Privacy Policy

Processing of website users’ data

Information provided pursuant to art. 13-14 of the General Data Protection Regulation () GDPR2016/679 TENUTE

GIACHI SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 for San Gimignano n. 24, Tax Code and VAT No. 01097400525, registered in the Register of Companies of SIENA to the number REA SI - 120351, share capital of € 119,000.00, in the person of its legal representative pro tempore

GIACHI PIERLUIGI, born in San Gimignano (SI) on 30 / 03/1962, Tax Code GCHPLG62C30H875B, which acts as owner of the individual company TENUTA TORCIANO AZIENDA AGRICOLA GIACHI PIERLUIGI, with registered office in San Gimignano (SI) Via Crocetta n. 18 Loc. Ulignano, VAT number 00375840527, REA number SI-106075

FLY TO WINE SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 for San Gimignano n. 24, Tax Code and VAT number 01460730524, registered in the Register of Companies of SIENA to the number REA SI - 149613, share capital of € 10,000.00, in the person of its legal representative pro temporeco-owners

in the capacity of the processing of your personal data, in accordance with and for the effects of the EU Reg. 2016/679 (hereafter GDPR), hereby inform you that the aforementioned legislation provides for the protection of data subjects regarding the processing of personal data and that this treatment will be based on principles of fairness, lawfulness, transparency and protection of your privacy and your rights, in compliance with the provisions of art. 5 of the GDPR.

Pursuant to articles 13 and 14 of the GDPR, we therefore provide you with the following information:social security

1. Object of Processing

Each Data Controller processes personal identification data (for example, name, surname, telephone number,number, email address, user ID and password, etc.). ), communicated by you or obtained from other sources (as part of the use and navigation of our portal, it may happen that some personal data are collected automatically through so-called "cookies", as, for example, in the case of 'IP address of the user and other information relating to the permanence of the website or the preferences expressed by the user in the choice of services offered by the site.This information and data are collected directly and automatically from the website and as part of its operation. For further details on the operation can read our Information on cookies).

2. Purpose of the processing and legal basis

Your personal data are processed:

A) for the following purposes connected to the implementation of obligations related to legislative, contractual or legitimate interests:

▪ response to requests, comments and reports sent;

▪ formulation of estimates - (legitimate interest);

▪ customer assistance and management;

▪ exercise of the rights of each Owner (for example, the right to defense in court or debt collection and solvency assessment) - (legitimate interest);

▪ use of the site (for access and navigation)

▪ to measure customer satisfaction;

▪ fulfillment of obligations under the law, a regulation, community legislation or an order of the Authority;

▪ ensure network and information security - (legitimate interest),

▪ for direct promotional activities related to products and / or services similar to those purchased (recital 47 GDPR) - (legitimate interest);

▪ fraud prevention - (legitimate interest);

the treatment for the aforementionedpurpose will occur without your express consent pursuant to art. 6 lett. b) and c) and f) GDPR.

The co-owners do not require the data subject to provide "special" data, that is, according to the provisions of the GDPR (Article 9), the data revealing "racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data related to the health or sexual life or sexual orientation of the person". If the processing concerned these data, the same would happen only after your specific and distinct consent.

Please note that, taking into account the purposes of the treatment as explained above, the provision of data is mandatory and their failure, partial or incorrect conferment may have, as a consequence, the impossibility of fulfilling the contractual obligations provided.

B) only upon your specific and distinct consent pursuant to art. 6 lett. a) GDPR, for the following additional purposes: to

▪ send you (via e-mail, post, sms, telephone contacts, etc., also through specialized companies) newsletters, commercial communications and / or advertising material on products or services other than those offered by the joint holders, invitations and registrations to events;

▪ send you (via e-mail, post, sms, telephone contacts, etc.) newsletters, commercial and / or promotional communications from third parties (for example, other related companies or other business partners);

▪ process statistical surveys and market research carried out directly by the joint owners or through the work of specialized companies;

▪ note customers' appreciation for products and / or services offered in relation to the habits or purchase choices.

The provision of data is optional for you regarding the aforementioned purposes, and your refusal to treatment does not compromise the continuation of the relationship or the adequacy of the treatment itself. Your consent to use your personal data for marketing purposes can be withdrawn at any time.

If the person giving the data is under the age of 14, such processing is lawful only if and to the extent that the consent is given or authorized by the holder of parental responsibility for which the identification data are acquired.

3. Processing methods Your

personal data may be processed using manual and / or computerized and telematic tools. Each treatment is carried out in compliance with the methods set out in articles. 6 and 32 of the GDPR and by adopting the appropriate security measures.

4. Data storage

In compliance with art. 5, co. 1, lett. e) of the GDPR, we will keep your data only for the time necessary for the processing of the same for the purposes for which they are processed. If we process the data for several purposes, they will be deleted or saved in a format that does not allow us to reach any direct conclusion in relation to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the provisions on the obligations to keep documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will delete the data relating to the contractual relationship after the ten-year term established by law. In the case of processing for marketing purposes, we will retain the information for a period of time not exceeding the achievement of the purposes for which they are collected and processed. Indicatively, for the majority of the treatments carried out, this time frame will be assimilated to the ten-year conservation term.

