Data Controller of Personal Data – “Controller”: Starless Wine srls, Via Volterrana Nord 76i, Montespertoli (FI) – 50025, VAT No. 07420200482 – starlesswinesrls@gmail.com

Purposes of the use of Personal Data: Personal Data communicated and acquired through this application (this website) will be used by the “Controller,” including with the aid of electronic means, exclusively for the performance of the following activities:

    • Management of messages received and sending requested communications, quotes, and information.

The provision of the requested Personal Data is optional: however, failure to provide such data and consent to its processing will make it impossible for the “Controller” to provide the requested services. In accordance with EU Regulation 2016/679, known as GDPR (General Data Protection Regulation), Legislative Decree No. 196/2003, and Legislative Decree No. 101/2018, as well as the Italian Data Protection Authority (Garante Privacy) Provision of June 10, 2021, No. 231, the Controller guarantees maximum confidentiality and storage with the highest security and protection of the data provided at its headquarters and in computerized structures with restricted and controlled access.

Methods of Processing

The Controller guarantees to the data subject that the Personal Data provided will be used solely and exclusively for what is indicated where specified and requested, and that it will not be published, transferred to third countries outside the EU, or sold to any other person or company. Furthermore, the data may be rectified or deleted by writing to the contact email address. Please note that for the purposes indicated above, your data may be communicated to:

  • Competent bodies following inspections or audits;

  • All natural and legal persons (administrative or tax consultancy firms) in cases where communication is necessary for administrative purposes;

  • Our collaborators and employees specifically authorized and within the scope of their respective duties.

Retention Period

Personal Data is processed and stored for the time required by the purposes for which it was collected and, in any case, only for the time strictly necessary to complete the action requested by the user, except in cases where such data must be stored for legal or tax purposes, or as otherwise required by law. It is always possible to request the Controller to clarify the specific legal basis of each processing activity and, in particular, to specify whether the processing is based on law, provided for by a contract, or necessary to conclude a contract. When processing is based on the User’s consent, the Controller may store Personal Data longer until such consent is withdrawn. Furthermore, the Controller may be obliged to store Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, upon the expiration of this term, the rights to access, erasure, rectification, and the right to data portability can no longer be exercised.

User Rights

Users may exercise certain rights regarding the Data processed by the Controller. In particular, the User has the right to:

  • Withdraw consent at any time: The User can withdraw consent to the processing of their Personal Data previously expressed.

  • Object to the processing of their Data: The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are provided in the section below.

  • Access their Data: The User has the right to obtain information on the Data processed by the Controller, on certain aspects of the processing, and to receive a copy of the processed Data.

  • Verify and request rectification: The User can verify the accuracy of their Data and request it to be updated or corrected.

  • Obtain restriction of processing: When certain conditions are met, the User may request the restriction of the processing of their Data. In this case, the Controller will not process the Data for any purpose other than its storage.

  • Obtain the erasure or removal of their Personal Data: When certain conditions are met, the User may request the erasure of their Data by the Controller.

  • Receive their Data or have it transferred to another controller: The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another controller. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party, or on contractual measures connected thereto.

  • Lodge a complaint: The User may lodge a complaint with the competent personal data protection supervisory authority or take legal action.

How to exercise rights

To exercise their rights, the data subject may direct a request to the contact details of the Controller indicated in this document. Requests are filed free of charge and processed by the Controller as quickly as possible, and in any case within one month.

Request for consent to processing

Regarding what is described in this document, you are expressly requested to consent to the processing of Personal Data in a confidential form as specified and where requested (contact forms, information requests, newsletter subscription).

Legal references

This Privacy Policy is drafted on the basis of multiple legislative systems, including Art. 13 and 14 of Regulation (EU) 2016/679, Legislative Decree No. 196/2003, and Legislative Decree No. 101/2018, as well as the Italian Data Protection Authority (Garante Privacy) Provision of June 10, 2021, No. 231. Unless otherwise specified, this privacy policy concerns exclusively this website.