Last updated: 3 September 2026
This notice explains how Azienda Agricola Tenute Catena processes the personal data of people who visit www.tenutecatena.com and buy from it, under Articles 13 and 14 of Regulation (EU) 2016/679 («GDPR»).
1. Data controller
Azienda Agricola Tenute Catena
Registered office: Via Giovanni XXIII, 65 — 84025 Eboli (SA), Italy
Operating address: Corso Garibaldi, 25 — 84020 Bellosguardo (SA), Italy
Italian VAT number: 05939850656
Email: info@tenutecatena.com — Tel. +39 320 6573483
We have not appointed a Data Protection Officer, as we are not required to. For anything concerning personal data, the email address above is the point of contact.
2. What data we collect
- Contact and billing details — first and last name, delivery and billing address, email, telephone number, VAT or tax number where applicable. Collected when you place an order or create an account.
- Order data — products bought, amounts, date, payment and delivery method, and any correspondence with us.
- Payment data — your card details never pass through our servers and are not stored by us: they are handled directly by the payment service provider. We receive only the outcome of the transaction and a reference.
- Browsing data — IP address, browser and device type, pages visited, date and time. Collected automatically by the systems that run the site.
- Cookies and similar technologies — see the Cookie Policy.
- Your email address, if you choose to subscribe to the newsletter.
3. Why we process it, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your order: confirmation, payment, shipping, support, returns | Performance of a contract — Art. 6(1)(b) GDPR | For the duration of the relationship |
| Tax and accounting obligations (invoices, records) | Legal obligation — Art. 6(1)(c) GDPR | 10 years (Art. 2220 Italian Civil Code) |
| Managing your customer account | Performance of a contract — Art. 6(1)(b) GDPR | Until you ask us to delete it |
| Sending the newsletter and commercial messages | Consent — Art. 6(1)(a) GDPR, withdrawable at any time | Until consent is withdrawn |
| Website usage statistics (statistical cookies) | Consent — Art. 6(1)(a) GDPR | See the Cookie Policy |
| Site security, prevention of fraud and abuse | Legitimate interest — Art. 6(1)(f) GDPR | 12 months |
| Establishing, exercising or defending legal claims | Legitimate interest — Art. 6(1)(f) GDPR | Until the dispute is concluded |
Providing the data marked as required in our forms is necessary to complete a purchase: without it we cannot fulfil the order. Providing your data for the newsletter is entirely optional, and refusing has no consequence.
4. Who we share data with
Your data is accessible to authorised staff at Tenute Catena and may be shared with parties who carry out activities necessary to fulfil your order, appointed as processors under Article 28 GDPR:
- the hosting provider and the technical maintenance provider for this website;
- the carriers and logistics operators handling delivery;
- the payment service providers;
- our accountant and tax advisers;
- analytics providers, if you have given the relevant consent.
Data is never sold or transferred to third parties for their own purposes. It may be disclosed to judicial or law-enforcement authorities where the law requires it.
5. Transfers outside the European Union
Some providers may process data in third countries. Where that happens, the transfer takes place only under an adequacy decision of the European Commission or with appropriate safeguards under Article 46 GDPR, such as standard contractual clauses. You can ask us for a copy of those safeguards by writing to info@tenutecatena.com.
6. How we protect data
The site uses HTTPS/TLS encryption on every page. We apply technical and organisational measures appropriate to the risk: access control, individual credentials, regular backups, security updates. No system is absolutely secure, and we cannot guarantee total protection against exceptional events.
7. Your rights
At any time you may exercise the rights set out in Articles 15-22 GDPR:
- access to your data and to information about the processing;
- rectification of inaccurate or incomplete data;
- erasure (the «right to be forgotten»), in the cases provided by law;
- restriction of processing;
- portability: receiving your data in a machine-readable format;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to info@tenutecatena.com: we will reply within one month. If you believe the processing infringes the Regulation, you may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU country where you live, or bring proceedings before a court.
8. Automated decision-making
We do not carry out profiling or automated decision-making that produces legal effects concerning you.
9. Children
This site is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
10. Changes
This notice may be updated. The version in force is always published on this page, with the date of the last update.