Privacy Policy

Who we are

This policy explains how we handle the personal data of people who visit www.saracco.eu, send us an order request or contact us. It is provided under Article 13 of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).


Data controller: Azienda Vitivinicola Saracco Pierluigi di Lanata Francesca, Regione San Giovanni 84, 14053 Canelli (AT), Italy – VAT IT01445670050.


Email: vini@saracco.eu – Phone: +39 338 935 2556


Last updated: 10 November 2026.

What data we collect

  • Data you give us. When you fill in the order form: name, phone number, email address, the wines and quantities you want, the delivery address (only if you ask us to ship or deliver) and any notes. The same applies to data you give us by email or by phone.
  • Browsing data. The systems that run the website automatically record some technical data, such as IP address, browser type, date and time of the visit and pages requested. These data are needed to show the pages and to keep the site secure.


Please do not include in the notes any information we do not need, especially sensitive data such as health information.

Why we use your data and on what legal basis

  • To answer your order request, call or write back to you, agree on delivery and payment, and hand over or ship the wine. Legal basis: steps taken at your request before entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR).
  • To comply with the law, for example invoicing, accounting and tax obligations and the ban on selling alcohol to minors. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • To run the website securely and protect the order form from spam and abuse, also with Google reCAPTCHA. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).


We do not use your data for newsletters or advertising, we do not sell it, and we do not carry out profiling or automated decision-making.

Do you have to give us your data?

Your name, a phone number or email address and the quantities you want are needed to handle your request: without them we cannot answer you. The delivery address is needed only if you want us to ship or deliver the wine.

Who receives your data

  • Our family business, which handles your request.
  • Companies that process data on our behalf as data processors (Art. 28 GDPR): Register S.p.A. (Florence, Italy), which provides the website service, and Duda Inc. (USA), which provides the website platform and the order form; the provider of our email account.
  • Couriers, only for shipments and only with the data needed for delivery (name, address, phone number).
  • Our accountant and public authorities, where required by law.
  • Google (reCAPTCHA): the order form is protected against spam by Google reCAPTCHA, which analyses technical data such as your IP address and how you interact with the page. Google’s Privacy Policy applies.
  • Mapbox Inc. (USA): the map in the section about visits is provided by Mapbox. When the map loads, your browser connects to Mapbox’s servers, which receive your IP address and technical browser data.

Transfers outside the European Union

Duda, Google and Mapbox may process some data in the United States. These transfers take place under the safeguards provided by the GDPR: the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for certified companies, or the standard contractual clauses approved by the Commission (Art. 46 GDPR).

How long we keep your data

  • Requests that do not lead to a purchase: up to 12 months from our last contact.
  • Data linked to a purchase and the related accounting records: 10 years, as required by Italian law (Art. 2220 of the Civil Code).
  • Technical browsing data: only for as long as needed to run the website and keep it secure, according to our providers’ policies.

Cookies

This website uses only technical cookies, which are needed for it to work (for example, to spread traffic across the servers). Google reCAPTCHA, which protects the order form from spam, may also set its own technical cookies. We do not use profiling, advertising or statistics cookies. Under Italian law (Art. 122 of the Personal Data Protection Code), technical cookies do not require consent. You can block or delete cookies in your browser settings, but some parts of the site may then not work properly.

Minors and the sale of wine

This website and the sale of wine are reserved for people aged 18 or over. We do not knowingly collect data from minors. When you collect or receive the wine, we may ask to see an identity document.

Your rights

You can ask us at any time for access to your data, correction, erasure, restriction of processing and data portability, and you can object to processing based on our legitimate interest (Articles 15–22 GDPR). Just write to vini@saracco.eu. We will reply within one month.


If you believe your data are being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

Changes to this policy

We may update this policy. The current version is always on this page, with the date of the last update.