Are you of legal drinking age?
You are not old enough to view this content

Privacy Policy

This notice is provided pursuant to Regulation (EU) 2016/679 (GDPR) and describes how Distillati group srl collects, uses, and protects your personal information through distillatigroup.com.

1. Data controller

The data controller is:

Hereafter, referred to as “Holder.”

2. Types of data collected

In connection with the services offered, the Owner may collect the following categories of personal data:

  • Browsing data: IP addresses, browser type, operating system, source page, time of request. This data is collected automatically to ensure the proper functioning of the site and for statistical/security purposes.
  • Data provided voluntarily: first name, last name, email address, phone number, billing information, and other information provided through contact forms, registration, orders, or request for quotes.
  • Cookies and similar technologies: for complete information about cookies and how to consent, see the Cookie Policy.
  • Payment data: if you provide payment data (e.g., via PayPal, Stripe), your payment data will be processed by the relevant payment providers according to their policies and conditions.

3. Purpose of processing and legal basis

Personal data are processed for the following purposes:

  • Responding to requests or quotes: execution of pre-contractual measures and relationship management – legal basis: execution of pre-contractual measures/contract.
  • Order and payment processing: fulfill contractual and tax obligations-legal basis: execution of contract and legal obligation.
  • Sending newsletters or commercial communications: sending promotional material only with the express consent of the data subject – legal basis: consent.
  • Site analysis and improvement (statistics/analytics): use of aggregated data or, if not anonymized, based on legitimate interest of the Owner (interest balancing) or on consent if required (e.g., profiling cookies).
  • Legal obligations: accounting and tax compliance and requests from authorities – legal basis: legal obligation.

4. Recipients or categories of recipients

Data may be disclosed to subjects or categories of subjects such as:

  • Hosting and infrastructure providers (cloud providers);
  • technical and management service providers (e.g., web agencies, IT consultants, newsletter companies);
  • Payment service providers (e.g., PayPal, Stripe);
  • Couriers and logistics providers in case of product shipment;
  • public authorities or third parties for legal obligations.

When data are disclosed to third parties, this is done in compliance with the GDPR and on the basis of contracts that impose confidentiality and security obligations (e.g., data controller agreements).

5. Data transfers to non-EU countries.

If data is transferred to countries outside the European Union (e.g., cloud services or analystics based outside the EU), the Data Controller adopts the safeguards provided by the GDPR (e.g., Standard Contractual Clauses, adequacy decisions, or other appropriate safeguards). Any transfers will be made explicit in the cookie policy or specific contracts.

6. Retention period

Personal data are kept for as long as necessary to achieve the purposes for which they are processed and, in any case, in compliance with the terms imposed by applicable regulations. Example indications:

  • Data for contact requests: retention until the request is processed, unless otherwise required.
  • Newsletter data: until consent is revoked.
  • Accounting/fiscal data: retention for the period required by tax regulations (e.g., 10 years) or other legal requirement.

7. Processing of data of minors

The site is not intended for children under the age of 16. If the data of minors is to be processed, the Owner will take measures to obtain parental or guardian consent when required by law.

8. Automated decision making and profiling

There are no decisions based solely on automated processing, including profiling, that produce significant legal effects or significantly affect the data subject, unless otherwise specifically disclosed at the time of data collection.

9. Rights of the data subject

You have the right to:

  • Obtain confirmation of the existence of data about you and a copy of it (right of access);
  • Obtain correction of inaccurate data or supplementation of incomplete data;
  • Obtain deletion of data (right to be forgotten), when applicable;
  • Obtain restriction of processing, when applicable;
  • Oppose data processing based on legitimate interest;
  • Obtain portability of the data provided (structured, readable format);
  • revoke consent at any time without affecting the lawfulness of the processing based on the consent before revocation.

To exercise your rights you can send a request by email to: info@distillatigroup.com. In case of a complaint, you can also turn to the Data Protection Authority (Supervisory Authority).

10. Security Measures.

The Controller shall take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, disclosure and alteration in accordance with legal obligations.

For details about the cookies used (type, purpose, duration, how to deny or remove consent) see the Cookie Policy. Cookies that require consent (e.g., profiling cookies or certain third-party cookies) will be activated only with your express consent.

12. Amendments to this policy

This policy may be updated. Any substantive changes will be communicated through the site. Last updated: {DATA-ULTIMO-AGGIORNAMENTO}.

13. Contact

For any information or to exercise your rights, you can contact the Owner at the email address: info@distillatigroup.com or at the postal address: Via Rettilineo 13 – 35010 Villa del Conte (PD).