In compliance with the provisions of Regulation (EU) 2016/679 (European Regulation for the protection of personal data; hereinafter "GDPR"), we provide you with the necessary information regarding the processing of the personal data provided. This information is provided pursuant to Article 13 of the GDPR and is not to be considered valid for other websites that may be consulted via links.

Personal Data Subject to Processing

"Personal Data": any information relating to an identified or identifiable natural person ("data subject"); a natural person is considered identifiable if they can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more elements characteristic of their physical, physiological, genetic, mental, economic, cultural, or social identity (Recitals 26, 27, 30 of the GDPR).

Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information about the use of the site and to verify its proper functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Data Provided by the Data Subject

The optional, explicit, and voluntary sending of messages to the contact addresses indicated on this site and/or the filling out of data collection forms entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included.

Specific Information

Specific information will be provided on the pages of the Site in relation to particular services or data processing provided.

1. Who is the Data Controller? How can you contact them?

The Data Controller is Capovilla Distillati, via Giardini 12 - 36027 Rosà (VI) - t. (+39) 0424 581 222 - f. (+39) 0424 588 028 - [email protected]. The criteria by which we manage the data are based on the privacy regulations (Legislative Decree 196/2003 “Privacy Code” and Regulation (EU) 679/2016 “GDPR”) and on our principles of transparency, confidentiality, and fairness. The people who work with us (administrative, commercial, marketing personnel, legal professionals, system administrators) and external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to some of these data. Capovilla guarantees that they work following the same principles of confidentiality and security. However, it is always possible, at any time, to request the interruption of processing or the deletion of the data.

2. Purpose of processing, legal basis, data retention period, and nature of the provision of personal data

Purpose A)
BROWSING ON THE COMPANY WEBSITE

• LEGAL BASIS: legitimate interest (Art. 6, par. 1 letter f and Recital 47 GDPR): processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, considering the reasonable expectations of the data subject based on their relationship with the Data Controller. Activities strictly necessary for the operation of the website and the provision of the browsing service on the platform.
• DATA RETENTION PERIOD: until the end of the browsing session. See the paragraph related to cookies.
• NATURE OF PROVISION: necessary to allow the browsing of the website.

Purpose B)
CONTACTS AND REQUESTS FOR INFORMATION: through the indicated contact details or by filling out the appropriate forms on our website, we collect and fulfill any user requests and purposes connected to the submitted request. The data are stored in our email archives; they will never be shared with third parties unless authorized by the data owner. If you express a wish to receive updates on Capovilla Distillati activities in communications, your email and accompanying data will be added to our mailing lists (see Newsletter section).

• LEGAL BASIS: execution of pre-contractual measures adopted also at the request of the data subject (Art. 6, par. 1 letter b GDPR).
• DATA RETENTION PERIOD: 1 year.
• NATURE OF PROVISION: providing data is necessary. Failure to provide data will make it impossible to obtain what was requested and to use the services of the Data Controller.

Purpose C)
DIRECT MARKETING: subject to your consent and until you object, your data will be processed for direct marketing, promotional purposes of the Data Controller, commercial communication, and general marketing by subscribing to the newsletter/mailing list.

• LEGAL BASIS: consent (Art. 6 par. 1 letter a GDPR): the data subject has given consent to the processing of their personal data.
• DATA RETENTION PERIOD: until consent is revoked (opt-out).
• NATURE OF PROVISION: providing data is optional, and in its absence, your data will not be processed for this purpose. The refusal to provide data will not affect the usability of other purposes indicated in the previous points.

3. Cookies

For more information about the cookies used by this website, see the cookie policy at the following link.

4. To whom will the provided personal data be communicated?

The personal data provided will be communicated to individuals who will process the data as processors (Art. 28 GDPR) and/or as individuals acting under the authority of the Data Controller and the Processor (Art. 29 GDPR), for the purposes listed above. Specifically, the data may be communicated to recipients in the following categories:

• Entities providing services for the management of the Data Controller's information system and communication networks, including email, newsletter, and website management;
• Professionals, firms, or companies in the context of assistance and consultancy relationships;
• Competent authorities for legal obligations and/or public body requests;
• Entities belonging to the distribution network;
• Logistics service companies supporting the commercial office;

For the sole purpose of personnel recruitment and selection, potential third parties and labor consultants, and companies involved in personnel selection, as part of assistance and consultancy relationships.

The list of Data Processors is constantly updated and available by writing to [email protected] or at the Data Controller’s registered office.

5. Will the provided data be transferred outside the European Union?

The personal data provided will not be transferred to non-EU countries.

6. Is there an automated process?

We do not use decision-making processes based on automated processing, including profiling.

7. What are your rights? How can you exercise them?

You can exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR by contacting the Data Controller at the email address [email protected]. You have the right, at any time, to request access to your personal data, correction, deletion, restriction of processing, and portability of your data. In addition, you have the right to object, at any time, to the processing of your data based on legitimate interest, and in cases provided for, you have the right to withdraw the consent given without affecting the lawfulness of the processing based on the consent before the withdrawal.

To stop receiving automated direct marketing communications (newsletter), simply select the data deletion option from Mailchimp or use our automated deletion systems accessible in the footer of each newsletter. Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Data Protection Authority (Italian Supervisory Authority www.garanteprivacy.it). In the case of a data portability request, the Data Controller will provide you with your personal data in a structured, commonly used, machine-readable format, subject to the provisions of Article 20, paragraphs 3 and 4 of Regulation (EU) 2016/679.

8. Additional Information

The Data Controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion and at any time. To facilitate verification, the notice will contain the date of the update.