PRIVACY POLICY – ZUFFA ORGANIC WINERY

In compliance with the obligations arising from national legislation (Privacy Code) and EU legislation (European General Data Protection Regulation No. 679/2016) regarding the protection of personal data, Azienda Vitivinicola Biologica Zuffa respects and protects the privacy of its visitors and users.
This privacy policy applies to both the collection of information from the website and other channels.

1 – LEGAL BASIS OF PROCESSING

By using or consulting this website, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore consent to the collection and processing of data is optional. Users may deny consent and may revoke consent already given at any time. However, denying consent may make it impossible to provide certain services and the browsing experience on the site would be compromised.
The data of registered customers are processed based on the ongoing relationships with Azienda Vitivinicola Biologica Zuffa, from the moment the contract was concluded.

2 – PURPOSE OF PROCESSING

Processing of personal data means: recording, storage, organization, consultation, selection, extraction, comparison, processing, use, modification, interconnection, blocking, communication, erasure and destruction, transfer or dissemination, or the combination of two or more of these operations.
The processing of data collected by the site, in addition to the purposes related, instrumental, and necessary to the provision of the service, is aimed at the following purposes:

2.1 – STATISTICS

Collection of data and information in exclusively aggregated and anonymous form in order to verify the correct functioning of the site and to improve the online store and the platform.
None of this information is related to the individual User of the site, and does not allow identification in any way.

2.2 – SECURITY

Data and information are collected to protect the security of the site and its users (spam filters, firewalls, virus detection) and to prevent or detect fraud or abuse of the website.
The data is recorded automatically and may also include personal data (IP address), which may be used, in accordance with applicable laws, to block attempts to damage the site or other users, or otherwise prevent harmful or criminal activities. This data is never used to identify or profile the User and is deleted periodically.

2.3 – MARKETING / ADVERTISING

Data and information are collected, both general and specific, on the User’s behavior and preferences; to send informational and advertising materials, including those of third parties; to send commercial communications, including interactive ones; Carry out direct sales or placement of products or services; conduct statistical studies and research on sales, customers, and other information, and possibly communicate this information to third parties; disclose the collected and processed data to third parties for commercial purposes, including sales or attempted sales, or for all other legitimate commercial and/or statistical purposes; and publish reviews of our services.

This data, including IP address and other identifying data, is used to allow third parties to send ads relevant to the User’s interests to the User’s browser through this site and to measure the effectiveness of advertising messages. These ads may also be displayed on other sites in the advertising network (remarketing or retargeting).

The ads published on the site are provided under agreements with third-party companies, which use data collected directly by them; our site acts merely as an intermediary for this collection. This data does not include your name, address, email address, or telephone number, and is used to provide personalized advertisements for products and services. For more information on these services, please read the information provided by third-party companies, which also provides options for disabling the collection of information by these companies.

More information is available on the following web pages:
– Google advertising network: https://www.google.com/policies/technologies/ads/
– Facebook advertising network: https://www.facebook.com/about/privacy/

2.4 – SHOPPING/SERVICE PROVISION

Data collection to manage orders, provide products and services, process payments, communicate with users about orders, products, services, and promotional offers, and maintain records and, in general, manage user accounts, display content such as wish lists and customer reviews, and recommend products and services that may be of interest to users.

2.5 – ANCILLARY ACTIVITIES

Disclose data to third parties who perform functions necessary or instrumental to the operation of the service, and to allow third parties to perform technical, logistical, and other activities on our behalf.
This site uses suppliers to perform certain activities, such as fulfilling orders, delivering packages, sending postal mail, analyzing data, providing marketing assistance, processing credit card payments, and providing customer service.
Suppliers have access only to the personal data necessary to perform their tasks and undertake not to use the data for other purposes. They are required to process personal data in accordance with applicable laws.

This category of data is retained only for the period necessary to provide the service.

3 – DATA COLLECTED

This site collects user data in two ways:

3.1 – DATA COLLECTED AUTOMATEDLY

During user navigation, the following information may be collected and stored in the site’s log files:

• Internet Protocol (IP) address;
• Browser type;
• Parameters of the device used to connect to the site;
• Name of the Internet Service Provider (ISP);
• Date and time of visit;
• Web page from which the visitor came (referral) and exit;
• Possibly, the number of clicks.

This data is used to analyze user trends and collect data in aggregate form, administer and ensure the security of the site, and cannot be traced back to the user’s identity in any way.

3.2 – DATA PROVIDED VOLUNTARILY

The site may collect other data when users voluntarily use services, such as commenting, communication (chat, contact forms, and email), and purchasing (shopping cart):

• First name and surname;
• Date of birth;
• Email address;
• Residence address;
• VAT number and/or tax code;
• Credit card number and/or bank account number and/or IBAN;
• Company and registered office;
• Image (avatar);
• Social media profiles;
• Geographic location.

This data is provided voluntarily by the User when requesting the service or entering a comment and will be used exclusively to provide the requested service and processed only for the time necessary to provide the service.
The email address is also used to send promotional material to existing customers, therefore in the context of an existing business relationship. The customer can always opt out of receiving such communications. For users who are not yet customers, the sending of promotional material is subject to consent, which may be revoked at a later date.
Tax information is required to use paid services and for billing purposes.
The data collected by the site is not disclosed to third parties, unless there is a legitimate request from a judicial authority and only in the cases provided by law. However, the data may be disclosed to third parties if necessary to provide a specific service requested by the User, for tax purposes, or to perform security checks or site optimization.

4 – DATA RETENTION PERIOD

The data collected is processed for the time necessary for the purposes for which it was collected, and in any case no longer than the time limits prescribed by law.
The data required for tax purposes is retained until the assessments relating to the corresponding tax period are finalized, therefore for at least 10 years and longer if the relevant year has not yet expired for tax purposes.
Upon expiration, the data will be deleted or anonymized, unless there are additional purposes for retaining it (e.g., warranty obligations, tax obligations).

5 – TRANSFER OF COLLECTED DATA TO THIRD PARTIES AND NON-EU COUNTRIES

Users’/customers’ personal data is an essential component of our work, and we do not transfer it to third parties. However, in carrying out its activities and providing the services requested by users, this site may need to transfer certain data to third parties who perform specific tasks that are instrumental and related to those of the site, including: order fulfillment, mail delivery, data analysis, marketing assistance, credit card payments, etc. Suppliers have access only to the data necessary to perform their specific tasks and are required to process it in accordance with this Policy.
In the event of a transfer of a business or production unit, customers’ personal data will be included in the transferred company assets, but