the Data Controller\u2019s servers. Transfer outside the EU covered by SCCs. <a href=\"https:\/\/stripe.com\/it\/privacy\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Stripe Privacy Policy<\/a>.<\/p>\n<h3>Sendcloud (Shipping)<\/h3>\n<p>Platform for managing and tracking shipments. Registered office: Sendcloud B.V., Eindhoven, Netherlands (EU). <a href=\"https:\/\/www.sendcloud.com\/privacy-policy\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Sendcloud Privacy Policy<\/a>. <\/p>\n<h3>Google Ireland Ltd \/ Google LLC (Analytics and Tag Manager)<\/h3>\n<p>See Article 6. <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Google Privacy Policy<\/a>.<\/p>\n<h3>Sourcebuster (Order source attribution)<\/h3>\n<p>WooCommerce plugin to track the traffic source of orders. It collects anonymous session data via cookies (<code>sbjs_*<\/code>) without storing any personally identifiable information. <a href=\"https:\/\/sourcebustejs.com\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">sourcebustejs.com<\/a><\/p>\n<h2>8. Data subject rights<\/h2>\n<p>Pursuant to Articles 15\u201322 of the GDPR, you have the right to:<\/p>\n<ul>\n<li><strong>Access<\/strong> (Art. 15): to obtain confirmation of the processing and receive a copy thereof;<\/li>\n<li><strong>Rectification<\/strong> (Art. 16): to have inaccurate data corrected;<\/li>\n<li><strong>Erasure<\/strong> (Art. 17): to have one\u2019s data erased (\u2018right to be forgotten\u2019);<\/li>\n<li><strong>Restriction<\/strong> (Art. 18): to have the processing restricted;<\/li>\n<li><strong>Portability<\/strong> (Art. 20): to receive one\u2019s data in a structured and machine-readable format;<\/li>\n<li><strong>Objection<\/strong> (Art. 21): to object to processing based on legitimate interests;<\/li>\n<li><strong>Withdrawal of consent<\/strong>: to withdraw any consent given at any time.<\/li>\n<\/ul>\n<p>To exercise your rights:<\/p>\n<ul>\n<li>Email: <a href=\"mailto:info@aziendalevigne.com\">info@aziendalevigne.com<\/a><\/li>\n<li>Certified email (PEC): <a href=\"mailto:aziendalevigne@pec.it\">aziendalevigne@pec.it<\/a><\/li>\n<li>Mail: AZ. AGR. Le Vigne di Pettini Andrea, Localit\u00e0 Podere Le Vigne, 39 \u2013 58033 Montenero d&#8217;Orcia (GR)<\/li>\n<\/ul>\n<p>The Data Controller will respond within 30 days of receipt, unless a justified extension of up to a further 60 days is granted.<\/p>\n<h2>9. Right to lodge a complaint<\/h2>\n<p>You have the right to lodge a complaint with the <strong>Data Protection Authority<\/strong>:<\/p>\n<ul>\n<li>Website: <a href=\"https:\/\/www.garanteprivacy.it\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">www.garanteprivacy.it<\/a><\/li>\n<li>Email: <a href=\"mailto:garante@gpdp.it\">garante@gpdp.it<\/a><\/li>\n<li>Certified email (PEC): <a href=\"mailto:protocollo@pec.gpdp.it\">protocollo@pec.gpdp.it<\/a><\/li>\n<\/ul>\n<h2>10. Cookies<\/h2>\n<p>The Website uses technical and analytical cookies. For further details, please refer to the <a href=\"https:\/\/www.aziendalevigne.com\/en\/cookie-policy\/\"><strong>Cookie Policy<\/strong><\/a>.<\/p>\n<h2>11. Data security<\/h2>\n<p>The Data Controller implements appropriate technical and organisational measures to protect personal data from unauthorised access, in accordance with Article 32 of the GDPR. Data transmitted during purchases is protected by an encrypted connection (HTTPS\/TLS protocol).<\/p>\n<h2>12. Changes to this Policy<\/h2>\n<p>The Data Controller reserves the right to update this Policy in the event of regulatory, technological or operational changes. The updated version will always be available on this page, indicating the date of the last update.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Notice on the Processing of Personal Data Pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) \u2014 Last updated: 20\/06\/2026 1. Data Controller AZ. AGR. LE VIGNE DI PETTINI ANDREA Podere Le Vigne, 39 \u2013 Montenero d&#8217;Orcia, 58033 (GR), Italy VAT No.: IT01148770538 | Tax Code: PTTNDR69D30E202S REA No.: GR-98787 \u2013 Grosseto [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-323345","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/pages\/323345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/comments?post=323345"}],"version-history":[{"count":4,"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/pages\/323345\/revisions"}],"predecessor-version":[{"id":323349,"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/pages\/323345\/revisions\/323349"}],"wp:attachment":[{"href":"https:\/\/www.aziendalevigne.com\/en\/wp-json\/wp\/v2\/media?parent=323345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}