{"id":751,"date":"2025-08-21T16:49:54","date_gmt":"2025-08-21T14:49:54","guid":{"rendered":"https:\/\/www.cdfwinery.it\/privacy-policy\/"},"modified":"2026-02-19T10:06:29","modified_gmt":"2026-02-19T09:06:29","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.cdfwinery.it\/de\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
\n
\n

PERSONAL DATA PROCESSING POLICY <\/strong>
USED ON THE WEBSITE <\/strong>https:\/\/www.cdfwinery.it\/
articles 13 \u2013 14 REG. (EU) 2016\/679<\/strong><\/h1>\n\n\n\n

Document created: 13 October 2025<\/p>\n\n\n\n

WEBSITE POLICY MOD. 1\/2025<\/strong>
For any clarification, information, or to exercise your rights as provided herein,  please email us at: info@cdfwinery.it<\/strong>
In the subject line, please write: \u201cWebsite privacy query.\u201d 
The following information may be subject to change following the introduction of new regulations or changes to the website, so please visit this section periodically to check for updates.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

GENERAL INFORMATION ON REG. (UE) 2016\/679.<\/strong><\/p>\n\n\n\n

European Regulation No. 679\/2016 sets out the rules that protect and safeguard natural persons with regard to the processing of their personal data. This privacy policy applies exclusively to the website indicated above. Third-party websites or any web pages that can be accessed through this site are not covered by this policy. As such, the Data Controller declines all responsibility for such sites and web pages. Pursuant to the law, the processing of your personal data is based on the principles of lawfulness, fairness, transparency, limitations of purpose, data minimization, accuracy, storage limitations, integrity, confidentiality, and the protection of your rights. The Data Controller undertakes to comply with the aforementioned principles and, to this end, hereby informs you that, except for those processing operations for which the law requires explicit consent, by browsing this website, uploading, or providing personal data, you accept and agree to be bound by the terms and conditions set forth in this policy.<\/p>\n\n\n\n

DATA CONTROLLER (article 24 GDPR)<\/strong>. The Data Controller (or just Controller) is the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data. The Controller is also the person responsible for managing data security. With regard to the processing of your personal data carried out through this website, the Data Controller is<\/p>\n\n\n\n

CDF WINERY S.R.L.<\/p>\n\n\n\n

Strada delle Bruscole 15<\/p>\n\n\n\n

31015 Conegliano (TV)<\/p>\n\n\n\n

VAT number 05317060266<\/p>\n\n\n\n

Email info@cdfwinery.it<\/a><\/p>\n\n\n\n

Certified email cadeifalchi@legalmail.it<\/p>\n\n\n\n

For any queries or to exercise your rights, please contact us using the addresses above. <\/p>\n\n\n\n

DATA SUBJECT<\/strong> (Article 4, paragraph 1, point (a) of the GDPR). The \u201cdata subject\u201d is the natural person, named or not named, to whom the personal data refers. In short, this is the individual who provides the Data Controller with their personal data and who, therefore, is protected by the aforementioned European Regulation. With respect to this website, the data subject concerned with the processing of personal data is you, the user, i.e. the natural person who provides their data while navigating.<\/p>\n\n\n\n

DATA OF MINORS UNDER 14 YEARS OF AGE.<\/strong> This website does not provide services aimed at individuals under the age of fourteen. The Data Controller is not responsible for any data collected from such individuals, as this responsibility lies with the lack of supervision provided by individuals with parental responsibility. In any case, if the Data Controller believes that any data has inadvertently been collected from natural persons under the age of fourteen, they will destroy them immediately.<\/p>\n\n\n\n

