Privacy Policy

## 1. Introduction
This Internet Policy describes how the website www.fattoriadelteso.it manages the processing of personal data of users who browse it or use the available online services. This information is provided in accordance with Regulation (EU) 2016/679 (GDPR).

## 2. Types of Data Processed
Through the website, the following types of data may be collected:

- Personal identification data (first name and last name)
- Contact details (email address, phone number)
- Data related to requests and messages sent through online forms
- Data required for booking visits, tastings, or events
- Data for product purchase requests (shipping address, product preferences)
- Browsing data (IP address, device technical data, access logs)
- Any data voluntarily provided via email, phone, or social networks


## 3. Data Collection Methods
Personal data are collected through:

- Contact forms on the website
- Booking forms (visits, tastings, events, courses)
- Forms for online product purchase requests
- Communications via email or phone
- Interactions through social networks
- Website browsing (cookies and technical tools)

## 4. Purpose of Processing
The collected data are processed for the following purposes:
- Responding to information requests
- Managing bookings and services
- Handling product purchase and shipping requests
- Providing customer support
- Fulfilling administrative and legal obligations
- Improving website functionality and user experience

Subject to the user’s explicit consent:

- Sending promotional communications, offers, and updates
- Direct marketing activities

## 5. Legal Basis for Processing
Data processing is based on:
- Pre-contractual or contractual obligations
- Legal obligations
- Data subject’s consent (for marketing purposes)
- Legitimate interest of the data controller (website security and functionality)

## 6. Processing Methods
Processing is carried out using IT and telematic tools, with methods strictly related to the stated purposes and adopting appropriate security measures to protect the data.

## 7. Disclosure to Third Parties
Data may be disclosed to third parties such as:
- Technical service and hosting providers
- Administrative and tax consultants
- Technology platforms necessary for website operation

Data are not disclosed or sold to third parties.

## 8. Use of Third-Party Tools
The website may use third-party tools (e.g., traffic analysis services or social plugins) that may collect user data. Such tools operate according to their respective privacy policies.

## 9. Profiling and Automated Decision-Making
The website does not carry out automated user profiling, except for any profiling cookies used subject to explicit user consent.

## 10. Data Retention
Personal data are retained:
- For the time necessary to handle requests
- For the period required by administrative and tax regulations
- Until consent is withdrawn (for marketing purposes)


## 11. Data Subject Rights
Users may exercise their rights at any time under Articles 15–22 of the GDPR, including:
- Access to personal data
- Rectification or erasure
- Restriction or objection to processing
- Data portability

Requests can be sent using the contact details provided on the website.

## 12. Changes to This Policy
This Internet Policy may be updated at any time. Users are encouraged to review it periodically.

## 13. Contacts
For any information regarding the processing of personal data, please contact the data controller using the contact details provided on the website.