PRIVACY NOTICE PURSUANT TO ARTICLES 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
CANTINE BONACCHI, VAT no. 01069490470, as Data Controller, informs you that your data will be processed in the manner and for the purposes described below.
The Data Controller is committed to protecting the privacy and confidentiality of Personal Data in accordance with the principles of fairness, lawfulness, transparency and protection of your rights.
1) TYPES OF DATA PROCESSED
We process personal data provided by you (name, email, company name, telephone number, etc.) in connection with requests you send us spontaneously, as well as data collected automatically by the website.
- Data provided by you: personal, identifying and non-sensitive data that you provide when making requests about our products/services by email, through the contact form or by telephone
- Data we collect automatically: anonymous data collected using cookies or similar technologies: for further information, please see the Cookie Policy below.
Please note: users under the age of 16 may not provide any personal data without the consent of a parent or legal guardian.
2) PURPOSES AND LEGAL BASES OF THE PROCESSING
We will process your personal data:
A) to fulfil our contractual obligations; to respond to your requests for information; to prepare a quotation you have requested; to perform contracts for the sale of products or the provision of services; to provide you with the necessary assistance regarding the products and services purchased.
B) to carry out aggregate statistical analyses on an anonymous basis in order to improve our services;
C) for administrative purposes and to comply with legal obligations, such as accounting or tax obligations, or to respond to requests from the judicial authorities.
D) if you send us your curriculum vitae, exclusively for recruitment purposes.
3) IS THE PROVISION OF DATA MANDATORY?
Providing your data is always optional; however, failure to provide it may make it impossible to carry out certain processing activities, such as those strictly related to the performance of a contract or the provision of the services you have requested.
4) PLACE AND METHODS OF PROCESSING AND RETENTION PERIODS
Your personal data is processed by means of the operations set out in Article 4 of the Italian Privacy Code and Article 4(2) of the GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking,
communication, erasure and destruction of data.
Your personal data is stored at the Data Controller’s premises and is processed both on paper and electronically and/or by automated means, with logic strictly related to the stated purposes and, in any case, in a manner that ensures the security and confidentiality of the data. The data you send us is not stored within our website.
The Data Controller will process personal data for the time necessary to fulfil the purposes described above and, in any case, for no longer than 10 years from the end of the relationship for the Purposes under point C, and for no longer than 38 months from the collection of the data for the Purposes under point B.
5) ACCESS TO DATA
Your data may be made accessible, for the purposes set out in point 2:
- to employees and collaborators of the Data Controller, in their capacity as persons authorised to process data and/or internal data processors and/or system administrators;
- to third-party companies or other parties (website providers, cloud providers, e-payment service providers, suppliers, hardware and software support technicians, shipping agents and carriers, banks, professional firms, etc.) that carry out outsourced activities on behalf of the Data Controller, in their capacity as data processors.
6) DATA TRANSFER
Your data will not be disclosed, sold or exchanged with parties other than the Data Controller, the data processors and the authorised persons appointed, without your express and explicit consent.
7) YOUR RIGHTS
You have the right to know which of your personal data is being processed. In particular, you have the right of access, rectification and erasure, as well as the right to data portability, the right to restriction of processing and the right to object to processing, where the relevant conditions are met.
Below is a brief description of the rights you are granted with regard to the processing of your personal data.
- The right of access allows you to obtain confirmation as to whether or not your personal data is being processed by the Data Controller and, where that is the case, to access such data and the information relating to it;
- The right to rectification allows you to obtain the correction of inaccurate personal data concerning you without undue delay and, taking into account the purposes of the processing, to have incomplete personal data completed;
- The right to erasure allows you to obtain the deletion of data concerning you without undue delay (e.g. when your personal data is no longer necessary in relation to the purposes for which it was collected), subject to the exceptions provided for by applicable law (e.g. when the retention of your data is necessary to comply with legal obligations applicable to the data controller). Erasure will be carried out within the technical time required;
- The right to data portability allows you, in certain circumstances provided for by applicable law, to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format. You may transmit this data to another data controller, provided that this right can be recognised in the light of applicable law and without prejudice to the rights and freedoms of others;
- The right to restriction of processing allows you, in certain circumstances provided for by applicable law, to obtain the restriction of the processing of your personal data. In such cases, the Data Controller may continue to process your data only in certain cases, for example to exercise the right of defence or to protect the rights of another natural or legal person;
- The right to object to processing allows you, in certain circumstances provided for by applicable law, to object to the processing of your personal data unless there are compelling legitimate grounds, rights or freedoms that allow the Data Controller to continue the processing;
For further information on the processing of your personal data or to exercise your rights, please contact us.
8) CHANGES TO THIS PRIVACY NOTICE
This Privacy Notice may be subject to change. We therefore recommend that you check it regularly and refer to the most up-to-date version.
Last updated: July 2026