Last updated: 16 October 2026
This notice explains how we process the personal data of people who visit www.cantinavillagianna.it, contact the winery, create an account, make purchases or book tastings and events.
1. Data controller and contact details
The data controller is V.G. S.R.L., trading as Cantina Villa Gianna, VAT and tax identification number 01933550590, with its registered office at Strada Maremmana snc, Borgo San Donato, 04016 Sabaudia (LT), Italy. The administrative office and shop are at Strada Petrimerco 1, Borgo San Michele, 04100 Latina (LT), Italy.
For information or to exercise your data protection rights, email info@cantinavillagianna.it or call +39 0773 250034.
2. What data we collect
- Contacts and enquiries: name, email address, telephone number, reason for contacting us and message contents, including the details needed to arrange visits, groups and corporate events.
- Accounts and purchases: personal and contact details, billing and delivery addresses, tax information where necessary, products purchased and order-related communications.
- Bookings and tickets: experience, date, time, number and names of participants where required, ticket code, booking status and admission recorded using a QR code.
- Gifts: purchaser details, any recipient contact details, message and information needed to issue and redeem the voucher.
- Payments: amount, outcome and transaction references. The information needed to complete payment is processed by the provider selected at checkout, including PayPal; the winery does not need to know your full card details.
- Browsing: IP address, server requests, technical device and browser information, language and cookie preferences.
If you book for other people or buy a gift, provide only the necessary information and tell those people about this notice. Information about participants who are minors must be supplied by someone entitled to do so.
3. Allergies, intolerances and particular requirements
Information about allergies, intolerances or other health conditions is special category data. Some bookings may include an optional field for dietary requirements. Completing a free-text field and accepting the terms do not replace the explicit consent required for health data.
If you choose to provide allergy or intolerance information in the booking form, select the separate explicit consent checkbox for each participant concerned, under Article 9(2)(a) GDPR. Consent covers only the organisation and delivery of the experience: it does not cover marketing. We record the date, wording and version of the declaration with the booking. For manually entered bookings, the operator must confirm that they have provided the privacy notice and obtained consent from the person concerned or someone with parental responsibility.
You may leave these fields blank and still book; without the necessary information, we may be unable to assess adjustments to the experience. If you book for another person, provide their health information only after obtaining their explicit consent or if you have parental responsibility. Do not include diagnoses or medical documents in ordinary messages. You may withdraw consent by emailing info@cantinavillagianna.it; this does not affect the lawfulness of earlier processing.
4. Why we process data
- Responding and organising the service: handling enquiries, quotations, accounts, purchases, gift vouchers, bookings, tickets and support. The legal basis is performance of a contract or pre-contractual steps requested by the person concerned, Article 6(1)(b) GDPR.
- Meeting obligations: accounting, invoicing and requests from authorities, based on legal obligations, Article 6(1)(c).
- Protecting the website and our rights: preventing unauthorised access, fraud and ticket misuse, and handling disputes. The basis is our legitimate interest in security and protecting rights, Article 6(1)(f), while respecting the rights of the people concerned.
- Optional activities: any promotional communications and non-essential tracking require consent where applicable. Sending an enquiry or making a purchase does not subscribe you to a newsletter.
Information marked as mandatory is needed to fulfil your request or contract; without it, the service may be unavailable. Optional consent may be refused or withdrawn without affecting essential functions.
5. Who may receive data
Data may be accessed by authorised staff and, within the scope of their assignments, providers of hosting, maintenance, email, order and ticket management services, administrative advisers, payment providers and any carriers. Providers acting on behalf of the winery are appointed as processors where required; others, such as certain payment providers, act in accordance with their own role and privacy notice.
The website uses WordPress, WooCommerce, Elementor, WPML and a booking and ticket checking system. The iubenda service manages cookie preferences. Links to WhatsApp, social networks and maps lead to external services; embedded content may send technical data to the relevant provider. For PayPal, see its privacy notice; for Google services, see the Google Privacy Policy.
Data is not made public. It may be disclosed to authorities where required by law. To find out which providers are involved in a particular request, contact the data controller.
6. External services and transfers
Using international services may involve processing outside the European Economic Area. Where this happens, the transfer must rely on an adequacy decision applicable to the recipient or appropriate safeguards, such as standard contractual clauses and any supplementary measures. You may ask the data controller about the actual recipients and the safeguards applicable to your case.
7. How long we keep data
We retain enquiries for the time needed to respond and follow up; account data while the account is in use or until deletion is requested, subject to retention obligations; and booking, ticket and gift information to provide the service, manage its use and resolve any disputes. Accounting documents are retained for the legally required periods, ordinarily ten years.
Logs and technical information are retained for operational needs, security and investigating misuse. Any health information is retained only for the time strictly necessary for the particular requirement, with restricted access. Litigation or a legal obligation may require relevant data alone to be kept longer. Retention depends on the purpose of the matter, its conclusion and applicable obligations, without indiscriminate storage.
8. Cookies and preferences
The website uses technical tools for functions such as language, login and the shopping cart. Non-essential tools require prior consent where applicable. You can read the information in the preferences panel and change your choices using Manage cookie preferences, also available at the bottom of the website. Refusing optional purposes does not prevent you from browsing the website.
9. Your rights
In the cases provided for by Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability of your data; you may object to processing based on legitimate interests and, at any time, to direct marketing. You may withdraw consent without affecting processing already lawfully carried out.
Email info@cantinavillagianna.it. We normally respond within one month; any extensions and their reasons are communicated within the legal time limits. We may need to verify the requester’s identity. You may also lodge a complaint with the Italian Data Protection Authority and seek a judicial remedy.
10. Updates
This page will be updated when the services or processing described change. The date at the top identifies the version. Significant changes will be communicated appropriately.