Privacy Policy

This notice describes how the personal data of users visiting the website https://www.franconevini.com/ are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003 (“Italian Privacy Code”). The subdomains shop.franconevini.com, visit.franconevini.com are not covered by this notice and have their own privacy notice.

1. Data controller

The data controller is Francone S.A.S., with registered office at VIA TANARO 45, 12052 NEIVE (CN), VAT No. 00182490045. For any request concerning the processing of personal data, you may write to FRANCONE@FRANCONEVINI.COM or by certified email (PEC) to FRANCONE@LEGALMAIL.IT.

2. Data Protection Officer (DPO)

The data controller has not appointed a Data Protection Officer (DPO), as none of the cases in which the appointment is mandatory under Art. 37 GDPR applies.

3. Types of data processed

Browsing data. During their normal operation, the computer systems that run the website acquire certain data whose transmission is implicit in the use of Internet protocols: for example, the IP address, browser type, operating system, pages visited, and the date and time of the request. These data are used to ensure the operation and security of the website.

Data voluntarily provided by the user. When the user fills in the forms on the website, the data entered are processed, such as name, email address and any other information contained in the message. Users are asked not to enter special categories of data (for example, health data) in the forms unless strictly necessary.

Cookies and other tracking tools. For information on the cookies and similar tools used by the website, please refer to the Cookie Policy.

4. Purposes, legal bases and retention periods

The data are processed for the purposes indicated below, each based on the corresponding legal basis.

Upon expiry of the periods indicated, the data are erased or anonymised. The data may be retained for longer only where necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.

5. Google services

The website uses services provided by Google (Google Fonts (loaded from a remote server), Google Analytics 4, Google reCAPTCHA, Google Tag Manager / Google tag, Google Ads (conversions and remarketing), YouTube (embedded videos), Google Signals (Google Analytics)), which are activated only with the user’s consent where they are not strictly necessary. The operation of these services, including any advertising features, is described in the Cookie Policy. To find out how Google uses information from sites that use its services, please see the page policies.google.com/technologies/partner-sites.

Google Signals. The Google Signals feature is enabled in the website’s Google Analytics property. For users who are signed in to a Google account and have enabled ad personalisation, Google associates the browsing data collected on the website with their account. The data controller receives only aggregated data, which are used to measure website usage across multiple devices, estimate demographics and interests, and create audience segments for advertising campaigns. The processing is based on the user’s consent (Art. 6(1)(a) GDPR), given through the cookie banner and revocable at any time; for these features Google also acts as an independent data controller. Users may also disable ad personalisation in their Google account settings (My Ad Center). The cookies used are listed in the Cookie Policy.

6. Methods of processing

The data are processed using electronic and, where necessary, paper-based tools, with appropriate technical and organisational measures to ensure their security and confidentiality, pursuant to Art. 32 GDPR. The data are processed by persons authorised and instructed by the data controller.

7. Recipients of the data

The data may be disclosed to the following parties, which normally act as data processors under a contract with the data controller (Art. 28 GDPR) or, in the cases indicated in their respective privacy notices, as independent data controllers:

The data may also be received by consultants and providers assisting the data controller (for example, for website maintenance or accounting obligations), as well as by public authorities in the cases provided for by law. The up-to-date list of data processors may be requested from the data controller.

8. Transfer of data outside the European Economic Area

Some of the providers listed may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified US providers, or of other appropriate safeguards pursuant to Arts. 45-46 GDPR, such as the Standard Contractual Clauses.

9. Nature of the provision of data

The provision of browsing data is necessary in order to use the website. The provision of the data requested in the forms is optional, but the fields marked as mandatory are necessary to follow up on the request: without them it will not be possible to respond. Consent for marketing purposes and for non-technical cookies is always optional, and refusing it has no consequences on the use of the website.

10. Minors

The website and the services offered are not directed at minors under the age of 14, which is the minimum age set in Italy for independently giving consent to the processing of data in relation to online services (Art. 8 GDPR and Art. 2-quinquies of the Italian Privacy Code). Minors under the age of 14 must not provide personal data through the website. If the data controller becomes aware that it has collected data from a minor under the age of 14 without the consent of the holder of parental responsibility, it will erase such data without delay. Parents or guardians who believe this has occurred may write to FRANCONE@FRANCONEVINI.COM.

11. Rights of the data subject

The data subject may at any time exercise the rights provided for in Arts. 15-22 GDPR:

• access: to know whether and which data are processed and to receive a copy;
• rectification: to correct or complete inaccurate or incomplete data;
• erasure: to obtain the erasure of the data, in the cases provided for;
• restriction: to request that the data only be stored, without any other use, in the cases provided for;
• portability: to receive the data provided in a structured format or have them transmitted to another data controller;
• objection: to object to processing based on legitimate interest and, at any time, to direct marketing;
• withdrawal of consent: to withdraw consent given at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Requests may be sent to FRANCONE@FRANCONEVINI.COM. The data controller will respond within one month of receipt, a period that may be extended by two further months in particularly complex cases, as provided for by Art. 12 GDPR.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Roma – www.garanteprivacy.it) or with the supervisory authority of the Member State in which they reside or work.

12. Automated decision-making

The data are not subject to decision-making based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them (Art. 22 GDPR).

13. Artificial intelligence

The data controller uses artificial intelligence systems for the purposes described below.

Data analysis for informational purposes

The data controller uses artificial intelligence tools to analyse the data collected through the website, such as browsing statistics and the content of requests received, solely for the data controller’s information: for example, to understand the performance of the website and improve its services. Where possible, the data are analysed in aggregated form or stripped of identifying elements, and are not used to take decisions that produce legal effects concerning data subjects or similarly significantly affect them.

The tool used is Gemini, provided by Google, which acts as a data processor under the contractual terms of the service.

For processing based on legitimate interest, the data subject may object at any time, on grounds relating to their particular situation, by writing to the data controller (Art. 21 GDPR).

14. Changes to this notice

The data controller may amend this notice, including as a result of changes in legislation or in the services used. Users are invited to consult this page periodically.

Last updated: 15/10/2026