Privacy Policy

Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

Your privacy is important to us. On this page you will find all the information about how we collect, use and protect your personal data.

1. Data Controller

Azienda Agricola Luscietti Mariagiulia

Address: Via XXIV Maggio 7, 25052 Piancogno (BS), Italy

VAT No.: IT01979910989

Tax Code: LSCMGL55H52B054W

Phone: (+39) 347 2994661

Email: info@cultivardellevolte.it

Website: www.cultivardellevolte.it

2. What personal data do we collect?

Data you provide directly

We collect the personal data you provide when you fill in the contact form on our website, when you make a purchase through our online shop, or when you communicate with us by email or phone.

Contact form

  • Name
  • Email address
  • Message

Source: Web form on the Contacts page

Online purchases (e-commerce)

  • First and last name
  • Email address
  • Phone number
  • Tax code (codice fiscale)
  • Shipping address (street, city, postcode, country)
  • For businesses: company name, VAT number, SDI code
  • Order notes (optional)

Source: Checkout form on the Shop page

Browsing data

IP address, browser type, operating system, pages visited, date and time of access.

Source: Server logs and technical cookies

Note: We do not collect or store any credit card or payment instrument data. Payments are handled entirely by Stripe, which operates as an independent data controller.

3. Purposes of processing and legal bases

A) Responding to contact requests — Data provided through the contact form is used exclusively to respond to your enquiry and get back to you.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the request of the data subject) · Retention: 24 months from last contact

B) Order management and online sales — Data provided during the purchase process is used to process your order, manage shipping, issue invoices and fulfil contractual obligations.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) · Retention: 10 years (tax and accounting obligations)

C) Payment processing — Payments are processed through the Stripe platform. Credit card data is handled directly by Stripe and does not pass through our servers.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

D) Site measurement and analysis — With your consent, we use Google Analytics (GA4) to collect anonymous data on site usage in order to improve performance and usability.

Legal basis: Art. 6(1)(a) GDPR (consent) · Retention: 14 months (GA4 setting)

E) Interactive content — With your consent, we use Google Maps to display the interactive map on the Contacts page.

Legal basis: Art. 6(1)(a) GDPR (consent)

F) Website security and abuse prevention — Ensuring the proper operation, security and maintenance of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) · Retention: 12 months

G) Legal compliance — Complying with obligations under applicable law, including tax, accounting and regulations relating to the sale of alcoholic beverages.

Legal basis: Art. 6(1)(c) GDPR (legal obligation) · Retention: 10 years

4. How is the security of your data ensured?

Personal data is processed using electronic and/or digital tools, with logic strictly related to the stated purposes. We adopt specific security measures to prevent data loss, unlawful or improper use, and unauthorised access:

  • HTTPS/TLS connection for all communications between your browser and our website
  • Secure payments via Stripe with SSL encryption and PCI DSS compliance
  • Controlled access to personal data, limited to authorised personnel only
  • Regular system updates and security measures
  • Backup procedures to protect archived data

5. Recipients and data processors

Personal data will not be disclosed under any circumstances. It may be communicated to the following parties, acting as Data Processors pursuant to Art. 28 GDPR or as independent controllers:

Stripe, Inc. — Payments

Service: E-commerce payment processing

Data processed: Payment data (credit card), IP, anti-fraud data

Country: USA / Ireland (EU)

GDPR safeguard: EU-U.S. Data Privacy Framework + SCC 2021

Privacy Policy: stripe.com/privacy

Google Ireland Limited — Google Analytics (GA4)

Service: Statistical analysis of web traffic (with consent)

Data processed: Anonymised browsing data

Country: EU (data region setting) / USA

GDPR safeguard: EU-U.S. Data Privacy Framework + SCC 2021

Privacy Policy: policies.google.com/privacy

Google Ireland Limited — Google Maps

Service: Display of the interactive map on the Contacts page (with consent)

Country: EU (data region setting) / USA

GDPR safeguard: EU-U.S. Data Privacy Framework + SCC 2021

Privacy Policy: business.safety.google/privacy

6. International transfers

Personal data is stored on servers located in the European Union. Any occasional transfers to third countries (Google and Stripe services) take place solely on the basis of appropriate safeguards, including Standard Contractual Clauses updated in 2021 and the EU-U.S. Data Privacy Framework, where applicable. For services requiring consent (Google Analytics, Google Maps), transfers only occur with the user's prior consent.

7. Your rights

At any time you may exercise the following rights under Articles 15-22 of the GDPR:

Access (Art. 15) Obtain information about the data we process
Rectification (Art. 16) Correct inaccurate or incomplete data
Erasure (Art. 17) Request the deletion of your data
Restriction (Art. 18) Restrict processing in certain circumstances
Portability (Art. 20) Receive your data in a structured format
Objection (Art. 21) Object to processing based on legitimate interest
Complaint: You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — www.garanteprivacy.it.
To exercise your rights, write to info@cultivardellevolte.it.

8. Links to external websites and social media

Our website contains links to third-party platforms and services, including Facebook, Instagram, Twitter and YouTube. By clicking on these links, you will be redirected to websites managed by third parties acting as independent data controllers. No SDK or tracking pixel from these social networks is integrated into our site.

We invite you to consult their respective privacy policies:

9. Cookie Policy

Our website uses technical cookies necessary for its operation and, with the user's consent, measurement cookies (Google Analytics) and experience cookies (Google Maps).

A banner appears on your first visit: you can accept, refuse or customise non-essential cookies. You can change your preferences at any time via the "Cookie Settings" link in the footer.

For detailed information on types, purposes, durations and cookie management, please see the full Cookie Policy.

10. Optional nature of data provision

Providing the data marked as mandatory in the contact form (name, email and message) is necessary to respond to your request. Failure to provide this data will make it impossible to process your enquiry.

For online purchases, mandatory data (personal details, address, tax code) is required for the performance of the sales contract and for tax compliance. Failure to provide this data will make it impossible to complete the order.

11. Automated decision-making

We do not carry out profiling or decisions based solely on automated processing that produce legal effects for the user.

12. Data retention

We retain your personal data for the time strictly necessary for the purposes for which it was collected, as specified in section 3 of this notice, in compliance with the principles of minimisation and proportionality set out in the GDPR.

13. Minors

Our website sells alcoholic beverages and is therefore intended exclusively for persons of legal age (minimum 18 years), pursuant to Art. 689 of the Italian Penal Code and Art. 7 of Decree-Law 158/2012. We do not knowingly collect personal data from minors. Should the Controller become aware of having collected data from a minor, it will arrange for its deletion as soon as possible.

14. Contact us

For any questions about the processing of your personal data or to exercise your rights, you can contact us:

Email: info@cultivardellevolte.it

Phone: (+39) 347 2994661

Address: Via XXIV Maggio 7, 25052 Piancogno (BS), Italy


Ultima modifica: 31/03/2026