Privacy notice
Valdambra Winery · Version 2026-10-26-v2
Controller and contact
No Data Protection Officer (DPO) has been appointed. The data controller is Valdambra Wine e Cottage S.r.l. Società Agricola Benefit, VAT number 02518900515, with its registered office at Località Pianacci SNC, 52021 Bucine (AR), Italy. For information about personal data and to exercise your rights, contact info@valdambrawinery.it.
Data and purposes
For wine enquiries, we process your name, email and wine of interest; for the Club, your email and stated interest. We also retain the Valdambra source, form type, acknowledgement of the privacy notice and technical data associated with the request, such as IP address and date/time. We do not request payment details or special categories of personal data: please do not include them in your communications.
We use data to answer your enquiry and manage any further contact you request. Submission does not constitute a purchase, booking or automatic Club membership, and does not activate a newsletter. The website and its providers process technical connection data to deliver the service, handle errors and prevent abuse and spam.
Legal bases and provision of data
For enquiries relating to a possible commercial relationship, processing is necessary to take pre-contractual steps at your request, under Article 6(1)(b) GDPR. To respond to other enquiries made on your initiative and protect the service, processing relies on the controller’s legitimate interest in managing correspondence and security, under Article 6(1)(f) GDPR, limited to necessary data and taking account of data subjects’ rights.
Providing data is optional; without the required data indicated in the form, we cannot handle your enquiry. Marketing consent is not required to receive a reply. The “I have read the privacy notice” checkbox records acknowledgement and does not subscribe you to promotional communications.
Recipients and providers
Data may be processed by persons authorised by the controller and by providers entrusted with technical operations and correspondence, within their respective roles and applicable agreements. We use Netlify for hosting, form reception and spam protection, Aruba for email and, only with consent to statistics, Google for Analytics. Enquiries may be stored both in the Netlify form archive and in the email inbox; these two copies are managed separately.
No automatic transmission to a CRM, newsletter, Brevo or shared databases of other brands is active. Data is not disclosed to the public. It may be communicated to authorities where required by law.
International transfers
Netlify’s infrastructure may involve processing outside the European Economic Area. For transfers subject to the relevant restrictions, the provider’s data processing agreement provides for applicable safeguards, including the European Commission’s standard contractual clauses where required. You may request information about transfers and applicable safeguards, or how to obtain a copy, from the controller at info@valdambrawinery.it.
Retention
Information enquiries are retained for a maximum of 12 months after closure, unless continuing the requested relationship, complying with legal obligations or protecting a right requires otherwise. If a contractual relationship is established, the purposes and retention periods relevant to that relationship apply. This management covers both the form archive and correspondence.
Technical data is retained for the time necessary to deliver and secure the service, investigate abuse and meet any legal obligations, within providers’ settings and terms. The controller can provide further information on the applicable criteria through the contact indicated.
Cookies, session storage and measurement
Age confirmation is stored in the tab’s sessionStorage, without a date of birth or transmission to an application server. Images, videos and fonts are served from the website’s infrastructure; external players or advertising fonts are not embedded. The website reads the browser’s reduced-motion preference.
Your statistics choice is stored in the browser’s localStorage for 180 days, with the choice version and date. This is technical storage of preferences. Without a choice, or if you refuse, Google Analytics is not loaded and receives no events from the website. You can continue browsing and sending enquiries without accepting statistics.
Optional statistics with Google Analytics 4
Only if you choose “Accept statistics” do we use Google Analytics 4, provided by Google Ireland Limited, to understand page usage and improve the website. The legal basis is consent under Article 6(1)(a) GDPR. We measure pages visited, language, device and browser, wine selection, language changes, email contact clicks, form starts and technical acceptance of forms. Events contain no names, email addresses, enquiry text or field contents. Form acceptance does not confirm delivery to the email inbox.
Analytics may use the pseudonymous identifiers of the first-party cookies _ga and _ga_BJDGV2YVS8. The website configuration limits their lifetime to 180 days without automatic renewal at each visit; the browser may impose shorter limits. Google signals, personalised advertising, User-ID and profiling links between brands are not enabled. Google uses the IP address for technical functions and approximate location; according to the GA4 documentation, it is not logged or stored as an IP address.
The property configuration verified on 26 October 2026 provides for 2 months for event data and 14 months for user data, with the user retention period reset upon new activity. These periods are separate from cookie lifetimes; aggregated reports follow the service’s retention rules.
You can refuse statistics or withdraw consent at any time through “Cookie preferences” in the footer. Withdrawal stops subsequent collection, deletes Analytics cookies accessible to the website and reloads the page; it does not affect prior processing. The new choice is remembered for 180 days. If browser storage is unavailable, the choice applies to the current page.
Google and its providers may also process data outside the European Economic Area. Google’s data processing and transfer terms provide for applicable safeguards, including adequacy decisions and standard contractual clauses where required. For more information, consult the Google pages linked here or contact the controller.
How Google uses data · Google data processing terms · Google international transfers
Rights and complaints
Subject to the conditions set out in the GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of prior processing. To exercise your rights, write to info@valdambrawinery.it. You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
No automated decisions with legal or similarly significant effects are envisaged. Technical spam filtering may prevent an enquiry from being received: if you encounter problems, you can use the direct email contact.