PRIVACY POLICY – karver.it

The website https://www.karver.it (hereinafter, the “Website”) collects and processes certain personal data relating to users who visit it and/or use the services available on it.

1. Data Controller

The Data Controller is Karver Wine Merchant, with registered office at Via Savigliano 109, Saluzzo (CN), Italy, and can be contacted at the following details:

Email: info@karver.it
Phone: 0175 289601

2. Types of Data Collected

The following categories of data may be processed through the Website:

Data voluntarily provided by the user
Personal and contact details (e.g. first name, surname, email address, telephone number) and the content of messages submitted through the contact form.

Browsing data
Data collected automatically while using the Website, such as IP address, browser type, device information, pages visited, access times and approximate geographic location, through statistical analysis tools (e.g. Google Analytics) and cookies.

Cookies
The Website uses technical cookies and, subject to consent, analytical and third-party cookies. For further details, please refer to the “Cookies” section and the dedicated Cookie Policy.

3. Purposes and Legal Bases of Processing

Personal data collected through the Website is processed for the following purposes:

a) Managing requests submitted through the contact form
The data provided (name, email address, telephone number, message content, etc.) is used to respond to requests for information, quotations or other enquiries submitted by the user.

Legal basis: performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).

b) Statistical analysis and improvement of the Website (Google Analytics)
Browsing data collected through analytical cookies (including third-party cookies) is used in aggregated and/or pseudonymised form to analyse Website traffic, measure performance and improve content.

Legal basis: user consent (Article 6(1)(a) GDPR), provided through the cookie management banner, where applicable.

c) Website security and prevention of abuse
Browsing logs and certain technical data may be processed to ensure the security of the Website and to prevent and detect fraudulent activities or abuse.

Legal basis: legitimate interest of the Data Controller (Article 6(1)(f) GDPR) in protecting the security of its IT systems and the Website.

4. Methods of Processing

Personal data is processed using digital tools and, in limited cases, paper-based records, in compliance with the principles of lawfulness, fairness and transparency set out in the GDPR. Appropriate technical and organisational measures are adopted to prevent data loss, unlawful or improper use and unauthorised access.

The data is not subject to automated decision-making processes producing legal effects on the user, nor to profiling, except where otherwise specified in relation to statistical analysis tools.

5. Data Retention Periods

Data submitted through the contact form
Retained for the time necessary to manage and respond to the request and, where necessary, for additional administrative or legal protection purposes.

Browsing and analytical data
Retained for the periods indicated in the Cookie Policy and/or according to the retention settings configured for Google Analytics (e.g. 14 months, if configured).

Other data
Will be retained for the period strictly necessary to achieve the purposes for which it was collected or in accordance with applicable legal obligations.

6. Recipients of Personal Data

Personal data may be disclosed to third parties acting as data processors or independent data controllers, including:

• Website hosting and maintenance service providers;
• IT service and technical support providers;
• providers of browsing data analysis services (e.g. Google LLC for Google Analytics);
• consultants or professionals supporting the Data Controller in relation to legal or management obligations.

An up-to-date list of data processors is available upon request by contacting the Data Controller using the contact details indicated above.

7. Transfer of Data to Countries Outside the EU

Certain third-party services used by the Website (e.g. Google Analytics) may involve the transfer of personal data to countries outside the European Economic Area (EEA), such as the United States.

In such cases, the transfer takes place in compliance with Articles 44 et seq. of the GDPR, on the basis of an adequacy decision by the European Commission, standard contractual clauses approved by the Commission or other appropriate safeguards ensuring an adequate level of protection.

8. Rights of the Data Subject

As a data subject, the user may exercise at any time the rights provided for under Articles 15–22 of the GDPR, including:

• the right of access to personal data;
• the right to rectification or updating of data;
• the right to erasure (“right to be forgotten”), where applicable;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability, where applicable;
• the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, a request may be sent to the Data Controller at info@karver.it. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Nature of the Provision of Data

Providing data through the contact form is optional, but necessary in order to receive a response to submitted requests. Without such data, the Data Controller will not be able to provide the requested service.

The use of analytical and profiling cookies (where present) is optional and subject to the user’s consent, provided through the relevant banner. Refusing such cookies does not prevent the user from browsing the Website, but may limit certain analytical functions.

10. Cookies

The Website uses technical cookies necessary for the proper functioning of its pages and, subject to consent, analytical and third-party cookies (e.g. Google Analytics) to analyse traffic and improve content.

For detailed information about the cookies used, their characteristics, retention periods and how to manage preferences, please refer to the Website’s Cookie Policy.

11. Changes to this Privacy Policy

The Data Controller reserves the right to update or amend this Privacy Policy at any time in order to reflect any regulatory changes or changes made to the services offered through the Website.

The version currently in force is published on this page. Users are therefore invited to review it periodically.

Last updated: 1 December 2025