Privacy Policy
Last updated: 23/06/2026
Pursuant to Art. 13 of Regulation (EU) 2016/679 (“GDPR”), this document describes the processing methods of personal data of users who visit the website www.boscodeltartufo.it (hereinafter the “Website”).
1. Data Controller
The Data Controller is VINI CLASSICI BORGOGNO SRL, with registered office in Barolo, Via Gioberti 1, who can be contacted at the e-mail address privacy@borgogno.com (hereinafter the “Controller”).
2. Types of data processed
The Controller may process the following categories of personal data:
• identification and contact data voluntarily provided by the user through the forms on the Website (such as name, surname, e-mail address, telephone number);
• data relating to requests for information, booking of experiences, or other communications sent by the user;
• navigation data automatically collected during the consultation of the Website, such as IP addresses, information relating to the browser, device used, date and time of the visit, pages consulted, and other technical data.
3. Purposes and legal basis of the processing
Personal data are processed for the following purposes:
a) Management of requests for information
The data provided by the user are processed to respond to requests for information, manage communications, and organize any experiences or activities.
Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6, par. 1, lit. b GDPR).
b) Compliance with legal obligations
Data may be processed to comply with obligations under laws, regulations, or provisions of competent authorities.
Legal basis: compliance with a legal obligation (Art. 6, par. 1, lit. c GDPR).
c) Protection of the Controller's rights
Data may be processed to establish, exercise, or defend a right in court.
Legal basis: legitimate interest of the Controller (Art. 6, par. 1, lit. f GDPR).
4. Nature of data provision
The provision of data marked as mandatory in the forms on the Website is necessary to allow the Controller to follow up on the user's requests. Failure to provide such data may make it impossible to provide the requested service.
5. Processing methods
Personal data are processed using paper and IT tools, in compliance with the principles of fairness, lawfulness, transparency, data minimization, and security provided for by the GDPR.
The Controller adopts appropriate technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, destruction, or undue disclosure. Personal data are not processed for marketing or profiling purposes, nor are they subject to automated decision-making processes, including profiling, which produce legal effects or significantly affect the data subject.
6. Recipients of personal data
Personal data may be communicated to:
• subjects providing technical services for the management and maintenance of the Website;
• IT service, hosting, and technical assistance providers;
• consultants and professionals who assist the Controller in the context of their activities;
• public authorities or other subjects to whom communication is required by law.
These subjects will process the data as data processors or independent data controllers.
7. Data transfer to non-EU countries
Should some service providers be based outside the European Economic Area, the transfer of data will take place in compliance with the guarantees provided for by Art. 44 et seq. of the GDPR, including the adoption of adequacy decisions by the European Commission or Standard Contractual Clauses. Personal data are stored in Europe.
8. Data retention period
Personal data will be stored for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period provided for by legal obligations or necessary for the protection of the Controller's rights.
9. Rights of the data subject
The data subject may exercise at any time the rights provided for by Art. 15-22 of the GDPR, including:
• obtaining confirmation of the existence of their personal data;
• requesting access, rectification, or erasure;
• requesting the restriction of processing;
• objecting to the processing;
• requesting data portability;
• withdrawing previously given consent;
• lodging a complaint with the Data Protection Authority.
Requests can be sent to the contact details indicated in the “Data Controller” section.
10. Cookies and tracking tools
The Website may use technical cookies necessary for the proper functioning of the Website.
Detailed information regarding the cookies used, their purposes, duration, and methods for managing user preferences can be found in the specific Cookie Policy of the Website.
11. Changes to this privacy policy
The Controller reserves the right to update this Privacy Policy at any time. Changes will be published on this page and will become effective from the moment of their publication.
