This information gives you an overview of how we process your personal data when you use our website. We inform you about what data we collect from you and how we use it. We also inform you about your rights under applicable data protection law and tell you who to contact if you have any questions.
1. who is responsible for data processing?
The person responsible for the processing of your personal data when using the website is
Società Agricola Spacchetti s.s., Via Pietrauta, 06036 Montefalco, Umbria (Italia).
2. who can you contact if you have any questions about data processing?
The Data Controller can be reached at the following contact details:
datenschutz@vinomontefalco.de
3. what data do we process from you?
We process your personal data when you visit this website, use our ordering service, provide us with information via a contact form on our website or contact us in any other way. In particular, this may include the following data:
Data that you provide when setting up a customer account (including title, first name, last name, e-mail address, password, customer number, date of registration, date of last login, date of birth).
Data that you provide to us when contacting us by telephone (including title, first name, surname, e-mail address, telephone number).
Data that we need to prove that your customer account has been set up correctly (including IP address and timestamp of the customer account set-up).
Data about your purchases (including goods/services, price, discount amount, location and time of transaction).
Data required for the purchase or delivery or goods/services purchased (billing address, delivery address, telephone numbers (especially in the case of forwarding dispatch))
Data for payment processing (credit card data, account data, PayPal data)
Data we receive when redeeming vouchers or coupons and activating credit (redeemed vouchers and coupons)
Data that you generate when you place products in your shopping cart, put them on your notepad
Data generated when you use our website through the use of cookies, web beacons, advertising IDs and other unique identifiers (pages viewed, links clicked, services used, time of use)
Data we need to verify your age (e.g. details of whether you are over 16 or 18 and, where applicable, proof of appropriate verification at the on-site age-restricted checkout)
Data about your location (if you have allowed the collection of location data in your device settings).
Data that you provide to us when ordering the newsletter (e.g. e-mail address, title, first name, last name)
Data that we need to prove your consent to receive the newsletter (IP address and time stamp of the newsletter order and of the click on the link in the confirmation email, declarations of consent given)
Data we receive when you read the newsletter or product recommendations sent by e-mail (opening of the e-mail, clicks on links contained in the e-mail, data of the terminal device used, data on the location based on the IP address, accessibility of the e-mail address, execution of a purchase or an action on the website after clicking on an offer)
Data we receive when participating in a competition organised by us (details of the competition, responses)
Data that you provide to us via a web form or in any other way when you contact our customer service department
Data that we generate based on the evaluation of your data (customer segments, presumed product preferences)
We only process the aforementioned data insofar as it actually accrues to us, for example when you place an order.
4. is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the aforementioned data is required in order to set up a customer account and to conclude and execute purchase contracts for goods and services. We will not be able to enter into a contract for the purchase of goods and services with you unless you provide us with the information we need to perform the contract. The communication of other data is voluntary, but may be necessary for the use of certain services. We will inform you when you enter data if the provision is required for the particular service or function. This data is marked as mandatory. In the case of required data, failure to provide it will result in the relevant service or function not being provided. In the case of optional data, failure to provide it may mean that we cannot provide our services in the same form and to the same extent as usual.
5. For what purposes do we process your data and on what legal basis?
5.1 Customer account
If you register with us as a customer, we will set up a password-protected customer account for you. In your customer account you can manage your data and view past orders. Your e-mail address together with your password is used for identification in the customer account. The legal basis for the described data processing is Art. 6 para. 1 letter b of the General Data Protection Regulation (pre-contractual measures and contract fulfilment).
5.2 Orders in the online shop
5.2.1 Processing of orders in the online shop
We process your data for the processing of orders in our online shop. This includes taking the order, delivering goods, processing payments, granting discounts, claiming vouchers and processing returns and claims for defects. To make it easy to place an order in our online shop, we support your purchase by providing convenience functions. These include the functions "Orders" and "Notepad". We inform you about the receipt of an order and the respective status by e-mail. We pass on your data to third parties insofar as this is necessary for payment processing or delivery. We may transfer data on outstanding debts to a collection agency for the purpose of debt collection. The legal basis for the described data processing is Art. 6 para. 1 letter b of the General Data Protection Regulation (contract performance).
