PRIVACY POLICY

Pursuant to Articles 13-14 of Regulation 679/2016 on the protection of Personal Data

Monteverdi Vini S.r.l. (hereinafter “Monteverdi”), VAT and Tax Code 10386050156, with registered office at Via A. Moro 19, 26851 Borgo San Giovanni (LO), is committed to protecting the online privacy of users of this website https://monteverdivini.it/ (hereinafter the “Site”), in accordance with EU Regulation 679/2016 on the Protection of Personal Data (GDPR) and applicable national legislation on the protection of personal data (collectively, the “Privacy Law”). This Privacy Policy (the “Policy”) has been prepared to allow you to understand how your Personal Data will be processed when you use the Site, both through simple consultation and through the use of specific features made available through it.

In general, all Personal Data you provide to Monteverdi through the Site, or that is otherwise collected through the Site, as part of your browsing or use of the features offered, such as contacting us, creating an account, or purchasing products from the online store, will be processed in accordance with internationally recognized principles of lawfulness, fairness, transparency, purpose limitation and retention, data minimization, accuracy, integrity, and confidentiality.

This Policy does not apply to other sites, pages, or online services that can be accessed via hyperlinks published on the Site but refer to resources outside the Monteverdi domain.

Data controller

Monteverdi Vini S.r.l., VAT and Tax Code 10386050156, with registered office at Via A. Moro 19, 26851 Borgo San Giovanni (LO), is the data controller (hereinafter also referred to as the “Controller”) of any Personal Data processed during use of the Site.

You can contact Monteverdi for any communications or requests regarding privacy or cookies by writing to the email address: info@monteverdivini.it.

Personal data subject to processing and nature of the provision

As part of your use of the Site, Monteverdi will process your Personal Data described below, which may include—depending on your decisions about how to use the features offered by the Site—an identifier such as your name and/or any personal or contact information you may have entered, as well as data relating to purchases, shipping addresses, and payment information if you make purchases at the Monteverdi Shop.

When you use the Site, your Personal Data may be collected both automatically (through your browsing on the Site) and because you voluntarily provide it (e.g., by sending a request via the contact form or purchasing a product).

The Personal Data processed through the Site (“Personal Data”) are the following:

  1. Browsing data

The computer systems and software procedures used to operate the Site acquire (for example, through cookies, as described in the Cookie Policy) some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers and terminals used by users connecting to the Site, the URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. This data is necessary for the proper functioning of the Site. It is used for the sole purpose of obtaining statistical information on the use of the Site, to verify its correct functioning, and to identify anomalies and/or abuse.

  1. Data provided voluntarily by the interested party via the contact form, for the creation of a user account and for purchases on our Monteverdi Shop

This Policy primarily concerns the processing of data you voluntarily send via message to Monteverdi’s contact addresses or enter in the contact form on the Site, as well as the data provided to create a user account or to make purchases on the Monteverdi Shop. Specifically:

  • CONTACT FORM, COMMUNICATIONS, REGISTRATION BY EMAIL: In these cases, you will be asked to enter information such as your email address, first and last name, and telephone number, as well as to make a specific request, which may contain additional Personal Data. Regarding the content of this request, we invite you to include in the form only the Personal Data strictly necessary to process your request, excluding any information that is irrelevant and/or that may fall within the special categories of personal data referred to in Article 9 of the GDPR (“personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”). Providing data in the form available on the Site is mandatory for you to use the service (e.g., request information). Failure to provide such Personal Data, or providing it incompletely or inaccurately, will make it impossible for us to provide you with the information requested.

  • CREATING A USER ACCOUNT AND/OR PURCHASING ON MONTEVERDI SHOP: By clicking on the “Monteverdi Shop” button, you can access the Monteverdi Vini online store hosted on the Shopify platform (https://boutiquemonteverdi.myshopify.com/collections/monteverdi-vini). You can also create a user account through Shopify’s “Shop” service, which will be managed by Shopify. In this case, we invite you to review Shopify’s privacy policy at https://www.shopify.com/it/legal/privacy/consumers. When purchasing products from the online store, the data you provide for order processing will be collected and processed, including the items selected, delivery and billing address, telephone number, email address, payment method—including credit card number, expiration date, and security code, as well as the cardholder’s name in the case of card payment—and the date and place of purchase.
  1. Cookie

Cookies are text files that the websites you visit send and store on your computer or mobile device, before being retransmitted to the same websites on your next visit. For more information on the types of cookies used on the Site, please read the Cookie Policy.

  1. Data relating to minors

Monteverdi does not request, collect, use, or disclose personal data provided by persons under the age of 14. If Monteverdi becomes aware that it has collected data from a minor, it will delete it. If you are under the required age, please do not fill out the contact form and ask an adult (your parent or guardian) to perform the necessary procedures.

