Privacy notice

Controller

Pacifico Concetta
Impresa individuale
Via Castel Volturno 53
81034 Mondragone (CE)
Italia

P. IVA 02883620615
REA CE-202978

Email: info@cantinesciacca.it

Telephone: 0823 931637

Mobile: 376 2478648

A Data Protection Officer (DPO) has not been appointed.

Data processed

Depending on the services used, the following may be processed:

• data sent through the contact form (name, email, telephone if provided, subject and message);
• data needed for ecommerce, including the cart, selected products and, in the case of an order, the data collected by Shopify at checkout and for order handling;
• account data, if you sign in to Shopify Customer Accounts;
• technical browsing data strictly necessary for the site and the cart to work.

Purposes and legal bases

Contact-form data are processed in order to handle the request. The processing is necessary to follow up the data subject’s enquiry.

Cart, checkout, account and order data are processed in order to conclude and perform the contract of sale, to meet legal obligations and, where applicable, for the legitimate interest in the security and proper functioning of the service.

We do not use the data for commercial profiling and we do not send marketing communications without a specific legal basis. Traffic and performance measurements on Vercel, where active, are described below.

Contact form

The message is sent by email to the controller. The address given in the form is used as Reply-To so that a reply can be sent. No account is created by sending the form alone.

Ecommerce, checkout and account

The catalogue, the cart and checkout are managed with Shopify. When an order is completed, the data are processed by Shopify for payment, invoicing, delivery and assistance. Any access to the customer area takes place through Shopify Customer Accounts, on Shopify domains.

The data needed for delivery, such as name, address and contact details, are communicated to the carrier GLS in order to perform the shipment.

Cookies and technical storage

The site uses strictly necessary cookies and storage, in particular an httpOnly technical cookie to remember the Shopify cart. Further detail is in the Cookie Policy.

Vercel Web Analytics

Vercel Web Analytics is active on the production deployment. According to Vercel’s documentation, the tool collects aggregate traffic statistics: it does not use cookies and does not associate analytics data with an individual visitor or an IP address. Page path, referrer, country, device/browser/operating-system type and timestamp may be collected in aggregate form.

Any custom events on the site (cart, checkout start, contact submission, map opening, account opening) contain no identifying data: name, email, telephone, address, customer or order identifiers are not sent.

Vercel Speed Insights

Vercel Speed Insights is active on the production deployment and measures real page performance (Web Vitals). According to Vercel’s documentation, a sanitised path/URL, browser/device/operating system, country, network speed and performance metrics may be collected, without associating the data with an identified individual.

Before sending, the query string and fragment of the URL are removed, so that accidental parameters are not transmitted.

Recipients and suppliers

• site hosting: Vercel;
• sending of contact-form email: Infomaniak;
• ecommerce, checkout, payments and customer account: Shopify;
• shipping and fulfilment of delivery: GLS, as carrier;
• Google, only if the user chooses to load the map on the contact page or opens the Google Maps link.

Some suppliers may also process data outside the European Economic Area, according to the safeguards provided by the relevant contracts.

Google Maps

The Google map is not loaded automatically. Only after an explicit click does the browser connect to Google services. The choice is not stored.

Retention

Data are kept for the time needed for the stated purposes and the applicable obligations, including any need for legal protection and for tax or commercial retention.

Rights of data subjects

The data subject may request access, rectification, erasure, restriction, portability and objection to processing, in the cases provided by the GDPR, by writing to info@cantinesciacca.it. A complaint may also be lodged with the Garante per la protezione dei dati personali.

Updates

This notice may be updated if the services, the suppliers or the applicable law change.