Pursuant to the Regulation (EU) 2016/679 and the applicable laws, we wish to provide you with the following information concerning the processing and protection of your personal data

Data Controller
Antica Acetaia La Secchia di Righi Lorenzo, Via Ghiaroni 169 – 41126 Modena (MO) – Italy, Tel. +39059300331 mail:

Source of personal data:
Personal data is collected directly from the data subject when completing this form for the purpose of purchasing the products offered, even without the need to create a specific account.

Purposes of the processing
The personal identification data collected from the data subject, user of the website, are the subject of the processing and are processed and used directly for the following purposes:
To satisfy users' purchase requests and register their personal account. Any incorrect or insufficient communication of the requested data may result in the total or partial impossibility to implement the data subject’s requests.  
retention period 10 years from registration
For administrative and accounting purposes.
 purpose and retention period as required by law.
for defence purposes or debt collection.
retention period 10 years from the last purchase
for sending communications on future commercial and promotional initiatives; announcements of services and offers from the Controller and for sending information and promotional messages relating to its activity, as well as for the purposes connected to this and also instrumental for statistical purposes. Provision is subject to your express consent and the data will be kept until the consent is revoked.
For sending communications and commercial offers on products like those already purchased, without the need to request consent from the data subject ("Soft spam").
retention times: for the following two years from the first filing and in any case not beyond any objection by the data subject.

The data collected will not be disseminated.
They will be transmitted to third parties to whom the communication is necessary to fulfil tax or administrative obligations, or to individuals that the Controller makes use of for carrying out instrumental and/or ancillary activities to fulfil its obligations deriving from the conclusion of contracts and/or in any case connected to the services offered (by way of example, your data will be transmitted to the transport company in charge of delivering the purchased products, to legal offices, to any customer satisfaction agencies, to payment circuits such as Nexi). Also to individuals whose authority is recognised by legal provisions or by orders of the authorities.

Methods of processing
Your personal data will be processed according to the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the help of the current IT systems or paper supports by specifically authorised personnel trained on matters concerning confidentiality and the obligation to use the data only for the purposes identified by the Controller. The Controller will put in place technical and organisational measures appropriate to the level of risk. Once the retention periods indicated above have elapsed, all data will be destroyed or made anonymous, in accordance with the technical cancellation and backup procedures.

Extra-ue data transfer
The data of the Data subject will not be transferred to non-European countries. Should the Data be transferred to non-European countries or international organisations in the future, all the provisions of Chapter V (EU Regulation 2016) will be complied with.

Rights of the data subject
You have the right to request the data controller for access to his/her personal data, rectification, modification, cancellation, object to the processing of personal data as well as, if applicable, the limitation of the processing of said data. You also have the right to request a full list of these rights by writing to the Data Controller’s address.

Revocation of Consent
You can interrupt the processing of this information at any time, by writing your intentions to the Data Controller, without however affecting the operations lawfully carried out up to that moment.

Right to Complain
Should you believe that the processing regarding you violates the General Data Protection Regulation (EU) 2016/679 (GDPR), you have the right to lodge a complaint with the Data Protection Authority.