Purpose of the processing and related legal basis

Monteverdi will use your Personal Data collected through the Site for the following purposes:

  1. To enable navigation of the Site, interaction with its content, and the provision of services made available by Monteverdi, including the management of Site security. For this purpose, your IP address will be processed, for example. Processing is carried out pursuant to art. 6, paragraph 1, letter f) of the GDPR (legitimate interest of the Data Controller).
  2. Manage and respond to specific requests addressed to Monteverdi, such as requests submitted through the contact form. For this purpose, the following Personal Data will be processed: personal data, such as first and last name, and contact information such as email address and telephone number. The legal basis for processing data via the contact form is Art. 6, paragraph 1, letter b) of the GDPR (performance of a contract).
  3. Comply with any obligations imposed on the Data Controller by applicable laws, regulations, or EU legislation, including administrative or accounting obligations, or respond to requests from authorities. For this purpose, the Personal Data required by the relevant regulations will be processed, pursuant to Art. 6, paragraph 1, letter c) of the GDPR (legal obligation).
  4. Satisfy any defensive needs, possibly related to the detection, prevention, mitigation, and investigation of fraudulent or illegal activities in relation to the services provided on the Site, as well as, in general, protect Monteverdi’s interests in court and/or out-of-court proceedings. For this purpose, the following will be processed, for example: IP address, personal data, and contact information. The legal basis for this processing is therefore the pursuit of Monteverdi’s legitimate interests pursuant to Article 6, paragraph 1, letter f) of the GDPR.
  5. Manage direct marketing and profiling purposes, in particular, Personal Data collected via the contact form, when creating an account or purchasing a product, may be used to send you informational-promotional materials or newsletters, or to analyze your consumption habits or choices in order to create a personal profile and offer you targeted and personalized advertising. The legal basis for this data processing is consent pursuant to Art. 6, paragraph 1, letter a). The data subject’s consent is free and optional. Failure to provide consent will make it impossible to send you any marketing communications. The data subject who has given consent may revoke it at any time by simply selecting the “I do not consent” box instead of “I consent” or by deselecting the “Send me emails with news and offers” option during checkout on the Monteverdi Shop or when creating an account.

Your Personal Data may also be processed by third parties (“social buttons”) for the same marketing purposes and to send you advertisements and advertising content based on your interests, identified using profiling cookies. Specifically, user navigation data, unique identifiers, and information about your interactions with content on the Site may be collected. The legal basis for processing is always Article 6, paragraph 1, letter a) of the GDPR (consent of the data subject), which may be provided via the cookie banner that appears when you first access the Site.

  1. Manage purchases made on the Monteverdi Shop and related administrative and accounting activities. The Personal Data collected through the checkout form is processed for the purpose of fulfilling your orders (providing you with the products you ordered, processing transactions and invoicing, including managing online fraud and payments and payment incidents, and ensuring deliveries). The legal basis for processing the data collected during purchases from the Monteverdi Shop is Art. 6, paragraph 1, letter b) of the GDPR (performance of a contract). This data may also be stored by Shopify, as the provider that hosts our online store. We therefore invite you to read Shopify’s privacy policy at https://www.shopify.com/it/legal/privacy/consumers. Additionally, when you browse and access our store, Shopify installs and uses its own cookies and similar technologies to enable the proper functioning of the platform, process payments, manage your shopping cart, and analyze site performance. For more details on the cookies set by Shopify, you can consult Shopify’s Cookie Policy at https://www.shopify.com/it/legal/cookies.

Payments, in addition to bank transfers and credit cards, can be made through external payment gateways (Paypal, Satispay) or other payment methods (Google Pay, Shop Pay). Financial data is then processed directly by the relevant providers, so we encourage you to read their respective privacy policies. Transactions on Monteverdi Shop are always secure and encrypted. All payment gateways and payment method providers comply with international standards aimed at ensuring the secure handling of credit card information by our store and its service providers.

  1. Facilitate your future purchases. Personal Data collected in connection with purchases may also be stored to speed up future checkouts by creating a Shop account. The account will be managed directly by Shopify, so we invite you to read their privacy policy at https://www.shopify.com/it/legal/privacy/consumers. The legal basis for processing is Art. 6, paragraph 1, letter a) of the GDPR (consent of the data subject).

Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

Data processing methods and retention period

Data will be processed using paper and/or electronic tools, including automated tools, according to procedures strictly related to the purposes indicated below and in any case adopting procedures and measures suitable for protecting their security and confidentiality.