5.2.2 Transmission of the e-mail address and telephone number to the shipping service provider
If you agree accordingly, we will transmit your e-mail address and telephone number given in connection with an order in our online shop to the shipping service provider in order to optimise customer service. This enables them to provide you with specific information on the dispatch and delivery of the goods in subsequent communication with you.
However, you will receive the order irrespective of whether you wish to receive the transmission. Please note that after the transmission, we have no influence on the scope, type and purpose of the data processing by the shipping service provider.
The legal basis for the data processing described is Art. 6 (1) (a) of the General Data Protection Regulation (consent).
5.3 Telephone orders
We process your personal data that you provide to us when ordering by telephone.
The legal basis for the described data processing is Art. 6 para. 1 letter b of the General Data Protection Regulation (pre-contractual measures and fulfilment of contract).
5.4 Fraud prevention
In order to prevent fraud, we may check the correctness and deliverability of address data via postal service providers and, in the case of atypical order transactions (e.g. dispatch to a previously unused delivery address, simultaneous ordering of a large number of goods/services), restrict the payment methods available or refuse to conclude a purchase contract. The legal basis for the described data processing is Art. 6 para. 1 letter f of the General Data Protection Regulation (balancing of interests, preventing fraud).
5.5 Food recall/ Product recall
We process your data (name, e-mail address, transaction data) to ensure food safety in the event of defective products and to avert possible personal injury or damage to property. The legal basis for the described data processing is Art. 6(1)(c), (d) of the General Data Protection Regulation (fulfilment of a legal obligation or protection of vital interests of the data subject or another natural person).
5.6 Age check
In accordance with the Youth Protection Act, we only supply alcoholic beverages to persons over the age of 18. We reserve the right to carry out a respective check. As part of this, the driver will check the recipient's ID at the goods issue if necessary and note the status of the check in the system. The legal basis is thus compliance with legal obligations (Art. 6 para. 1 letters c and f DSGVO).
5.7 Advertising
In addition to processing your data to process orders in our online shop, we also use your data for advertising purposes as described in more detail below. You can object to the processing of your data for advertising purposes at any time. An informal message to the contact details mentioned under point 1 is sufficient.
5.7.1 Direct advertising by e-mail
We use your e-mail address provided in connection with an order in our online shop for direct advertising for our own similar offers. You will receive these product recommendations regardless of whether you have subscribed to our newsletter. In this way, we want to send you information about goods and services from our range that may be of interest to you based on the orders you have placed in our online shop to date. If you do not wish to receive these product recommendations, you can object to this at any time without incurring any costs other than the transmission costs according to the basic rates. An informal message to the contact details mentioned under point 1 is sufficient. Alternatively, you can also use the unsubscribe link contained in every e-mail. The legal basis for the data processing described above is Article 6 (1) (f) of the General Data Protection Regulation (balancing of interests) and Section 7 (3) of the Unfair Competition Act (processing of your e-mail address for direct advertising).
5.7.2 Newsletter
If you have the option on our website to register for the newsletter, we will inform you about our current offers. If you provide us with your name, we will use this to address you personally. If you also provide us with further data, we use this to tailor the content of the newsletter to you and your interests. After sending the registration form, you will receive a confirmation e-mail. The registration only becomes effective once you have clicked on the link in the confirmation e-mail. You can unsubscribe from the newsletter at any time. To do so, simply use the unsubscribe link at the end of each email. The legal basis for the described data processing is Art. 6 para. 1 letter a of the General Data Protection Regulation (consent).
5.7.3 Letter advertising
We use your billing address provided in connection with an order in our online shop for direct advertising for our own offers. You will receive this mail advertising regardless of whether you have subscribed to our newsletter. In this way, we want to send you information about goods and services from our range that may be of interest to you based on the orders you have placed in our online shop to date. If you do not wish to receive this mail advertising, you can object to this at any time. An informal message to the contact details mentioned under point 1 is sufficient. The legal basis for the data processing described above is Article 6 (1) (f) of the General Data Protection Regulation (balancing of interests).
5.7.4 Personalisation of the advertising approach
We want to send you advertising that is geared to your individual interests. To do this, we analyse your data and try to select products, services and promotions that are exactly right for you when designing the advertising approach. To do this, we evaluate your data in order to recognise typical patterns of purchasing behaviour, define clearly defined target groups and tailor the advertising approach to the respective target group. Calculated purchase probabilities help us to better identify your needs. The legal basis for the described data processing is Art. 6 (1) (a), (f) of the General Data Protection Regulation (consent or weighing of interests to provide advertising that is oriented to the individual interests of the recipient).
