Privacy & Cookie Policy

The controller of your personal data is Pietro 17 di Giuliani Laura, Contrada San Pietro 17, 60039 Staffolo (AN), Italy, VAT number 02870630429, REA AN - 268628. Phone +39 342 6475911, email winethatcares@pietro17.com, certified email (PEC) laura.giuliani1978@pec.agritel.it.

This policy explains how we process personal data of visitors, customers and contacts of www.pietro17.com, in line with Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).

Depending on how you use the website, we process:

• Order data: name, delivery and billing address, email, phone, products ordered, payment status (we do not see or store your full card details), and the information needed for invoicing and shipping.
• Account data: if you create a customer account, your name, email and order history.
• Enquiries and bookings: the information you send through our contact, visit, tasting, event, host-your-event and internship forms, such as name, email, phone, preferred date, number of guests and your message. For internship applications this may include your background and motivation.
• Club 17 membership: your contact details and the membership level you choose.
• Newsletter: your email address and sign-up details.
• Technical data: IP address, device and browser type, pages visited and cookie identifiers, collected automatically (see clause 8).

Providing the data marked as required on a form is necessary to process your request or order. Without it we cannot complete it.

• To process orders, payments, shipping and invoices, and to handle bookings and enquiries: necessary for the performance of a contract or of pre-contractual steps you request (art. 6(1)(b) GDPR).
• To meet legal and tax obligations, including accounting, invoicing, excise and customs rules: legal obligation (art. 6(1)(c)).
• To send our newsletter and Club 17 updates: your consent (art. 6(1)(a)), which you can withdraw at any time. We may also send similar offers to existing customers by email about products they have already bought, with the right to object at any time (art. 6(1)(f), Privacy Code art. 130(4)).
• To prevent fraud, secure the website and defend our rights: our legitimate interest (art. 6(1)(f)).
• To use non-essential cookies, where applicable: your consent (art. 6(1)(a)).

We do not take decisions based solely on automated processing and we do not sell your data.

We share data only with those who need it to provide our service, and only as far as necessary:

• Shopify (Shopify International Ltd, Ireland, and its group companies), which hosts the website and shop and processes orders, accounts and checkout.
• Payment providers (for example Shopify Payments and the wallet or card networks you choose).
• Carriers, couriers and customs or excise agents who deliver your order.
• Email and newsletter providers, and IT and website service providers working on our behalf.
• Our accountant, advisers and, where required, public authorities and tax bodies.

Service providers act on our instructions as data processors, or as independent controllers where the law provides. We have not appointed a Data Protection Officer, as it is not required for our activity.

Some providers, including Shopify and its sub-processors, may process data in countries outside the EEA, such as Canada and the United States. Such transfers rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or on the Standard Contractual Clauses. Deliveries to non-EU destinations also require us to pass your name, address and contact details to carriers and customs authorities in that country.

• Order and invoice data: 10 years, as required by Italian tax and accounting law.
• Enquiries, visit and event requests: up to 24 months after our last contact.
• Internship applications: up to 12 months, unless you agree that we keep them longer.
• Newsletter and Club 17: until you withdraw your consent or unsubscribe.
• Customer accounts: until you ask us to close them, unless we must keep certain data by law.
• Cookies: for the duration stated in the table in clause 8.

After these periods, data is deleted or anonymised.

You have the right to access your data, have it corrected or erased, restrict or object to its processing, and receive it in a portable format (articles 15 to 22 GDPR). Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of earlier processing.

To exercise your rights, write to winethatcares@pietro17.com. We will reply within one month. If you believe that your data is not processed lawfully, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your own country.

Cookies are small files stored on your device. We use:

• Technical (essential) cookies, which are needed for the shop to work: keeping your cart, remembering your language or country, checkout security and fraud prevention. They do not require consent. Examples set by Shopify include cart, cart_sig, localization and secure_customer_sig.
• Analytics cookies, which help us understand, in aggregated form, how the website is used. Shopify’s built-in analytics may set the cookies _shopify_y (up to 1 year) and _shopify_s (30 minutes). Where required, they are used only if you accept them in the cookie banner.

We do not use advertising or profiling cookies. You can change or withdraw your choice at any time through the cookie settings on the website, where shown, or in your browser settings, where you can also delete existing cookies. Blocking technical cookies may stop the cart and checkout from working.

The full list of cookies used by Shopify stores is available on the Shopify cookie page.

Some pages show content from other services, which may collect data such as your IP address and set their own cookies when the content loads: videos from YouTube or Vimeo, and fonts loaded from Google Fonts. Their use is governed by the privacy policies of those providers. Social links (LinkedIn, Instagram) take you to those platforms, which have their own policies.

Our website sells and promotes alcoholic drinks and is intended for adults aged 18 or over. We do not knowingly collect data from minors. If you think a minor has given us data, please contact us and we will delete it.

We may update this policy, for example when we add new tools or when the law changes. The date at the top shows the latest version.

For any question about your data or this policy, write to winethatcares@pietro17.com or call +39 342 6475911.