Last updated: 28 September 2026
This notice explains how Cantina Baldassarri processes the personal data of people who use the website, the online shop, the blog and the contact, events and Wine Club forms, in accordance with EU Regulation 2016/679 (GDPR).
1. Data controller
Eredi Baldassarri Luciano SSA, Str. Luciano Baldassarri 1, 06050 Collazzone (PG), Italy, VAT no. IT03117280549. For any privacy request: cantinabaldassarriluciano@gmail.com, phone +39 075 8707299.
2. What data we process
- Order data: first and last name, shipping and billing addresses, email, phone, products purchased and payment details (we do not store card details, which are handled directly by the payment provider).
- Account data, if the customer creates one: email, password (stored encrypted) and order history.
- Wine Club data: first and last name, email, country, language and, if given, date of birth, plus proof of consent (date, time and IP address of sign-up and confirmation).
- Data from the Contact and Events forms: first and last name, email, phone and the details of the request.
- Technical browsing data needed for the site to work (for example the technical cookies for the cart and the chosen language).
3. Why we process them and on what basis
- To handle orders, shipping, payments, returns and customer care: to perform the sales contract.
- To answer requests sent through the Contact and Events forms and prepare any quotes: at the person's request.
- To keep accounts and meet tax and legal obligations: legal obligation.
- To send Wine Club emails, the newsletter and the welcome code: only with the person's consent, which can be withdrawn at any time via the link in every email or by writing to us.
- To protect the site from abuse and fraud: Cantina Baldassarri's legitimate interest.
Providing data for an order is necessary: without it we cannot process the purchase. Consent to the Wine Club and newsletter is optional.
4. How long we keep them
- Order and invoice data: 10 years, as required by tax law.
- Account data: as long as the account is active; the customer can ask for it to be deleted at any time.
- Wine Club and newsletter data: until consent is withdrawn.
- Contact and Events form requests: as long as needed to handle them, and no longer than 24 months.
5. Who we share them with
Data is processed by the winery's staff and, only as needed, by providers acting on our behalf: couriers for deliveries, bank and payment services, the site's hosting and email providers, and tax advisers. We do not sell or share data with third parties for marketing purposes.
For deliveries to the United States and the United Kingdom, the data needed for shipping is passed to couriers and to the customs authorities of those countries, as this is necessary to perform the contract requested by the customer.
6. Your rights
At any time you can ask to access, correct or delete your data, restrict or object to its processing, and request data portability, by writing to cantinabaldassarriluciano@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. Minors
The shop and the Wine Club are for adults only. We do not knowingly collect data from anyone under 18.
8. Changes
This notice may be updated; the version that applies is always the one published on this page, with the date of the last update.