PURPOSE OF THE PROCESSING AND CATEGORIES OF DATA PROCESSED<\/strong> (article 13, para 1, point (c) of the GDPR). In addition to browsing data, the Data Controller only collects data which is necessary for processing, which are indicated with an asterisk (*) in the appropriate fields on the website. The data provided will be used solely and exclusively to achieve the purposes set out in the following points (for example: data provided to request information on the activity carried out by the Data Controller will be used only to respond to the request and not for other purposes, unless you provide consent or the Data Controller has a legitimate interest in using the data for other purposes). <\/p>\n\n\n\n

The reasons for which the Data Controller processes your personal data are listed below, divided by purposes.<\/p>\n\n\n\n

(1) To allow navigation on the website<\/strong>. For the purposes of normal operation of the website, the computer system may acquire certain information whose transmission is implicit in internet communication protocols (e.g. log files, IP internet address). Furthermore, information will be collected through the use of cookies that you indirectly provide simply by browsing. However, this information is not collected for the purpose of associating it to your personal identity, although given the nature of this data, it could still allow third parties to identify you by processing it and through association with other data they may already have. You can view information on cookies and automated systems similar to cookies by clicking the \u201cCookie Policy\u201d link on our website.<\/p>\n\n\n\n

(2) To meet requests for information<\/strong>. The Data Controller’s contact details are shown on our website (for example: email, registered office, landline number, mobile number, WhatsApp contact, and any other contact details). If you use these contact details to gather information about the Data Controller’s activities, you will provide the Data Controller with your personal data (such as name, surname, personal details, and WhatsApp profile picture), and these will be processed by the Data Controller exclusively to respond to requests for clarification, queries, or other requests regarding the carrying out of pre-contractual or contractual actions.<\/p>\n\n\n\n

(3) To comply with legal obligations<\/strong>. The data you provide will be used to meet legal obligations in accordance with national, European, or supranational legislation.<\/p>\n\n\n\n

(4) For the purposes of ascertaining, exercising or defending rights<\/strong>. Where necessary, the data you provide will also be used to ascertain, exercise, or defend the Data Controller’s rights in extrajudicial and\/or legal proceedings.<\/p>\n\n\n\n

(5) For sending advertising communications (defined as \u201cDirect Marketing\u201d or \u201cNewsletters\u201d)<\/strong>. This information will apply whenever you are asked to provide your data and consent to receive Direct Marketing or Newsletters while browsing the website. By providing your data and consenting to such processing, you will receive advertising material or commercial communications from the Data Controller, including offers and promotions, direct sales communications, or communications for market research or opinion polls (hereinafter collectively referred to as \u201cDirect Marketing\u201d or \u201cNewsletters\u201d). The purpose of this processing is to carry out direct marketing activities targetted at you, the user.<\/p>\n\n\n\n

(6) For the purpose of responding to your requests for information via the contact form (for example, \u201cContact us\u201d or \u201cFill in the form and receive the offer reserved for you\u201d)<\/strong>. The data you provide (for example: name, email, telephone number, or similar) by completing the aforementioned form will be processed by the Data Controller only to fulfil your specific request.<\/p>\n\n\n\n

Reference numbers are the same as those used above.<\/p>\n\n\n\n

LEGAL BASIS<\/strong> (article 13, para 1, point (c) of the GDPR). <\/p>\n\n\n\n

(1)<\/strong> Depending on the case, the legal basis may lie in consent pursuant to Article 6, para 1, point (a) of the GDPR or pursuant to Article 22 of the GDPR (see Cookie Policy), or in legal obligations and\/or legitimate interest (Article 6, para 1, points (c) and (f) of the GDPR) (see processing carried out by law enforcement agencies for legal reasons).<\/p>\n\n\n\n

(2)<\/strong> The legal basis lies in the performance of pre-contractual or contractual actions requested by you (article 6, para 1, point (b) of the GDPR).<\/p>\n\n\n\n

(3)<\/strong> The legal basis for such data processing is to fulfil a legal obligation to which the Data Controller is subject (article 6, para 1, part (a) of the GDPR).<\/p>\n\n\n\n

