Privacy policy
Last updated: 25 October 2026
This notice explains how personal data is processed when you visit ponziocantine.it or contact us, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).
Data controller
Azienda Agricola Luca Ponzio, VAT no. IT02463530036. Registered office: Baluardo Quintino Sella 3, 28100 Novara (NO), Italy.
For information about the processing of your data or to exercise your rights, you can write to us or call +39 335 784 8805.
Browsing and security data
Visiting the website involves transmitting the technical data needed to display and protect its pages: IP address, request date and time, requested resource, browser and device information, response status and data used to detect misuse.
This data is processed to operate the website, keep it available and prevent unauthorised access and attacks. The legal basis is the controller’s legitimate interest in managing and securing the website, under Article 6(1)(f) of the GDPR.
Data you provide when contacting us
If you contact us, we process the information you choose to provide, such as your name, email address, telephone number and message, to respond to your enquiry and handle any follow-up correspondence.
For enquiries about the wine or a potential business relationship, the legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) of the GDPR. For other correspondence, processing is based on our legitimate interest in responding to the enquiry, under Article 6(1)(f). Any legal obligations are covered by Article 6(1)(c).
Providing contact details is optional; without the necessary information, we may be unable to respond.
Service providers and recipients
The website uses Cloudflare for hosting, content delivery and security. Technical data may therefore be processed by Cloudflare and its providers in accordance with their respective roles and service terms.
We use Google services for email. Data may be processed by authorised personnel, the technical providers needed to operate the website and handle correspondence, and public authorities where required by law.
For information about these services: Cloudflare privacy policy and Google privacy policy.
Processing outside the European Economic Area
Technology providers use international infrastructure and may process data outside the European Economic Area. Their documentation describes the applicable safeguards, including, where relevant, adequacy decisions and standard contractual clauses approved by the European Commission.
You can consult the Cloudflare contractual clauses and Google information on data transfers, or contact us for further information.
Data retention
Correspondence is retained for as long as necessary to respond to and manage your enquiry and any subsequent relationship. The retention period depends on the nature of the enquiry, the need to keep a record of correspondence, and any legal obligations or need to protect legal rights.
Technical data is retained in accordance with the hosting and security features in use, for the period needed to manage the service and any incidents. For providers’ retention periods, please consult their documentation or contact us.
Cookies
The website does not use profiling or advertising tracking tools. For information about any essential security cookies, see the Cookie policy.
Your rights
Where applicable and subject to Articles 15–22 of the GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
The controller does not carry out profiling or automated decision-making that produces legal or similarly significant effects concerning you.