5.7.5 Satisfaction survey
We process your data in order to invite you to satisfaction surveys, e.g. following an order. The legal basis for the described data processing is Art. 6 (1) (a) and (f) of the General Data Protection Regulation (consent and weighing of interests).
5.7.6 Advertising success control
We evaluate the results of our marketing activities to measure the efficiency and relevance of our campaigns. We determine the success of our advertising measures in order to continuously improve our marketing activities in your interest and to plan new measures. The legal basis for the data processing described is Art. 6 (1) (f) of the General Data Protection Regulation (balancing of interests).
5.8 Contact
You can contact us by e-mail, post and telephone. We process your data in order to answer your enquiry and, if necessary, to send you the information material you requested. Your data may be transferred to the office responsible for your request. The legal basis for the described data processing is Art. 6 (1) (b), (f) of the General Data Protection Regulation (pre-contractual measure, fulfilment of contract or balancing of interests, answering enquiries from customers and other persons).
5.9 Cookies and other technologies (website analysis/tracking)
We use cookies in some areas of our website, e.g. in order to recognise visitor preferences and to be able to optimally design the website accordingly. This enables easier navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.
Cookies are small text files that are stored on the hard disk of your terminal device. They allow us to retain information for a certain period of time and to identify your end device. We use permanent cookies for better user guidance and individual performance presentation. Furthermore, we use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.
5.9.1 Necessary technologies
These services, technologies and cookies are necessary to ensure central functions of the portal as well as the fulfilment of contracts with customers and cooperation partners. They are used on the legal basis of Art. 6 para. 1 sentence 1 lit. b) (contract initiation or fulfilment), lit. c) (if legal obligations exist) and/or lit. f) DSGVO (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website as well as our interest in the economic use of partner sales channels. They can therefore not be deactivated via our Consent Management System or by you as a website user. These are the following services.
5.9.1.1 Tag Management System
The processing procedures within this category control the playout of services, technologies and cookies without storing the data collected within the scope of these services. Similarly, no data is collected or stored by the tag management systems themselves. The system is used to technically implement your choice regarding privacy settings.
5.9.1.4 Billing with cooperation/affiliate partners
The processing operations within this category enable an exchange with cooperation partners for billing and remuneration purposes. For this purpose, statistical data of transactions are collected and processed.
5.9.1.5 Basic web analysis (excl. customer IDs)
The processing operations within this category are used for the following purposes: for non-personal traffic analysis, incident monitoring & alerting, fraud detection, IT management, reach measurement, product development and improvement, navigation tracking.
5.9.2 Statistical Technologies
These services, technologies and cookies are needed to understand how our visitors use our portal, to detect errors and to continuously improve the portal. They are used on the legal basis of Art. 6 para. 1 p. 1 lit. a) DSGVO (consent). Data processing only begins when the corresponding opt-in has been given. There is the right to revoke the consent(s) at any time with effect for the future. The revocation does not affect the lawfulness of the processing of the data carried out until the revocation.
5.9.2.1 Session and service monitoring
The processing operations within this category are used to understand the behaviour of our visitors on the website and to identify problems with the use of the website.
5.9.2.2 Website testing and optimisation
The processes within this category are used to test different variations of page content with the aim of making the website as optimal as possible for the customer.
5.9.2.3 Measuring success and optimising marketing measures
The processing procedures within this category are used to measure the success of specific marketing measures and to make deductions for optimised control.
5.9.2.4 Feeder analysis
The processes within this category are used to track which feeder channels and campaigns our visitors use to reach the website.
5.9.3 Marketing technologies
These services, technologies and cookies are used to understand your interests and to serve you personalised content that is relevant to you. The use is based on the legal basis Art. 6 para. 1 p. 1 lit. a) DSGVO (your consent). The data processing only begins when you have given the corresponding opt-in. You have the right to revoke your consent(s) at any time with effect for the future (see privacy policy as well as in the privacy settings at the bottom of the footer). The revocation does not affect the lawfulness of the processing of the data carried out until the revocation.
