Privacy notice
This notice explains what personal data we collect on magna-graecia.it, why we collect it, how long we keep it and what rights you can exercise. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
Magna Graecia S.r.l., based in Italy. For any request concerning your data, write to info@magna-graecia.it. We have not appointed a Data Protection Officer, as it is not mandatory for our activity.
2. Data we collect
We collect only the data you voluntarily provide through one of the two forms on the site.
"Request a quote" form:
- Company
- Full name
- Business email
- Phone or WhatsApp (optional)
- Commercial interest: wines, extra virgin olive oil or both
- Indicative volume and destination US state (optional)
- Whether you hold a TTB permit (optional)
- Any free-text notes you choose to write
"Contact" form: full name, business email, message.
In both cases the server also records your browser language and originating IP address, for security and anti-spam purposes.
We do not collect special categories of data (Art. 9 GDPR) and we carry out no automated decision-making or profiling.
3. Purposes and legal bases
- Answering your commercial enquiry and preparing what follows. Legal basis: pre-contractual measures taken at your request, Art. 6(1)(b).
- Protecting the site from abuse and automated submissions. Legal basis: our legitimate interest in keeping the service secure, Art. 6(1)(f).
- Complying with legal obligations, such as tax and accounting duties once the contact becomes a business relationship. Legal basis: legal obligation, Art. 6(1)(c).
- Sending you unsolicited commercial offers or updates: only if you gave us separate, explicit consent. Legal basis: consent, Art. 6(1)(a). You may withdraw it at any time, without affecting the lawfulness of processing already carried out.
Providing the fields marked as required is necessary for us to reply: without them we cannot follow up on your request.
4. How long we keep your data
- Commercial enquiries: up to 24 months from the last meaningful contact, unless the relationship continues or the law requires longer.
- Technical server logs containing IP addresses: 6 months.
- Record of your cookie choice: 6 months, after which you are asked again.
- Tax and accounting records, if a business relationship begins: 10 years, as required by Italian law.
5. Who we share data with
Your data stays within our organisation. The only provider processing it on our behalf, as a processor under Art. 28 GDPR, is the company hosting our site and email:
- Netsons S.p.A., hosting and email, with servers located in Italy.
If a negotiation moves forward, the data needed to fulfil the order may be disclosed to our US importing partner, Della Volpe Imports (Fort Lauderdale, Florida), acting as an independent controller. In that case the transfer relies on Art. 49(1)(b) GDPR, being necessary to perform the contract you requested. No data is transferred before that point, and no other data leaves the European Economic Area.
We do not sell personal data and we do not disclose it for advertising purposes.
6. Cookies and third-party tools
This site sets no profiling cookies and loads no third-party services. Fonts, scripts, images and maps are hosted on our own servers: while you browse, your IP address is not disclosed to any external provider. In particular we do not use Google Fonts, Google Analytics, advertising pixels, embedded maps or social widgets.
We use only three strictly necessary technical items: the memory of your chosen language, the record of your cookie choice, and the administration area session. The full list, with the purpose and duration of each, is in the cookie policy.
You can change or withdraw your preferences at any time through the Cookie preferences link at the bottom of every page.
7. Your rights
As a data subject you may at any time:
- access your data and obtain a copy (Art. 15)
- ask for its rectification (Art. 16)
- ask for its erasure, the so-called right to be forgotten (Art. 17)
- ask for processing to be restricted (Art. 18)
- receive it in a structured, machine-readable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw any consent you have given, at any time
To exercise these rights write to info@magna-graecia.it: we reply within 30 days. If you believe the processing infringes the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of your country of residence.
8. California and other US residents
If you are a California resident, the CCPA as amended by the CPRA gives you the right to know which categories of personal information we collect and why, to have it deleted or corrected, and to opt out of its sale or sharing. We neither sell nor share personal information as those terms are defined in that legislation.
If your browser sends the Global Privacy Control signal, we detect it and automatically record a refusal of the optional cookie categories, with no action needed on your part.
9. Security
The site is served exclusively over an encrypted HTTPS connection. Forms are protected by anti-spam checks and the administration area by password authentication with hashed credentials. We apply technical and organisational measures appropriate to the risk, under Art. 32 GDPR.
10. Changes to this notice
We will publish any material change on this page and update the date at the top. If a change concerns purposes that require your consent, we will ask you again.