Privacy policy

USER DATA PROCESSING POLICY FOR BEVERTECH.IT WEBSITE

Pursuant to and for the purposes of Art. 13 of Regulation (EU) 2016/679 ("GDPR"), Ipack Ima S.r.l. ("Ipack Ima") and UIV - Unione Italiana Vini Servizi Società Cooperativa ("UIV" and, collectively, "Joint Data Controllers" or “Joint Controllers”), as joint controllers of the processing of your personal data, hereby inform you that they process personal data relating to the user or visitor ("User" or "Data Subject") communicated by the latter or otherwise obtained as a result of the use of the bevertech.it website (hereinafter "Site") relating to the Bevertech event (the "Event") in the manner and for the purposes described below in this policy (the "Policy").

It should be noted that this Policy refers to this Site only and to no other website that may be consulted by the User through links (regarding which please refer to the respective privacy policies).

By browsing the Site, the User acknowledges having read and understood the content of this Policy.

       1. Contact details of the Joint Data Controllers

The Joint Controllers of the processing of personal data are Ipack Ima, with registered office in Rho (MI), Strada Statale del Sempione Km. 28, tax Code and VAT number 09243350965, which can be contacted at the email address privacy@ipackima.it and UIV, with registered office in Milan (MI), Via S. Vittore al Teatro n. 3, 20123, VAT number and tax code and registration number in the Milan Business Register 00868400151, which can be contacted at the email address privacy@uiv.it

       2. Types of personal data

The Joint Controllers process the following types of personal data belonging to Users who browse and interact with the Site's web services, specifically:

Browsing data

The functioning of the Site involves the use of computer systems and software procedures that acquire, during normal operation, certain personal data related to web browsing, the transmission of which is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified data subjects, but that by its very nature could, through processing and association with data held by third parties, allow Users to be identified (e.g., IP addresses, URI - Uniform Resource Identifier - addresses of requested resources, time of the request, etc.), along with other parameters related to the User's operating system and IT environment. This data is used for the purpose of monitoring the correct functioning of the Site and for the anonymous processing of statistical information on the use of the Site. Furthermore, the data may be used for the potential legal defence of rights, as well as for compliance with regulatory obligations to respond to requests from judicial and police authorities.

With regard to the use of cookies installed through the Site and other online tracking devices, the User is invited to consult the Cookie Policy.

Data provided voluntarily by the User

Users are not required to provide personal data to visit the Site. However, contacts between Users and Joint Controllers, through the completion of contact forms, in the "Contacts" section, as well as the optional, explicit and voluntary sending of e-mail to the addresses given on the Site, involve the subsequent acquisition of common personal data, such as name, surname, the sender's e-mail address, necessary to respond to requests, as well as any other personal data included in the communication.

Therefore, should the User wish to avoid the processing of their personal data by the Joint Controllers, it is advisable to refrain from submitting requests or, at least, provide as little personal data as possible.

       3. Purpose and legal basis of processing

Personal data are collected and processed for the following purposes:

    1. to allow Users to use the Site's web services;
    2. to manage the User's requests for information;
    3. to prevent the commission of unlawful acts through the Site;
    4. to protect the rights of Ipack Ima and UIV, in the event of any legal disputes;
    5. to comply with the legal obligations to which Ipack Ima and UIV are subject.

For the purposes referred to in points a) and b), Ipack Ima and UIV process such data for the execution of a contract to which the Data Subject is a party or pre-contractual measures adopted upon the request of the same pursuant to art. 6, para. 1, letter b) of the GDPR.

For the purposes referred to in points c) and d), Ipack Ima and UIV process such data for the pursuit of a legitimate interest of the Data Controller pursuant to art. 6, para. 1, letter f) of the GDPR.

For the purposes referred to in point e), Ipack Ima and UIV process such data for the fulfilment of legal obligations to which the Data Controller is subject pursuant to art. 6, para. 1, letter c) of the GDPR.

If the Joint Controllers intend to use the personal data collected for any other purpose incompatible with the purposes for which they were originally collected or authorised, Ipack Ima and UIV will inform the User in advance, and the latter may also deny or withdraw their consent.

       4. Nature of data provision and consequences in case of refusal

The provision of personal data is necessary and does not require your consent.

Any refusal to provide the data may make it impossible for the Joint Controllers to comply with the requested service, comply with legal obligations and process and respond to your requests. Providing data to handle requests for information is not a legal or contractual requirement. However, the provision of data is necessary to respond to your request.

