Privacy Policy
Last updated: July 15, 2026
This notice describes how Ca' del Sette s.r.l. processes the personal data of users who visit www.cadelsette.it and use the forms and services available on it, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
The data controller is Ca' del Sette s.r.l., with registered office at Via Calderina 11, 36053 Gambellara (VI), Italy, VAT/Tax code 03954180240. For any request concerning data processing you may write to info@cadelsette.it or call +39 0444 1833271.
2. Data Protection Officer
The controller has not appointed a Data Protection Officer (DPO), as the legal conditions requiring one do not apply. The contact point for privacy matters remains info@cadelsette.it.
3. Categories of data processed
We process: contact data provided voluntarily through the site's forms or by email (name, surname, email, phone, company, country, message content); data contained in CVs and job applications sent to us; technical and local-storage data (age verification, language and consent preferences) kept on the device; and, with the user's consent, aggregated browsing statistics collected through Google Analytics 4 with anonymised IP. We do not process special categories of data (Art. 9 GDPR), except any spontaneously included by the user in messages. The site also uses Umami, a cookie-free statistics tool that collects exclusively aggregated, anonymous data without storing any identifier on the user's device.
4. Purposes and legal bases of processing
Data is processed to: reply to requests sent through the forms or by email (Art. 6.1.b and 6.1.f GDPR); manage job applications for personnel selection (Art. 6.1.b GDPR, pre-contractual measures); comply with legal, accounting and tax obligations (Art. 6.1.c GDPR); ensure the security and operation of the site through technical cookies (Art. 6.1.f GDPR); and carry out statistical analysis through third-party cookies solely with prior consent (Art. 6.1.a GDPR), which can be withdrawn at any time.
5. Nature of data provision
Providing the data marked as mandatory in the forms is necessary to act on the request; refusal makes it impossible to reply. Providing other data is optional. Consent to statistics cookies is always optional and does not condition access to the site.
6. Processing methods and security measures
Processing is carried out with electronic and, where necessary, paper tools, adopting technical and organisational measures adequate to ensure the security, integrity and confidentiality of the data and to prevent unauthorised access, loss or disclosure, pursuant to Art. 32 GDPR. Access to data is limited to authorised staff and to the appointed processors.
7. Retention period
Contact-request data is kept for the time needed to handle the request and, where applicable, for the period required by legal obligations. Application data is kept for the duration of the selection process and in any case no longer than 24 months, unless otherwise consented. Information stored on the device remains until the user deletes it; consent to statistics cookies is kept for a maximum of 6 months, after which it is requested again.
8. Recipients and data processors
Data may be processed by parties providing technical services on behalf of the controller, appointed as processors under Art. 28 GDPR: the site's hosting and infrastructure provider (Hostinger International Ltd.), the email delivery service (Amazon Web Services, Amazon SES) and, only with consent, the statistics service (Google Ireland Ltd., Google Analytics). Data may be disclosed to advisers and public authorities where required by law. Data is never disseminated or sold to third parties for marketing purposes. Cookie-free aggregated statistics are provided by Umami Software, Inc. (Umami Cloud), also appointed as a data processor.
9. Transfers to third countries
Some providers may involve transferring data to countries outside the European Economic Area. Such transfers take place only with adequate safeguards, such as European Commission adequacy decisions, the EU-US Data Privacy Framework or the Standard Contractual Clauses, pursuant to Art. 44 et seq. GDPR.
10. Job applications and recruitment
CVs and applications sent to us are processed solely to assess the profile and for any possible employment relationship. Please do not include in your CV special categories of data (Art. 9 GDPR) that are not relevant. Where no positions are open, data may be kept for the period indicated in point 7 for future opportunities.
11. Minors
The site and its services are aimed at an adult audience, given the presence of content relating to alcoholic beverages. We do not knowingly collect data from minors. Should a parent or guardian believe that a minor has provided their data, they may contact us to have it deleted.
12. No automated decision-making
The controller carries out no profiling and no solely automated decision-making producing legal effects or similarly significantly affecting the data subject, pursuant to Art. 22 GDPR.
13. Rights of the data subject
The data subject may at any time exercise the rights set out in Articles 15-22 GDPR: access, rectification, erasure (right to be forgotten), restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent given, without affecting the lawfulness of processing carried out before withdrawal.
14. Exercising rights and lodging a complaint
To exercise your rights simply send a request to info@cadelsette.it. The controller replies without undue delay and in any case within one month. The data subject also has the right to lodge a complaint with the competent supervisory authority: for Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
15. Changes to this notice
The controller reserves the right to update this notice to reflect regulatory changes or the services offered. The updated version is published on this page with the date of last update; please review it periodically.