• Access to your personal data and related information
• Rectification and erasure of your data ('right to be forgotten')
• Restriction of processing or the right to object to processing
• Data portability - Withdrawal of consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal

• First name, surname, company name and legal form
• Address and other telephone or electronic contact details (e-mail, website, etc.)
• Tax identification data such as Tax Code and/or VAT number
• IP address and navigation data 
• Banking and payment details (processed by the payment service provider Klarna AB)

Purposes of processing, legal basis and consequences of failure to provide data

Purpose: 

1. Performance of all obligations necessary for the provision of the requested services (order management, shipping, invoicing)
2. Exercise of the Data Controller's rights, for example the right of defence in legal proceedings.

Legal basis: 

1. Performance of the contract (Art. 6(1)(b) GDPR)
2. Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR)

Consequences of Failure to provide data: 

1. With regard to personal data relating to the performance of the contract to which you are a party or the fulfilment of a legal obligation (e.g. accounting and tax obligations), failure to provide such data will prevent the contract from being concluded.
2. The provision of data is mandatory as it is necessary for the exercise of a legitimate right of the Data Controller.

• Professional advisors and consultants;
• Companies providing technical support to the Data Controller;
• Banking, financial and insurance institutions, including payment service providers such as Klarna AB (SE);
• Judicial and administrative authorities for compliance with legal obligations;
• IT maintenance advisors and assistants (hardware and software);
• Third parties engaged by the Data Controller for the development of the company's commercial network;
• Logistics and transport providers

The Data Controller does not transfer personal data outside the European Economic Area, except where strictly necessary for the operation of third-party services (e.g. Google LLC for analytics, covered by the EU-US Data Privacy Framework pursuant to the EU Commission Decision of 10 July 2023). For further details, please refer to the Cookie Policy.

Data retention period

The collected data will be retained for the period strictly necessary to achieve the purposes described above and, in any case, for a period not less than that required by legal and/or tax obligations (currently 10 years).

Profiling

Profiling: Your personal data are not subject to dissemination or any fully automated decision-making process, including profiling.

Rights of the data subject

As a data subject, you always have the right to request from the Data Controller: 

• Access to your personal data and related information 
• Rectification and erasure of your data ('right to be forgotten') 
• Restriction of processing or the right to object to processing 
• Data portability 

To exercise your rights, please contact the Data Controller directly at: info@vinum.it You also have the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority - Garante per la protezione dei dati personali: www.garanteprivacy.it).

Processing methods

Your personal data will be processed by manual, electronic and telematic means, in full compliance with the GDPR and the confidentiality obligations governing the Data Controller's activities. Data will be processed using electronic systems, on paper and on any other suitable medium, with appropriate security measures in accordance with Art. 5(1)(f) GDPR.

• First name, surname
• Email address
• Telephone number (optional)
• Tax code (if applicable)
• IP address and navigation data
• Any other information you choose to include in your message

Source of personal data

The personal data held by the Data Controller are collected directly from the data subject when completing the contact form or subscribing to the newsletter.

Purposes and legal basis

• Responding to your enquiries regarding our products and services
• Sending commercial and promotional information about our wines and offers (newsletter - only if you have given specific consent) You may withdraw your consent at any time by sending an email to info@vinum.it or by clicking the unsubscribe link in any newsletter.

Mandatory or optional data provision

The provision of data is optional. However, failure to provide the required data will mean that your message cannot be sent or the newsletter subscription cannot be processed.

Data recipients

Within the limits relevant to the processing purposes indicated, your data may be disclosed to partners, consultancy firms, and private companies appointed as Data Processors by the Data Controller (e.g. CleverReach GmbH & Co. KG for newsletter management). Your data will not in any way be subject to dissemination or sale.

Data transfers

The Data Controller does not generally transfer data outside the European Economic Area. The newsletter service (CleverReach) is operated by a German company (CleverReach GmbH & Co. KG) subject to GDPR. Where transfers to third countries occur, appropriate safeguards are in place pursuant to Art. 46 GDPR.

Retention period

Data collected via the contact form will be retained for approximately 12 months after the last interaction, or until you request deletion. Newsletter subscription data will be retained until you withdraw your consent. After the retention period, data will be securely deleted.

Rights of the data subject

• Access to your personal data and related information
• Rectification and erasure of your data ('right to be forgotten')
• Restriction of processing or the right to object to processing
• Data portability
• Withdrawal of consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal

Profiling

The Controller does not carry out processing operations involving automated decision-making, including profiling of data subjects, pursuant to Art. 22 of Regulation (EU) 2016/679 (GDPR).

Processing methods

Your personal data will be processed by manual, electronic and telematic means, in compliance with the GDPR and confidentiality obligations. Data will be processed on electronic systems, on paper and on any other type of support, with appropriate security measures to prevent loss, misuse, unauthorised access, disclosure, alteration or destruction.

COOKIE POLICY

Introduction

Our website www.vinum.it (hereinafter: 'the website') uses cookies and other related technologies (for convenience all technologies are referred to as 'cookies'). Cookies are also placed by third parties that we have engaged. In the document below we inform you about the use of cookies on our website.

Data controller

What are Cookies?

Wha are scripts?

What is a web beacon?

Nature of Cookies
Regarding the nature of cookies, there are several types:
a) Technical or functional cookies
Some cookies ensure that the site functions properly and that your preferences remain valid. By placing functional cookies, we make it easier for you to visit our website. This way you do not have to repeatedly enter the same information when you visit our website, e.g. the item remains in your shopping cart until you have paid for it. We can place these cookies without your consent.

b) Statistical cookies
We use statistical cookies to optimise the website experience for our users. We ask your permission to place statistical cookies; these include Google Analytics 4, which requires your consent to collect statistical data and carry out remarketing activities.

c) Marketing or tracking cookies
Marketing/tracking cookies are cookies or any other form of local storage, used to create user profiles to display advertising or to track the user on this website or across different websites for similar marketing purposes. This includes Google Ads, used to track conversions and create custom audiences for targeted advertising campaigns.

d) Profiling cookies
Profiling cookies are designed to create profiles of the user and are used to send advertising messages in line with the user's preferences when surfing the Internet.
The consent of the person concerned is required for the use of profiling cookies. According to Order No. 229 of 8 May 2014, the user must be able to authorise or deny consent to the installation of profiling cookies if they are present.

Data transfer to the USA

Cookies installed on this site

Consent

• You have the right to know when your personal data are needed, what happens to them, how long they will be kept.
• Right of access: you have the right to access your personal data of which we have knowledge.
• Right of rectification: you have the right to complete, correct, delete or block your personal data whenever you wish.
• If you give us consent to process your data, you have the right to revoke this consent and to delete your personal data.
• Right to transfer your data: you have the right to request all your data from the controller and transfer them all to another controller.
• Right of objection: you have the right to object to the processing of your data. We will respect this choice unless there is a valid basis for the process.
• Right to lodge a complaint: you have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority - www.garanteprivacy.it)