Your cart

Privacy Policy

This notice, provided in accordance with articles 13 and 14 of EU Regulation 2016/679 (hereinafter, GDPR) describes the operations carried out on the personal data of users collected when using the services provided on the following website (24bottles.com) and not for any other websites that may be consulted by the user via links on the Site.


DATA CONTROLLER, PURPOSES, AND LEGAL BASES FOR PROCESSING

24Bottles Società Benefit S.r.l. (hereinafter, 24Bottles), represented by its Legal Representative pro tempore, Via A. Toscanini 9, 40055 Castenaso (BO), is the Data Controller for the personal data of users collected when using the services of this website. 24Bottles will process the personal data it comes into contact with in accordance with the principles of lawfulness, fairness, and transparency as well as the provisions of laws and regulations for the following purposes:

  • Access to the website and browsing;
  • Information and quote requests;
  • Contact and information requests;
  • E-Commerce;
  • Registration, access, and management of the reserved area;
  • Sending commercial communications;
  • Job applications.

In detail, the use of personal data for accessing the website and browsing involves processing data to execute measures adopted at the request of the data subject, which is the legal basis legitimizing the processing. The use of personal data for managing additional processing operations, with the indication of the specific legal bases for processing, is described in the section of this policy dedicated to the principles applicable to the processing of data by 24Bottles.

 

DATA PROCESSING LOCATION

The processing related to the web services of this Site takes place at the aforementioned headquarters of the Data Controller and at the hosting company providing the service.

 

CATEGORIES OF PERSONAL DATA

Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or the Data Controller: except for this possibility, the web contact data do not persist for more than the time required by law.

Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address by 24Bottles, necessary to respond to requests, as well as any other personal data included in the communication. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.

Personal Data

Through the functionalities available on the 24Bottles website, the user can provide certain personal information that may make them identifiable and that may be processed in order to manage, for example, their requests. Among the information that may be requested, there are, by way of example but not exhaustively, personal data such as:

  • First and Last Name;
  • Phone number and email address;
  • Shipping address and order details.


COOKIES USED BY THIS SITE

To view the information on the use of cookies on the Site, the user can consult the following page: Cookie Policy 

 

PRINCIPLES APPLICABLE TO THE PROCESSING OF DATA BY 24BOTTLES

24Bottles will process users' personal data lawfully, fairly, and transparently. The Data Controller will collect users' personal data and will process it only for the purposes indicated in this Privacy Policy and in a manner that is not incompatible with those purposes. The data processed by 24Bottles is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

1. Information Requests, Quotes, and Contacts

The Data Controller will process the personal data of users who fill in the appropriate online forms to request information about initiatives, projects, products, or services offered by 24Bottles in order to manage, respond to, and provide what is requested by the data subject.

The user has the possibility to provide additional information (e.g., names of company employees, company logo, personal description, commercial information about suppliers/customers). Such additional data will be processed by 24Bottles in compliance with the applicable regulations.

The data will be recorded, stored, and used to respond to the requests of the data subjects and for the time necessary to achieve the aforementioned purpose.

The legal basis for this processing is the execution of pre-contractual measures adopted at the request of the data subject (Article 6, paragraph 1, letter b) GDPR). The provision of data for this processing purpose is optional. However, the failure, partial, or inaccurate provision of data may make it impossible for 24Bottles to manage and follow up on users' requests.

2. E-Commerce

The Data Controller will process the personal data of the user to enable the possibility of online purchasing of 24Bottles products through the Site, to allow the conclusion of the purchase contract, and for the correct execution of the obligations arising from such contract, and finally, to follow up on any requests sent by the user.

24Bottles will also process the data of users to fulfill the related legal obligations and administrative-accounting requirements. Various payment methods (credit card or PayPal, etc.) can be used to purchase 24Bottles products.

In the purchasing process, the user will need to provide some financial information to complete the purchase and/or request an invoice (VAT number, tax code, etc.).

To proceed with the shipment of the purchased product online, the user will also need to provide the required information for the order to be shipped to their address (name, surname, shipping address, phone number, and email address).

