Privacy Policy

Notice pursuant to Article 13 of Regulation (EU) No. 679/2016 (GDPR)

Our company, Whisky Italy S.r.l.s. (hereinafter "Whisky Italy"), safeguards the confidentiality of your personal data and ensures that it is protected against any event that may pose a risk of violation.

As required by Article 13 of European Union Regulation No. 679/2016 (GDPR), we provide below the legally required information regarding the processing of your personal data.

 

Who we are and what data we process

The Data Controller is Whisky Italy S.r.l.s., with its registered office in Rome, Via dei Rangoni n. 64, 00148, Italy, VAT number 12498331003, email: info@whiskyitaly.it, represented by the Legal Representative. The company is engaged in the wholesale and retail trade of liquors and alcoholic beverages. We collect and/or receive only your personal identification data and online traffic data. We do not request "sensitive" data, meaning personal data that, according to the GDPR (Art. 9), reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data aimed at uniquely identifying a person, data related to health or sexual life. Should the services requested from Whisky Italy require the processing of such data, the data subject will be provided with the appropriate notice in advance and will be asked to give explicit consent.

 

For what purposes we need your data

Your data is used by Whisky Italy to manage purchase requests, shipping, and contact requests made by the Data Subject, to provide assistance, and to comply with legal and regulatory obligations that Whisky Italy is subject to in relation to its business activities. Whisky Italy does not sell the Data Subject’s personal data to third parties nor does it use the data for purposes other than those explicitly stated.

Specifically, the Data Subject’s data will be processed for:

a) Registration and contact requests and/or information material

The processing of the Data Subject’s data is carried out to follow up on preliminary activities and those consequent to the request for contact, registration, and/or the sending of information material, as well as to fulfill any other obligation deriving from the legal basis.

 

b) Contractual relationship management

The processing of the Data Subject’s personal data is carried out to follow up on preliminary activities and those consequent to the purchase of a Service and/or Product, the management of the related order, the provision of the Service and/or the shipment of the purchased Product, the related receipt or invoice, the handling of complaints and/or reports to the customer service, the provision of assistance, fraud prevention, and to fulfill any other obligation arising from the contract. It should be noted that Whisky Italy does not store payment data, credit/debit card information, or customer account details.

 

c) Promotional activities for Services and/or Products similar to those purchased by the data subject

Whisky Italy, even without your explicit consent, may use the contact details provided by the Data Subject for the direct sale of its Services/Products, limited to cases where they are similar to those that have already been purchased, unless the Data Subject explicitly objects.

 

d) IT security

In line with Recital 49 of the GDPR, Whisky Italy, also through its external providers (third parties and/or recipients), processes the Data Subject’s personal data related to traffic to the extent strictly necessary and proportionate to ensure the security of information and data. This includes the ability of an information system to resist cyberattacks and maintain a level of security that prevents the possibility of system compromise, as well as the availability, integrity, and confidentiality of stored personal data.

 

e) Profiling

The Data Subject’s personal data will not be processed for profiling purposes. Only anonymous data and statistical information will be processed.

 

f) Fraud prevention

The Data Subject’s personal data, excluding special categories (Art. 9 of the GDPR) or judicial data (Art. 10 of the GDPR), will be processed to enable checks for monitoring and preventing fraudulent payments. If such checks result in a negative outcome, the transaction will not be possible. The Data Subject may, in any case, express their opinion, obtain an explanation, and contest the decision by providing their reasons to our Customer Service or by contacting info@whiskyitaly.it.

 

g) Protection of minors

The Services/Products offered by Whisky Italy are reserved for individuals who are legally able, according to the applicable national regulations, to enter into contractual obligations and purchase liquors and alcoholic beverages.

 

How we process your data

The Data Subject’s personal data will be processed through operations such as collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction.

Personal data will be processed primarily in an automated manner, with logic closely related to the aforementioned purposes, through databases, electronic platforms managed by third parties appointed as data processors (for an updated list, contact Whisky Italy at the email address info@whiskyitaly.it); and/or integrated IT systems and/or websites owned or used by Whisky Italy.

Whisky Italy implements a wide variety of security measures to protect against the risk of loss, misuse, or alteration of your data. Specifically, the measures provided for in Articles 30 and 35 of the GDPR have been adopted.

 

Location of Data Processing

Personal Data is primarily processed at the headquarters of Whisky Italy and in the locations where the Data Controller and the appointed personnel are based, specifically at Via dei Rangoni 64 and Largo Luigi Cossa,3 in Rome. For further information, please contact us at: info@whiskyitaly.it.

 

How long we retain your data

Whisky Italy will process the Data Subject's Personal Data for a period no longer than necessary to achieve the purposes for which the personal data is processed, or for a longer period, as permitted by law, and will delete it without undue delay.
The user can request the deletion of their account or registration on the Website, or request the cessation of data processing or withdraw their consent at any time by sending a request to info@whiskyitaly.it.

 

Nature and methods of providing Personal Data

Providing personal data is optional, but for some personal data, it is mandatory (i.e., necessary for those fields marked with an asterisk or otherwise indicated as mandatory) so that Whisky Italy can meet the user's needs within the Website's functionalities. Failure to provide, partial provision, or inaccurate provision of the Personal Data marked with an asterisk, as necessary for the execution of the requested service, will make it impossible to execute such service; while failure to provide, partial provision, or inaccurate provision of optional Personal Data will not have any consequences.

The provision of Personal Data can occur:
a) by filling in the appropriate fields in the various sections of the Website; or
b) through browsing the Website or the use of cookies; or
c) through the request made by the Data Subject on a Social Network they are registered with, and the communication to Whisky Italy of some of the data expressed by the Data Subject at the time of the request.

 

Categories of Personal Data processed

In addition to the Personal Data provided directly by the Data Subject (such as name, surname, postal address, email address, password, etc.), during the connection to the Website, the IT systems and software procedures used for the operation of the Website automatically and indirectly provide and/or acquire certain information that may constitute personal data, the transmission of which is implicit in the use of Internet communication protocols, such as, but not limited to, "cookies" and as further specified below, "IP" addresses, domain names of the computers used by users connecting to the Website, "Url" addresses of the requested resources, the time of the request to the server, and the browsing on the Website.

 

Who may have access to your data

The Personal Data of the Data Subject may be made known to employees or collaborators of Whisky Italy who, operating under its direct authority, process data and are appointed as internal data processors or data handlers in accordance with Articles 28 and 29 of the GDPR, system administrators, who will receive adequate operational instructions from Whisky Italy. The same will occur – at the discretion of the Data Controllers appointed by the Data Controller – for employees or collaborators of the Data Controllers.

Personal Data may also be made known to external Data Controllers, only if explicitly authorized by the Data Subject and upon specific request by Whisky Italy, through third-party companies or other entities (e.g., entities entrusted with assistance, communication, marketing, advertising, promotion, and sale of products and/or services, advertisers, advertising agencies, IT service providers, Website managers, electronic platform managers, couriers) – who perform outsourced activities on behalf of Whisky Italy.

 

To whom we disclose your Personal Data

Personal Data will never be disclosed to third parties nor disseminated.