1. Data Controller
The Data Controller for personal data collected through the website italwine.it is:
SAVELIUM S.R.L.
Registered office: Via Monte Grappa 9, 20824 Lazzate (MB) — Italy
VAT: IT14474450963 | REA: MB-2787452
Email: info@savelium.it
WhatsApp: +39 3888 011 677
For any enquiry relating to the processing of personal data, the Controller may be contacted at the email address above, which also serves as the contact point for the Data Protection Officer (DPO).
2. Data Collected and Methods of Collection
The website italwine.it collects only the personal data that users voluntarily provide by completing the contact form in the "Contact" section of the main page. The data collected is:
- Full name — to identify the person making the enquiry
- Winery name — to contextualise the request
- Contact details (WhatsApp number or email address) — to respond to the request
- Optional message — to better understand the enquirer's needs
The website does not automatically collect personal data through profiling cookies, third-party analytics tools or tracking pixels. Google Analytics, Facebook Pixel and similar tools are not installed.
Technical navigation data (IP address, browser type, pages visited) may be temporarily recorded by the hosting servers (Aruba S.p.A.) for IT security purposes and are processed in accordance with Aruba's own privacy policy.
3. Purposes and Legal Basis of Processing
Personal data provided via the contact form is processed for the following purpose:
- Responding to contact requests and free audit enquiries submitted by the user through the website form.
The legal basis for processing is the data subject's consent pursuant to Article 6(1)(a) of EU Regulation 2016/679 (GDPR), expressed by voluntarily completing and submitting the contact form.
Providing data is optional, but necessary to receive a response. Failure to provide the mandatory fields (name, winery, contact details) will prevent the request from being fulfilled.
4. Retention Period
Personal data collected via the contact form is retained for the period strictly necessary to handle the user's request and, thereafter, for a maximum period of 24 months from the date of receipt, unless the data subject withdraws consent.
Upon expiry of that period, data is permanently deleted, unless longer statutory retention obligations apply.
The data subject may request deletion of their data at any time by contacting the Controller at info@savelium.it.
5. Disclosure and Transfer to Third Parties
Personal data collected is not sold, transferred or disclosed to third parties for commercial or marketing purposes.
Data may be processed by third-party data processors acting pursuant to Article 28 GDPR, exclusively for the provision of technical services necessary for the operation of the site (e.g. hosting provider Aruba S.p.A., email services). Such parties are contractually bound to process data in compliance with GDPR.
Data is not transferred outside the European Economic Area (EEA).
6. Cookie Policy
The website italwine.it uses exclusively strictly necessary technical cookies for the correct functioning of the site. In particular:
- Cookie banner preference (
cookie_consent): a value stored in localStorage to record the user's choice regarding the cookie banner. Contains no personal data. Stored only if the user clicks "Accept"; in the event of refusal, nothing is stored.
For the complete and detailed cookie information notice, please consult the dedicated Cookie Policy.
7. Data Subjects' Rights
Pursuant to Articles 15–22 of EU Regulation 2016/679, the data subject has the right to:
- Access (Art. 15): obtain confirmation as to whether personal data concerning them is being processed and, if so, obtain access to that data.
- Rectification (Art. 16): obtain rectification of inaccurate personal data or completion of incomplete data.
- Erasure ("right to be forgotten") (Art. 17): obtain erasure of personal data.
- Restriction of processing (Art. 18): obtain restriction of processing in the cases provided for by law.
- Data portability (Art. 20): receive personal data in a structured, commonly used and machine-readable format.
- Objection (Art. 21): object at any time to the processing of personal data.
- Withdrawal of consent (Art. 7): withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise these rights, the data subject may contact the Controller at info@savelium.it. The Controller will respond within 30 days of receipt of the request.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — garanteprivacy.it), Piazza Venezia 11, 00187 Rome, Italy.
8. Data Security
The Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, pursuant to Article 32 GDPR. The site is served via the HTTPS protocol with an SSL/TLS certificate.
Data provided via the contact form is processed exclusively by authorised personnel of SAVELIUM S.R.L.
9. Amendments to this Privacy Policy
The Controller reserves the right to amend this privacy notice at any time, notifying users by updating this page. Users are invited to consult this page regularly.