With this information notice, provided in accordance with Article 13 of EU Regulation 2016/679, we provide the Data Subject with the information required by current legislation regarding the processing of his/her personal data. It should be noted that this information applies exclusively to data collected and processed for the purpose and within the scope of registration and participation in the “Argiano Exceptional Club” program.

1) Data Controller

The Data Controller for the processing of personal data is Argiano S.r.l. Agricultural Company (Italian P.I. and C.F. 00518460522), with registered office in (53024) Montalcino (SIENA), Località Sant’Angelo in Colle snc, e-mail address: argiano@argiano.net (hereinafter referred to as “Data Controller”).

2) Type of data processed

The Data Controller, for the purpose of registration and participation in the “Argiano Wine Club” program, processes the following personal data of the Data Subject, namely:
– Biographical data: first name, last name, residential address, nationality, landline and/or mobile phone, social security number, e-mail address(es), shipping addresses;
– Bank details: IBAN and bank/postal details (except Credit Card number);
– Telematics data: Log, source IP address.

3) Purpose of Data Processing

The data subject’s personal data will be processed for the following purposes:
a) Purposes related to registration and participation in the program “Argiano Exceptional Club”: the processing of personal data is carried out to identify, register and enroll the Interested Party in the program “Argiano Exceptional Club”; to carry out activities related to participation in the program “Argiano Exceptional Club”, not exercisable anonymously, necessary for the purpose of granting the benefits related to the same, including, the enjoyment and recognition of promotions, the offer and sending of prizes, participation in promotional events reserved for program members, etc.; to ensure the proper functioning of the program “Argiano Exceptional Club” and solve any problems;
b) Sales purposes: the processing of personal data is carried out to allow the preliminary and consequent activities related to the purchase of a product and/or a service of the Argiano S.r.l. Società Agricola by the Interested Party, the management of the related order, the shipment of the purchased product and/or the provision of the service, the related invoicing and payment management, the processing of any complaints, as well as the fulfillment of any other obligation (including legal) arising from the contract;
c) Marketing purposes: the processing of personal data takes place, subject to the express consent of the Data Subject, to send newsletters and/or send e-mails containing informative, advertising and promotional material relating to the “Argiano Exceptional Club” program and more generally concerning Argiano S.r.l. Società Agricola and its products;
d) Profiling Purposes: the processing of personal data is carried out, with the express consent of the Interested Party, to carry out customer profiling activities on the basis of the purchasing choices and information optionally provided during registration and enrollment in the “Argiano Exceptional Club” program, in order to carry out personalized promotions based on the profile of the Interested Party.

4) Nature of data provision and legal basis for processing

With reference to the purposes referred to in Art. 3), letter a): i) the provision of personal data is necessary, given that in default the registration and participation in the program “Argiano Exceptional Club” is not possible; ii) the legal basis for the processing is the performance of the services provided through the registration of the Data Subject in the program “Argiano Exceptional Club” (ex art. 6(1)(b), GDPR), as well as the legitimate interest of the Data Controller consisting in the interest to ensure the proper functioning of the program “Argiano Exceptional Club”, ensure the prompt resolution of problems, improve the user experience of members.
With reference to the purposes referred to in Art. 3), letter b): i) the provision of personal data is necessary, given that in default the management of purchases made by the Interested Party is not possible; ii) the legal basis for processing is the compliance with legal obligations to which the Data Controller is bound and the fulfillment of the services inherent to the contractual relationship with the Interested Party.
On the other hand, with reference to the purposes set forth in Article 3, letters c) and d): i) the provision of personal data is optional and failure to provide such data will not prevent the Interested Party from registering in the “Argiano Exceptional Club” program and taking advantage of the related services and benefits; ii) the legal basis of the processing is the consent expressed by the Interested Party to the processing itself.

5) Methods of Data Processing

The processing of personal data is governed by the principles of lawfulness, fairness and transparency as well as compliance with the principles of integrity and confidentiality, in accordance with current regulations.
The Data Controller processes personal data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer and/or telematic and/or manual tools, with organizational methods and logics strictly related to the indicated purposes.

6) Communication and access

In addition to the Data Controller, other parties involved in the “Argiano Exceptional Club” program (administrative, sales, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies), the Data Processors and the Data Controller may have access to personal data too. The updated list of Data Processors can always be requested to the Data Controller.
Personal data may also be disclosed to third parties where required by law or
 applicable regulations. Where the recipients of personal data are established outside the EU, in countries without an adequate level of personal data protection, the Data Controller will take all necessary measures to ensure that the transfer of data outside the EU is adequately protected as required by applicable privacy regulations.

7) Period of data retention

Subject to legal obligations, the Data Subject’s personal data are kept for a period of time not exceeding the achievement of the purposes for which they are processed. In particular:
– with regard to the purposes of membership in the “Argiano Exceptional Club” program, personal data will be kept as long as the Data Subject continues to be a member;
– with respect to marketing/commercial promotion purposes, the Data Subject’s personal data shall be retained for the period of twenty-four (24) months from when consent was given, subject in any case to the right to withdraw the consent given;
– with respect to the purposes of for the purposes of profiling, the personal data of the Interested Party will be retained for the period of twelve (12) months from when the consent was given, subject in any case to the right to withdraw the consent given;

8) Rights of the Interested Party

The Data Subject, in the manner and within the limits provided by the EU Regulation 679/2016 (GDPR) and current legislation, has the right to:
– revoke their consent at any time, without affecting the lawfulness of the processing based on the consent given before revocation;
– to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her is being processed, and if so, to obtain access to the personal data and information referred to in Article 15 of the GDPR;
– request to the Data Controller to modify of inaccurate personal data concerning him/her without undue delay, as well as the integration of incomplete personal data, including by providing a supplementary statement;
– request to the Data Controller the deletion (so-called “right to be forgotten”) of personal data concerning him/her without undue delay, if there is one of the grounds referred to in Article 17 of the GDPR and provided that the processing is not necessary for the purposes set forth in paragraph 3 of Article 17 of the GDPR;
– Obtain from the Data Controller the restriction of the processing of their personal data, when one of the cases referred to in Article 18 of the GDPR occurs;
– require the Data Controller to notify the recipients to whom any rectification or cancellation or restriction of processing carried out, unless this proves impossible or involves a disproportionate effort;
– to receive in a structured, commonly used and machine-readable format the personal data concerning him/her provided to the Data Controller and, in the cases provided for in Article 20 of the GDPR, to transmit the same to another Data Controller without hindrance from the Data Controller to whom he/she provided them (so-called “portability”). The data subject, if technically feasible, also has the right to obtain direct transmission of personal data from one Data Controller to another;
– object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her under Article 6, paragraph (1) letters (e) or (f);
– where personal data are processed for direct marketing purposes, object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing;
– file a complaint with the Garante Privacy, as the data protection supervisory authority;
– as well as, more generally, to exercise all the rights accorded to it under current legal provisions.
The aforesaid rights may be exercised by written communication to be sent by e-mail to argiano@argiano.net or by registered letter A/R to the registered office of Argiano S.r.l. Società Agricola, located in (53024) Montalcino (SIENA), Località Sant’Angelo in Colle snc.

9) Changes to the Disclosure

The Data Controller reserves the right to modify and/or update this policy at any time. Therefore, in order to facilitate the consultation of the text as amended and/or updated, the notice will contain the date of update.

Privacy policy updated to December 2024