Wine Club | +39 0565 829 892 | info@bulichella.it

Privacy Policy

Privacy Policy for Customers and Suppliers

(Updated on October 24, 2025, pursuant to EU Regulation 2016/679 – GDPR and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018)

1. Data Controller

Società Agricola Bulichella S.r.l.
Registered office: Località Bulichella 131 – 57028 Suvereto (LI) – Italy
VAT No.: 00774530497
Email: info@bulichella.it
Phone: +39 0565 829892
Data Controller: Miyakawa Hideyuki

2. Categories of Data Processed

The Company processes, in relation to customers, suppliers, visitors, and e-commerce users, the following categories of personal data:

  • Identification and personal details (name, surname, address, tax code, VAT number)
  • Contact details (phone, email, shipping and billing address)
  • Banking and payment data (IBAN, credit cards, PayPal, Shopify Payments, GPay)
  • Login and browsing data for registered users and website visitors
  • Supplier data (company name, contact persons, certifications, contractual information)
  • Technical data automatically collected by the website (IP address, browser type, cookie-related data, and system logs)

3. Purpose and Legal Basis of Processing

Personal data are processed for the following purposes and according to their respective legal bases:

4. Methods of Processing

Data are processed using electronic and paper-based tools in compliance with the principles of fairness, lawfulness, transparency, and confidentiality.
Appropriate technical and organizational security measures are adopted to prevent unauthorized access, loss, disclosure, or alteration of data.

5. Data Recipients

Data may be disclosed exclusively to the following categories of recipients:

  • Accounting, tax, and legal consultants
  • IT and hosting service providers (Shopify, MailPoet, email providers)
  • Payment institutions (PayPal, Shopify Payments, GPay, credit card operators)
  • Couriers and shipping companies
  • Banks and credit institutions
  • Public entities and competent authorities when required by law

All recipients act as duly appointed external data processors pursuant to Article 28 of the GDPR.

6. Data Transfers Outside the EU

Some service providers (e.g., Shopify, MailPoet) may process data in non-EU countries.
Such transfers are carried out in compliance with Articles 44 et seq. of the GDPR, through the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission and additional security measures.

7. Data Retention Period

  • Accounting and tax data: 10 years (Art. 2220 of the Italian Civil Code)
  • Registration/account data: until a deletion request is received
  • Newsletter data: until consent is withdrawn
  • Browsing data: as specified in the cookie policy

8. Data Subject Rights

Data subjects may exercise their rights under Articles 15–22 of the GDPR at any time, including:

  • Access, rectification, erasure, and restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent (without affecting the lawfulness of prior processing)
  • Complaint to the Italian Data Protection Authority (www.garanteprivacy.it)

Requests may be sent to info@bulichella.it and will be handled within 30 days.

9. Nature of Data Provision

  • Mandatory for contractual, fiscal, and legal purposes — failure to provide data makes it impossible to conclude the contract.
  • Optional for promotional and newsletter purposes.

10. Updates to This Policy

This Privacy Notice may be updated at any time. The most recent version will always be available on www.bulichella.it.

 

Secured By miniOrange