PRIVACY POLICY

Last updated: March 2026

1. Data controller

The Data Controller is:

VAL D'AVETO LIQUORIFICIO SRL
Capital City 56
16048 Rezzoaglio (GE) – Italy
Share capital €10,000 fully paid up
REA GE 506335
VAT and Tax Code 02718770999
Unique Code: K0ROACV
Email: info@liquorificiofabbrizii.com

This information is prepared pursuant to Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

2. Types of data processed

a) Browsing data

During normal navigation of the site, the computer systems acquire some personal data such as:

  • IP address

  • browser type

  • operating system

  • pages visited

  • date and time of access

This data is processed to ensure the correct functioning of the site, improve the user experience, and obtain aggregate statistics.

b) Data provided voluntarily

You may provide personal data when:

  • create an account

  • make a purchase

  • fill out a contact form

  • subscribe to the newsletter

Data may include:

  • Name and surname

  • E-mail address

  • Shipping and billing address

  • Telephone number

  • Order data

Payment data (e.g. credit card) are not stored by the Owner but are managed directly by the payment providers via a secure connection.

3. Using the Shopify platform

The site is hosted on the Shopify Inc. platform, which provides the technical infrastructure and e-commerce services.

Shopify may process personal data on behalf of the Owner as a data processor.

Data may be transferred to countries outside the European Union (including Canada and the United States).
These transfers take place in compliance with the Standard Contractual Clauses approved by the European Commission and the guarantees provided by the GDPR.

4. Purpose of the processing

Personal data are processed for:

  1. Allow navigation on the site

  2. Manage account registration

  3. Execute orders and fulfill contractual obligations

  4. Manage tax and administrative obligations

  5. Provide customer support

  6. Send commercial communications (newsletter), subject to consent

  7. Carry out marketing and profiling activities, subject to consent

5. Marketing, profiling and remarketing activities

The site uses third-party tools for advertising and analysis purposes, including:

  • Google Analytics 4

  • Google Ads

  • Meta Ads (Facebook and Instagram)

  • Remarketing tools and custom audiences

These tools may collect information relating to the user's navigation, including:

  • pages visited

  • interactions with the site

  • products displayed

  • purchasing events

  • online identifiers and cookies

This data may be used to:

  • measure the effectiveness of advertising campaigns

  • show personalized ads on Google, Facebook, and Instagram

  • create custom audiences

  • create lookalike audiences

  • carry out remarketing activities

Processing for profiling and behavioral advertising purposes occurs exclusively with the user's prior consent expressed via the cookie banner.

Data may be transferred to countries outside the European Union in compliance with the guarantees provided by the GDPR.

The user can change or withdraw consent at any time via the cookie management panel.

6. Legal basis for processing

The processing of personal data is based on:

  • performance of a contract (online purchases)

  • pre-contractual measures at the request of the interested party

  • legal obligations

  • legitimate interest of the Data Controller (security and operation of the site)

  • consent of the interested party (marketing and profiling)

7. Sale of alcoholic beverages

The site is intended exclusively for adult users.

We do not knowingly collect personal data from anyone under the age of 18.
If we become aware of the collection of data relating to minors, we will immediately delete it.

8. Retention period

Personal data is retained for the time necessary to achieve the purposes indicated above:

  • Browsing data: for the time strictly necessary

  • Order data: 10 years (tax obligations)

  • Marketing data: maximum 24 months unless revoked early

  • Account data: until deletion request

9. Data recipients

The data may be processed by:

  • authorized personnel of the Owner

  • IT service providers

  • Shopify platform

  • payment provider

  • shipping company

  • tax consultants

  • advertising service providers (Google, Meta)

All third parties act as data controllers pursuant to Art. 28 GDPR.

10. Transfer of data outside the EU

If data is transferred to countries outside the European Economic Area, the Data Controller guarantees the adoption of adequate security measures required by the GDPR, including Standard Contractual Clauses.

11. Rights of the interested party

The interested party may exercise the rights provided for in Articles 15-22 of the GDPR at any time:

  • access

  • rectification

  • cancellation

  • limitation

  • opposition

  • portability

  • revocation of consent

  • complaint to the Guarantor for the Protection of Personal Data

Requests can be sent to:
info@liquorificiofabbrizii.com

The Owner will respond within 30 days.

12. Data security

The Data Controller adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction.