特定商取引法に基づく表記
PRIVACY POLICY
1. Data Controller
In accordance with Regulation (EU) 2016/679 (GDPR), the Data Controller of personal data collected through the website https://tenutalagigliola.it is:
Tenuta La Gigliola
Via S. Piero in Mercato, 218
50025 Montespertoli (FI) - Italy
VAT Number: 04780900488
E-mail: info@lagigliola.it
Phone: +39 0571 608001
For any request regarding the processing of personal data, users may contact the Data Controller using the contact details provided above.
2. Categories of Data Collected
While browsing or using the website, the following personal data may be collected:
- First name and surname;
- Billing and shipping address;
- Telephone number;
- E-mail address;
- Information required to process and fulfil orders;
- Data submitted through contact forms;
- Technical data related to website navigation and security.
3. Purposes of Processing
Personal data are processed for the following purposes:
- Registration and management of customer accounts;
- Processing and fulfilment of orders;
- Shipping and delivery of purchased products;
- Issuing invoices and accounting documents;
- Handling customer support and contact requests;
- Compliance with legal obligations;
- Protection of the Data Controller's rights in judicial or extrajudicial proceedings;
- Prevention of fraud and unlawful use of the website.
4. Legal Basis for Processing
Personal data are processed on the basis of:
- Performance of a contract or pre-contractual measures requested by the data subject;
- Compliance with legal and tax obligations;
- The legitimate interest of the Data Controller in ensuring website security and managing commercial activities;
- The consent of the data subject, where required by applicable law.
5. Methods of Processing
Personal data are processed using electronic and digital tools in accordance with the principles of lawfulness, fairness, transparency, and data minimization.
Appropriate technical and organizational measures are implemented to prevent unauthorized access, loss, alteration, or disclosure of personal data.
6. Data Retention
Personal data are retained for the period necessary to achieve the purposes for which they were collected and subsequently for the period required by applicable tax, civil, and administrative regulations.
Order-related data may be retained for the period required by accounting and tax legislation.
7. Disclosure of Data
Personal data may be disclosed exclusively to parties involved in providing the requested services, including:
- Couriers and shipping providers;
- Payment service providers;
- Tax and administrative consultants;
- IT service, software, and hosting providers.
Such parties process personal data solely for purposes directly connected with the provision of the requested services.
Personal data are never sold or transferred to third parties for marketing purposes.
8. International Data Transfers
Personal data are generally processed within the European Union.
Should certain service providers use infrastructure located outside the European Economic Area (EEA), the processing of personal data will take place in accordance with the safeguards required by the GDPR.
9. Cookies and Similar Technologies
The website uses technical cookies necessary for the proper functioning of essential services, including:
- User session management;
- Authentication and access to restricted areas;
- Shopping cart and order management;
- Language settings and website preferences.
For further information, users may consult the Cookie Policy available on the website.
10. Rights of the Data Subject
Data subjects may exercise at any time the rights provided for by Articles 15–22 of the GDPR, including:
- Right of access to personal data;
- Right to rectification of inaccurate data;
- Right to erasure where permitted by law;
- Right to restriction of processing;
- Right to object to processing;
- Right to data portability;
- Right to withdraw any consent previously given.
Requests may be sent to:
11. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with the competent Data Protection Authority if they believe that the processing of their personal data violates applicable data protection laws.
12. Changes to this Privacy Policy
This Privacy Policy may be updated or amended from time to time to reflect changes in legal requirements or in the services offered by Tenuta La Gigliola.
The updated version will be published on this page and will become effective from the date of publication.