Privacy Policy

Privacy Notice pursuant to Art. 13 of Regulation (EU) No. 2016/679 "General Data Protection Regulation" ('GDPR').

This privacy notice describes the data processing activities carried out in the context of registration and participation to the Ruffino Wine Club. The Ruffino Wine Club is a club reserved for members, allowing them to access certain products or services on an exclusive basis, receive prizes and exclusive offers. The terms and conditions to register are available here:

Categories of data processed: For the purpose of the Wine Club membership, we process data such as your first and last name, date of birth, country of residence and your contact information (email). Your email, together with a password of your choice, will be registered to allow you to access your personal account. Within your account you will have access to a dedicated channel for sales and reservations, we can therefore process data related to purchases of wines or other Ruffino products (such as oil, accessories, etc.) carried out through our online shop within your personal area, reservations for tastings, dinners at the restaurant Tre Rane or overnights stay at Casa Ruffino of Poggio Casciano. Moreover, we may process data related to purchases of wines or other products carried out at the Enoteca of Tenuta Poggio Casciano, if related to your Ruffino Wine Club Card. Finally, we may process additional data related to your participation to the Wine Club, such as products included in in your favourites list, payment methods and details (date, amount) and shipments, including shipping addresses, contact details (e.g. telephone) to be communicated to the couriers and any data relating to complaints or after-sales service.

Purpose of the processing: We process your data for the following purposes; for each of them we state the data processed and the legal basis that legitimize our processing:

  • Purpose of registration and management of your participation to the Ruffino Wine Club: your personal details, date of birth and country of residence are used to identify and register you to the Wine Club. Your date of birth is also processed to ensure that Wine Club members are of legal age. In addition, we also process your email address and password to create and manage your account. The data is processed to fulfil your request and enrol you in the Wine Club program. We may also process data to ensure the proper functioning of the websites and to resolve any issue, as well as to allow you to save your preferences in your account (e.g. favourite delivery address and products). This data is processed on the basis of the Company's legitimate interest in ensuring the proper functioning of the Wine Club, providing rapid problem resolution, and improving the user experience.
  • Sales Purposes: Your identification data, together with data relating to purchases (including order details) or reservations, payment data, such as payment holder, payment method, date and time, amount and shipping data, such as address and telephone number for communications, are processed to enable you to carry out purchases or reservations in your personal area or offline and to fulfil subsequent obligations (such as delivery, sales support, etc.). Details of your purchases and reservations, as well as copies of any tax documents, are also stored and made accessible from your personal area for all necessary legal obligations. The processing is based on compliance with legal obligations to which the data controller is subject (e.g. the issuance and delivery of the necessary tax documentation) as well as to fulfil contractual obligations with you.
  • Marketing purposes: your personal data such as name, surname, email and nationality will be processed, with your consent, to send you emails providing you with informative, advertising and promotional material related to the Ruffino world. Consent given to receive such emails may be withdrawn at any time without affecting the lawfulness of the processing based on your consent prior to the withdrawal.

Nature of providing data: The provision of data is necessary for registration and sales purposes, failure to do so will make it impossible to proceed with your registration or manage your purchases. The provision of data for marketing purposes, however, is optional and will not affect your ability to register and purchase.

Methods of processing: The data processing can be carried out manually and electronically, in accordance with the logic and procedures necessary for the protection of your data and to ensure their security.

Communication and access: Your data may be accessed by authorized personnel and our service providers when functional to the purposes indicated above, who will act as data processors, duly appointed and instructed on the basis of a specific contract, such as suppliers of bulk email services or couriers. Your data may also be communicated to third parties when required by applicable laws or regulations, for example, in case of payment management, as well as in case of Company extraordinary operations. If the data recipients are established outside the EU, in countries without an adequate level of protection of personal data (for example, in the case of shipping outside the EU that requires communicating your data to local couriers), the data controller will take all necessary measures to ensure that the transfer of data outside the EU is adequately protected as required by applicable privacy laws.

Data retention: Your data will be stored for the time strictly necessary for the pursuit of the mentioned processing purposes and in compliance with the GDPR. In particular, with regard to the registration purpose, your data will be retained as long as your account remains active. With regard to your purchases and reservations, we will retain your data until delivery or at the time in which you have used the reservation, as well as for the following 2 years, as required by warranty. In the case of after-sales service requests, we retain the data for as long as necessary to fulfil your request. For marketing purposes, your data will be retained until your consent is withdrawn or until you request deletion or exercise your right to object.

Data subject rights: You may contact Ruffino S.r.l., at the contact details indicated below, to exercise your rights at any time as detailed in Art. 15 ss. of Regulation (EU) 2016/679, i.e. access your data and verify its origin and accuracy. You may request the integration of incomplete data and the rectification or updating of inaccurate data. You may request the erasure of your data and the portability of the same. You may also request the restriction of the processing and object to the processing of your personal data, as well as withdraw any consent you may have given. You may also lodge a complaint to the competent supervisory authority and contact the authority if the exercise of your rights is subject to delay, restriction or exemption, pursuant to law.

Data controller: Ruffino S.r.l. with Headquarters in Piazzale Ruffino 1, Pontassieve (FI), email: