Privacy notice
Privacy and cookies
Data controller
Tenuta "La Polveriera" — Cristina Bucciarelli Farm, Via Per Motegibbio, 29, 41049, Sassuolo (MO). For any request regarding your data, you can write to LaPolverieraVini@gmail.com.
VAT no. 03154910362
What data we collect
We only collect the data you voluntarily provide by filling in the "Order a supply" form. The table below shows, for each piece of data, whether it's required and what we use it for:
| Data | Requirement | Purpose |
|---|---|---|
| Full name | Required | Customer identification |
| Required | Contact and order confirmation | |
| Phone | Optional (useful for delivery) | Quick contact to arrange the order and delivery |
| Delivery address | Required if you request shipping | Shipping the ordered wines |
| Notes | Optional | Any additional information about the order |
We do not collect data through profiling cookies or advertising tracking tools.
Why we use it and on what legal basis
We process your data for different purposes, each with its own legal basis under Art. 6 of Regulation (EU) 2016/679 (GDPR):
A. Managing your order request
We use your data to contact you, check the availability of the wines you selected, and arrange payment and delivery. Legal basis: performance of pre-contractual measures requested by you by submitting the form and, once the order is confirmed, performance of the contract (Art. 6(1)(b) GDPR).
B. Tax and accounting obligations
Data relating to completed orders is also processed to comply with invoicing, accounting and record-keeping obligations required by Italian tax law. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
C. Protection of rights
In limited cases, we may retain information relating to an order for as long as necessary to establish, exercise or defend a legal claim. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
How long we keep it
Retention periods vary depending on the type of data and the purpose of processing:
- Requests that do not result in an order: kept for as long as necessary to handle the request and, afterwards, for a limited period useful for protecting the controller's rights.
- Data and communications relating to completed orders: kept for the duration of the business relationship and for the subsequent period necessary to protect the controller's rights.
- Tax and accounting documentation: kept for the period required by applicable Italian tax law.
The exact retention periods for tax documentation will be confirmed and published after review with our accountant.
Who we share data with
Your data is never sold or shared with third parties for marketing purposes. To send emails related to your order (internal notification and customer confirmation) we use the Gmail service provided by Google Ireland Limited, which receives your email address and the content of the message (including your order details) and acts as a data processor on our behalf, under its own contractual and security terms.
Transfer of data to third countries
The use of Google/Gmail may involve processing data in the United States as well. Google adheres to the EU-US Data Privacy Framework and/or relies on the Standard Contractual Clauses approved by the European Commission as a transfer mechanism, ensuring a level of data protection recognised as adequate under European law. For more information on the safeguards adopted by Google, you can consult Google's own privacy documentation.
Cookies we use
The site only uses technical cookies, strictly necessary for it to work. They do not require consent under current regulations, but we list them here for transparency:
| Name | Purpose | Duration |
|---|---|---|
| admin_auth | Keeps you logged into the internal admin area (for the site owner's use only) | 7 days |
| ordini_recenti | Remembers orders placed from this browser, to show them on the "My orders" page | 1 year |
| consenso_cookie (localStorage) | Remembers the choice made on the cookie banner, so it isn't asked again on every visit | Until manually cleared |
We do not currently use analytics tools (e.g. Google Analytics) or advertising tools. If we introduce them in the future, we will update this page and ask for specific consent before enabling them.
Your rights
You may at any time request access to your data, correction, erasure, restriction of processing, or data portability, by writing to the email address shown at the top of this page. You also have the right to object at any time to the processing of your data, in the cases provided for by Art. 21 GDPR (for example when processing is based on the controller's legitimate interest). Finally, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe the processing violates applicable law.