Privacy policy

Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how Dives S.r.l. collects, uses, stores and discloses personal data when users visit or use www.divesvinum.it, www.divesvinum.com and their localised versions, purchase our products or otherwise contact us.

1. Data Controller

The data controller is:

Dives S.r.l.
Via Luciano Manara 34
20855 Lesmo (MB), Italy
Tax and VAT number: IT10188010960
Email: marketing@divesmilano.com

2. Personal Data We Process

We may process the following categories of personal data:

  • identity and contact information, including name, postal address, email address and telephone number;

  • customer account information and login credentials;

  • information about orders, purchased products, deliveries, returns and refunds;

  • billing and transaction information, such as the amount, payment method, payment status and transaction identifier;

  • communications with customer support;

  • marketing preferences and consent records;

  • IP address, device identifiers, browser, operating system and other technical information;

  • pages visited, interactions with the website, products viewed, shopping-cart activity and purchasing behaviour;

  • information collected through cookies, pixels and similar technologies;

  • information required for age verification, where applicable.

We obtain this information directly from users, collect it automatically when the website is used, or receive it from our service providers and partners where permitted by law.

We do not normally receive complete payment-card numbers or card security codes. These are processed directly by payment providers. We may, however, receive transaction information required to manage orders, payments, refunds and fraud prevention.

3. Purposes and Legal Bases

We process personal data to:

  • create customer accounts and manage orders, payments, deliveries, returns and refunds, where necessary to perform a contract or take pre-contractual steps;

  • provide customer support and service communications, on the basis of the contract or our legitimate interest in providing an effective service;

  • comply with tax, accounting and other legal obligations;

  • prevent fraud, misuse and security incidents and protect our rights, on the basis of legal obligations and our legitimate interests;

  • improve the website and understand its use through aggregated statistics or, where required, consent;

  • send newsletters and promotional communications on the basis of consent, except where otherwise permitted by law;

  • carry out personalisation, remarketing and advertising measurement on the basis of consent where required;

  • establish, exercise or defend legal claims on the basis of our legitimate interests.

Where we rely on legitimate interests, we assess whether those interests are overridden by the user’s rights and freedoms.

4. Required and Optional Information

Information marked as required is necessary to create an account, enter into and perform an order, deliver products or comply with the law. If this information is not provided, we may be unable to provide the requested service.

Providing information for newsletters, personalised advertising and non-essential cookies is optional. Refusing or withdrawing consent does not prevent users from making purchases.

5. Cookies and Tracking Technologies

The website uses cookies that are strictly necessary for its operation. Depending on the user’s choices, it may also use cookies and similar technologies for analytics, advertising measurement, personalisation and remarketing.

Where required by applicable law, non-essential technologies are used only after consent has been obtained. Users can change or withdraw their consent at any time through the “Cookie Preferences” link available on the website.

Further information about the cookies used, their providers, purposes and duration is available in the Cookie Policy.

6. Service Providers and Recipients

Personal data may be disclosed, where necessary, to:

  • Shopify, which provides the ecommerce platform, hosting, checkout and related services;

  • payment providers, including Shopify Payments and PayPal, and any other payment methods actually displayed at checkout;

  • Google for services such as Google Analytics 4, Google Ads and Google/Merchant integrations;

  • newsletter and marketing-communication providers actually used by us;

  • couriers, freight companies, warehouses and logistics providers;

  • IT, security, maintenance and customer-support providers;

  • tax, legal, accounting and insurance advisers;

  • public authorities where disclosure is required by law.

Depending on the service, these recipients may act as processors on behalf of Dives S.r.l. or as independent controllers.

7. Shopify

Our online store is hosted by Shopify, which processes personal data to provide its platform and related services.

If Shopify Network Intelligence or other Shopify Enhanced Services are enabled, Shopify may use information relating to users’ interactions with this store, other merchants and the Shopify platform, as described in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Requests relating to processing carried out directly by Shopify may also be submitted through:

https://privacy.shopify.com/en

8. International Transfers

Some recipients may process personal data outside the European Economic Area, the United Kingdom or the user’s country.

Where required, these transfers are protected by an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another safeguard recognised under applicable law.

Further information about the applicable safeguards may be requested from the Data Controller.

9. Retention

We retain personal data only for as long as necessary for the purposes described above. In particular:

  • order, invoicing and tax records are normally retained for 10 years;

  • account information is retained for the life of the account and afterwards for the period necessary to address legal obligations or disputes;

  • customer-support requests are normally retained for up to 24 months after closure, unless longer retention is necessary;

  • marketing information is retained until consent is withdrawn and normally for no longer than 24 months from the most recent expression of interest or renewal of consent;

  • profiling information is retained until consent is withdrawn and normally for no longer than 12 months;

  • security logs are normally retained for no longer than 12 months, unless required for an incident, dispute or legal obligation;

  • cookies and similar identifiers are retained for the periods stated in the Cookie Policy.

Information may be retained for longer where required by law or necessary for audits, disputes or the defence of legal claims.

10. Automated Decision-Making

Dives S.r.l. does not make decisions based solely on automated processing that produce legal or similarly significant effects on users.

Payment and fraud-prevention providers may independently perform automated checks. Users should consult those providers’ privacy notices for further information.

11. Children and Legal Drinking Age

Our products and services are intended only for individuals who have reached the legal age required to purchase and consume alcoholic beverages in their country.

We do not knowingly collect personal data from individuals below that age.

12. Your Rights

Subject to applicable law, users may request:

  • access to their personal data;

  • correction of inaccurate information;

  • deletion of their data;

  • restriction of processing;

  • data portability;

  • objection to processing based on legitimate interests;

  • withdrawal of consent at any time, without affecting processing carried out before withdrawal;

  • information about safeguards used for international transfers.

Users may object at any time to the processing of their personal data for direct marketing, including profiling related to direct marketing.

Requests may be sent to marketing@divesmilano.it. We may request information strictly necessary to verify the identity of the person making the request.

Users may lodge a complaint with the Italian Data Protection Authority:

https://www.garanteprivacy.it

Users in the United Kingdom may also complain to the Information Commissioner’s Office:

https://ico.org.uk

13. Rights in Other Jurisdictions

Users outside the European Economic Area and the United Kingdom may have additional rights under their local laws.

In certain US states, disclosure of personal data to advertising partners may be considered “sharing” or processing for targeted advertising even if no money is received in exchange. Where applicable, users may opt out through the “Your Privacy Choices” link available on the website or by contacting the Data Controller.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or service-related changes. The revised version will be published on this page together with its updated revision date.