(4)<\/strong> A legitimate reason for processing is the legitimate interest of the Data Controller (article 6, para 1, part (f) of the GDPR). To this end, if a disagreement\/argument\/dispute were to arise between you and the Data Controller, the latter would be entitled to process your data to assert their rights.<\/p>\n\n\n\n

(5)<\/strong> Depending on the case, the legal basis could be: i) (optional) consent pursuant to article 6, para 1, point (a) of the GDPR given by you; ii) in article 130 paragraph 4 of the new Italian Privacy Code (Codice della Privacy), but only in cases where processing is via email, and for sending communications regarding services similar to those already \u201csold\u201d to you; iii) in the legitimate interest pursuant to article 6 para 1 point (f) (together with Recital No. 47 of the GDPR) when you expect such processing by the Data Controller and this does not infringe your rights and freedoms.<\/p>\n\n\n\n

(6) <\/strong>The legal basis lies in the execution of pre-contractual or contractual measures you have requested (article 6, para 1, point (b) of the GDPR).<\/p>\n\n\n\n

Reference numbers are the same as those used above.<\/p>\n\n\n\n

DATA RETENTION PERIOD <\/strong>(article 13, para 2, point (a) of the GDPR)<\/p>\n\n\n\n

(1) <\/strong>Except as stated in relation to cookies or other tools similar to cookies, the Data Controller does not store any personal data you provide while simply browsing the website.<\/p>\n\n\n\n

(2) <\/strong>Your data will be stored for the time necessary to provide the information requested: after this period has expired, your data will be deleted.<\/p>\n\n\n\n

(3) <\/strong>The retention period depends on the rule applied by the Data Controller at the time of processing.<\/p>\n\n\n\n

(4) <\/strong>The Data Controller retains your data for this purpose only if there is a reasonable probability of having to take legal action. <\/p>\n\n\n\n

(5)<\/strong> With regard to this point: i) where you have given consent, your data will be stored for this purpose until the consent referred to in article 7 of the GDPR is revoked. Withdrawal of consent does not affect the lawfulness of processing based on consent given before withdrawal; in cases ii) and iii) however, where processing is carried out pursuant to article 130, paragraph 4 of the new Italian Privacy Code and article 6, paragraph 1, point f), data will be retained for this purpose until you object to its processing, pursuant to Article 21 of the GDPR, which you must do at the beginning of the processing or while it is in course.<\/p>\n\n\n\n

(6) <\/strong>as point 2).<\/p>\n\n\n\n

Reference numbers are the same as those used above.<\/p>\n\n\n\n

OBLIGATION TO PROVIDE DATA, CONSEQUENCES OF FAILURE TO PROVIDE DATA AND METHODS OF PROCESSING (<\/strong>article 13, para 2, point (e) of the GDPR). <\/p>\n\n\n\n

(1) <\/strong>For information on whether the provision of personal data is mandatory and the consequences of failure to provide it, please refer to our Cookie Policy. Processing is carried out exclusively through computerized systems.<\/p>\n\n\n\n

(2)<\/strong> You are not obliged to provide the data. However, failure to provide this data will prevent you from receiving the requested information. Data processing is carried out via email, telephone, paper-based mail, and the App.<\/p>\n\n\n\n

(3)<\/strong> Please refer to applicable law in this specific case.<\/p>\n\n\n\n

(4)<\/strong> Data provision is mandatory. In the event of failure to provide it, legal procedures will be followed. Processing is carried out using computerized systems (for example, through the use of email, certified email, online platforms, management systems, etc.) and paper-based systems (for example, through the drafting of legal documents, formal warnings, printed documents, paper-based mail, etc.).<\/p>\n\n\n\n

