Privacy Policy

1. Data Controller

The Data Controller for the processing of personal data is:

Russo Siciliano - Distillerie dell'Etna
Registered office: Via Duccio Galimberti, 68, 95010 Santa Venerina (CT)
Email: [email protected]
VAT No.: 04727860878

2. Types of Data Collected

Among the personal data collected by this site, either independently or through third parties, are:

• Browsing data: IP address, browser type, operating system, pages visited, date and time of access
• Data voluntarily provided: first name, last name, email, phone, messages sent via contact forms
• Purchase data: shipping address, billing data, order history
• Cookies and similar technologies: see our Cookie Policy

3. Purpose of Processing

Personal data is processed for the following purposes:

• Management of contact requests and quotes
• Order fulfillment and e-commerce management
• Registration and management of the B2B area
• Sending newsletters and promotional communications (subject to consent)
• Anonymous statistical analyses on the use of the site
• Legal compliance and tax obligations

4. Legal Basis for Processing

The processing of data is based on:

• Consent of the data subject for newsletter and marketing
• Performance of a contract for order management
• Legitimate interest for site security and statistical analyses
• Legal obligation for tax and regulatory compliance

5. Processing Methods

Personal data is processed using electronic and/or paper tools, with logic strictly related to the purposes indicated above and, in any case, in such a way as to ensure the security and confidentiality of the data itself.

6. Data Retention

Personal data is stored for the time strictly necessary to achieve the purposes for which it was collected:

• Browsing data: maximum 12 months
• Contact data: until conclusion of the request + 12 months
• Purchase data: 10 years (tax obligations)
• Newsletter data: until withdrawal of consent

7. Communication and Disclosure of Data

Personal data may be communicated to:

• Technical service providers (hosting, email marketing, analytics)
• Couriers for shipping orders
• Professionals and consultants for tax and legal compliance
• Competent authorities, in the cases provided for by law

Data will never be sold or disclosed to third parties for purposes not provided for in this notice.

8. Data Transfer

Some of the third-party services used may involve the transfer of data to non-EU countries. In such cases, the transfer takes place in compliance with the safeguards provided by the GDPR (adequacy decisions, standard contractual clauses).

9. Rights of the Data Subject

Pursuant to articles 15-22 of the GDPR, the user has the right to:

• Access their personal data
• Obtain the rectification or erasure of data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Italian Data Protection Authority

To exercise your rights, write to: [email protected]

10. Security

We adopt technical and organizational security measures appropriate to protect personal data from unauthorized access, loss, destruction or alteration. The site uses the HTTPS protocol for the encryption of communications.

11. Changes to the Privacy Policy

We reserve the right to modify this notice at any time. Changes will be published on this page with an indication of the date of the last update.