Privacy Disclaimer | Cantinauta

Privacy Disclaimer

In compliance with the provisions of art. 13 and 14 Reg. (EU) 679/2016 (in short "GDPR"), of art. 13 D.Lgs. N. 196 of 30 June 2003 (in short "Code regarding the protection of personal data"), Balatoi S.r.l. Innovativa describes, in this page, the methods of management and processing of personal data of the subjects who use the site www.cantinauta.it (as well as www.cantinauta.eu and www.cantinauta.com), later "Interested".
By reading this information, the interested party gives his express consent to the processing and communication of his personal data for the purposes and with the methods indicated below. This consent may be revoked by the interested party at any time, with immediate effect.
The provision of data is optional. There are some data, expressly indicated, which failure to provide, however, will make it impossible to provide the requested service.

What data are processed
Personal data provided spontaneously
These are the data provided by the interested party when registering to the site or the newsletter or sending e-mails to the addresses contained on the website or those provided by telephone by calling the number indicated on the site or through the contact forms of the site.

Personal data
These are the data provided by the interested party at the time of purchase.
The provision of personal data and contact data is mandatory for the provision of the service. All other requested data are optional and the conferment is left to the spontaneous will of the interested party.

Data collected automatically
This is data collected automatically when accessing the site.
By way of example, these data include the IP address used to access the Internet, information on computers and connection such as browser type and version, the operating system used, the domain name and the addresses of websites from which the access is made, information on the pages visited by users within the site, the access time, the stay on a single page and the internal route analysis.

Cookies
By accessing the site the interested party consents to the use of cookies by the owner.
For more information on cookies, how they are used and to change their settings, refer to the Cookies Statement.

Treatment methods
Personal data provided by the interested party will be stored on paper at the owner's headquarters or, in any case, electronically on encrypted hard disks or on special servers located in the European Union.
Balatoi S.r.l. Innovativa guarantees that the collection and processing of personal data of interested parties will be based on principles of correctness, lawfulness, transparency and protection of confidentiality and undertakes to adopt appropriate security measures to prevent any illicit or incorrect use of the data provided and to avoid unauthorized access to such data.

Purpose of the treatment
The personal data of the interested party are collected and processed by Balatoi S.r.l. Innovativa for the following purposes:

Purpose of the treatment Legal basis of the treatment
Provide information aimed at providing the service.
Deliver the service.
Issue accounting documents.
Inform the wineries of the reservation and any additional requests.
Manage payments and reservations.
Allow the organization of the visit.
The treatments are carried out to fulfill pre-contractual and contractual agreements in force (Article 6 paragraph 1 letter b GDPR).
Provide informative, commercial and/or promotional information through, for example, sending newsletters. The treatments are carried out with the explicit agreement to the treatment of the interested party (Article 6 paragraph 1 letter a GDPR).
Customize navigation and perform statistical analysis and processing of information related to browsing experiences.
Prevent fraud and abuse on the website.
Purposes of management and work organization of the Owner.
Purposes of accounting and tax management of the Owner.
The treatments are carried out in order to protect the legitimate interests of the Owner (Article 6 paragraph 1 letter f GDPR).
Fulfill the obligations of the Law. The treatments are carried out in order to fulfill the obligations established by law or by the Authority's orders (Article 6 paragraph 1 letter c GDPR).

Duration of treatment
The data are processed for the time strictly necessary to achieve the purposes for which they were collected.

Normally, the data are deleted at the end of the expiry of the statutory time limits following the provision of the requested service or the revocation of consent, unless a longer retention is required to comply with legal obligations, by order of an authority or protection of the legitimate interest of the Owner.
The registration data are kept until the interested party requests the unsubscription from the site, unless required by law.

Communication to third parties

The data may be communicated to the subjects involved in the organization of the website and the newsletter and to third party companies that, if required by the law, may be appointed as Data Processors.
The list of Data Processors may be requested and will be provided by the Data Controller in compliance with current legislation.
The data are transferred exclusively to subjects located within the EU or in the US but endowed with Privacy Shield certification.

In particular, the website www.cantinauta.it:

• Uses an external payment management service. All payments are processed by the Managers, that are "Paypal INC" and "Gest Pay" of Banca Sella, which must be considered Data Controller of the data provided by the Interested Party. Balatoi S.r.l. Innovativa has no access of payment data and can only have news of the balance. For completeness, please refer to the privacy policy of the two managers: https://www.paypal.com/webapps/mpp/ua/privacy-prev - https://www.gestpay.it/en/privacy-policy/

• Communicates the data of the interested parties to the Wineries where the interested parties have made the booking. This communication is made for the purpose of being able to provide the service. From the moment of communication, the Winery will be considered in all respects Data Controller and a direct relationship will be established between the Interested party and the Winery, also with regard to the management of personal data.

• Uses the following plugins to improve the browsing experience and manage user requests, with subsequent communication of data to the relevant managers:

Mail Chimp
It is a service that allows you to manage the newsletters also through registration forms on the website.
For more details, see the privacy policy of Mail Chimp at the following link: https://mailchimp.com/legal/privacy/

Google Analytics
This is a web analytics service provided by Google. Google uses anonymised IPs and therefore does not use the information collected to identify users.
For more details, please refer to the Google privacy policy at the following link https://policies.google.com/privacy?hl=en

SendGrid
It is a cloud-based e-mail service that takes care of sending automatic e-mails.
For more details please refer to the SendGrid privacy policy https://sendgrid.com/policies/privacy/

Addthis
It is a plugin that allows you to set bookmarks and share contents of internet pages through social networks.
For more details, refer to Addthis privacy policy http://www.addthis.com/privacy

Social plugins
The website also integrates some plugins related to the main social networks. The shared data are managed directly by the social platforms, for which reference is made in full to the respective privacy policies.
Facebook: https://www.facebook.com/policy.php

Interested Rights
The Interested parties, according to the provisions of articles from 15 to 22 and from the art. 13 of EU Reg. 679/201, are entitled:
• to have access to their data;
• to obtain the cancellation or transformation into anonymous form of their data;
• to exercise their right to revoke consent;
• also oppose at any time the treatment where the treatment is not based on consent;
• to request the limitation of processing, where exist specific conditions;
• to obtain the portability of the processed data where the same are treated with automated tools.

Interested parties may also request certification that, where possible and where there is no use of means that are manifestly disproportionate to the protected right, changes/deletions of their data are brought to the attention of those to whom the data have been communicated or disseminated.

In case of violation it is possible to make a complaint with the supervisory authority.

To exercise their rights, the Interested parties can directly contact the Owner who will process the request as soon as possible and, in any case, within a period of one month.

Data controller
The data controller is Balatoi S.r.l. Innovativa, VAT number IT09488700965, located in via Walter Tobagi 17, Milan - 20143 Italy.
The interested party may also contact the Owner by e-mail at the address info@balatoi.it

Communications via e-mail
The user can request to subscribe to the newsletter by entering the e-mail address and the name and surname. The registration must then be confirmed by e-mail. If you do not wish to receive more communications, you can unsubscribe by following the instructions at the bottom of each e-mail.