Privacy notice
To confirm before publication
- Retention and deletion periods and operating procedures for enquiries, newsletter registrations, administrator accounts, logs and backups.
- The complete supplier and subprocessor list, processing agreements, data locations and safeguards for transfers outside the EEA.
- The newsletter sending service and an effective unsubscribe procedure before communications begin.
- Legal bases and form wording, the controller’s office and contact details, and the Data Protection Officer’s details if one has been appointed.
- Before GA4 activation: configuration, data, retention, recipients and transfers, together with consent before loading.
1. Data controller
AZ. AGR. GIOVANNA TANTINI
Via Goito 10, Oliosi, 37014 Castelnuovo del Garda (VR), Italia
VAT number: 02815030230
2. Data processed
Enquiries: name, email address, message, selected language, consent declaration and submission date. Your message may contain other information you choose to provide; please do not include special-category data, identity documents or payment information.
Event requests: in addition to name, email and telephone number, we record the requested date, selected event or private-event request, number of participants, message and request status. For events without a date, we instead collect a general information enquiry with the event of interest, name, email, telephone number and message; this does not reserve a date or block the calendar. All visible form fields are required to submit a request. Confirmation is handled personally by the estate. The public calendar shows only availability and reserved dates, never guests’ names or contact details.
Newsletter: email address, language, subscription consent and registration date. Newsletter registration is separate from submitting an enquiry.
Administrator area: administrator email, password hash and sessions are managed directly by the website in its database. Passwords are not stored as plaintext in the database; sessions expire after 8 hours and are revoked on logout or password change. Visitors do not need an account to browse.
Browsing and security: systems may process IP addresses and technical request data to provide the service, diagnose errors and limit abusive submissions. The website also remembers your requested language and cookie preferences.
3. Purposes and legal bases
Enquiries: manage and reply to voluntarily submitted requests. In its current configuration, the form collects explicit consent (Article 6(1)(a) GDPR). The controller must validate the appropriate legal basis, including any pre-contractual steps requested by the individual, before this notice is used as a final document.
Newsletter: record subscriptions and, once a sending service is activated, send requested communications on the basis of separate consent (Article 6(1)(a) GDPR). The website currently records subscriptions in its database; no automatic mailing service is connected.
Operation, authentication and security: provide requested functions, manage authorised access and prevent abuse. The proposed legal basis is the legitimate interest in website operation and security (Article 6(1)(f) GDPR), which the controller must assess and document. Any legal obligations rely on Article 6(1)(c) GDPR.
4. Providing data
Browsing public pages does not require an account. Submitting an enquiry and subscribing to the newsletter are optional; required fields enable the respective function. A form cannot be submitted without its mandatory data. Newsletter consent is not necessary to send an enquiry or visit the website.
5. Recipients and technical suppliers
Enquiries and subscriptions are stored in the project database and accessible to authorised administrators through the restricted area.
Replit: project hosting and infrastructure, including database services and technical request handling. These services may process the data stored in the application and technical connection data.
Internal administrator authentication without an external identity provider. To limit login attempts, keyed cryptographic digests of IP addresses and emails are temporarily stored with 15-minute counters; expired records are removed on subsequent requests.
6. Retention — to be defined
The controller has not yet confirmed retention and deletion periods and procedures for enquiries, newsletter registrations, administrator accounts, logs and backups. This draft therefore states no fixed periods or automatic deletion for these data. This section must be completed with verifiable periods or criteria before final publication.
For the technical storage already configured, the language preference lasts one year and cookie preferences last six calendar months. Details, including browser local storage, are in the Cookie Policy.
7. Data locations and transfers
The actual locations of all project and supplier data have not been confirmed. Storage exclusively within the European Union is therefore not claimed. Before publication, the controller must check locations, access, subprocessors and contracts.
Transfers outside the European Economic Area require verification under Articles 44 onwards GDPR, including applicable adequacy decisions or other safeguards, such as standard contractual clauses and supplementary measures where relevant. This draft does not state that these checks have already been completed.
8. Cookies and Google Analytics 4
This website does not directly install analytics, advertising pixels or profiling. The external Bókun form described in section 9 loads automatically on configured booking pages and may use the provider’s own tools.
Google Analytics 4 is planned but is not installed or active: its scripts are not loaded and no events are sent to GA4. No advance consent is being requested for this future service.
Before activation, configuration, data, purposes, retention and applicable safeguards must be defined, the notices updated and a specific choice offered. Non-essential tracking must remain blocked until consent, which can be changed or withdrawn through the footer panel. Existing preferences do not automatically authorise GA4.
9. Bookings, purchases and external links
The vineyard tour and six-wine tasting page automatically loads a Bókun booking iframe. The provider receives connection data including your IP address when the page opens and processes details you may enter for availability, bookings and payments under its own privacy policy, linked beside the form. Opening the page is not advertising consent. The controller must verify the agreement, privacy roles, legal bases, non-technical tools and any specific consent, retention and transfers; this draft does not certify those checks. The form can be deactivated but loads again when the page is reopened. Provider cookies are managed in your browser, not this website’s settings. Booking, shops, maps and reviews remain external links. Native website forms collect enquiries and do not complete reservations.
10. Rights and withdrawing consent
Where applicable under Articles 15–22 GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. You may withdraw consent at any time without affecting the lawfulness of earlier processing. To exercise your rights or request removal from the newsletter list, write to the controller’s privacy contact shown on this page.
Before newsletter sending begins, an effective, easily accessible unsubscribe procedure must be established. The controller must organise privacy-request handling and any necessary identity checks. You may complain to the Italian Data Protection Authority or another competent supervisory authority.
11. Processing methods and security
Data are processed using digital tools. The application restricts access to enquiry and subscription data through authentication and administrator authorisation and limits repeated form submissions. The controller must verify organisational measures, access management, backups and deletion procedures; complete absence of risk is not guaranteed.
In its current configuration, the application does not profile visitors or make automated decisions with legal effects.
12. Minors and updates
The website presents wines and wine-tourism experiences; forms do not request a date of birth. If you believe a minor has inappropriately provided data, contact the controller for the necessary checks. Any age-related measures must be defined by the controller according to the services offered.
The page version and date identify updates. New services or purposes require updated information and, where necessary, a new choice before the relevant processing begins.