Privacy Policy

Controller: Tenute Ruffino S.r.l. Società Agricola ("we", "us" or "Ruffino") with Headquarters in Via Poggio al Mandorlo 1, Loc. Quarate, Bagno a Ripoli (FI), email: tenuteruffino@ruffino.it.

We collect and process your personal information with utmost care, and in compliance with applicable data protection laws (collectively, "Privacy Laws").

This Privacy Policy applies when you access the:

Ruffino Website https://www.ruffino.it/ ("Website")This Privacy Policy explains what kind of personal information we collect, how we use it, for how long we store it, who we might share it with, and your rights in relation to the information we collect. We may also collect information on your internet browsing through cookies and other tracking technologies. Please see the cookie policy here https://www.ruffino.it/pages/cookies-policy-ca for the Website.[CM1]

This Privacy Policy should be read in conjunction with the Terms of Use of the Website, and Terms and Conditions of Experience Reservation.

This Privacy Policy describes the data processing activities carried out in the context of browsing the Website, and promotional activities and newsletter related to the Ruffino world.

Within this Privacy Policy, we will address the following:

CONTENTS

This Privacy Policy was last updated on February 2025.

We invite you to regularly review this Privacy Policy in order to acknowledge any updates on collection and conditions of processing your personal data.

Before submitting any personal data, please read this Privacy Policy carefully to understand how we process your personal data and the features of said processing.

By accessing or using our Website, you confirm that you have read this Privacy Policy and that you understand how we collect, process, use and disclose your personal data as herein described.

1) WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW DO WE COLLECT IT?

We collect information directly from you or from other sources, as below specified.

Personal Information you provide us.

User information: We process data such as your first and last name, date of birth, country of residence and your contact information (e.g. telephone number, address and email address). Your email, together with a password of your choice, will be registered to allow you to access your personal account.

Personal Information automatically collected.
When you visit our Website, we automatically collect information through cookies and other tracking technologies.

Technical information: We process certain information when you visit or use the Website, including your Internet Protocol (IP) address, login information, browser type and version, device IDs, operating system and platform, device settings (e.g. language and time zone), and information relating to your mobile operator or Internet Service Provider (ISP). This information helps ensure content on the Website is presented effectively for you and for your device.

For more specific information on the cookies and other tracking technologies we use, please refer to our Cookie Policy here https://www.ruffino.it/pages/cookies-policy[CM2] -ca.

2) WHY DO WE COLLECT YOUR PERSONAL INFORMATION AND WHAT IS THE LEGAL BASIS FOR PROCESSING?

We process your data for the following purposes; for each of them we state the data processed and the legal basis of our processing:[CM3]

Purpose of processing	Legal basis of processing	Personal Information processed
Ensure the proper functioning of the Website and to resolve relevant technical issues.	By using the Ruffino website, you consent to our collection and processing of such data toensure the proper functioning of the Website, to resolve technical problems, and to improve the user experience.	Technical information, such as your IP address, and certain user information (such as your country of residence) are collected during your interaction with the Website, and are necessary for the proper functioning of the same.
Marketing purposes to send you communications on events, initiatives, promotions, including through our newsletter, and profiling in order to create advertising messages on the Website in line with your preferences.	The processing is based on your consent, which is optional and which you may withdraw at any time.	Your user information such as name, surname, email and nationality will be processed, with your consent, to send you emails providing you with informative, advertising and promotional material related to the Ruffino world.
Manage booking activities/ experience (such as Wine Tasting).	The processing is based on the fulfilment of our contractual obligations with you.	Your user information such as name, surname, email and language preferences, and purchase information, including, details of the reservation are collected for this purpose.
Enable the proper browsing activity of the user.	By using the Website, you consent to our collection and processing of such data.	Your technical information (outlined above) are collected for this purpose.
Comply with applicable laws and regulations (such as age verification).	By using the Website, you consent to our collection and processing of such data in order to comply with the legal obligations to which we are subject.	Your user information is collected for this purpose.
Defend or exercise a legal claim, including possible related investigations.	By using the Website, you consent to our collection and processing of such data.	Your user information is collected for this purpose.
Potential merger and acquisition activities.	By using the Website, you consent to our collection and processing of such data.	Your user information is collected for this purpose.

3) HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Your data will be stored for the time strictly necessary to fulfil the purpose it was collected for and in compliance with storage limitation principles under the applicable Privacy Laws.

In particular, for personal information processed:

to fulfil your reservations, we will retain your data until two years after the time in which you have used the reservation, as required by warranty;
for marketing purposes, your data will be retained for one year from (i) your last interaction with us, (ii) until your consent is withdrawn, or (iii) until you request deletion of the data, as applicable, or exercise your right to object, whichever occurs first. We may keep a record of your opt-out so we can respect your preferences and demonstrate our compliance.