(5)<\/strong> You are not obliged to provide data: there will be no consequences should you fail to do so, other than that you may miss an opportunity to receive communications on the products and services offered by the Data Controller. Regarding the processing methods, communications relating to Direct Marketing (or Newsletters) are carried out via automated systems such as email, fax, text message, automated phone calls, social networks, interactive applications such as WhatsApp, push notifications, and via \u201ctraditional\u201d means such as, postal mail and\/or operator-assisted calls. Please note that your consent to processing using automated systems authorizes the Data Controller to use the same data also for communications using traditional systems. In any case, you have the right to object to any unwanted processing (for example, by expressing your wish to receive communications only via email). When communications are sent via a telephone operator, such processing is prohibited for data subjects registered in the Public Opt-out Register (Registro delle Opposizioni).<\/p>\n\n\n\n

(6)<\/strong> You are not obliged to provide the data. However, failure to provide this data will prevent you from receiving the requested information. Processing is carried out using computerised systems.<\/p>\n\n\n\n

DISSEMINATION AND COMMUNICATION OF DATA<\/strong> (article 13, para 2, point (e) of the GDPR). Your data will not be disclosed but may be communicated only to those authorized to carry out its processing (e.g. employees or collaborators) or individuals appointed as data controllers (for example, the company providing the hosting service). To comply with legal or contractual obligations, your data may be disclosed to the following parties:  (i) to insurance companies; (ii) to public bodies; (iii) to lawyers, law enforcement agencies, and legal authorities.<\/p>\n\n\n\n

For further information on the entities authorized to process data (Article 29 of the GDPR) or the entities responsible for processing data (Article 28 of the GDPR), please contact the Data Controller at the email address provided above. <\/p>\n\n\n\n

PLACE OF PROCESSING AND TRANSFER OF DATA TO NON-EU COUNTRIES<\/strong> (article 13, para 1, point (f)). The Data Controller will not transfer your data to countries outside the EU. In the event of any transfer of data, the Data Controller guarantees the application of the rules set out in Articles 44 and following of the GDPR. For information, please contact us at the email provided above.<\/p>\n\n\n\n

YOUR RIGHTS<\/strong>. You may exercise the following rights: (i) the right to request access to your personal data from the Data Controller (Article 15 GDPR); the right to rectification (Article 16 GDPR); the right to restrict processing, i.e., to limit the use of your data by the Data Controller (Article 18 GDPR); the right to object, on legitimate grounds, to the processing of your data by the Data Controller (Article 21 GDPR); the right to data portability, meaning the right to receive your data from the Data Controller in a structured, commonly used, and machine-readable format (Article 20 GDPR); the right to instruct the Data Controller to erase your data (Article 17 GDPR); the right to withdraw your explicit consent at any time, without affecting the lawfulness of processing carried out up to that point (Articles 7\u201313 GDPR); the right to lodge a complaint with the Italian Data Protection Authority in the event of violation of the law (Article 77 GDPR). <\/p>\n\n\n\n

INFORMATION ON COOKIES OR THE \u201cCOOKIE POLICY\u201d<\/strong>. You can access information on cookies and automated systems similar to cookies by clicking on the COOKIE POLICY link located within the footer of the website. For any information, clarification, or to exercise your rights, please contact the Data Controller at the email address above.<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

PERSONAL DATA PROCESSING POLICY USED ON THE WEBSITE https:\/\/www.cdfwinery.it\/articles 13 \u2013 14 REG. (EU) 2016\/679 Document created: 13 October 2025 WEBSITE POLICY MOD. 1\/2025For any clarification, information, or to exercise your rights as provided herein,  please email us at: info@cdfwinery.itIn the subject line, please write: \u201cWebsite privacy query.\u201d The following information may be subject to change following the […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-751","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/pages\/751","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/comments?post=751"}],"version-history":[{"count":12,"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/pages\/751\/revisions"}],"predecessor-version":[{"id":1250,"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/pages\/751\/revisions\/1250"}],"wp:attachment":[{"href":"https:\/\/www.cdfwinery.it\/de\/wp-json\/wp\/v2\/media?parent=751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}