Furthermore, in the event that the user submits a request for assistance to the Customer Care or a return request, it may be necessary to communicate additional data in order to allow 24Bottles to process the specific request.

The legal basis for the aforementioned processing is the execution of a contract of which the data subject is a party or the execution of pre-contractual measures adopted at the request of the data subject, as well as the pursuit of a legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letters b) and f) of Regulation (EU) 2016/679.

The Data Controller will also process the contact personal data of the customer who has made the purchase for sending periodic communications with informative content such as, by way of example but not limited to, initiatives, projects, products, or services, as well as commercial and/or customer satisfaction communications (Article 6, letter f), and Recital 47 of Regulation (EU) 2016/679, Article 140, paragraph 4, Legislative Decree 196/2003).

Data subjects are informed that the Data Controller has assessed the lawfulness of this processing (Legitimate Interest Assessment) through a balancing of its own legitimate interests and those of the data subjects whose data is processed, considering the risks to their rights and freedoms, the nature, context, and purposes of processing.

For these purposes, the data will be processed for the time strictly necessary for the performance of the individual processing activities and not beyond 10 years from the date of purchase. If required by specific regulations, the data retention period may be longer.

The provision of data for this purpose is optional. However, the failure, partial, or inaccurate provision of data may make it impossible for the Data Controller to execute the online purchase contract and for the user to obtain the requested product(s).

3. Registration, Access, and Management of the Reserved Area

24Bottles will process the personal data of the user to enable the use of services reserved for registered users. For this purpose, 24Bottles will process the personal data of users to:

  • Allow the user to access the Site and browse it;
  • Allow the user to access the Site and browse it as a logged-in user, recognizing the user regardless of the device used;
  • Maintain and manage the user's account;
  • Store in the user's account data and information (personal data, order history, any returns, delivery addresses, payment methods).

The legal basis for this processing is the performance of the contract or, depending on the case, the execution of pre-contractual measures adopted at the request of the data subject (Article 6, paragraph 1, letter b), Regulation (EU) 2016/679).

For these purposes, the data will be processed for the time strictly necessary for the performance of the individual processing activities. However, 24Bottles may retain the data for the purposes and for the maximum retention periods indicated in this policy or in cases established by the Regulation and/or the law.

The provision of data for the purpose is optional and does not prevent the user from proceeding with online purchases. However, since the processing is necessary to allow access to the Site and/or browsing as a logged-in user and/or the provision of account management and maintenance services, failure to provide the data will prevent the user from registering, accessing the reserved area of the Site, and using the services reserved for registered users.

4. Sending of commercial communications

With the prior consent of the data subject exercised by means of a specific checkmark in the data collection form, 24Bottles will process the user's personal data (personal and contact data) to send communications, including newsletters, related to initiatives, projects, products, or services offered by 24Bottles, and the related data will be recorded, stored, and used exclusively for sending communications to promote the activities, initiatives, and projects promoted by the Data Controller.

The legal basis for this processing is the consent of the data subject (Article 6, paragraph 1, letter a), GDPR).

Providing consent for this purpose is optional, and the data will be processed until the data subject revokes consent, which can be exercised at any time (by clicking on unsubscribe at the bottom of the received communication or by written request to the email address privacy@24bottles.it).

5. Work with us

24Bottles will use the personal data of users who complete the specific online form, or contained in resumes sent voluntarily by the data subject, also following a recruiting campaign promoted by the Data Controller, to manage the selection of new personnel and to evaluate the candidate. T

he data will be processed for the period strictly necessary to achieve the aforementioned purpose and kept for a limited period from the receipt of the CV (24 months), subject to the possibility for the Data Controller to extend the retention period after making a specific request to the data subject.

The legal basis legitimizing this processing is the performance of pre-contractual measures adopted at the request of the data subject, pursuant to Article 111-bis of Legislative Decree no. 196/2003, as updated by Legislative Decree no. 101/2018, for which, within the limits of Article 6, letter b) of the GDPR, the consent of the data subject is not required.

Providing data for this processing purpose is optional. However, failure, partial, or inaccurate provision of data may prevent the Data Controller from receiving the application and evaluating its suitability for the sought-after job profile and proceeding with the selection process.

