Società Agricola Leovì S.r.l. provides this information to users of the leovi.wine website (hereinafter also referred to as the ‘Website’) to describe the methods and purposes of the processing of personal data carried out through the Website, in compliance with current data protection legislation.

This policy applies exclusively to the leovi.wine Website and does not extend to third-party websites or platforms that may be accessed via links or social buttons on the Website.

The operators of these platforms act as independent data controllers.

1. Data controller

Società Agricola Leovì S.r.l.

VAT number 02402360743

Registered office: Contrada Marchi, snc – 72020 Cellino San Marco (BR)

Email: amministrazione@leovi.it

The updated list of data processors appointed by the Data Controller is available on request.

2. Types of data processed

2.1. Browsing data

When consulting the Website, some personal data is automatically acquired by IT systems (e.g. IP addresses, URIs of requested resources, time of request, status code, technical data of the browser and operating system).

This data is used to: enable navigation and the provision of web services; monitor and improve the functioning of the Website; ensure security and prevent illegal activities.

The data is stored for a maximum period of 12 months, except for requirements relating to the investigation of crimes by the judicial authorities.

2.2. Data provided voluntarily by the user

The optional entry of data in the forms on the Website involves the collection of the email address and other data necessary to manage the request.

Specific information notices are available for:

- contact forms;

- newsletter subscription;

- e-commerce services.

3. Purposes and legal bases of processing

A) Browsing data

Purpose: to allow access to the Website and ensure its security and functioning.

Legal basis: compliance with legal obligations (Art. 6.1.c GDPR); legitimate interest of the Data Controller in the technical management of the Website (Art. 6.1.f GDPR). Consent is not required.

B) Data provided by the user via forms

Purpose: to respond to requests for information or assistance; management of orders and purchases via e-commerce; sending of newsletters (only with consent).

Legal basis: performance of pre-contractual or contractual measures (Art. 6.1.b GDPR); user consent for marketing/newsletter purposes (Art. 6.1.a GDPR).

4. Nature of provision

Browsing data is necessary for the functioning of the Website. The data entered in the forms is optional, but necessary for the provision of the requested services. Consent to profiling cookies and the newsletter is optional and revocable.

5. Recipients of the data

The data may be disclosed to parties that provide services to the Data Controller, including: IT and hosting providers; website maintenance service providers; consultants and providers of administrative or commercial services; payment, shipping or e-commerce management platforms.

These parties operate as Data Processors (Art. 28 GDPR) or as authorised personnel (Art. 29 GDPR).

Personal data is not transferred outside the European Union unless services are used that provide adequate safeguards in accordance with Articles 44–49 GDPR.

6. Rights of the data subject

Users may exercise their rights under Articles 15–22 of the GDPR at any time, including: the right of access to data; rectification or erasure; restriction of processing; objection; data portability; withdrawal of consent (without prejudice to the lawfulness of processing already carried out).

Requests can be sent to: amministrazione@leovi.it

In the event of malfunctions or violations, the user may contact the Data Protection Authority: www.garanteprivacy.it – protocollo@gpdp.it - Switchboard: (+39) 06.69677.1 (Form for exercising rights regarding personal data protection)

7. Data security

The Data Controller adopts appropriate technical and organisational measures (Articles 5 and 32 of the GDPR) to protect data from: unauthorised access; accidental loss or destruction; unauthorised processing.

The Website uses cookies to ensure the technical functioning of the pages and, subject to consent, for statistical analysis and profiling purposes.

8.1. What are cookies?

Cookies are text files sent to the user's browser and stored on the device (computer, smartphone, tablet). They allow the Website to remember preferences, settings and technical information.

8.2. Types of cookies used

Technical cookies (necessary)

They allow: navigation; authentication; session management; storage of preferences. They do not require the user's consent.

Profiling cookies

Used to analyse the user's online behaviour and personalise content or advertising messages. They are installed ONLY with prior consent via a banner. By disabling them, some features may be limited.

Third-party cookies

While browsing, the user may receive cookies from:

- Google Analytics;

- Facebook Pixel;

- Google Fonts;

- Google Tag Manager;

- Instagram;

- Facebook;

- YouTube.

These entities operate as independent data controllers. Please consult their privacy policies directly on their respective platforms.

9. Changes to the Privacy & Cookie Policy

This Policy may be updated at any time. Changes will be made available on this page.