We may need to retain your data for a longer period to comply with applicable laws.

We will inform you as applicable on when there are extended data retention obligations we have to comply with.

4) WHO DO WE SHARE PERSONAL INFORMATION WITH?

We may share your personal information with:

authorised Ruffino personnel and other group companies in the Ruffino Group;
our third party service providers, when required to fulfil the use purposes set out point 2 above. Our service providers act as data processors, and are appointed and instructed on the basis of a specific contract, such as to supply of bulk email services or perform couriers services. Service providers will only process your personal information on our behalf as necessary to perform their support functions (e.g. cloud storage), doing so in accordance with our instructions and applicable Privacy Laws. You can request the updated list of processors by contacting us at the contact details set out at point 7 below;
third parties such as law enforcement agencies, regulators or other similar government bodies when required to comply with a legal obligation, applicable laws or regulation;
third parties such as auditors, legal advisers or other professional advisers

In some instances, for example for certain experiences (e.g. Tre Rane restaurant reservation) you may provide your personal data directly to third parties (for Tre Rane restaurant, to the reservation platform The Fork).

In this case the controller of the data processing will be the third party and the relevant privacy policy applies. We do not have control of third party's privacy policies and procedures and we may not be considered liable for the processing of your personal data by said third parties.

Data recipients may be established in third countries worldwide without an adequate level of protection of personal data (e.g. in the case of shipping outside of Canada that requires communicating your data to local couriers). We take all necessary measures to ensure that the transfer of data outside of Canada is adequately protected as required by applicable Privacy Laws. You may obtain more information on the countries where we transfer personal data and on the safeguards we adopt for such transfers by contacting us at the contact details indicated at point 7 below.

5) HOW IS PERSONAL INFORMATION SECURED?

The processing of your personal information may be carried out manually or electronically, in each case in accordance with the logic and procedures necessary to ensure the protection of your data and to ensure their security. We take appropriate security measures, including physical, technological, and procedural measures, to help to safeguard your personal data and to prevent unauthorised access and disclosure.

Unfortunately, the transmission of information via the internet is not completely secure. We do our best to protect your personal information, but we cannot guarantee the security of your data transmitted to us, any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.

6) HOW CAN I EXERCISE MY PRIVACY RIGHTS?

You may contact Ruffino, at the contact details indicated below, to exercise your rights under applicable Privacy Laws, including:

Right of access: You may request access to your data and verify its origin and accuracy.
Right to portability: In certain cases, you may also obtain a copy of your personal data that is commonly used and machine-readable in order to enable you to exercise your right to data portability and to transfer them to another data controller or request us to transfer such data directly to another data controller to the extent this is technically possible.
Right of rectification: You may request the integration of incomplete data and the rectification or updating of inaccurate data.
Right of erasure: In certain cases, you may request the erasure of your data and the portability of the same.
Right to limit the processing: You may request the restriction of the processing and object to the processing of your personal data.
Right to withdraw your consent: You may withdraw any consent you may have given.
Right to lodge a complaint: You may lodge a complaint to the competent supervisory authority and contact the authority if the exercise of your rights is subject to delay, restriction or exemption, pursuant to law.
Right to object: As applicable under privacy laws, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data and we may be required to no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing or for the establishment, exercise or defence of legal claims.

Right to object to direct marketing: when your personal data is processed for direct marketing purposes, you have the right to object at any time and without justification to the processing of your personal data for such direct marketing purposes (including profiling insofar as it relates to such direct marketing).

7) HOW CAN I EXERCISE MY PRIVACY RIGHTS?

If you have questions or comments regarding this Privacy Policy or our privacy practices, wish to enforce your data privacy rights as set out at point 6 above, or want to receive the current list of our data processors and third parties with whom we share your personal data or receive further information on the balancing test performed when we rely on our legitimate interest for the data processing and the transfer of personal data to third countries, you can contact the Ruffino Privacy Officer at:

Tenute Ruffino S.r.l. Società Agricola ("we", "us" or "Ruffino") with Headquarters in Via Poggio al Mandorlo 1, Loc. Quarate, Bagno a Ripoli (FI), email: tenuteruffino@ruffino.it.

8) MINORS.

If you are under the age of 19, you may not use the Website, and our products and services are not available to purchase for those below the legal age.

We do not intentionally target, or otherwise process information from individuals who are under the age of 19. If you are a parent or guardian of a child under 19, please contact us if you are aware that your child has used the Website. We shall delete or otherwise cease processing your child's personal information within a reasonable time. We may retain your information for a reasonable amount of time to make sure that we do not process your child's personal information in the future.

By using the Website, you confirm to us that:

you are of the required legal age according to the legislation applicable to you;
you are using your actual identity; and
the personal data that you have provided to us is true and accurate and that you shall maintain and promptly update such personal data to ensure a true and accurate record.