Privacy statement

Privacy Policy
We wish to inform you that Legislative Decree no. 196 of June 30 2003 ("Codice in materia di protezione dei dati personali,” or Personal Data Protection Code) requires the protection of persons and other parties with respect to the processing of personal data. In accord with that regulation, all utilisation must be carried out with full respect paid to accuracy, legality, and transparency, and to the protection of your privacy and of your rights.

In accord therefore with Section 13 of said law (Leg. Decree no.196/2003), we hereby inform you that:
Data utilisation will be carried out with procedures that ensure the privacy of the concerned parties. Such processing comprises data collection, recording, organisation, conservation, analysis, modification, selection, extraction, comparison, usage, interconnection, blocking, communication, transmission, cancellation, and destruction, including the combination of two or more of the listed procedures.
The utilisation of such data has as its scope: the collection of data and information in general and in particular concerning the customs and preferences of the participant; the transmission of commercial information and offers, including those of third parties; the transmission of newsletters; the transmission of educational and promotional materials; the communication of commercial announcements, including interactive types; transactions of direct sales or delivery of products or services; execution of studies or statistical research concerning sales, customers, and similar subjects, and possibly the communication of results to third parties; transmittal to third parties of collected and analysed data for business purposes including sales or sales attempts, or finally for all legal purposes of commercial and/or statistical nature.
Supply of such data is obligatory, and any refusal to supply such data shall lead to non-activation of service.
Our employees and/or our staff, in their roles as managers or as specialists, may acquire familiarity with such data. The information in question will not be communicated to other persons nor will it be transmitted further.
The processing owner is:
Costa dei Vini Srl based in Donoratico (Livorno) P.IVA 01639100492, in the person of the director of such processing.
You may at any time contact said director to exercise your rights, in accord with the stipulations of Sect. 7 of Leg. Decree196/2003, the text of which we reproduce below for your information:
Sect. 7 of Leg. Decree no.196/2003, “Right to Access Personal Data and Other Rights”:
1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3. A data subject shall have the right to obtain
a) updating, rectification or, where interested therein, integration of the data;
b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and
b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. A data subject shall have the right to object, in whole or in part,
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.