Last updated: 12 October 2026
This page explains which personal data Verdimonti collects, why, how long it keeps it and what your rights are. It is the notice required by Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Who is the data controller
Azienda Agricola Verdimonti
Verdimonti — 53013 Gaiole in Chianti (SI), Italia
VAT no. IT00968830521
Email: info@verdimonti.com
No data protection officer (DPO) has been appointed: for any question, write to the addresses above.
What data we process and why
Browsing
Like every web server, the server hosting this site logs the IP address, date and time, requested page and browser type. These logs are needed to run and secure the site (legitimate interest, Art. 6(1)(f) GDPR) and are kept only as long as strictly necessary, unless needed to investigate an offence.
The site's own statistics count page views per day: they do not record IP addresses and use no cookies. Where a duplicate must be recognised — a repeated click, a vote cast twice — the site keeps only a one-way hash of the IP address, from which the address cannot be recovered.
To know how long a visit lasts and where it comes from, the site computes an anonymous fingerprint from IP address, browser type and date, one-way hashed with a secret key that changes every day: the address cannot be recovered and tomorrow's visit cannot be linked to today's. Nothing is stored on your device, and fingerprints are deleted after one day; only the overall count remains (legitimate interest, Art. 6(1)(f) GDPR).
Contact requests
If you write to us through a form on the site, we process the data you enter (name, email, phone, message and anything else you add) to reply and, if you ask, to prepare a quote (Art. 6(1)(b) GDPR). The site also notes which channel first brought you here — a search engine, a social network, a campaign — to understand which channels work. We keep this data for 24 months, then it is deleted.
Newsletter
If you subscribe to the newsletter we process your email address and, if you provide it, your name, on the basis of your consent (Art. 6(1)(a) GDPR). You confirm the subscription through a message we send you; together with it we keep the date, the consent wording and a hash of your IP, so we can prove the subscription was requested by you. To improve our messages we count opens and clicks. You can unsubscribe with one click at the bottom of every email: from then on you receive nothing more.
Purchases and bookings
If you buy or book, we process the data needed to conclude and perform the contract — name, email, phone, address, billing details, order details — (Art. 6(1)(b) GDPR) and the data the law requires us to keep (Art. 6(1)(c) GDPR). Tax records are kept for ten years, as Italian law requires. Card payments go directly through payment providers (such as Stripe or PayPal): the site never sees or stores card numbers.
Who receives the data
We do not sell data or pass it to third parties for their own marketing. It is processed on our behalf, and only as far as needed, by the providers who help us run the service, appointed as processors (Art. 28 GDPR):
- the hosting provider, which hosts the site and its database;
- the email service provider the site uses to send messages;
- payment providers (Stripe, PayPal), for purchases and bookings;
- Google Ireland Ltd, for the site's typefaces (Google Fonts);
- advisers and authorities, when required by law.
Some of these providers may also process data outside the European Union, particularly in the United States. In that case the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
Your rights
At any time you can ask to access your data, correct it, erase it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest (Articles 15-22 GDPR). If you gave consent, you can withdraw it whenever you like, without affecting what was done before. Write to the controller: we reply within one month.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the country where you live.
Minors
The site is not intended for anyone under 14 and does not knowingly collect their data. If we find we have received such data, we delete it.
Changes
This notice changes when the site changes: the date at the top shows when it was last updated. The use of cookies is explained in the cookie policy.