Privacy policy
This notice explains which personal data we collect through www.lacantinadipresciano.it, why we collect it and what your rights are, under the EU General Data Protection Regulation 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003).
Last updated: October 2026.
1. Data controller
S.I.A. – Società Agricola Italiana a.r.l., owner of the La Cantina di Presciano brand
Registered office: Via Fratelli Addabbo 9, 82100 Benevento, Italy · Winery: Via Giovanni XXIII 12, 52020 Pergine Valdarno (AR), Italy
VAT no. IT01518960628
Email: info@lacantinadipresciano.it · Certified email (PEC): siasrl@pecimprese.it · Phone: +39 327 6382716
2. What data we collect and why
a) Browsing
The server hosting the site automatically records some technical data (IP address, browser type, pages visited, date and time) to run the site, protect it from attacks and fix problems. We also keep aggregated visit statistics, without cookies and without profiling visitors. Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR). Technical logs are deleted periodically.
b) Online shop orders
To handle a purchase we need your name, billing and shipping address, email, phone number and any notes. We use them to fulfil and ship the order, issue tax documents and handle returns and support. Legal basis: performance of the contract (Art. 6(1)(b)) and legal tax and accounting obligations (Art. 6(1)(c)). Retention: tax documents for 10 years as required by law; other order data for as long as needed to handle warranty and returns.
When you buy, we ask you to confirm that you are at least 18 years old, because selling alcohol to minors is prohibited.
c) Payments
Card payments are handled directly by Stripe and WooPayments (Automattic). Your full card details are entered into their secure systems and never reach us: we only see the payment result and a few details to identify it (such as the last digits of the card).
d) Winery visit bookings
To book a visit we need your name, email, phone number, date, number of guests and any notes (for example allergies you tell us about for the tasting). We use these data only to organise the visit and contact you about changes. Legal basis: performance of the contract (Art. 6(1)(b)); for any health information you choose to share, your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.
e) Newsletter
If you subscribe, we use your email (and name, if given) to send you news about the winery, new vintages and offers, about once a month. Your subscription only becomes active once you confirm it through the link we email you. We ask you to confirm that you are at least 18. You can unsubscribe at any time with the link in every email. Legal basis: your consent (Art. 6(1)(a)). Retention: as long as you are subscribed; after you unsubscribe we only keep a record of it so that we do not write to you again.
Customers who have already bought from us may also receive, at the email address given for the order, offers for products similar to those purchased, as allowed by Art. 130(4) of the Italian Data Protection Code; you can object at any time, also by replying to one of our emails.
f) Contacts by email, phone and WhatsApp
If you write to us or call us, we use your data only to reply and handle your request. Legal basis: your request (Art. 6(1)(b)) and our legitimate interest in replying (Art. 6(1)(f)).
g) Business contacts
To introduce our wines to restaurants, wine shops, importers and distributors we may use the business contact details these companies make public (for example on their website or in trade directories) to send commercial proposals. Legal basis: our legitimate interest in developing business relationships (Art. 6(1)(f)). Every message explains how to object: anyone who asks is no longer contacted and is added to an exclusion list. We also use AI-based writing tools to help draft these emails.
3. Cookies
The site only uses technical cookies needed for it to work (chosen language, cart, secure payment). We do not use profiling or advertising cookies. See the Cookie policy for details.
4. Who receives the data
Data are processed by us and, on our behalf, by suppliers that help us run the site and the shop, appointed as processors (Art. 28 GDPR):
- Aruba S.p.A. – website hosting, email and the server of our management software (Italy);
- Automattic Inc. – WooCommerce, WooPayments and the image speed-up service (Jetpack);
- Stripe – card payments;
- Packlink and the couriers delivering parcels (they receive the recipient’s name, address and phone number);
- Google – AI tools used to write texts and communications;
- our accountant and advisers, for tax and accounting obligations.
Data may be disclosed to authorities when required by law. We never sell or hand over your data to anyone for marketing purposes.
5. Transfers outside the EU
Some suppliers (such as Automattic, Stripe and Google) are based in, or may process data in, the United States. In these cases transfers rely on the safeguards provided by the GDPR: the European Commission’s adequacy decision for companies certified under the EU-US Data Privacy Framework, or the standard contractual clauses approved by the Commission.
6. Your rights
At any time you can ask us to give you access to and a copy of your data (Art. 15), correct it (Art. 16), erase it when it is no longer needed and no legal obligation requires us to keep it (Art. 17), restrict its use (Art. 18), receive it in a machine-readable format (Art. 20), object to processing based on our legitimate interest and, always, to marketing (Art. 21), and withdraw any consent given (Art. 7). Just write to info@lacantinadipresciano.it: we reply within one month. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country.
7. Required data and minors
The data requested for orders and bookings are necessary: without them we cannot complete the purchase. The site and the sale of wine are reserved for adults: we do not knowingly collect data from anyone under 18.
8. Security and changes
We protect data with appropriate technical and organisational measures (encrypted connection, restricted access, backups). We may update this notice: the version in force is always the one published on this page, with its last update date.