5. Communication, transfer and dissemination Your

data will be processed only by personnel expressly authorized by the joint owners and, in particular, by the following categories of employees: agents, marketing officers, administration staff, other employees or collaborators duly authorized in compliance with the provisions of 'art. 29 GDPR. Your data may be disclosed to third parties appointed as Data Processors, in particular to: consultants and freelancers (including associates), banks and credit institutions, provider (for website, e-payment service, cloud, etc.), suppliers, hardware and software service engineers, shippers and carriers, etc. Furthermore, they can be communicated to Public Administrations and Bodies for whom the communication of data is mandatory by law, by a regulation or a community regulation.

The management and storage of personal data takes place mainly in Europe, on servers of the co-owners and / or third-party companies appointed and duly appointed as Data Processors. The data are usually not transferred to countries outside the EU, except for some information communicated for management purposes to a subsidiary resident in the USA. The transfer of personal data from EU countries to "third party" countries (not belonging to the EU or the European Economic Area) is prohibited, (article 25, paragraph 1, of Directive 95/46 / EC), unless the country in question guarantees an "adequate" level of protection. The decision of adequacy on the level of protection of a country and therefore allows the transfer of data to foreign countries, is taken by the European Commission (Article 25, paragraph 6, of Directive 95/46 / EC) and takes into account specific elements foreseen by the art. 45. The US is one of the countries for which the Commission has delivered a positive opinion. Personal data are not, in any case, the object of dissemination.

The updated list of data processors, data processors and data subjects are kept at the registered office of each Data Controller.

6. Rights of the

interested party As interested, you can, at any time, exercise the rights:

a. access to personal data (obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form );

b. to obtain the rectification or cancellation of the same (right to be forgotten) or the limitation of the processing that concerns him (provided that the conditions required by law exist);

c. to oppose the treatment;

d. to the portability of data;

e. to revoke the consent, where foreseen (the revocation of the consent does not affect the lawfulness of the treatment based on the consent conferred before the revocation);

f. to propose a complaint to the supervisory authority (Privacy Guarantor for the protection of personal data; contact details available at: http://www.garanteprivacy.it/web/guest/home/footer/contatti).

7. Contacts and various

requests for information and for the exercise of its rights may contact any Holder at the following numbers:

- phone number: 0577/988134, fax 0577/988135

- by mail by writing to the address indicated at the head of this document

is informed that this information will be subject to periodic updates which will be given specific evidence.

Processing of customers’ data

Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

Subjects most affected: customers (also potential) and their referents

TENUTE GIACHI SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 for San Gimignano n. 24, Tax Code and VAT No. 01097400525, registered in the Register of Companies of SIENA to the number REA SI - 120351, share capital of € 119,000.00, in the person of its legal representative pro tempore

Pursuant to articles 13 and 14 of the GDPR, therefore, they provide the following information:

1. Object of Processing

The joint data process personal identification data (for example, name, last name, identification document, telephone number, tax code, VAT number, email address , bank references, etc.), communicated by you (either by direct sending, signing of contracts or forms or by inserting on electronic forms / forms) or obtained from other sources.

2. Purpose of the processing and legal basis

Your personal data are processed:

A) for the following purposes related to the implementation of obligations related to legislative, contractual or legitimate interests:

▪ fulfillment of obligations under the law, a regulation, community legislation or an order of the Authority (for example, in the field of taxation and accounting, in matters of anti-money laundering, etc.);

▪ contract management and use of any services requested;

▪ formulation of estimates - (legitimate interest with balancing rights between the owner and the interested party);

▪ after-sales assistance and customer management;

▪ exercise of the rights of each Owner (for example, the right to defense in court or debt collection) - (legitimate interest with balancing rights between the holder and the interested party);

▪ measurement of customer satisfaction;

▪ fraud prevention - (legitimate interest with balancing rights between the holder and the interested party);

▪ direct promotional activities related to products and / or services similar to those purchased (recital 47 GDPR) - (legitimate interest with balancing rights between the holder and the interested party);

the treatment for the aforementionedpurpose will occur without your express consent pursuant to art. 6 lett. b) and c) and f) GDPR.

If there arein the disclosed particular information (sensitive data)data, that is data that reveal "racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as genetic data, biometric data intended to unambiguously identifying a natural person, data relating to the health or sexual life or sexual orientation of the person", the treatment for the aforementionedpurpose will only happen upon your specific and distinct consent pursuant to art. 9 GDPR.

B) only upon your specific and distinct consent pursuant to art. 6 lett. a) GDPR, for the following additional purposes: to

B1. send you (via e-mail, post, sms, telephone contacts, etc., also through specialized companies) newsletters, commercial communications and / or advertising material on products or services other than those offered by each Owner , invitations and registrations to events;

B2. send you (via e-mail, post, sms, telephone contacts, etc.) newsletters, commercial and / or promotional communications from third parties (for example, other related companies or other business partners);

B3. process statistical surveys and market research carried out directly or through the work of specialized companies;

B4. note customers' appreciation for products and / or services offered in relation to the habits or purchase choices.

