Informative on the protection of personal data art. 13 Regulation (EU) No 2016/679 (GDPR)

Pursuant to art. 13 of Regulation (EU) no. 2016/679, Cantina Sociale di San Martino in Rio S.c.a., with registered office in Via Roma, 123 – 42018 San Martino in Rio (RE), P.I. 00129440350, as Data Controller, informs the parts involved about the purposes and methods of processing the personal data collected, their scope of communication and dissemination, as well as the nature of their provision.


The Owner processes the personal, identification and contact data provided by the interested part in order to execute the order of the desired product, as requested by the buyer. The user is not required to provide “particular” data pursuant to art. 9 of Regulation (EU) 2016/679. If it is necessary to acquire and process particular data, it will be responsibility of the Owner to collect the explicit consent of the user.


The processing of personal data is carried out in full compliance with the principles of confidentiality, correctness, necessity, pertinence, lawfulness and transparency provided by GDPR. The processing of personal data is carried out through the use of electronic instruments and paper supports, by subjects, internal or external, specifically designated and authorized to the processing referred to this statement.


The personal data provided by the interested parts are processed for the purpose of using the online order service.

In order to place an order online, the user provides his personal details, a valid e-mail address, as well as a telephone number, shipping and billing address and his tax code or VAT number. The provision of personal data is optional; however, failure to provide them makes it impossible to correctly execute the order requested.

The data are processed in order to guarantee the available functionalities, including the management of the shopping cart, both for the selection of one or more items, and for the possible storage of the contents in the shopping cart, the indications necessary to carry out commercial transactions and the indication of possible payment methods, indications regarding the logistics for transport, delivery, and possibly for after-sales activities and verification of the efficiency of the service.

The legal basis for the processing is the execution of contractual or pre-contractual measures at the request of the interested part or the execution of the order for the product selected on the web page


The data collected will not be disseminated, sold or exchanged with other subjects outside the EU.

The personal data collected following the completion of the purchase process will be communicated to duly designated third parties (couriers/forwarding agents) in order to proceed with the delivery of what has been ordered and paid for.

The provided data may also be communicated to external subjects appointed as external data processors pursuant to art. 28 of Regulation (EU) 2016/679, such as, for example, companies operating in the IT and IT assistance sector, hosting companies, web-marketing and telemarketing companies. The complete and updated list of data processors is available on request to the Data Controller. The data may be communicated to the competent authorities, according to the terms of the law. The use of the data provided is granted exclusively for the purposes set out in this information notice. Finally, the data may be communicated to duly authorized internal personnel.


The personal data provided will be kept for the time necessary to provide the service. The Data Controller will store and use the information collected in compliance with a legal obligation or to resolve disputes or controversies of a legal nature. At the end of the storage period the personal data will be deleted or made anonymous. Please note that at the end of this period the right of access, deletion, rectification and portability of data can no longer be exercised.


At any time, the interested part may exercise, pursuant to Articles 15 et seq. of GDPR 2016/679, the right to:

  • Access, receive and/or have transferred personal data pursuant to Articles 15 – 20 of GDPR;
  • Rectify and delete ex art. 16 and 17 GDPR;
  • Limitation of the treatment ex art. 21 GDPR and opposition to treatment ex art. 18 GDPR;
  • Opposition to automated decision making, including profiling.

by forwarding the request to Cantina Sociale di San Martino in Rio S.c.a., located in Via Roma, 123 – 42018 San Martino in Rio (RE), P.IVA 00129440350, at or at 0522 698117. Finally, the interested part has the right to submit a complaint pursuant to art. 13 to the competent supervisory authority according to the indications published on the website