PRIVACY POLICY

PRIVACY POLICY – CANTINA ONLINE

Last updated: 2 September 2026

This Privacy Policy explains how personal data relating to users of www.cantina-online.com is collected and processed in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian and European data protection legislation.

1. Data Controller

The Data Controller is:

VALENTINI HOTELS SOCIETÀ A RESPONSABILITÀ LIMITATA SEMPLIFICATA
Località Ballino 19
38075 Fiavé (TN) – Italy
VAT No.: 02581180227

Email: info@cantina-online.net
Telephone: +39 0464 713953

Website: www.cantina-online.com

2. Personal data processed

The following categories of personal data may be processed:

  • first and last name;

  • email address;

  • telephone number;

  • billing and delivery address;

  • city, postcode and country;

  • tax code and/or VAT number where required;

  • order and purchase information;

  • billing information;

  • payment and transaction status information;

  • information required for age verification;

  • customer account and login information;

  • customer service communications;

  • IP address;

  • device, browser and operating system information;

  • usage, navigation and log data;

  • cookies and other tracking technologies;

  • newsletter and marketing preferences.

3. Purposes and legal bases

Orders and contractual relationship

Personal data is processed to:

  • create and manage customer accounts;

  • receive and process orders;

  • process payments;

  • prepare and ship goods;

  • manage returns, refunds and complaints;

  • provide customer support.

The legal basis is the performance of a contract or pre-contractual measures requested by the user under Article 6(1)(b) GDPR.

Legal and accounting obligations

Certain information is processed and retained in order to comply with tax, accounting and other legal requirements.

The legal basis is Article 6(1)(c) GDPR.

Security and fraud prevention

Technical and transaction data may be processed to protect the website, customer accounts and transactions against fraud, abuse and unauthorised access.

The legal basis is the legitimate interests of the Data Controller under Article 6(1)(f) GDPR.

Newsletter and marketing communications

Where the user has given consent, the email address may be used to send newsletters, special offers, promotions and information relating to wines, grappa, spirits and other products sold by Cantina Online.

Consent may be withdrawn at any time by using the unsubscribe link included in the communication or by contacting the Data Controller.

Analytics and advertising

Where required, and subject to the user's consent, the website may use services such as Google Analytics 4, Google Tag Manager, Google Ads, Meta/Facebook and similar analytics or advertising technologies.

Non-essential tracking technologies are activated in accordance with the choices made by the user through the website's cookie consent system.

4. Payments

Credit and debit card payments are processed through Stripe.

Cantina Online does not receive or store the complete credit or debit card details used for the transaction.

Stripe processes the information required for the payment in accordance with its own privacy and security policies.

Customers may also pay by bank transfer. In this case, information necessary to identify and reconcile the payment may be processed.

5. Shipping

Personal data required for delivery may be disclosed to couriers, freight companies and logistics providers.

This may include the customer's name, delivery address, telephone number and, where necessary, email address.

Only information necessary to perform the delivery is disclosed.

6. Newsletters

Cantina Online may use specialised providers such as Brevo, or equivalent services, to manage newsletters and commercial communications.

Users may withdraw their consent at any time.

7. Cookies and tracking technologies

The website uses technical cookies necessary for its operation, including cookies used to:

  • maintain the browsing session;

  • remember products placed in the shopping cart;

  • manage customer login;

  • remember language settings and user preferences;

  • protect the security of the website.

Analytics, advertising or profiling cookies and other non-essential tracking technologies are used only in accordance with applicable law and, where required, after obtaining the user's consent.

Users can modify or withdraw their cookie preferences through the consent management system available on the website.

Further information is provided in the Cookie Policy.

8. Age verification

Cantina Online also sells alcoholic beverages.

Access to certain services and the purchase of alcoholic products are restricted to persons who have reached the minimum legal age required by applicable law.

For this purpose, the website may request information concerning the user's age or date of birth.

9. Recipients of personal data

Personal data may be disclosed, where necessary, to:

  • hosting and IT service providers;

  • e-commerce platform and technical service providers;

  • Stripe and other payment providers;

  • banking institutions;

  • couriers and logistics companies;

  • accountants, tax advisers and legal advisers;

  • email and newsletter service providers;

  • analytics and advertising providers, where the necessary consent has been obtained;

  • public, tax, administrative or judicial authorities where required by law.

Providers processing personal data on behalf of the Data Controller are appointed as Data Processors in accordance with Article 28 GDPR where required.

10. International data transfers

Some technology providers may process personal data outside the European Economic Area.

Where this occurs, transfers are carried out in compliance with the GDPR, including through adequacy decisions, Standard Contractual Clauses or other safeguards provided for by applicable law.

11. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

In particular:

  • order, invoice and accounting records may generally be retained for 10 years in accordance with legal obligations;

  • customer account information is retained until the account is deleted, without prejudice to information that must be retained by law;

  • marketing information is retained until consent is withdrawn or the user objects to the processing, and in any event only for as long as necessary;

  • cookie and tracking data is retained for the periods specified in the Cookie Policy.

12. Mandatory and optional information

Information required to process orders, payments, invoices and deliveries must be provided in order for the purchase contract to be performed.

Providing information for newsletters, advertising and profiling is optional.

Refusing marketing consent does not prevent a customer from purchasing products from Cantina Online.

13. Data subject rights

Under the conditions provided for by the GDPR, users have the right to:

  • obtain confirmation as to whether their personal data is being processed;

  • access their personal data;

  • request correction of inaccurate data;

  • request deletion;

  • request restriction of processing;

  • object to processing;

  • request data portability;

  • withdraw consent at any time.

Requests may be sent to:

info@cantina-online.net

Users also have the right to lodge a complaint with the competent data protection supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali.

14. Automated decision-making

Unless specifically stated otherwise, the Data Controller does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect users.

15. Security

The Data Controller applies appropriate technical and organisational security measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

16. Changes to this Privacy Policy

This Privacy Policy may be amended as a result of changes in legislation, technology or the services used by the website.

The latest version will be made available on www.cantina-online.com, together with the date of the latest update.