Last Updated: July 2026

PRIVACY POLICY

This Privacy Policy describes how AZIENDA AGRICOLA PARADISO DI LUCA ELEGIR (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit our website, place an order for on-site pickup, or book an accommodation or tasting experience.

We are committed to processing your personal data in accordance with the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian privacy laws.

1. Data Controller Information

The Data Controller responsible for processing your personal data is:

• Company Name: AZIENDA AGRICOLA PARADISO DI LUCA ELEGIR

• Registered Office: Via Moncalvo 5, 14051 Loazzolo (AT), Italy

• VAT Number (P.IVA): 01611710052

• Fiscal Code (C.F.): LGRLCU87H30A0521

• Privacy Contact Email: info@anparadis.it

2. Personal Data We Collect

We collect personal information through different forms and features on our website:

• Contact Form & Inquiries: Name, email address, and any personal information voluntarily provided within your message.

• E-Commerce Orders (Wine Shop for On-Site Pickup): Name, email address, contact details, and billing information required to complete and confirm your purchase.

• Accommodation & Tasting Bookings: Arrival and departure dates, number of guests, contact information, and any optional preferences provided during booking (e.g., presence of children, non-drinking guests, dietary intolerances, or special requests).

• Communications & Updates: Email addresses collected from guests who have completed a booking or order, used to send essential booking updates or customer service communications.

3. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds:

1. Execution of a Contract (Art. 6.1.b GDPR): Processing is necessary to fulfill orders placed via our online shop, manage room and tasting reservations, process invoices, and arrange on-site pickups.

2. Legal Obligations (Art. 6.1.c GDPR): Compliance with mandatory tax, accounting, and hospitality registration laws under Italian regulation.

3. Legitimate Interest / Consent (Art. 6.1.a & f GDPR): Answering inquiries submitted via our contact form, sending transactional emails, or providing relevant customer service regarding your booking.

4. Explicit Consent for Special Data: Optional details regarding dietary allergies or health-related food intolerances are processed strictly based on your voluntary submission to ensure guest safety during tasting experiences.

4. Payment Security & Processing

All payment transactions made through our website or booking system are handled through secure, PCI-DSS compliant third-party payment gateways:

• Supported Payment Methods: Stripe, PayPal, SumUp, Nexi, AvaiBook POS, and Direct Bank Transfer.

• Credit Card Security: We do not store or handle sensitive credit card numbers or banking credentials on our local servers. Payment data is encrypted and directly processed by the respective payment providers.

5. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal data. Your information is shared only with trusted third-party service providers essential for operating our website and providing our services:

• Website Platform & E-Commerce: Powered by WordPress and SureCart.

• Booking Engine & Communications: Managed via AvaiBook.

• Payment Gateways: Stripe, PayPal, Nexi, and SumUp.

• Hosting & Accounting: Hosted on secure servers provided by Aruba S.p.A. (located within the European Union). Invoicing and fiscal data are processed using Aruba and AvaiBook invoicing systems.

• Shipping / Delivery: We do not share customer address data with third-party shipping couriers, as all online store purchases are designated exclusively for on-site pickup (ritiro in loco) at our estate.

6. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Fiscal and Tax Records: Invoices, purchase records, and accounting documents are kept for 10 years, as required by Italian tax legislation.

• Bookings & Contact Inquiries: Kept for the duration necessary to deliver the requested service, respond to requests, and manage administrative records.

• Communications / Guest Records: Maintained until you request erasure or object to processing.

7. Data Storage & Transfers Outside the EU

Your personal data is hosted on servers located within the European Union (Aruba S.p.A., Italy). We do not transfer your personal information outside the European Economic Area (EEA) unless the receiving platform guarantees full GDPR compliance through Standard Contractual Clauses or adequate protection frameworks.

8. Your Rights Under the GDPR

As a data subject, you have the right to exercise the following rights at any time:

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data when it is no longer necessary for the original processing purposes (subject to legal retention requirements).

• Right to Restrict Processing: Request restriction of processing under certain conditions.

• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.

• Right to Object: Object to data processing based on legitimate interest or consent.

• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us directly at info@anparadis.it. You also have the right to lodge a complaint with the national supervisory authority (in Italy, the Garante per la protezione dei dati personali – www.garanteprivacy.it).

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy to reflect changes in legal obligations or operational procedures. Any updates will be published directly on this page with an updated revision date.