Privacy notice
Privacy & cookies.
We collect only what we need to reply to you. Our cookies are for statistics, they are optional, and none of them is there to advertise to you.
In short. The only place this site collects data is the quote request form. What you write there reaches us by email and is used solely to prepare your proposal. The only cookies are for statistics, and we set them only if you accept: refuse, and the site works exactly the same. We pass nothing to anyone for commercial purposes.
Who handles your data
The data controller is Tenute di Famiglia, registered office at Frazione Naviante 1 bis, 12060 Farigliano (CN), Italy, VAT number IT04167230046.
For any question about this notice, or to exercise your rights, write to umberto@fia.wine or call +39 334 851 8609. We have not appointed a Data Protection Officer: we do not fall within the cases where the GDPR requires one.
What we collect
From the quote request form: name and business, VAT number, email, phone, wine type, estimated quantity, occasion or goal, and the free text where you describe your project. Only name, business and email are required. The rest is up to you, and leaving it empty costs you nothing.
Along with the request, the server records the date, time and IP address it came from. That is there to tell real enquiries from bots and to reconstruct any abuse, not to identify you.
As on every website, our host also keeps technical access logs (IP address, page requested, date and time, browser). This is standard server behaviour, whether or not you fill in the form.
We collect no special category data (health, opinions, beliefs) and have no use for it. If you happen to write any in the free text field, please delete it before sending.
Why we process it, and on what legal basis
- To reply and prepare a proposal for you. Legal basis: pre-contractual steps taken at your request, Article 6(1)(b) GDPR. This is not consent: it is what you asked for by writing to us.
- To protect the site from spam and abuse and to keep technical logs. Legal basis: our legitimate interest in running the service securely, Article 6(1)(f).
- To meet accounting and tax obligations, if the enquiry turns into a commercial relationship. Legal basis: Article 6(1)(c).
The box you tick before sending the form confirms you have read this page. It is not consent to receive marketing: we send no newsletter and will not use your address to pitch you anything else.
Who sees it
Requests are read by whoever at EnoPrivateLabel handles quotes. Beyond that, your data passes only through the providers of our technical tools, who act as processors and are bound by contract:
- Aruba S.p.A., Via San Clemente 53, Ponte San Pietro (BG), Italy: hosts the site and physically sends the email. Servers in Italy.
- Google Ireland Limited: runs the mailbox that receives the requests and, if you have accepted statistics cookies, Google Analytics. Google may also process the data in the United States, under the safeguards of Chapter V GDPR (standard contractual clauses and certification under the EU-US Data Privacy Framework).
Nobody else. We do not sell, rent or pass on your data for commercial purposes, and we do not use it for automated decision-making or profiling.
How long we keep it
- Enquiries that go no further: 24 months, then deleted. That is roughly how long a project left hanging takes to come back.
- Enquiries that become a commercial relationship: 10 years, as accounting and tax law require.
- Technical server logs: up to 12 months.
Your rights
At any time you can ask us to give you access to your data, correct it, erase it, restrict its processing, hand it over in a machine-readable format, or object to processing based on legitimate interest. These are Articles 15 to 22 GDPR.
An email to umberto@fia.wine is enough. We reply within one month, and in practice much sooner.
If you believe something is wrong, you can lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, garanteprivacy.it, or with the authority of the country where you live.
Cookies
The site runs without cookies. The only ones that exist are for statistics, and they are always optional. What changes from one visitor to the next is whether we ask you first.
Where you are changes what we do
Privacy law is not the same everywhere, so the site does not behave the same everywhere.
- Europe, the United Kingdom and Switzerland. We ask first. Until you choose in the banner shown on your first visit, nothing is loaded and nothing is written: your browser does not even contact Google.
- Everywhere else, the United States included. Statistics start on their own and no banner appears. You can switch them off whenever you like with the button further down, and we remember it.
We work out which of the two applies from your browser's time zone, a setting that never leaves your device: we do not send your address to a geolocation service to find out where you are. Whenever we cannot read it we assume Europe and ask. Google runs a second check on the country your visit actually arrives from, so if the time zone is misleading the European rule still wins and no cookie is written.
If statistics are off
Nothing happens: no cookie is set, your browser does not contact Google, and the site works exactly as before. We will not ask again on every page: we bring the choice back after six months.
If statistics are on
We load Google Analytics 4, which sets two cookies in your browser:
_ga, two years: tells one visitor from another._ga_<identifier>, two years: keeps the state of the visit.
We use them to know how many people come to the site, which pages they enter from and which country they come from. We do not use them for advertising, we have not enabled Google's advertising signals, and Google Analytics 4 does not retain your full IP address.
Changing your mind
The button below opens the same choice, whether or not you were ever shown the banner. Turn statistics off and the cookies stop being set straight away. Your decision is stored in your browser (in local storage, which is not a cookie) along with the date you made it.
What is not here
No profiling cookies, no advertising, no data resold. There are no Facebook, LinkedIn or other social pixels, and no embedded videos, maps or widgets from other sites.
Even the typefaces are served from our own domain rather than Google's servers: refuse statistics, and opening a page your browser contacts no external service at all.
Changes
If we change how we handle data, we will update this page and the date at the top. The version you are reading here is the one that applies.