Privacy policy
Last updated: 27 October 2026
This notice explains how personal data is processed when you visit www.cantineponzio.it or contact us, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
Azienda Agricola Luca Ponzio, VAT no. IT02463530036. Registered office: Baluardo Quintino Sella 3, 28100 Novara (NO), Italy.
For information about the processing of your data or to exercise your rights, you can write to us or call +39 335 784 8805.
Browsing and security data
Visiting the website involves transmitting the technical data needed to display and protect its pages: IP address, request date and time, requested resource, browser and device information, response status and data used to detect misuse.
This data is processed to operate the website, keep it available and prevent unauthorised access and attacks. The legal basis is the controller’s legitimate interest in managing and securing the website, under Article 6(1)(f) of the GDPR.
Data you provide when contacting us
If you contact us, we process the information you choose to provide, such as your name, email address, telephone number and message, to respond to your enquiry and handle any follow-up correspondence.
For enquiries about the wine or a potential business relationship, the legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) of the GDPR. For other correspondence, processing is based on our legitimate interest in responding to the enquiry, under Article 6(1)(f). Any legal obligations are covered by Article 6(1)(c).
Providing contact details is optional; without the necessary information, we may be unable to respond.
Optional Google Analytics statistics
Only with your consent do we use Google Analytics 4, provided by Google Ireland Limited, to measure visits, pages and sections viewed, traffic sources, devices, and clicks on email and phone links. Cookie identifiers and usage data may constitute personal data. We do not send message content, the contact details clicked, or unrestricted URL parameters. Google does not log or store IP addresses in GA4.
The legal basis is consent under Article 6(1)(a) GDPR. Google Signals, ad personalisation and optional account data sharing are disabled. Event and user data are retained in Analytics for 2 months; aggregated reports may remain available for longer. You can withdraw consent in your cookie preferences without affecting processing that has already taken place. International transfers are subject to the safeguards described by Google.
Service providers and recipients
The website uses Cloudflare for hosting, content delivery and security. Technical data may therefore be processed by Cloudflare and its providers in accordance with their respective roles and service terms.
We use Google services for email. Data may be processed by authorised personnel, the technical providers needed to operate the website and handle correspondence, and public authorities where required by law.
For information about these services: Cloudflare privacy policy and Google privacy policy.
Processing outside the European Economic Area
Technology providers use international infrastructure and may process data outside the European Economic Area. Their documentation describes the applicable safeguards, including, where relevant, adequacy decisions and standard contractual clauses approved by the European Commission.
You can consult the Cloudflare contractual clauses and Google information on data transfers, or contact us for further information.
Data retention
Correspondence is retained for as long as necessary to respond to and manage your enquiry and any subsequent relationship. The retention period depends on the nature of the enquiry, the need to keep a record of correspondence, and any legal obligations or need to protect legal rights.
Technical data is retained in accordance with the hosting and security features in use, for the period needed to manage the service and any incidents. For providers’ retention periods, please consult their documentation or contact us.
Cookies
The website does not use advertising tracking. Optional Google Analytics statistics are enabled only with your consent. For details and preferences, see our Cookie policy.
Your rights
Where applicable and subject to Articles 15–22 of the GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
The controller does not carry out profiling or automated decision-making that produces legal or similarly significant effects concerning you.