特定商取引法に基づく表記

PRIVACY POLICY

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR), the Data Controller of personal data collected through the website https://tenutalagigliola.it is:

Tenuta La Gigliola
Via S. Piero in Mercato, 218
50025 Montespertoli (FI) - Italy
VAT Number: 04780900488
E-mail: info@lagigliola.it
Phone: +39 0571 608001

For any request regarding the processing of personal data, users may contact the Data Controller using the contact details provided above.

2. Categories of Data Collected

While browsing or using the website, the following personal data may be collected:

  • First name and surname;
  • Billing and shipping address;
  • Telephone number;
  • E-mail address;
  • Information required to process and fulfil orders;
  • Data submitted through contact forms;
  • Technical data related to website navigation and security.

3. Purposes of Processing

Personal data are processed for the following purposes:

  • Registration and management of customer accounts;
  • Processing and fulfilment of orders;
  • Shipping and delivery of purchased products;
  • Issuing invoices and accounting documents;
  • Handling customer support and contact requests;
  • Compliance with legal obligations;
  • Protection of the Data Controller's rights in judicial or extrajudicial proceedings;
  • Prevention of fraud and unlawful use of the website.

4. Legal Basis for Processing

Personal data are processed on the basis of:

  • Performance of a contract or pre-contractual measures requested by the data subject;
  • Compliance with legal and tax obligations;
  • The legitimate interest of the Data Controller in ensuring website security and managing commercial activities;
  • The consent of the data subject, where required by applicable law.

5. Methods of Processing

Personal data are processed using electronic and digital tools in accordance with the principles of lawfulness, fairness, transparency, and data minimization.

Appropriate technical and organizational measures are implemented to prevent unauthorized access, loss, alteration, or disclosure of personal data.

6. Data Retention

Personal data are retained for the period necessary to achieve the purposes for which they were collected and subsequently for the period required by applicable tax, civil, and administrative regulations.

Order-related data may be retained for the period required by accounting and tax legislation.

7. Disclosure of Data

Personal data may be disclosed exclusively to parties involved in providing the requested services, including:

  • Couriers and shipping providers;
  • Payment service providers;
  • Tax and administrative consultants;
  • IT service, software, and hosting providers.

Such parties process personal data solely for purposes directly connected with the provision of the requested services.

Personal data are never sold or transferred to third parties for marketing purposes.

8. International Data Transfers

Personal data are generally processed within the European Union.

Should certain service providers use infrastructure located outside the European Economic Area (EEA), the processing of personal data will take place in accordance with the safeguards required by the GDPR.

9. Cookies and Similar Technologies

The website uses technical cookies necessary for the proper functioning of essential services, including:

  • User session management;
  • Authentication and access to restricted areas;
  • Shopping cart and order management;
  • Language settings and website preferences.

For further information, users may consult the Cookie Policy available on the website.

10. Rights of the Data Subject

Data subjects may exercise at any time the rights provided for by Articles 15–22 of the GDPR, including:

  • Right of access to personal data;
  • Right to rectification of inaccurate data;
  • Right to erasure where permitted by law;
  • Right to restriction of processing;
  • Right to object to processing;
  • Right to data portability;
  • Right to withdraw any consent previously given.

Requests may be sent to:

info@lagigliola.it

11. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with the competent Data Protection Authority if they believe that the processing of their personal data violates applicable data protection laws.

12. Changes to this Privacy Policy

This Privacy Policy may be updated or amended from time to time to reflect changes in legal requirements or in the services offered by Tenuta La Gigliola.

The updated version will be published on this page and will become effective from the date of publication.