en
Change language to Italiano

Privacy Policy

INFORMATION NOTICE PURSUANT TO ARTICLES 12, 13 AND 14 OF THE EU GENERAL DATA PROTECTION REGULATION (GDPR) 2016/679

With reference to the personal data of customers and users freely provided by them in connection with:

the information pursuant to Articles 12, 13 and 14 of the EU General Data Protection Regulation 2016/679 is provided below, concerning the processing activities carried out by Enrico Serafino S.r.l. following the creation of a user account.

It is specified that all data collected in the ways described below, as well as those collected through the purchase of products and/or services at the Enrico Serafino Wine Shop located at Corso d’Asti no. 5, Canale (CN), are combined and centrally recorded in the “CRM” (Customer Relationship Management) system.

If the user proceeds directly with registration on the website https://www.enricoserafino.it/ and/or https://www.enricoserafino.it/enrico-serafino-lounge/, the data will be collected through the website and will be visible in the “My Account” section, through which the data subject may access their data and the consents given, and may also revoke such consents.

DATA CONTROLLER

The Data Controller is Enrico Serafino S.r.l. (Tax Code and VAT no. 03548600042), represented by its legal representative pro tempore, with registered office in Canale (CN), Corso Asti no. 5 (email: info@enricoserafino.it).

The appointed Data Protection Officer (DPO) is Attorney Marco Martorana, whose contact email is: dpo@lcteam.it.

PERSONAL DATA PROCESSED AND SOURCE OF THE DATA

The following personal data may be collected:

  • Personal identification data, such as first name, last name, place and date of birth;
  • Residence and/or domicile address, or any additional delivery addresses;
  • Tax code and/or VAT number;
  • Email address;
  • Telephone number;
  • Username and password.

PURPOSES OF DATA PROCESSING

We inform you that, upon the occurrence of the situations described above, your personal data will be processed for one or more of the following purposes:

  • Responding to requests for information sent to the email address info@enricoserafino.it;
  • Creation and management of the account and registration in the CRM;
  • Purchase of products and services and performance of all related activities (payment processing, shipment scheduling and delivery of products, etc.);
  • Enabling the use and enjoyment of services related to the purchase, including, by way of example, after-sales assistance;
  • Fulfillment of legal obligations provided for by tax and fiscal regulations;
  • Protection of the Data Controller’s legitimate interest in safeguarding its rights in judicial proceedings;
  • Sending advertising and promotional communications via newsletter related to the activities of Enrico Serafino S.r.l. connected to the sale of products and services, where expressly reserved for those who have already made one or more purchases through their personal account;
  • Sending advertising and promotional communications via newsletter, SMS and/or other messaging systems, push notifications and other automated communication tools relating to the activities, products and/or services of Enrico Serafino S.r.l., as well as of companies/entities linked to Enrico Serafino S.r.l. by partnership or sponsorship relationships.

The above-mentioned data processing activities are carried out by the Data Controller using IT tools and also through automated methods.

PROVISION OF DATA

The provision of the above-mentioned data is necessary to pursue the individual purposes indicated above. Failure to provide one or more personal data items will make it impossible for Enrico Serafino S.r.l. to pursue the corresponding purposes.

In the event of withdrawal and/or failure to provide consent, where consent is required as the sole legal basis for processing pursuant to the following paragraph, the Data Controller will not be able to process the data for the relevant purpose. In any case, failure to provide consent and/or its withdrawal (as well as any objection to processing carried out for the purpose referred to in point 7 above) will not affect the pursuit of processing purposes based on other legal grounds.

LEGAL BASIS FOR DATA PROCESSING

The data processing purposes described above are pursued on the basis of the following legal grounds:

  • Responding to requests for information sent to info@enricoserafino.it – performance of a pre-contractual obligation at the request of the data subject;
  • Creation and management of the account and registration in the CRM – performance of a contractual obligation;
  • Purchase of products and services and performance of all related activities – performance of a contractual obligation;
  • Enabling the use and enjoyment of services related to the purchase, including after-sales assistance – performance of a contractual obligation;
  • Fulfillment of legal obligations under tax and fiscal regulations – compliance with a legal obligation;
  • Protection of the Data Controller’s legitimate interest in defending its rights in judicial proceedings – legitimate interest of the Data Controller;
  • Sending advertising and promotional communications via newsletter related to the sale of products and services to users who have already made one or more purchases – legitimate interest of the Data Controller in carrying out “soft spam” activities pursuant to Article 130, paragraph 4, of Legislative Decree 196/2003, as amended (Privacy Code);
  • Sending advertising and promotional communications via newsletter, SMS, messaging systems, push notifications and other automated communication tools relating to activities, products and/or services of Enrico Serafino S.r.l. and of partner or sponsored entities – consent of the data subject.