Personal Data processed for the purposes referred to in:

– letter a), with specific regard to browsing data, will be retained only for the period of time necessary to allow browsing of the Site. This data, in addition to allowing us to independently verify any suspicious access to the Site, may be used and retained for a longer period by Monteverdi for the purposes of ascertaining liability in the event of potential cybercrimes against the Site or third parties, in any case for a period not exceeding 30 days;

– letter b) will be kept for the time strictly necessary to process the requests and in any case deleted after 3 (three) months from the processing of the request you sent to Monteverdi via the contact form on the Site;

– letter c), will be retained for the period established by the specific obligations set forth by the applicable legislation;

– letter d), will be retained for the time strictly necessary for the purpose of defending Monteverdi in the event of possible complaints/disputes and therefore until they are needed by the same to protect itself in extrajudicial and/or judicial proceedings or must communicate them to the competent Authorities.

– letter e), will be retained by Monteverdi for a maximum of 24 months for direct marketing purposes and a maximum of 12 months for profiling purposes, unless consent is revoked earlier, as well as for the period established by third parties in their own privacy and cookie policies, to which reference is made, and which are also indicated in the Cookie Policy.

– letter f), will be retained for a maximum of 10 years from purchase for administrative and accounting purposes. Credit card data will be stored only for the time necessary to complete the transaction and will then be immediately deleted. Regarding the retention periods for payment data processed directly by external payment gateways (Shop, PayPal, Google Pay, Satispay), we invite you to read their respective privacy policies.

– letter g), will be retained for the period during which the Shopify account remains active; in this regard, we invite you to read the privacy policy at https://www.shopify.com/it/legal/privacy/consumers.

Categories of recipients of Personal Data

The processing of collected data is carried out primarily by Monteverdi’s internal staff (administrative and commercial), identified, authorized, and duly trained for this purpose by the Data Controller.

The data collected, if necessary or instrumental to the purposes indicated, may be processed by third parties appointed as external data processors, or, as applicable, disclosed to them as independent data controllers. Specifically, the following entities are external data processors:

  • individuals, companies, or professional firms that provide assistance and consultancy to Monteverdi in accounting, administrative, legal, tax, financial, and debt collection matters relating to the provision of services;
  • hosting providers and service providers (such as Shopify);
  • subjects delegated to carry out technical maintenance activities (including maintenance of the Site and electronic communications networks).

The subjects, entities, or authorities to whom your Personal Data may or must be disclosed for legal obligations and for the defense of the Data Controller, including by order of the authorities, will instead operate as independent data controllers.

The periodically updated and complete list of the Data Processors appointed for data processing can be requested by sending an email to the addresses indicated above.

Transfer of personal data outside the EU

Some of your Personal Data is shared with recipients who may be located outside the European Economic Area (“EEA“). Monteverdi ensures that the transfer of your Personal Data to these recipients is in compliance with applicable law. Transfers are made based on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards provided for by the Privacy Law. It is understood that your personal data will not be disclosed.

Your rights

You have the right, at any time and if the conditions set out in the Privacy Policy apply:

  • to ask Monteverdi for confirmation as to whether or not your Personal Data exists and to be able to access your Personal Data (and/or a copy of such Personal Data), as well as further information on the processing being carried out on them;
  • to ask Monteverdi to rectify or update your Personal Data processed, if they are incomplete or out of date;
  • to ask Monteverdi to delete your Personal Data from its databases, if you believe the processing is unnecessary or unlawful, or if you have withdrawn your consent or objected to the processing;
  • to ask Monteverdi to limit the processing of your Personal Data, if you believe that your Personal Data is not accurate, necessary or is being processed unlawfully, or if you have objected to their processing;
  • to ask Monteverdi for the portability of your Personal Data, that is, to obtain – in a structured, commonly used and machine-readable format – a copy of the Personal Data provided to Monteverdi concerning you, or to request its transmission to another Data Controller;
  • to object to the processing of your Personal Data that Monteverdi processes on the basis of a legitimate interest, for reasons related to your particular situation, which you believe should prevent Monteverdi from processing your Personal Data;
  • to withdraw consent, where applicable. Withdrawing consent does not affect the lawfulness of processing based on consent given before its withdrawal;
  • to lodge a complaint with the competent Supervisory Authority or appeal to the Judicial Authority, if you believe that the processing of your Personal Data is contrary to the Privacy Legislation in force.

To exercise these rights, please send an email to info@monteverdivini.it.

This Privacy Policy is effective as of June 1, 2026. Monteverdi reserves the right to modify or simply update its content, in part or in full, including due to changes in applicable Privacy Law. Any changes to this Policy will be binding once published on the Site. Monteverdi therefore invites you to visit this section regularly to consult the most recent and updated version of the Policy.