Privacy Policy

This privacy notice, provided pursuant to Article 13 of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data), explains how and why we process the personal data of users of our Online Wine Shop.

1. Data controller

The controller of personal data is MAJA S.r.l.s., the owner of the PRIMEWINE trade mark, with its registered office at Via Simone Martini 135, Rome. Further company details appear on every receipt and invoice sent with the goods and in the footer of each page of this website.

2. Data Protection Officer

The controller has appointed Alessio Fiorani as its Data Protection Officer. You can contact the Data Protection Officer by email or certified electronic mail (PEC) at 

3. Purposes and legal basis for processing

Any personal data provided through this service will be processed in accordance with the principles of lawfulness and fairness set out in applicable data protection law and in accordance with Articles 5 and 25 of Regulation (EU) 2016/679.

We need to process users’ personal data to enable them to use the website and provide the requested services. This includes processing product purchases and sending information about those purchases. We use the data solely to fulfil orders and to operate mailing lists that users have voluntarily subscribed to.

We process personal data using automated tools for only as long as is strictly necessary to achieve the purposes for which the data was collected and subsequently processed. The controller takes appropriate security measures to provide a level of security proportionate to the risks of data destruction or loss, unauthorised access, and processing that is unauthorised or inconsistent with the purpose for which the data was collected.

 

4. Recipients to whom data may be disclosed

No data will be disclosed or disseminated in any way, and it will never be transferred or sold.

5. Data retention period

We retain the personal data you provide for the duration of any contractual relationship. After that relationship ends, we retain the data for the following periods.
1. For as long as the controller is subject to retention obligations for purposes laid down by law or regulation, including, for example, accounting, tax, insurance or judicial obligations.
2. For as long as necessary for the limitation periods applicable to each party’s rights to expire.

Where specific legal obligations apply, we will continue to process the information in accordance with applicable law.

6. Rights of data subjects

Users who have provided their personal data may exercise the following rights, where the relevant statutory conditions are met, in particular those set out in Article 15 and the following articles of the Regulation.

– The right to know whether the controller is processing personal data concerning them and, if so, to access that data and all information relating to its processing.

– The right to have inaccurate personal data concerning them corrected and incomplete data completed.

– The right to erasure of personal data concerning them.

– The right to restriction of processing.

– The right to object to processing.

– The right to portability of personal data concerning them.

In any event, you also have the right to lodge a formal complaint with the Italian Data Protection Authority by following the procedure published on the Authority’s website.