Privacy Policy

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and describes how the personal data of those who visit and use the website https://merlotta.com are processed.

1. Data controller

Merlotta Società Agricola di Minzolini Paolo & C.
Via Merlotta 1, 40026 Imola (BO), Italy
VAT / Tax code: 00537271207
Email: info@merlotta.com

2. What data we collect

Browsing data. During normal operation, the computer systems and software running this website collect certain data whose transmission is implicit in the use of Internet communication protocols: IP addresses, browser type and operating system, URIs of the requested resources, time of the request, method and size of the response, server status code. These data are used to obtain anonymous statistics on the use of the website and to check that it works correctly; they may be used to establish liability in the event of computer crimes against the website.

Data provided through contact forms. Sending messages, optionally and explicitly, through the forms on the website or to the addresses indicated involves the collection of the sender’s contact details and of any data included in the message, which are needed to reply to the request.

User account. Registration involves the processing of identification data and login credentials, which are kept to allow access to the reserved area.

Purchases. To manage orders, payments, invoicing and shipping we process personal, contact, delivery and billing data. Payment card data are processed directly by the payment provider and are neither transmitted to nor stored on our systems.

Cookies and similar technologies. The website uses technical cookies and, subject to consent, preference, statistics and marketing cookies, including third-party cookies: full details are in the Cookie Policy.

3. Purposes and legal bases

4. How and where we process data

Data are processed electronically, for no longer than strictly necessary for the purposes indicated, with technical and organisational measures appropriate to prevent unauthorised access, loss, destruction or disclosure: encrypted connection (HTTPS), access control, backups and system updates.

Data are normally processed within the European Economic Area. Any transfer to third countries takes place only on the basis of an adequacy decision or of standard contractual clauses approved by the European Commission.

5. Recipients

Data may be disclosed to parties acting on behalf of the controller as data processors (hosting provider, email services, technical maintenance of the website, payment provider, courier and invoicing service), and to public authorities where required by law. Data are not disseminated or sold to third parties.

6. How long we keep data

• Server technical logs: up to 12 months, unless needed to investigate unlawful acts.
• Contact form requests: up to 24 months from the last contact.
• Order, invoice and accounting data: 10 years, as required by Italian civil and tax law.
• Proof of cookie consent: 24 months.
• Cookies: the duration stated for each one in the cookie policy.

7. Your rights

You may exercise at any time the rights provided by Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent (which does not affect the lawfulness of processing carried out before withdrawal). Requests should be sent to info@merlotta.com and will be answered within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of the country where you live.

8. Provision of data

Providing browsing data is necessary for the website to work. Providing other data is optional, but refusing may make it impossible to handle the request or complete the order. There is no automated decision-making producing legal effects on the data subject.

9. Updates

The controller may amend this notice, giving notice on this page. Version 1.0, effective from 31 August 2026.

English translation of the Italian “Informativa privacy” (version 1.0, 31 August 2026). In case of discrepancy, the Italian version prevails.