Privacy Policy

Piccolo Chianti protects the confidentiality of personal data and guarantees to them the necessary protection from any event that could put them at risk of violation. As required by the European Union Regulation no. 679/2016 (“GDPR”), and in particular to the art. 13, below we provide the user (“Concerned”) the information required by law concerning the processing of their personal data.


Piccolo Chianti P.IVA E CODICE FISCALE 01051100525
Ss 222, 20 53100 SIENA (SI)
Phone: +39 0577 51138
Fax: +39 0577 591076
Mobile.: +39 329 2717127

Contacted at:


Among the Personal Information collected by this Site, either independently or through third parties, there are: Cookies, Usage Data, Email and Name.

Piccolo Chianti does not require the Data Subject to provide data c.d. “Particulars”, that is, according to the provisions of the GDPR (Article 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as genetic data, data biometrics designed to uniquely identify a natural person, data relating to a person’s health or sexual life or sexual orientation.

The data collected will not be used for the purpose of sending advertising materials or direct sales or for commercial information purposes.
The data collected will not be used for carrying out market research or commercial communication.
the data will not be disseminated, made available or given in consultation in any form to third parties.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.
Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Site.
The possible use of Cookies – or other tracking tools – by this Site or third party service providers used by this Site, unless otherwise specified, is used to identify the User and record the related preferences for purposes strictly linked to the provision of the service requested by the User.
Failure to provide the User with some Personal Data may prevent this Site from providing its services.
The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.


The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.


The Data are processed at the Data Controller’s operating office. For more information, contact the owner.


The Data are processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always ask for the interruption of treatment or deletion of data.


Without your express consent (pursuant to Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities and to all the other subjects to whom the communication is mandatory by law for the accomplishment of said purposes. Your data will not be disclosed.


This Website and the Services of the Data Controller are not intended for persons under the age of 16 and the Data Controller does not intentionally collect personal information about minors. In the event that information on minors were unintentionally registered, the Data Controller will delete them in a timely manner, at the request of users.


The interested party has the right to obtain from the data controller the following:

A. confirming that the processing of personal data concerning him is underway and in this case, to obtain access to personal data and the following information:
the purposes of the processing;
the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular for recipients of third countries or international organizations;
whenever possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
the existence of the right of the data subject to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
the right to lodge a complaint with a supervisory authority;
if the data are not collected from the data subject, all information available on their origin;
the existence of an automated decision-making process, including profiling, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject;
the appropriate guarantees provided by the third country (non-EU) or an international organization to protect any data transferred
B. the right to obtain a copy of the personal data being processed, provided that this right does not affect the rights and freedoms of others; In case of further copies requested by the interested party, the data controller may charge a reasonable fee contribution based on administrative costs.
C. the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay
D. the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay, if there are the reasons provided for by the GDPR in art. 17, among which, for example, in the case in which they are no longer necessary for the purposes of the processing or if this is assumed to be illegal, and the conditions provided for by law still exist; and in any case if the treatment is not justified by another equally legitimate reason;
whenever possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
E. the right to obtain from the data controller the limitation of treatment, in the cases provided for by art. 18 of the GDPR, for example where you have challenged its accuracy, for the period necessary for the Data Controller to verify its accuracy. The interested party must be informed, in reasonable time, also of when the suspension period has been completed or the cause of the limitation of the treatment has ceased, and therefore the limitation itself revoked;
F. the right to obtain communication from the holder of the recipients to whom the requests for any corrections or cancellations or limitations of the processing have been transmitted, unless this proves impossible or involves a disproportionate effort.
G. the right to receive personal data concerning him / her in a common, automatic and machine-readable format and the right to transmit such data to another data controller without impediments by the data controller to whom he / she provided them , in the cases provided for by art. 20 of the GDPR, and the right to obtain direct transmission of personal data from one controller to another, if technically feasible.
For any further information and in any case to send your request you must contact the Data Controller at In order to ensure that the rights mentioned above are exercised by the Data Subject and not by unauthorized third parties, the Data Controller may request the same to provide any additional information necessary for the purpose.


For reasons relating to the particular situation of the interested party, the same may oppose at any time the processing of their personal data if it is based on legitimate interest or if it takes place for commercial promotion activities, sending the request to the Owner at
The interested party has the right to cancel his / her personal data if there is no legitimate overriding reason for the Data Controller than the one giving rise to the request, and in any case in case the Data Subject opposes the processing for commercial promotion activities.

To whom can the interested party submit a complaint?

Without prejudice to any other action in administrative or judicial, the interested party may lodge a complaint with the competent supervisory authority on the Italian territory (Authority for the protection of personal data) or the one carrying out its duties and exercising its powers in the Member State where the GDPR violation took place.


The Data concerning the User is collected to allow the site to provide its services, as well as for the following purposes: Contacting the User, responding to user requests and Statistics.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.


Personal Data is collected for the following purposes and using the following services:


By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.
Personal data collected: Email and Name.


The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.


Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses Personal Information collected for the purpose of evaluating the use of this Site, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalize the advertisements of its advertising network.
The following link is also made available by Google the browser add-on for the deactivation of Google Analytics Personal data collected: cookies and usage data. Place of processing: USA – Privacy PolicyOpt Out


These services allow you to view content hosted on external platforms directly from the pages of this site and to interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.


Google Maps is a map visualization service managed by Google Inc. that allows this site to integrate such contents within its pages.
Personal data collected: Cookies and usage data
Place of processing: USA Privacy Policy


On our site there may be hypertext links to other sites not owned or controlled by us.
Please note that this Privacy Policy applies only and exclusively to the personal information that we collect via our site and we can not be held responsible in any way for personal information collected, stored and used by third parties through their sites.


More information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact information.


Considering that the state of improvement of automatic control mechanisms does not make them free from errors and malfunctions, we reserve the right to make any changes to this privacy statement which we deem necessary or which will be made mandatory by law. or different regulatory source. You should be careful to periodically check this privacy statement, as it will be assumed that you have accepted changes and updates if you continue to use the site after they have been published.

This privacy statement concerns exclusively this Site.
This page is visible, through the link at the bottom of all the pages of the Site pursuant to art. 122 second paragraph of Legislative Decree no. 196/2003 and following the simplified procedures for the information and the acquisition of consent for the use of cookies published in the Official Gazette No. 126 of June 3, 2014 and the related register of measures No. 299 of May 8, 2014.

Last updated on 24 May 2018.

This site uses cookies necessary for the operation (technical cookies) and parts cookies, useful for the purposes illustrated in the cookie policy. If you want to know more, read the cookie policy. By clicking on ACCEPT you consent to the activation of cookies managed by the site.