Privacy Policy

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)

1. Data Controller

The Data Controller is Andrea Pilatti, winemaker and wine industry consultant.
Website: https://www.andreapilatti.it
E-mail: info@andreapilatti.it

2. Categories of Personal Data Processed

The following personal data may be processed when browsing and using the website:

  • Data provided voluntarily: First name, last name, email address, telephone number, and any other information provided through the contact form, by email, or by telephone.
  • Technical browsing data IP address, browser information, device information, and technical data necessary for the operation and security of the website.
  • Cookies and similar technologies: as described in the Cookie Policy.
  • Data related to newsletter subscriptions: Email address voluntarily provided through the subscription form, any technical data relating to the registration and confirmation of the subscription, as well as information necessary to manage the sending of emails and unsubscribing.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

  • To respond to requests for information and contact, on the legal basis of taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).
  • To manage any professional and contractual relationships (Article 6(1)(b) GDPR).
  • To comply with administrative, tax, and legal obligations (Article 6(1)(c) GDPR).
  • To ensure the security and proper functioning of the website, on the basis of the Data Controller’s legitimate interest (Article 6(1)(f) GDPR).
  • To carry out statistical analyses of website usage through Google Analytics 4 (GA4), in order to understand how visitors navigate the website and to improve the content and services offered. Such processing takes place only with the user's prior consent (Article 6(1)(a) GDPR), which may be withdrawn at any time through the cookie settings.
  • To send periodic communications relating to events, wine tastings, training sessions, professional initiatives, and insights into the world of wine, exclusively with the prior consent of the data subject (Article 6(1)(a) GDPR). Subscription to the newsletter is voluntary and requires confirmation of the email address through a dedicated link (double opt-in). Consent may be withdrawn at any time using the unsubscribe link included in the communications received.

4. Methods of Data Processing

Data is processed using electronic means and, where necessary, paper-based methods, with appropriate technical and organisational measures in place to protect personal data.
Personal data is not used for solely automated decision-making processes that produce legal effects or similarly significant effects on the data subject.

5. Disclosure of Personal Data to Third Parties

Personal data may be processed by technical service providers, hosting providers, email service providers, and website maintenance providers, to the extent necessary for the provision of their respective services.
The website also uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Subject to the user's prior consent, the service collects information about website usage, such as pages visited, interactions, and technical browsing data. Data processing is carried out in accordance with Google's terms and privacy policies.
Personal data may also be disclosed to professionals or authorised parties where necessary to comply with contractual or legal obligations.
Personal data is not sold to third parties.

To manage newsletter subscriptions and send newsletters, the website uses MailPoet, a service integrated into WordPress. Subscribers’ email addresses and the technical data necessary to manage communications may be processed by the service providers in accordance with their respective contractual terms and personal data protection measures.

6. Transfer of Personal Data to Third Countries

The use of services provided by companies located outside the European Economic Area may involve international transfers of personal data.
Where such transfers occur, they will be carried out in compliance with Articles 44 et seq. of the GDPR, using the appropriate mechanisms and safeguards provided for under applicable law.

7. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected.
In particular:

  • Data collected through the contact form or direct communications is retained for as long as necessary to respond to the requests received and to manage any resulting professional relationships. Thereafter, the data is deleted, unless further retention is required to comply with legal obligations or to protect the Data Controller’s legitimate rights.
  • Data relating to contractual relationships and administrative and tax obligations is retained for the periods prescribed by applicable law.
  • Technical data and data collected through cookies are retained in accordance with their respective purposes and the retention periods specified in the Cookie Policy.
  • Data relating to newsletter subscriptions is retained until consent is withdrawn or a request to unsubscribe is made, except where limited retention of information is necessary to document the consent given or to comply with legal obligations. Unconfirmed subscriptions are deleted after 30 days, in accordance with the service settings.

8. Rights of the Data Subject

Pursuant to Articles 15–22 of the GDPR, the data subject may, where provided for by applicable law:

  • Request access to their personal data.
  • Obtain the rectification or erasure of their personal data.
  • Request the restriction of processing.
  • Object to the processing of their personal data.
  • Request data portability.
  • Withdraw previously given consent, without affecting the lawfulness of processing carried out before its withdrawal.

Requests may be sent to info@andreapilatti.it.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Cookie Policy

The website uses technical cookies necessary for its proper functioning and statistical cookies from Google Analytics 4 (GA4), which are used to analyse website usage and improve its content and services.
Statistical cookies are activated only with the user's prior consent. Users may change or withdraw their consent preferences at any time through the cookie consent settings available on the website.
For more information about the cookies used, their respective purposes, and retention periods, please refer to the Cookie Policy available on the website.

10. Updates to this Privacy Policy

This Privacy Policy may be updated to reflect changes in legal, technical, or organisational requirements.
Any changes will be published on this page.
Last updated: 29 October 2026