DATA PROCESSING POLICY Art. 13 EU Regulation 2016/679

In compliance with the EU General Data Protection Regulation 2016/79 and with special reference to Art. 13 thereof, Serena Wines 1881 S.r.l. a socio unico hereby informs customers as follows:
i) The Data Controller responsible for collecting and processing personal data is Serena Wines 1881 S.r.l. a socio unico (hereinafter the Company), registered office in via Camillo Bianchi, 1, Conegliano, registered in the Treviso Belluno Companies Register, tax ID and VAT No. 02481910269, to whom customers may address any enquiry at the following address:
ii) The Company informs that customers’ personal data will be processed for the purposes described below:
[a] to grant customers access to the part of the Company’s website dedicated to online sales of its products, thereby permitting them to carry out all the purchase procedures, and permitting the supplier to fulfil the necessary administrative, commercial, accounting and fiscal requirements deriving from online sales and in general to comply with the legal obligations involved (e.g. consumer’s right of withdrawal, product warranty rights, etc.);
[b] to inform customers by sending periodical emails with advertising material and information about the Company’s products and services, as well as any other type of initiative it may implement.
iii) The Company undertakes to treat as confidential details and information transmitted by customers and not to disclose them to unauthorised persons, use them for purposes different from those for which they are collected, or transmit them to any third parties not listed below. Personal data can only be communicated to subjects delegated to do what is necessary to fulfil the supplier’s and the customer’s contractual commitments (e.g. financial institutions, dispatch and transport companies, and outsourced structures that work directly with the supplier for the technical management of its website). Personal data may also come to the knowledge of the dispatch and delivery company’s staff, personnel responsible for running the website and marketing staff.
iv) The data acquired will be stored for no longer than is necessary for the purposes for which they were collected and processed and to observe legal terms. In particular, where data are linked to a special account created by the customer when registering on the website, the Company will automatically erase such data if the customer does not proceed with an online purchase of the products within 12 months of his or her last purchase. Data for marketing purposes (see [b] above), will be processed until the customer exercises his or her revocation right (see letter vi) below), resulting in erasure of the data from the mailing list.
v) Customers enjoy the rights described in arts. 15 ff of EU Regulation 2016/679, including the right to apply to the data controller for access to their personal details, their rectification or erasure, restrictions to processing, or to object to their processing.
vi) With reference to the processing of personal details for the purposes described at letter [b] above, customers have the right to revoke their consent to such processing, applying the procedure for removal from the mailing list in which they were included due to their consent.
vii) Customers also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) for the protection of personal data.
viii) Communication by the customer of his or her personal data is a contractual obligation as it is a necessary requirement for purchasing the Company’s products online. Otherwise, the customer cannot make a purchase using the procedures required by the Company’s website. Regarding the Company’s marketing activities (see letter [b] above), failure to provide data and/or lack of consent to their processing will preclude sending the above-mentioned advertising material and information.
ix) The Company declares that it does not carry out customer profiling, nor does it adopt automated decision making for profiling purposes.
*** *** ***
Online consent to processing (double click)

Having read the information regarding personal data processing pursuant to Art.13 of EU Regulation 2016/679, the customer:
• consents to the processing of his/her personal details for the purposes described at letter [a] (to access the part of the Company’s website dedicated to the online sale of its products in order to carry out the purchase procedure and fulfil the required obligations).
I consent [ ] I do not consent [ ]
• consents to the processing of his/her personal data for the purposes described at letter [b] (supplier’s marketing activities).
I consent [ ] I do not consent [ ]