Privacy Policy
Last updated: September 2, 2026
CDZ VINI (“CDZ VINI”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information of visitors to our website.
This Privacy Policy explains how we collect, use and protect personal information when you visit or interact with the Belalto Wines website (the “Website”).
The Website is operated by:
CDZ VINI
Piazza Martiri della Libertà, 8
14042 Calamandrana (AT)
Italy
Email:
info@cdzvini.com
This Privacy Policy applies to visitors worldwide, including individuals located in the European Economic Area (“EEA”), the United Kingdom, Switzerland and the United States.
1. Information We Collect
We collect only the personal information that is reasonably necessary for the operation of the Website and for responding to communications received from visitors.
Information You Provide
If you contact us by email or through a contact form, we may collect information such as:
- your name;
- email address;
- telephone number, if provided;
- company or organisation, if provided;
- the content of your message;
- any other information you voluntarily provide.
Information Collected Automatically
When you visit the Website, certain technical information may be automatically processed by our hosting provider or by the technical infrastructure required to operate the Website.
This may include:
- IP address;
- browser type and version;
- operating system;
- device information;
- date and time of access;
- requested pages or resources;
- technical information relating to the connection.
Such information may be processed for technical, security and operational purposes.
2. How We Use Personal Information
We may use personal information for the following purposes:
- to operate, maintain and secure the Website;
- to respond to enquiries and communications;
- to provide information requested by you;
- to prevent fraud, abuse and security incidents;
- to comply with legal and regulatory obligations;
- to establish, exercise or defend legal claims;
- to protect our rights and legitimate business interests.
We do not use personal information for automated decision-making or profiling.
We do not use personal information for targeted advertising.
3. Legal Basis for Processing — European Users
If you are located in the EEA, the United Kingdom or Switzerland, we process personal data on the following legal bases, as applicable:
Performance of a Contract or Pre-Contractual Measures
Where processing is necessary to respond to a request or to take steps at your request before entering into a contract.
Legal Obligations
Where processing is necessary to comply with applicable legal or regulatory requirements.
Legitimate Interests
Where processing is necessary for our legitimate interests, such as operating and securing our Website, responding to business enquiries, preventing fraud and protecting our legal rights, provided that these interests are not overridden by your fundamental rights and freedoms.
Consent
Where required by applicable law, we will obtain your consent before processing personal data for purposes requiring consent.
You may withdraw consent at any time where processing is based on consent.
4. Cookies
The Website may use cookies or similar technologies that are strictly necessary for its technical operation.
We do not use:
- Google Analytics;
- Meta Pixel;
- advertising cookies;
- behavioural advertising technologies;
- newsletter tracking technologies.
Where the Website uses strictly necessary technical cookies, these are used only to provide and secure Website functionality.
Where required by applicable law, any non-essential cookies will only be used after obtaining your consent.
You can also manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website.
5. Hosting and Technical Service Providers
Our Website is hosted and technically supported by third-party service providers.
Our hosting provider is:
Aruba S.p.A.
Italy
The hosting provider may process technical information, including IP addresses and server logs, as necessary to provide hosting, security and infrastructure services.
Such processing is carried out in accordance with applicable data protection laws and the contractual arrangements between the relevant parties.
For further information about Aruba's privacy practices, please refer to Aruba's website .
6. Sharing of Personal Information
We do not sell your personal information.
We may disclose personal information where necessary to:
- service providers who support the operation and security of our Website;
- professional advisers, such as lawyers, accountants or auditors;
- public authorities or governmental bodies where required by law;
- courts, regulators or law-enforcement authorities where legally required;
- parties involved in a corporate transaction, where applicable;
- other recipients where disclosure is necessary to protect our rights, property or security.
We do not share personal information with third parties for their own advertising purposes.
7. International Data Transfers
Because we operate in an international environment, certain service providers may process information in countries outside your country of residence.
