Privacy Policy

1. Data Controller

The Data Controller is PAROL VINI SRL, based in PAROL VINI SRL — Via Casona 11 — 36056 Tezze sul Brenta VI.

• Tax code / VAT no.: IT 02437780246
• Email: info@parolvini.com
• Phone: 0424 89022

2. Types of data processed

Through this website, we process the data that users voluntarily provide by completing the “Request information” form on the Contacts page:

• first and last name;
• company, if any;
• email address;
• phone number (optional);
• country (optional);
• content of the message sent;
• any consent to receive commercial communications (optional).

We also process technical browsing data necessary for the operation, security and maintenance of the website (e.g. IP address, technical logs, date and time of the request, requested URL and session cookies): for further details, please refer to the Cookie Policy.

The website does not provide public customer accounts, online sales or online payments.

3. Purposes and legal basis

Data is processed for the following purposes:

• Responding to requests for information sent through the contact form and managing the resulting business relationships.
  Legal basis: performance of pre-contractual measures and legitimate interest in following up on the requests received (Art. 6(1)(b) and (f) GDPR).
• Ensuring the proper functioning and security of the website.
  Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
• Complying with legal obligations of a tax, accounting and administrative nature.
  Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Sending commercial communications and informational messages (e.g. trade fair attendance, news and new products) by email, only with prior optional consent given through the dedicated checkbox in the contact form.
  Legal basis: consent of the data subject (Art. 6(1)(a) GDPR), which can be withdrawn at any time via the unsubscribe link included in every communication or by writing to the Data Controller.

4. Nature of the data provision

Providing the data marked as mandatory in the contact form is necessary in order to follow up on the request: failure to provide it makes it impossible to respond. Providing the optional data is free and only serves to facilitate the handling of the request.

5. Methods of processing

Data is processed using IT and electronic tools, adopting technical and organisational security measures appropriate to prevent loss, unlawful or improper use and unauthorised access. Processing is carried out by the Data Controller and by authorised personnel.

6. Data recipients

Data may be disclosed to parties that provide services to the Data Controller (e.g. hosting, technical maintenance and email providers), appointed as Data Processors pursuant to Article 28 GDPR where necessary, as well as to public authorities where required by law. Data is not disseminated or transferred to third parties for marketing purposes.

The website contains links to external services and, on the About us page, a YouTube video that loads only after a voluntary action by the user. When users open these services, the relevant providers may process data in accordance with their own policies.

7. Transfers outside the EU

Data is processed within the European Union. Should a service provider involve a transfer to third countries, this will only take place with the appropriate safeguards provided for in Articles 44 et seq. of the GDPR (e.g. adequacy decisions or standard contractual clauses).

8. Retention period

The data collected through the contact form is retained for the time necessary to handle the request and any resulting business relationships, and in any case no longer than 24 months from the last contact, unless otherwise required by law (e.g. retention of tax and accounting documents for the period provided for by the applicable regulations).

Data processed for commercial communication purposes is retained until the consent is withdrawn (unsubscribe), after which it is no longer used for that purpose, except for keeping proof of the consent given at the time.

9. Rights of the data subject

As a data subject, the user has the right to obtain from the Data Controller, in the cases provided for, access to their data and its rectification or erasure, the restriction of processing or objection to it, as well as the right to data portability (Articles 15-22 GDPR). Where processing is based on consent, the user may withdraw it at any time without affecting the lawfulness of the processing carried out before the withdrawal.

To exercise your rights you can write to info@parolvini.com.

The user also has the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority (Garante), www.garanteprivacy.it) if they believe that the processing infringes the applicable regulations.

10. Data Protection Officer and automated decision-making

As of the date of this policy, no Data Protection Officer (DPO) has been appointed for the website. The website does not use automated decision-making processes, including profiling, that produce legal effects concerning users or similarly significantly affect them.

11. Changes to this policy

The Data Controller reserves the right to modify or update this policy, including as a result of regulatory changes. The updated version will always be published on this page, indicating the date of the last update.