Privacy Policy
Last updated: May 7, 2026
1. Who we are
This site, Italian Winery Directory (italianwinerydirectory.com), is operated by Fabiano Pessoa, based in Italy.
For data protection inquiries: [email protected].
2. What data we collect
Provided by you:
- Email address (when you subscribe to our newsletter or submit a feedback form)
- Optional name and message text in feedback / correction forms
Collected automatically:
- IP address (anonymized after 24 hours)
- Browser type, device type, operating system
- Pages visited, session duration, referrer URL
- Click events on outbound affiliate links
3. Why we collect it (legal basis)
Under GDPR Article 6, we process data on these legal bases:
| Purpose | Legal basis |
|---|---|
| Operate the directory and serve pages | Legitimate interest (Art. 6(1)(f)) |
| Send newsletter emails | Consent (Art. 6(1)(a)) |
| Process feedback and corrections | Legitimate interest (Art. 6(1)(f)) |
| Affiliate referral tracking | Consent (Art. 6(1)(a)) |
| Analytics & site improvement | Consent (Art. 6(1)(a)) |
4. Third parties we share data with
We use the following third-party services. Each processes data per its own privacy policy:
| Service | Purpose | Location | Privacy Policy |
|---|---|---|---|
| Supabase | Database & authentication | EU (Frankfurt) | Link |
| Resend | Newsletter & transactional email | United States | Link |
| Google Analytics 4 | Site analytics | United States / EU | Link |
| GetYourGuide | Affiliate referral tracking | Germany / EU | Link |
| Webgains (Tannico) | Affiliate referral tracking | United Kingdom | Link |
| Cloudflare Pages | Hosting & CDN | Global | Link |
5. International data transfers
Some of our processors (Resend, Google Analytics) are located in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the safeguard for these transfers, in accordance with the Schrems II ruling.
6. Data retention
| Data type | Retention period |
|---|---|
| Newsletter email | Until you unsubscribe |
| Analytics data | 14 months (GA4 default) |
| Affiliate cookies | Up to 31 days (per provider) |
| Cookie consent record | 365 days (then re-prompted) |
| Server logs | 24 hours (then deleted) |
7. Your rights
Under GDPR, you have the right to:
- Access — request a copy of data we hold about you
- Rectify — correct inaccurate data
- Erase — request deletion ("right to be forgotten")
- Restrict — limit how we process your data
- Portability — receive your data in a portable format
- Object — opt out of processing based on legitimate interest
- Withdraw consent — at any time, for consent-based processing
Lodge a complaint — with your local data protection authority. In Italy: Garante per la Protezione dei Dati Personali.
To exercise any right, email [email protected]. We respond within 30 days.
8. Cookies and tracking
You can view and change your cookie preferences at any time using the link in the footer.
We use 3 categories of cookies:
- Strictly necessary — required for the site to function (e.g., session, age gate). Always active.
- Analytics — Google Analytics 4. Anonymous traffic statistics. Off by default.
- Marketing & affiliate — GetYourGuide, Webgains/Tannico. Track referrals so we earn commission on partner bookings/purchases. Off by default.
9. Changes to this policy
We will update this page when we add new services or change how we process data. The "Last updated" date at the top reflects the most recent change.
10. Contact
For any data protection question, email [email protected].