What is this document? Through this privacy policy drafted pursuant to Art. 13 European Reg. no. 679/2016 (“General Data Protection Regulation” or “GDPR“) and in compliance with the principles contained therein, ADI Group S.r.l.s. intends to inform each user (“the User“) of the processing of personal data collected through the site www.anonimadistilleriaitaliana.it 

OWNER AND CONTACT DETAILS

ADI Group S.r.l.s. (hereinafter “Holder“, for the purposes of Art. 4(7) GDPR), with registered office in Via Lungo Sisto, 44 – 04019 Terracina (LT).

Contact address: info@anonimadistilleriaitaliana.it

PURPOSE OF PROCESSING, LEGAL BASIS, PERSONAL DATA PROCESSED AND RETENTION PERIOD

The Controller acquires personal data for the following purposes, as specified below, where the legal basis and duration of data processing is also highlighted.

Purpose

ACCOUNT CREATION AND MANAGEMENT

Personal Data – Basic Information (First and Last Name); Contact Details (email address)

Legal basis – Execution of pre-contractual measures [Art. 6(1)(b) GDPR]

Retention period – Until the account is deleted and in any case not later than 12 months from the date of last contact.

PRODUCT PURCHASE AND SHIPMENT MANAGEMENT

Personal Data – Personal Biographical Information (First Name and Last Name), Contact Details (email address, phone number), Shipping Address (address and house number, ZIP, City, Province, State).

Legal basis – Execution of a contract [Art. 6, 1(b) GDPR]

Retention period – Until the account is deleted and in any case not later than 12 months from the date of last contact.

CONTAct

Personal Data – Basic Information (First and Last Name), Contact Details (email address, phone number), Purchase History.

Legal basis – Execution of pre-contractual and/or contractual measures [Art. 6, 1(b) GDPR].

Period of retention – Period necessary for response.

NEWSLETTER

Personal Data – Contact Details (email address).

Legal basis – Consent [Art. 6, 1(a) GDPR]

Period of retention – Until withdrawal of consent.

PROFILING AIMED AT ANALYZING YOUR CONSUMPTION HABITS TO TARGET COMMERCIAL PROPOSALS OF INTEREST

Personal Data – Basic Information (First and Last Name), Contact Details (email address).

Legal basis – Consent [Art. 6, 1(a) GDPR]

Period of retention – Until consent is withdrawn.

FULFILLMENT OF LEGAL OBLIGATIONS, INCLUDING TAX OBLIGATIONS

Personal Data – Basic Information (First and Last Name), Contact Details (email address).

Legal basis – Legal obligation [Art. 6, 1(c) GDPR]

Period of storage – According to applicable regulations.

WEBSITE IMPROVEMENT BY ANALYZING HOW VISITORS OR USERS NAVIGATE AND/OR USE THE WEBSITE

Personal Data – IP Address.

Legal Basis – Legitimate Interest [Art. 6, 1(f) GDPR] 

Retention period – Not applicable (aggregated or anonymized data)

PREVENTION OF FRAUDULENT ACTIVITIES AND EXERCISING THE HOLDER’S RIGHTS IN COURT

Personal Data – Biographical Information (First and Last Name), Contact Details (email address, phone).

Legal Basis – Legitimate Interest [Art. 6, 1(f) GDPR] 

Preservation period – 10 years.

FULFILLMENT OF LEGAL OBLIGATIONS, INCLUDING TAX OBLIGATIONS

Personal Data – Basic Information (First and Last Name), Contact Details (email address, phone).

Legal basis – Legal obligation [Art. 6, 1(c) GDPR]

Period of storage – According to applicable regulations.

In the event that the User prefers not to communicate data that is mandatory and/or necessary for the fulfillment of certain purposes, the Owner reserves the right not to provide the service.

L’Utente può chiedere chiarimenti sulla base giuridica di ciascun trattamento in qualunque momento.

MODE OF TREATMENT

The processing is carried out using automated and/or manual computer and telematic tools designed to guarantee the appropriate security measures to prevent access, disclosure, loss, incorrect, illegal or unauthorized use of the data.

DATA ACCESS

Personal Data may be shared with the following external parties:

• Internet service providers and platforms used by the Owner as organization tools, communication and/or promotion channels (e.g. WooCommerce for the payment management service whose privacy policy is available at the following link;
• Freight forwarders, carriers and couriers.

These individuals act as autonomous data controllers or data processors. In the latter case, the Controller has entered into a specific agreement pursuant to Article 28 GDPR (Appointment as Data Processor).  The list of data processors is available by sending a request to the Controller at info@anonimadistilleriaitaliana.it. 

Personal data will also be processed by the Owner’s internal staff specifically authorized under Article 29 of the GDPR. 

PLACE OF DATA PROCESSING

Personal data are processed at the Controller’s office, as well as on the servers that host the website www.anonimadistilleriaitaliana.it.

Personal data is stored in servers located within the EU and will not be transferred outside the EU under any circumstances. The Data Controller ensures that when using cloud providers established outside the EEA, the processing of personal data by these recipients is carried out in accordance with applicable law. Transfers are made by means of appropriate safeguards, such as adequacy decisions, standard contractual clauses approved by the European Commission, or other safeguards required by the GDPR.

RIGHTS OF THE DATA SUBJECT

The User may exercise all rights under Articles 15-21 of the GDPR at any time and without unjustified restriction by contacting the Controller at email info@anonimadistilleriaitaliana.it. Requests are filed free of charge and processed by Holder within 30 days.

In particular, the User may:

• Obtain confirmation that treatment is in progress (Art.15);
• Obtain rectification of inaccurate or incomplete data (Art. 16);
• Obtain deletion of data without undue delay (Art. 17);
• Restrict processing to only part of personal data (Art. 18);
• Receive copies of personal data held by the owner in a commonly used, machine-readable format; obtain unimpeded transfer to another Owner (Art. 20);
• Object at any time to the processing of personal data. (Art. 21);
• With regard to the purposes of processing that are based on consent, revoke it at any time.

COMPLAINTS

The User can always file a complaint with the competent authority (Data Protection Authority), pursuant to Article 77 of the GDPR, if it is believed that the Controller processes its Personal Data in violation of the applicable legislation.

CHANGES

The Owner reserves the right to modify and update the following Privacy Policy as a result of any new provisions of national or European data protection laws.

Last Update: 11/14/2023