Last updated: 28 October 2026
This notice explains which personal data the online shop eccellenzeenogastronomiche.it processes, why, for how long and to whom it discloses them. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Who is the data controller
The data controller is Imperato Giovanni, who runs the online shop under the trading name "Eccellenze Enogastronomiche".
- Registered office: Via Scialli 38, 84019 Vietri sul Mare (SA), Italy
- VAT number: 02879800650
- Email for privacy matters and for exercising your rights: info@eccellenzeenogastronomiche.it
- Telephone: +39 335 820 7138
- PEC (certified email): [TO BE CONFIRMED: PEC address]
The full company details are in the Legal notice. The controller has not appointed a Data Protection Officer (DPO), because the cases under Article 37 of the GDPR do not apply.
2. Which data we process
Data you provide to us
- Account data: title, first name, surname, email, password (stored in encrypted form), date of birth if you provide it (optional field), newsletter subscription preferences.
- Order data: products purchased, delivery and billing address, telephone number for the courier, amount and payment method chosen.
- Invoice data, if you request an invoice: VAT number or tax code, company name, recipient code or PEC.
- Messages you send us through the contact form or by email, with the data you choose to include.
- Email address for the newsletter.
- Declaration of legal age for orders containing alcoholic beverages [TO BE CONFIRMED: checkout function not yet active, point B4].
Data we collect while you browse
- Technical connection data: IP address, date and time, page requested, type of browser and device. They are needed to make the site work and to protect it from abuse.
- Technical session and cart cookies, described in the Cookie policy.
- The choice you make in the cookie banner: a random, signed identifier, the categories accepted or rejected, the date, the version of the notice, the IP address in shortened form (the last digits are set to zero) and the type of browser.
Payment data. We neither see nor store your card number. Payment by card or PayPal takes place on the service provider's systems; we receive the outcome of the transaction.
We do not process special categories of data (Article 9 GDPR). If you include any in a message or in the order notes, we will use them only to respond to your request.
3. Why we process them and on what basis
| Purpose | Legal basis | Main data |
|---|---|---|
| Creating and managing your account | Performance of a contract or of pre-contractual measures (Art. 6.1.b) | Account data |
| Managing the order: payment, preparation, shipping, assistance, withdrawal, guarantee | Performance of a contract (Art. 6.1.b) | Order data, addresses, telephone |
| Issuing invoices and complying with tax and accounting obligations | Legal obligation (Art. 6.1.c) | Order and billing data |
| Verifying that those who order alcoholic beverages are of legal age | Legal obligation (Art. 6.1.c) | Declaration of legal age |
| Replying to messages and requests for information | Performance of pre-contractual measures or legitimate interest in replying (Art. 6.1.b and 6.1.f) | Name, email, text of the message |
| Site security, prevention of fraud and abuse, defence of a right in legal proceedings | Legitimate interest of the controller (Art. 6.1.f) | Technical connection data, order data |
| Documenting cookie choices | Legitimate interest in demonstrating the consent collected (Art. 6.1.f, Art. 7.1) | Consent register data |
| Sending you the newsletter | Your consent (Art. 6.1.a), which may be withdrawn at any time | Email address |
| Browsing statistics or advertising through third-party services | Your consent (Art. 6.1.a), only if such services are activated | Data collected by analytics or marketing cookies |
Statistics and advertising. As of the date of this update, the site does not load any third-party analytics or marketing tools. If we activate them one day, they will start only after you give your consent in the banner, and we will update this notice and the Cookie policy before activation.
Automated decisions. We do not make decisions based solely on automated processing and we do not carry out profiling that produces legal effects on you (Art. 22 GDPR).
4. Is providing data mandatory?
To create an account and complete an order, the data marked as mandatory in the forms are required: without them, we cannot perform the contract. For the invoice, tax data are required. The newsletter and any other optional use depend solely on your consent: if you do not give it, you can still make purchases.
5. To whom we disclose the data
The data are processed by the controller and, for the stated purposes only, by parties who provide us with services. Some act as processors on our instructions (Art. 28 GDPR), others as independent controllers.
- Hosting and infrastructure of the site: [TO BE CONFIRMED: name and location of the hosting provider].
- Couriers and shipping operators: they receive your name, delivery address and telephone number in order to deliver the parcel to you [TO BE CONFIRMED: couriers chosen, point A2].
- Payment services: for payments by card or PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A. [TO BE CONFIRMED: payment methods active at launch, point A4]. For bank transfers, the bank that manages the shop's account.
- Email service for the domain, used for order confirmation emails, service communications and the newsletter [TO BE CONFIRMED: provider of the email and newsletter sending service, point E4].
- The company that builds and technically maintains the site (GR Fashion Consulting), which may access the data for support and maintenance, as processor [TO BE CONFIRMED: appointment as processor under Art. 28 GDPR].
- Tax, accounting and legal advisers, for legal compliance and the protection of the controller's rights.
- Public authorities, when required by law.
The up-to-date list of processors can be requested by writing to the controller. The data are not sold.
6. Transfers outside the European Economic Area
We do not transfer your data outside the European Economic Area on our own initiative. Some providers, for example payment services, may also process data in non-EU countries: they do so with the safeguards provided for by the GDPR (adequacy decisions of the European Commission or standard contractual clauses). For details, the notice of the individual provider applies.
7. How long we keep them
| Data | Duration |
|---|---|
| Account | Until the account is deleted, which you can request at any time. |
| Orders, invoices and accounting documents | 10 years from the date of the document, for civil and tax obligations. |
| Messages and contact requests | The time needed to reply and, in any case, no more than 24 months from the last exchange, unless an order or a dispute arises from them. |
| Newsletter | Until consent is withdrawn or you unsubscribe. |
| Register of cookie choices | 24 months from the last update of the choice for unregistered visitors. |
| Technical server logs | [TO BE CONFIRMED: log retention period at the hosting provider]. |
When the period expires, the data are deleted or anonymised, unless they must be kept because of a pending dispute.
8. Your rights
You may ask us at any time for:
- access to your data and a copy of it (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- portability of the data you have provided to us, in a structured format (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of consent, without affecting processing already carried out (Art. 7.3).
To exercise them, write to info@eccellenzeenogastronomiche.it. We reply within one month of the request, extendable by two months in complex cases (Art. 12.3). To verify that the request is yours, we may ask you for proof of identity. From your personal area on the site you can already edit your account and address data; to unsubscribe from the newsletter, simply write to us or follow the link at the bottom of every email.
9. Complaint to the Garante
If you believe that the processing infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome; email protocollo@gpdp.it, PEC protocollo@pec.gpdp.it. You may also apply to the courts.
10. Minors
The site is aimed at people of legal age: the sale of alcoholic beverages to those under 18 is prohibited. We do not knowingly collect data of children under 14; if we become aware of any, we delete it.
11. Customers of the previous site
If you have already purchased or registered on the previous site eccellenzeenogastronomiche.it, your data are managed by the same controller, for the same purposes as in this notice. For security, you may be asked to set a new password the first time you log in.
12. Changes
We may update this notice. The version in force is always the one on this page, with the date at the top; if the change is substantial, we will notify you with a message on the site or by email.