Privacy Policy

1. Data Controller

Pursuant to articles 13 and 14 of Regulation 2016/679/EU (hereinafter "GDPR"), Azienda Vitivinicola “Il Colle Tinto” with registered office in C/da Iannaricciola 27 – 86010 Castropignano (CB) – VAT ID 01767860701 in its capacity as "Data Controller", informs you that your personal data collected for the conclusion of the contract with the Customer and/or within the scope of execution and/or signature of the same will be processed in compliance with the aforementioned regulation, in order to guarantee the rights, fundamental freedoms, and dignity of natural persons, with particular reference to confidentiality and personal identity.

We inform you that if the activities provided to you involve the processing of personal data of third parties in your ownership, it will be your responsibility to ensure that you have complied with the provisions of the regulation regarding the interested parties in order to make their processing by us lawful. The Controller protects the Buyer's personal data and guarantees that the data processing conforms to the provisions of the privacy regulation set out in Legislative Decree no. 196 of June 30, 2003 (as amended).

2. Purposes of Data Processing

The personal, demographic, and fiscal data acquired directly by the company are collected and processed in paper, computer, and electronic format for the following purposes:

• Register the purchase order and activate the procedures for the execution of the relative contract.
• Manage the necessary communications related to the order and carry out the relative fiscal obligations and legal requirements.
• Allow effective management of commercial relationships to the extent necessary to best perform the requested service.
• Internal management, statistics, commercial activities, marketing, and promotions for the Controller's own purposes.

3. Confidentiality and Communication of Data

The Controller undertakes to treat the data and information transmitted by the Buyer with the utmost confidentiality and not to disclose them to unauthorized persons, nor to use them for purposes other than those for which they were collected or to transmit them to third parties. Such data may be exhibited only upon request of the judicial authority or other authorities authorized by law.

Personal data will be communicated, subject to the signature of a confidentiality undertaking, only to subjects delegated to carry out the activities necessary for the execution of the contract and communicated exclusively within the scope of this purpose (for example, to couriers and transporters in charge of delivery).

4. Obligatory Nature of Data Provision

The communication of personal data by the Buyer is a necessary condition for the correct and timely execution of this contract. In its absence, the order processing and product sales procedures cannot be carried out.

5. Data Retention

In any case, the acquired data will be kept for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed, in compliance with tax and civil law obligations. Their removal will take place in a secure and irreversible manner.

6. Rights of the Data Subject

In compliance, within the limits, and under the conditions laid down by the personal data protection regulations regarding the exercise of the data subjects' rights (Legislative Decree 196/2003 and articles 15-22 of the GDPR), as a data subject you have the right to:

• Request confirmation as to whether or not your personal data are being processed and access them.
• Request the rectification or erasure of data, as well as the notification of such changes to the entities to which they were transmitted.
• Request the restriction of processing or object to it for legitimate reasons.
• Obtain the portability of the personal data provided in the cases provided for by the rule.
• Object to automated decisions concerning you, including profiling.
• Object to processing for the purposes of sending advertising material, market research, or commercial communication.

If you believe that the processing concerning you violates the GDPR rules, you have the right to lodge a complaint with the Data Protection Authority pursuant to Art. 77 of the GDPR.

Any request regarding the exercise of your rights may be addressed to the Data Controller at the company headquarters or via email at: info@ilcolletinto.com.