Privacy
Updated on 28 September 2026.
1. Controller and contact The controller is Azienda Agricola Rocca delle Langhe Società Semplice Agricola di Lonati Angelo, VAT number IT03409140047, Via Valle Bera 7, 12053 Castiglione Tinella (CN), Italy. For privacy enquiries, contact Marco Lonati at lonati@roccadellelanghe.it.
2. Data, purposes and legal bases To create and manage an account we collect your name, email address, optional telephone number, authentication data and a record that you have read this notice. An account lets you view prices reserved for registered users. To respond to enquiries and tasting requests, we also process the subject, message, requested date and time, number of guests and request status. Processing needed to provide the service you request or arrange a booking is based on Article 6(1)(b) GDPR. Website security and abuse prevention rely on legitimate interests under Article 6(1)(f). Legal obligations, where applicable, rely on Article 6(1)(c). We do not use these data for newsletters, profiling or personalised advertising. Online sales are not active.
3. Required data and retention Your name, email and password are required for an account; form details are needed to handle your request. A telephone number is optional for general enquiries but required to arrange a tasting. The account remains active while you use it or until you ask us to close it. After 24 months without a sign-in, we send a warning and delete the account no sooner than 30 days after that warning, except for data that must be retained by law. Contact requests and bookings are deleted by a daily check after 12 months from receipt or the tasting date, whichever is later; related operational emails follow the same period. Account-confirmation links are removed from the email log by a daily check after 30 days. Abuse-prevention counters are removed by a daily check after 24 hours. Backups may follow separate technical cycles and are not used for new purposes.
4. Recipients and transfers The site uses Vercel for hosting, Supabase for authentication and database services, and Resend for service emails. Authorised winery staff may access requests. These providers may use infrastructure or subprocessors outside the European Economic Area; review of the applicable agreements and transfer safeguards is still in progress. You may request further information from the privacy contact above. Google Maps loads only if you choose to open the map. WhatsApp and Instagram links lead to external services with their own notices.
5. Your rights You may request access, correction, erasure, restriction and, where applicable, portability, and object to processing based on legitimate interests by writing to lonati@roccadellelanghe.it. You may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it). We do not make automated decisions with legal effects on you. For technical session and preference tools, see the Cookie Policy.
Optional statistics and cookies
Updated on 21 October 2026.
The website’s technical functions store information needed for your session, basket and preferences, including the age check. Google Maps loads only if you choose to open the map.
Only if you accept statistics do we enable Google Analytics 4 to measure visits, sessions, public pages viewed and traffic sources, including direct and social visits when a source is available. The legal basis is your consent under Article 6(1)(a) GDPR. Refusing does not restrict browsing or sending enquiries.
Google receives pseudonymous identifiers through _ga and _ga_* cookies, device and browser information, approximate location, the public page URL without query parameters or fragments, and only the origin of the referring website. We do not send names, email addresses, form contents, tokens or private-area data. We do not enable Google Signals, personalised advertising or automatic form measurement.
Analytics cookies are restricted to this host, last no longer than 180 days and are not renewed on every visit. Your choice is stored in your browser’s localStorage under lonati-analytics-consent and remains valid for 180 days. Detailed user and event data in Analytics are retained for 2 months; aggregate reports may have a different retention period.
You can change or withdraw consent through “Privacy preferences” in the footer. Withdrawal stops new measurements and removes the website’s Analytics cookies from your browser; it does not automatically erase data already received by Google. Statistics cover only people who accept: some social or messaging visits without a referrer may appear as direct traffic.
Google provides the service. Processing may involve transfers outside the European Economic Area; contact the controller for information about applicable agreements and safeguards. The contacts and rights described in the main privacy notice continue to apply.