Where consent is required, it may be withdrawn at any time, without prejudice to the processing carried out up to that moment and without negative consequences for existing contractual relationships with the Data Controller.

To withdraw consent, the data subject may contact the DPO (email: dpo@lcteam.it), or independently perform the operation by accessing their account on the “Identity” system made available by Enrico Serafino S.r.l., or by following the procedure indicated in the marketing communications received.

Following withdrawal of consent, the Data Controller will no longer process the data for the purposes for which consent has been withdrawn where consent constitutes the sole legal basis.

DATA AND EXTERNAL DATA PROCESSORS

Personal data will be processed by internal staff of Enrico Serafino S.r.l., acting as authorized data processors.

In addition, personal data may be processed by external data processors and sub-processors, duly identified and appointed, including, by way of example and not limitation, web platform providers, newsletter management platform providers, accounting, tax and legal consultants, and any other entity providing services necessary for administrative and legal management of the contract and for the protection of rights in judicial proceedings.

To receive the complete and updated list of external data processors, the data subject may contact the DPO (email: dpo@lcteam.it).

TRANSFER OF DATA ABROAD

Personal data may be transferred outside the European Union. In such cases, the Data Controller will verify the existence of the conditions set out in Articles 44 et seq. of the GDPR.

RIGHTS OF THE DATA SUBJECT

At any time, by contacting the DPO at dpo@lcteam.it, the data subject may exercise the following rights:

  • Access their personal data;
  • Request rectification and/or updating of their personal data;
  • Request erasure of their personal data where one or more of the conditions set out in Article 17(1) of Regulation 2016/679 apply;
  • Request restriction of processing pursuant to Article 18 of Regulation (EU) 2016/679;
  • Object to processing under the conditions set out in Article 21 of Regulation (EU) 2016/679;
  • Receive their data in a structured, commonly used and machine-readable format and transmit such data to another data controller, where the requirements of Article 20 of Regulation (EU) 679/2016 are met.

COMPLAINT TO THE SUPERVISORY AUTHORITY

It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it), in any case within the limits set out in Article 2-undecies of Legislative Decree no. 196/2003.

DATA RETENTION PERIOD AND METHODS

Personal data processed for purposes related to the fulfillment of contractual and/or legal obligations will be retained for a period not exceeding 10 years and, in any case, for the time necessary to demonstrate compliance with legal obligations and until the limitation period for legal actions arising from the contractual relationship has expired.

At any time, the data subject may request deletion of their account. Account deletion does not affect the processing of personal data retained and processed for other purposes.

Personal data processed for marketing purposes will be retained for a period not exceeding 2 years from the date of the last interaction with the communications received, after which the user will be asked to renew their consent; failing this, the data will be deleted.

Data will be stored using appropriate technical and organizational measures in compliance with Regulation (EU) no. 679/2016. Processing will also be carried out in electronic form.

The icons used in this privacy notice are subject to the terms of the CC BY 4.0 license (https://creativecommons.org/licenses/by/4.0/deed.it). These icons were created by Athlantic S.r.l. and were not modified after being downloaded from https://www.garanteprivacy.it/temi/informativechiare#2. The Data Controller is not responsible for any reuse that does not comply with the terms of the CC BY 4.0 license, nor for any alterations, inaccuracies, errors, omissions, or fraudulent use of the documents by third parties.

We use necessary cookies to make our site work. We'd like to set additional cookies to understand site usage, make site improvements and to remember your settings. We also use cookies set by other sites to help deliver content from their services. Learn more: Cookies

Reject additional cookies
Accept all
Preferences

Choose which type of cookie you'd like to accept by selecting or de-selecting the corresponding category and confirming your choice by clicking on the "Save preferences" button.

For more information about cookies, please visit Cookies

Necessary cookies are crucial for the basic functions of the website and the website will not work in its intended way without them.

  • Technical: the basic functions of the website. These cookies do not store any personally identifiable data.
  • Functional: help to perform certain functionalities like saving your preferences, save the products in your e-commerce cart, or remembering the access with your user's profile. These cookies do not store any personally identifiable data.
  • Google Analytics

Marketing cookies are used to deliver visitors with customized advertisements based on the pages they visited before and analyze the effectiveness of the ad campaigns.

  • Facebook Pixel
Accept all
Save preferences