Where personal data is transferred outside the EEA, the United Kingdom or Switzerland, we will implement appropriate safeguards where required by applicable data protection laws.
Such safeguards may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Information relating to enquiries and communications may be retained for as long as necessary to respond to the enquiry, maintain the relevant business relationship, comply with legal obligations or protect our legitimate interests.
Technical and security information may be retained for periods determined by our hosting and security providers and as necessary for security, operational and legal purposes.
When personal information is no longer required, it will be deleted, anonymised or securely disposed of, subject to applicable legal requirements.
9. Data Security
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
10. Your Rights Under GDPR
If you are located in the EEA, you may have the following rights under applicable data protection laws:
- Right of access — to request access to your personal data.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of your personal data in certain circumstances.
- Right to restriction — to request restriction of processing in certain circumstances.
- Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format.
- Right to object — to object to certain processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent.
These rights are subject to applicable legal limitations.
To exercise any of these rights, please contact:
We may request additional information necessary to verify your identity before processing certain requests.
11. United States Privacy Rights
If you are a resident of a U.S. state that provides specific privacy rights, you may have additional rights under applicable state privacy laws.
Depending on the law applicable to you, these rights may include:
- the right to know or access personal information we process about you;
- the right to request correction of inaccurate personal information;
- the right to request deletion of personal information;
- the right to obtain certain personal information in a portable format;
- the right to opt out of certain processing activities where applicable;
- the right to opt out of targeted advertising or certain profiling activities, where applicable;
- the right not to receive discriminatory treatment for exercising applicable privacy rights.
CDZ VINI does not sell personal information.
CDZ VINI does not use personal information for targeted advertising or cross-context behavioural advertising.
To exercise applicable privacy rights, please contact:
We may take reasonable steps to verify your identity before processing a request.
We will not discriminate against you for exercising privacy rights granted to you by applicable law.
12. California Residents
If you are a California resident and applicable California privacy legislation applies to our processing of your personal information, you may have additional rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).
Depending on applicability and subject to statutory exemptions, these rights may include:
- the right to know/access personal information collected about you;
- the right to request deletion of personal information;
- the right to request correction of inaccurate personal information;
- the right to opt out of the sale or sharing of personal information;
- the right to limit certain uses of sensitive personal information;
- the right to non-discrimination for exercising applicable privacy rights.
CDZ VINI does not sell or share personal information for cross-context behavioural advertising.
To submit a privacy request, please contact:
We will respond to verified requests within the time period required by applicable law.
13. Children's Privacy
The Website is not directed to children under the age of 18.
We do not knowingly collect personal information from children under 13.
If you believe that a child has provided personal information to us, please contact us at info@cdzvini.com so that we can take appropriate steps to delete the information.
14. Third-Party Websites
The Website may contain links to third-party websites, including websites operated by distributors, retailers, business partners, social media platforms or other organisations.
We are not responsible for the privacy practices, security or content of third-party websites.
We encourage you to review the privacy policies of any third-party website you visit.
15. Social Media
The Website may contain links to our social media profiles.
Simply linking to a social media platform does not mean that we receive or control the personal information collected by that platform.
If you interact with a third-party social media platform, that platform may process your personal information in accordance with its own privacy policy and terms.
16. Automated Decision-Making
We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our Website, business practices, technology or applicable legal requirements.
The updated version will be published on this page together with the revised “Last updated” date.
18. Contact Us
If you have any questions about this Privacy Policy, our privacy practices, or the processing of your personal information, please contact us:
CDZ VINI
Piazza Martiri della Libertà, 8
14042 Calamandrana (AT)
Italy
Email: info@cdzvini.com
19. Right to Lodge a Complaint
If you are located in the European Economic Area, you have the right to lodge a complaint with the competent data protection supervisory authority.
In Italy, the competent supervisory authority is the:
Garante per la protezione dei dati personali
You may also contact us directly so that we can attempt to address your concern.
Last updated: September 2, 2026