       5. Data processing methods

Within the organisational structure of Ipack Ima and UIV, personal data will be processed by authorised data processors acting under the authority of the Joint Data Controllers, adequately instructed by the Joint Data Controllers themselves, mainly with electronic systems in accordance with the principles applicable to the processing of personal data pursuant to art. 5 of the GDPR.

       6. Data Retention Period

The data will be stored for the period necessary to comply with legal obligations. The criteria used to determine the applicable retention period are the following: the retention of personal data covered by this Privacy Policy will be for the time necessary (i) to manage the contractual relationship with the User, (ii) to manage complaints or specific user requests, (iii) to assert rights in court and (iv) for the time provided for by applicable laws/regulations.

For the storage times of personal data processed through cookies, please refer to the Cookie Policy.

       7. Scope of data communication and categories of recipients

For the purposes specified above only, the data collected, recorded and processed may be processed by external parties that perform, on behalf of Ipack Ima and UIV, some organisational, technical and security activities related to website management and related service provision (e.g., IT and telematic service providers), acting as data processors under specific contracts with the Joint Controllers Ipack Ima and UIV Joint Controllers. Furthermore, where necessary, data may be disclosed to competent authorities and other public bodies upon their request, in accordance with current regulations and in relation to investigations and proceedings for the prevention, detection and suppression of crime, as well as for judicial defence of rights.

The complete list of these subjects or categories of subjects is available at the Joint Data Controllers' registered offices and can be requested by sending an inquiry to the contact details indicated in paragraph 1 of this Policy.

Personal data shall not be disseminated.

       8. Data transfer to third countries outside the EU

In general, personal data will not be transferred outside the EU.

However, if transferred to third countries outside the EU, this activity will only be carried out in compliance with European Commission decisions that have recognised the adequacy of the data protection regulations in those countries, or on the basis of adequate safeguards (such as standard contractual clauses or binding corporate rules for groups), or, in the absence of such conditions, if the transfer is authorised by the User or necessary for the performance of the contract with the same or in their favour. In any case, should data be transferred outside the EU, the Joint Controllers will provide the information prescribed under Article  13, para. 1, letter f) of the GDPR.

       9. Rights of data subjects

Within the limits provided for pursuant to art. 2-undecies of Legislative Decree no. 30/2003, as amended and supplemented by Legislative Decree no. 101/2018 ("Privacy Code"), the User has the right to exercise at any time the rights recognised by Articles 15 to 22 and 77 of the GDPR, as briefly summarised below:

    • Right of access: you may request information on the processing carried out by the Joint Controllers on your data or confirmation as to whether or not your personal data are being processed by the Joint Controllers. In this case, you may request that the Joint Controllers provide a copy of your data and to verify what data is in our possession.
    • Right to rectification: you have the right to request that the Controllers rectify your personal data if they are incorrect, including the right to request the completion of incomplete personal data.
    • Right to erasure: you have the right to request that the Joint Controllers delete the data (or part of it) that you provided us with, including data that is no longer necessary for the purposes for which it was collected or otherwise processed.
    • Right to restriction of processing: you may request that the Joint Controllers restrict the processing of your personal data if the legal conditions are met.
    • Right to object: you may object to the processing of your personal data, unless there is an overriding legitimate ground for the continuation of such processing."
    • Right to data portability: you may obtain from the Joint Controllers, in a structured, commonly used and machine-readable format, the personal data you have provided, for the purpose of transmitting them to another subject. This right applies in cases where the Joint Controllers process such data through automated means, based on consent or for the purpose of providing services.
    • Withdrawal of consent: where processing is based on consent, you have the right to withdraw your consent at any time, without prejudice to the lawfulness of processing carried out before said withdrawal.
    • Right not to be subjected to automated decision-making: you may request not to be subjected to processing based solely on automated decision-making, including profiling, which produces legal effects concerning you or which significantly affects you in a similar way.  This right may not be exercised if: (i) the processing is necessary for the conclusion of a contract between you and the Joint Controllers; (ii) the processing is authorised by law; (iii) the processing is based on your consent.
    • Right to lodge a complaint with the Supervisory Authority: without prejudice to any other administrative or judicial appeal, you have the right to lodge a complaint with the competent Supervisory Authority where you consider that the processing carried out infringes the applicable data protection legislation. 

Notwithstanding the procedures provided for by the Data Protection Authority for lodging a complaint, for all other rights, you may send a request to the Joint Controllers using the contact details indicated in paragraph 1 of this Policy.

This Policy is subject to change. It is therefore advisable to check this web page on a regular basis and to consider the most up-to-date version of the information available therein as valid.

Updated 25/08/2025