 

CALIFORNIA CONSUMER PRIVACY ACT

24Bottles, where applicable, will process data in accordance with the principles of the CCPA (California Consumer Privacy Act of 2018), as amended and supplemented by the CPRA (California Privacy Rights Act, 2023).

In particular, in cases where data of users residing in the State of California, as referred to in the aforementioned regulations, are collected, 24Bottles undertakes to ensure compliance with the principles provided for by the aforementioned regulations, such as, for example, the right to opt-out of the sale of personal data, the right of access through the so-called verifiable request, or other rights applicable to the particular situation of the data subject.

 

SOCIAL PLUG-IN

This website uses so-called "social plug-ins".

"Social plug-ins" are specific tools that allow the incorporation of Social Network features directly into the website.

All "social plug-ins" on the website are marked with the respective logo owned by the social network platform.

When visiting a page on our website and interacting with the "plug-in" or deciding to leave a comment through the Social platform, the corresponding information is transmitted from the browser directly to the reference social platform and stored by it. 

For information on the purposes, type, and methods of collection, processing, use, and storage of personal data by the Social Network platform, as well as on the methods for exercising your rights, please refer to the specific Privacy Policy of the Social Network.

 

DATA PROCESSING METHODS

Personal data is and will be processed, in paper and/or digital form, for the time strictly necessary to achieve the purposes for which it was collected.

No automated processing of the collected data is carried out, including user profiling.

Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

 

TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION

The personal data collected by 24Bottles is processed and stored within the European Union territory.

Some personal data may be subject to transfer to recipients located outside the European Economic Area.

In such cases, the transfer will take place in compliance with the provisions of Chapter V of EU Regulation 2016/679 (“GDPR”); in particular, data will be transferred only after the signing of the Standard Contractual Clauses approved by the EU Commission with decision no. 2021/914/EU or to countries able to guarantee an adequate level of protection of personal data and therefore recipients of an Adequacy Decision adopted by the EU Commission.

 

CATEGORIES OF RECIPIENTS TO WHOM DATA MAY BE COMMUNICATED (RECIPIENTS)

The parties to whom 24Bottles may communicate the data act as Data Processors designated through specific agreements or as persons authorized to process personal data by the Data Controller.

The data may also be communicated to external Companies and/or Professionals to fulfill specific obligations imposed on the Data Controller by current legislation.

The data subject, by requesting access to their personal data, can obtain the list of recipients of their personal data by writing an email to privacy@24bottles.it.

 

RIGHTS OF THE DATA SUBJECTS

Users of the Website have the right, under Articles 15-22 of the GDPR, to:

- Request access to personal data: the user has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them is being processed and, if so, access to that data. Access may be directed to obtain the following information:

  • The purposes of processing;
  • The categories of personal data concerned;
  • The recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organizations;
  • The retention period of personal data or the criteria used to determine that period;
  • The existence of the right to request the Data Controller to rectify or erase personal data or to restrict or object to its processing;
  • The existence of automated decision-making.

- Request rectification of personal data: the data subject has the right to obtain rectification of inaccurate personal data concerning them and to have incomplete personal data completed.

- Request erasure of personal data: for the reasons indicated in Article 17 of the GDPR, the data subject has the right to request from the Data Controller the erasure of data without undue delay, and the Data Controller has the obligation to erase personal data concerning the data subject, provided there is no legal obligation to retain the data.

- Request restriction of data processing: in cases where one of the situations referred to in Article 18 of the GDPR applies, the data subject has the right to request restriction of data processing concerning them.

- Request data portability: the data subject has the right to receive the personal data concerning them, which they have provided to a Data Controller, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another Data Controller where the processing is based on consent, on a contract, or carried out by automated means.

- Request objection to data processing: the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them at any time.

- Withdraw consent: the data subject has the right to withdraw consent to the processing of their personal data at any time, as easily as it was given.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). Requests to exercise the above-mentioned rights by the data subject can be sent to privacy@24bottles.it.

 

This privacy policy was last updated on May, 2026.