3. Processing methods Your

4. Data storage

In compliance with art. 5, co. 1, lett. e) of the GDPR, we will keep your data only for the time necessary for the processing of the same for the purposes for which they are processed. If we process the data for several purposes, they will be deleted automatically or saved in a format that does not allow to reach any direct conclusion in relation to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the provisions on the obligations to keep documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will delete the data relating to the contractual relationship after the ten-year term established by law. On the other hand, if you have consented to the processing for marketing purposes, we will retain the information for a period of time not exceeding the achievement of the purposes for which they are collected and processed. As a general rule, for the totality of the treatments carried out, this time frame will be assimilated to the ten-year conservation term.

5. Communication, transfer and dissemination Your

The management and storage of personal data takes place mainly in Europe, on servers of the Owner and / or third-party companies appointed and duly appointed as Data Processors. The data are usually not transferred to countries outside the EU, except for some information communicated for management purposes to a subsidiary resident in the USA. The transfer of personal data from EU countries to "third party" countries (not belonging to the EU or the European Economic Area) is prohibited, (article 25, paragraph 1, of Directive 95/46 / EC), unless the country in question guarantees an "adequate" level of protection. The decision of adequacy on the level of protection of a country and therefore allows the transfer of data to foreign countries, is taken by the European Commission (Article 25, paragraph 6, of Directive 95/46 / EC) and takes into account specific elements foreseen by the art. 45. The US is one of the countries for which the Commission has delivered a positive opinion. Personal data are not, in any case, the object of dissemination.

The updated list of data processors, data processors and data subjects are kept at the registered office of each Data Controller.

6. Rights of the

interested party As interested, you can, at any time, exercise the rights:

a. access to personal data (obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form );

b. to obtain the rectification or cancellation of the same (right to be forgotten) or the limitation of the processing that concerns him (provided that the conditions required by law exist);

c. to oppose the treatment;

d. to the portability of data;

e. to revoke the consent, where foreseen (the revocation of the consent does not affect the lawfulness of the treatment based on the consent conferred before the revocation);

7. Contacts and various

requests for information and for the exercise of its rights may contact any Holder at the following numbers:

- phone number: 0577/988134, fax 0577/988135

- by mail by writing to the address indicated at the head of this document

is informed that this information will be subject to periodic updates which will be given specific evidence.

Processing of suppliers’ data

Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

Subjects most affected:suppliers (also potential) and third parties (and their representatives)

Pursuant to articles 13 and 14 of the GDPR, we therefore provide you with the following information:

1. Object of Processing

The data controllers process the personal identification data (for example, name, last name, identification document, telephone number, tax code, VAT number, address e-mails, bank references, etc.), communicated by you (either by direct sending, signing of contracts or forms or by inserting on electronic forms / forms) or obtained from other sources.

2. Purpose of the processing and legal basis

Your personal data are processed:

A) for the following purposes related to the implementation of obligations related to legislative, contractual or legitimate interests:

▪ contract management and use of any services requested;

▪ exercise of the rights of each Owner (for example, the right to defense in court or debt collection);

▪ activity planning;

the treatment for the aforementionedpurpose will occur without your express consent pursuant to art. 6 lett. b) and c) and f) GDPR.

If the person giving the data is under the age of 14, such processing is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility for which the identification data are acquired and a copy of the identification documents.

3. Processing methods Your

4. Data storage

5. Communication, transfer and dissemination Your

data will be processed only by personnel expressly authorized by each Data Controller and, in particular, by the following categories of employees: agents, shippers, marketing officers, administrative staff, other employees or duly authorized collaborators in compliance with what is foreseen by the art. 29 GDPR. Your data may be disclosed to third parties appointed as data processors, in particular to: consultants and freelancers (including associates), banks and credit institutions, Providers, suppliers, hardware and software service engineers, shippers and carriers, etc. Also can be communicated to Public Administrations and Entities in respect of which the communication of data is mandatory by law, by a regulation or a community regulation.

The management and storage of personal data will take place in Europe, on servers of the co-owners and / or third-party companies appointed and duly appointed as Data Processors. The data will not be transferred to countries outside the EU. Personal data will not be, in any case, the object of dissemination.

The updated list of data processors, data processors and data subjects are kept at the registered office of each Data Controller.

6. Rights of the

interested party As interested, you may at any time exercise your rights: 1) access to personal data (obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form); 2) to obtain the correction or cancellation of the same (right to be forgotten) or the limitation of the processing that concerns him (provided that the conditions required by law exist); 3) to oppose the treatment; 4) to the portability of data; 5) to revoke the consent, where foreseen (the withdrawal of consent does not affect the lawfulness of the treatment based on the consent granted before the revocation); 6) to propose a complaint to the supervisory authority (Privacy Guarantor for the protection of personal data, available at: http://www.garanteprivacy.it/web/guest/home/footer/contatti).

7. Contacts and various

For any inquiries and for the exercise of your rights you can contact each co-owner at the following addresses: telephone number: 0577/988134, fax 0577/988135 - by mail writing to the address indicated at the top of this document. Please note that this information will be subject to periodic updates which will be given specific evidence.

The use of cookies on this site is described in the cookie policy.