Privacy policy

This Privacy Policy describes how and when Castello di Velona collects, uses and shares your personal information when you use our Services. If you have any questions or comments about this Privacy Policy, please contact us at [email protected]

Castello di Velona Vini is a wine shop (hereinafter “Castello di Velona”, “we”, “or”, “us”), providing a platform that enables registered users (hereinafter “User”) to buy wine (hereinafter the “Services”).

Our address is Loc. Monte Amiata Scalo 14/21, 53024, Montalcino, Siena, Italy, and the platform is owned by Podere Castello 1997 srl.

This privacy policy applies to all users of our websites, www.castellodivelonavini.it, (hereinafter “Web”).

The privacy policy may be amended from time to time by us with fair notice to you before the new privacy policy comes into force.

Please note, that you may use our Platform without signing up, in which case we will only collect data based on your consent to our cookie policy that you may find in ‘Categories of personal data’.

Data controller

Podere Castello 1997 srl is the Data controller of processing personal data concerning Users.

We will process your personal data in compliance with GDPR. This privacy policy covers our processing of personal data processed when you register and access the Platform and thereby use our services.

Purpose and legal basis

We process your personal data in order for us to manage our user relation with you, including managing your account and providing you with access to use our website, we collect and use information about you. The processing of your personal data is performed on the legal basis of fulfillment of our contractual obligations when delivering the website to you.

We process your personal data to facilitate your purchase of wine via the Platform on the legal basis of fulfillment of our contractual obligations to facilitate your purchase of wine.

We also process your personal data to deliver and improve the website and manage our business, improve our offerings, develop new features and updates, develop personalization services, and other types of service, including but not limited to developing and implement algorithms and machine learning. This processing is on the basis of our legitimate interest to improve our platform and services.

We also use your personal data to display to you personalized marketing messages on our Platform, to inform you about new features and updates on the Platform, and let you know about our policies and Terms and Conditions.

The processing of personal data is performed based on your freely given consent to receive marketing by e-mail and push notifications provided when signing up to the Platform, which you may withdraw at any time under your Profile Settings or by clicking the “Unsubscribe” button in any marketing e-mail.

If you withdraw your consent to receive personalized marketing messages, will we still display marketing messages to you on the Platform, but they will be of a generic nature and therefore less relevant to you.

Categories of personal data

We mainly collect the personal data that you submit to us, including your contact information, reviews, and purchase history. But we also collect information in several ways from different parts of the website, as further detailed below, including but not limited to the way you use the website and if applied tracking information about your whereabouts on the Internet and technical information about your devices and location.

When signing up:

o When registering via our online website, you provide us with certain information, including email, password, username, name, country of origin, and preferred language.

When using the website

o We register the information you provide when using the website

o The Users are encouraged not to reveal personal data concerning the user itself and other especially special categories of data (such as information about a person’s health, addictions, or allergies)

o We use cookies to enable the Platform to work and to provide you with a personalized experience. For further information on our use of Cookies, please see ‘Cookies’.

Cookies

A cookie is a small text file stored on your computer, tablet, mobile or similar, for the purpose of recognizing your device if you visit our website again (such as login, language, font size, and other settings). This makes it possible to customize the Website to your browser. A cookie may contain text, numbers or e.g. a date, but generally there are no personal data in a cookie. It is not a program and thus cannot contain a virus.

When you visit our website, we collect information about you that allows us to identify your device. The information is used to customize and improve our content on the website and to get statistical information (not personal information), so we can provide you with the best possible experience. If you choose not to accept cookies at all you may not be able to use all the functions of our website.

Besides our own cookies, we use cookies from third parties, e.g. from suppliers of advertisements and analytic tools and from suppliers of social media. These third-party cookies are used for marketing purposes and for improving the functionality of the website.

Transfer of data to third countries

Castello di Velona may use suppliers located outside the EU/EEA to process data on behalf of Castello di Velona according to standard data protection clauses adopted by the European Commission and to Castello di Velona’s performance of the contract with you.

Sharing of data

Personal data about our users is an essential part of our business. We only share your personal data as described below.

We may share personal data regarding you if we are obligated to do so by law.

Your rights as a user

As provided by the General Data Protection Regulation, you have the right to:

o Access personal data regarding you. You can always access your account to review the personal data we have collected about you. You may delete and amend the data collected. You also have the right to obtain a copy of the personal data free of charge. However, we may charge a fee corresponding to administrative costs if further copies of the information are requested, or if the request is unfounded or excessive.

o Ask for rectification of incorrect or inaccurate data concerning you, or to have incomplete personal data completed. You can use your access to your account to update your personal data.

o Ask for the erasure of personal data regarding you (under certain circumstances).

o Ask for the restriction of the processing of your data (under certain circumstances).

o Object to the processing of your data for marketing purposes by withdrawing your personal consent.

o You can at any time withdraw your consent by deleting your profile.

When we receive a request to access, rectify, erase or port data, we may ask you for additional information in order to confirm your identity and ensure data security. You can send a request at mailto:[email protected]

You have the right to complain regarding the processing of personal data concerning you to the supervisory authority.

Data retention and account deletion

We store your personal data for as long as your account is active.

We may also store some of your personal data to comply with our legal obligations.

You may add or update certain information to your account. When you update information, however, we often maintain a copy of the unrevised information in systems back-ups for a period of time until our backup is updated with the latest version.

You may request the deactivation of your account by following the instructions on the website. If you deactivate your account, we do not delete your information but hold it for you until such time as you either activate your account again or delete it.

When you delete your account, we delete the data attached to your account including your username.

Please note that some information may remain in our records after your account has been deleted and that we may only be able to delete this information later when updating our backups.

Security

User accounts including personal data are protected by a password for your privacy and security. You should ensure no unauthorized access to your account and personal data by choosing and protecting your password appropriately, and by signing off when finishing accessing your account. When signing in via a third-party application provider your password is solely managed by a such third party.

We do our best to ensure that user accounts are kept private. However, various instances such as unauthorized entry/use, hardware or software failure, and other factors, may compromise the security of personal data.

This Privacy Policy only governs information collected on the Platform and through our cookies.

Children’s privacy

The Platform is intended for use by adults of legal drinking age in the jurisdiction in which you reside. If we receive notice or reasonably believe that someone under the legal drinking age has provided us with personal information, we will promptly delete the account and all personal information that has been provided to us.

Changes to Privacy Policy

This Privacy Policy may be amended from time to time. You will be notified before we make changes to this policy and you will be given the opportunity to review this revised policy before you choose to continue using the Platform.

We will use only use personal data in accordance with the privacy policy under which the personal data was collected unless we specifically ask for your consent to process (reuse) your personal data for a new purpose.

Questions or concerns

If you have any feedback on this Privacy Policy, you can contact us:

o By email [email protected] with any questions and suggestions.

We will try our best to reply to your questions and resolve your concerns.