5.9.3.1 Personal advertising and remarketing on third-party sites, social channels, search engines or sites of cooperation partners
The processing operations within this category are used to display interest-based advertising to the user on third-party sites, social media, search engines or sites of cooperation partners.
5.9.3.2 Session monitoring
The processing operations within this category are used to understand the scrolling and clicking behaviour of our visitors and to identify problems with the use of the website and display errors.
5.10 Forwarding to Social Meida services
On our website you will find links to Facebook's social media services. You can recognise links to the websites of the social media services by the respective company logo. If you follow these links, you will reach ColleCiocco.it's corporate presence on the respective social media service. When you click on a link to a social media service, a connection is established to the servers of the social media service. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service.
If you are already logged in to the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.
The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the Member States of the European Union.
Please note that we have no influence on the scope, type and purpose of the data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.
5.11 Web server protocols
When you visit our websites, in order to ensure the security of our IT systems, we process the connection data of the requesting computer including the IP address, the websites you visit on our site, the date and duration of the visit, the identification data of the browser and operating system type used as well as the website from which you visit us as standard. The legal basis for the described data processing is Art. 6 (1) (f) of the General Data Protection Regulation (balancing of interests to ensure the security of IT systems).
6. data sources
We receive personal data from you yourself when you make these entries yourself on the website.
Who has access to your data and for what reason?
Only persons who need your data to carry out the tasks assigned to you will have access to it. Outside VINOMONTEFALCO.DE, service providers who support us in the fulfilment of our tasks may have access to your data. These are service providers of the following categories:
Hosting service providers for the operation of our servers
Development service providers for programming, development, maintenance and support of software applications
Service provider for processing payments
E-mail dispatch service provider for sending e-mails in connection with an order
Service provider for the provision of logistics services
Parcel delivery service provider for the delivery of orders
Cooperation partner for the delivery of orders
E-mail marketing service provider for the dispatch of newsletters
Print service provider for the printing and dispatch of advertising letters
Service provider for the provision of survey tools
Advertising network operators for advertising campaigns and display of online advertising (remarketing and retargeting)
Service providers for the delivery and performance measurement of online advertising
Analysis service provider for the evaluation of data and analysis of the use of electronic media (website, app)
The vendors/recipients of data in the context of cookies and other technologies mentioned in this data protection declaration
Social media operators for the provision of social plugins
Service providers used by us must comply with special confidentiality requirements. They will only be given access to your data to the extent and for the period of time necessary for the performance of their tasks.
In the event of a suspected criminal offence, we may pass on your data to law enforcement authorities (police, public prosecutor's office).
8. are data processed outside the European Union?
Service providers located in third countries outside the European Union may be used to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed in the third countries as securely as within the European Union. With service providers in third countries, we conclude the data protection contract (standard data protection clauses) provided by the Commission of the European Union for the processing of personal data in third countries. This provides appropriate safeguards for the protection of your data with service providers in the third country. You can request a copy of this data protection contract using the contact details provided above.
9 How long will the data be stored?
We generally only store your data for as long as we need it for the respective processing purposes. If the data is no longer required for the fulfilment of the processing purposes stated in this data protection information, it will be deleted, unless its retention is still necessary for the fulfilment of retention obligations under commercial or tax law. As a rule, we delete your data after these periods or determine the deletion period according to these criteria:
Customer account data after termination of the user relationship
Newsletter data after revocation of consent
Data on purchases made ten years after the purchase has been made
Data on an enquiry to the customer service three months after completion of the transaction
Data on an application for an advertised position six months after completion of the application process
10. what rights do you have?
10.1 Information
You can request information about your personal data processed by us.
10.2 Correction
If your information is not (or is no longer) accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
10.3 Deletion
You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.
10.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a claim for restriction of processing depends on the existence of a legitimate ground.
10.5 Objection
You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data.
10.6 Objection to the processing of your data for direct marketing purposes
You have the right to object at any time to the processing of your data for direct marketing purposes. This also applies to profiling in connection with direct advertising. You can send your objection informally to us, preferably to datenschutz@vinomontefalco.de, stating the keyword "Objection to the processing of my personal data for advertising purposes".
10.7 Right of complaint
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
10.8 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.
10.9 Withdrawal of your consent
You have the right to withdraw any consent you have given to us to process your data at any time. The easiest way to withdraw consent you have given us is by emailing datenschutz@vinomontefalco.de. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.