Privacy notice
Version 1.0 — in force since 11 September 2026. Notice provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the “Privacy Code”).
This page explains which personal data we collect when you visit www.carlomansi.com or ask us for a quotation, why we collect them, how long we keep them and which rights you can exercise. The website does not sell online and processes no payments: selecting products only serves to send us a quotation request, which we answer by e‑mail or telephone.
1. Who processes your data
The data controller is:
Liquorificio Carlo Mansi di Mansi Carlo
Via Vescovado, 1 — 84010 Minori (SA), Italy
VAT no. 00300110657 — Tax code MNSCRL47C10F223C
E‑mail: info@carlomansi.com — Telephone: +39 089 853717
The controller is not required to appoint a Data Protection Officer under Article 37 GDPR: it carries out no regular and systematic monitoring of data subjects on a large scale and processes no special categories of data on a large scale. For any matter concerning personal data you may write directly to the e‑mail address above.
2. What data we collect
2.1 Browsing data
The systems and software procedures that run this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols: IP address, date and time of the request, address of the requested resource, request method and response status, size of the file obtained, browser type and operating system. These data end up in the server log files and are used only to run the site, to obtain anonymous statistics and to detect abuse (intrusion attempts, automated form submissions). In exceptional cases they may be used to establish liability for computer crimes against the site.
2.2 Data you provide
When you fill in the contact form or the quotation request we collect the data you enter, typically: first and last name, company or venue name, VAT or tax number where needed for the quotation, delivery address, e‑mail, telephone number, the list of products and quantities selected, and the free text you write in your message. Please do not enter unnecessary information in that field, in particular data revealing religious beliefs, political opinions, health or any other special category under Article 9 GDPR.
If you write to our e‑mail address or call us, we process the data contained in the correspondence or given over the phone in order to answer you.
2.3 Data collected through cookies and similar technologies
The site uses necessary technical cookies and, subject to your consent, statistics cookies and third-party content. The full details (name, purpose, duration and provider of each cookie) are set out in the Cookie Policy.
3. Why we process them and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your quotation or information request, preparing the offer and, where applicable, managing the business relationship that follows | Identification and contact details, tax details, products and quantities requested, content of the message | Article 6(1)(b) GDPR: steps taken at your request prior to entering into a contract and, if the deal goes ahead, performance of that contract | 24 months from the last contact where the quotation leads nowhere; 10 years from the end of the relationship where a contract is concluded (Article 2220 of the Italian Civil Code and tax obligations) |
| Complying with legal obligations, in particular tax, accounting and excise duty rules on alcoholic products | Identification and tax details, sales and transport documents | Article 6(1)(c) GDPR: legal obligation | 10 years, or any different period imposed by the applicable rule |
| Keeping the site and the network secure, preventing form abuse and cyber attacks | Browsing data, IP address, server logs | Article 6(1)(f) GDPR: legitimate interest of the controller in the security of its systems, recognised by recital 49 | Up to 12 months, unless longer retention is needed for litigation or at the request of an authority |
| Measuring the use of the site in aggregate form in order to improve it (statistics) | Statistics cookie identifiers, pages viewed, truncated IP address | Article 6(1)(a) GDPR and Article 122 of the Privacy Code: your consent, given through the banner | As stated in the Cookie Policy; consent lasts 6 months and can be withdrawn at any time |
| Displaying embedded third-party content (Google Maps, YouTube videos) | IP address, provider cookie identifiers, data on your interaction with the content | Article 6(1)(a) GDPR and Article 122 of the Privacy Code: your consent | See the Cookie Policy; consent can be withdrawn at any time |
| Establishing, exercising or defending legal claims | All of the above data, strictly as needed | Article 6(1)(f) GDPR: legitimate interest in protecting our rights | For the duration of the dispute and until the time limits for appeal expire |
We send no marketing communications and run no newsletter. Should we introduce one, we would do so only with your free, specific and revocable consent, or within the limits of the so-called soft spam rule in Article 130(4) of the Privacy Code towards customers who have already bought similar products, always with the option to object to every message.
4. Whether providing data is mandatory
Providing the data marked as mandatory in the forms (typically name, e‑mail and the products requested) is necessary for us to reply: without them we simply cannot prepare a quotation. The other fields are optional and only help us give a more accurate answer. Providing data for statistics purposes and for third-party content is always optional: you may refuse those cookies and keep browsing with no restriction whatsoever.
5. Who we share data with
Your data are processed by the controller and by persons authorised to process them under Article 29 GDPR (staff and collaborators, instructed and bound by confidentiality). They may also be disclosed to the following parties, acting as processors appointed in writing under Article 28 GDPR or as independent controllers where the law so provides:
| Recipient | Activity | Role |
|---|---|---|
| Hosting and e-mail provider of the website | Storing the pages, the logs and the messages sent through the forms | Processor under Article 28 GDPR |
| Website maintenance and development provider | Technical support, updates, work on the forms | Processor under Article 28 GDPR |
| Google Ireland Limited | Visit statistics (Google Analytics 4), embedded maps and videos, only if you give consent | Processor for Analytics; independent controller for embedded content |
| Accountants and tax advisers | Administrative, accounting and tax compliance | Processor or independent controller depending on the engagement |
| Couriers and carriers | Delivery of goods, only where the request turns into an order | Independent controller |
| Banks and payment intermediaries | Collection of payment, only in case of an order | Independent controller |
| Judicial authorities, police forces, supervisory authorities | On lawful request or where required by law | Independent controller |
Data are not disseminated, that is, they are never made available to an indefinite audience, and they are neither sold nor transferred to third parties for their own or others’ marketing purposes. An up-to-date list of processors is available on request at info@carlomansi.com.
6. Transfers outside the European Economic Area
Data are normally processed within the European Economic Area. Some third-party services that the site uses only after your consent (Google Analytics 4, Google Maps, YouTube) may involve transfers of data to the United States of America. Such transfers take place on the basis of the European Commission adequacy decision of 10 July 2023 on the EU‑U.S. Data Privacy Framework, to which Google LLC adheres, and in the alternative on the standard contractual clauses adopted by the Commission with implementing decision (EU) 2021/914, supplemented by additional technical and organisational measures, under Articles 45 and 46 GDPR.
If you do not want your data to reach those parties, simply do not consent to statistics cookies and third-party content, or withdraw your consent at any time from the Cookie preferences panel. A copy of the safeguards in place can be requested at info@carlomansi.com.
7. How long we keep the data
Retention periods are set out in the table under point 3. As a rule we keep data for as long as is strictly necessary for the purpose for which they were collected and, after that, for the period imposed by legal obligations or useful for the defence of a legal claim. Once those periods expire the data are deleted or irreversibly anonymised.
8. How we protect the data
We apply technical and organisational measures appropriate under Article 32 GDPR: encrypted HTTPS connection on every page, access to mailboxes and management panels with personal credentials, software updates, access limited to authorised staff, periodic backups and protection of forms against automated submissions. No security measure guarantees absolute inviolability: should a personal data breach occur that results in a high risk to your rights and freedoms, we will inform you in accordance with Articles 33 and 34 GDPR.
9. Automated decision-making and profiling
We take no decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 GDPR. Visit statistics, where authorised, are used in aggregate form and not to build individual profiles for advertising purposes.
10. Your rights
At any time, and within the limits set by the GDPR, you may exercise the following rights:
- Access (Article 15): find out whether we process your data and obtain a copy of them together with information about the processing.
- Rectification (Article 16): have inaccurate data corrected or incomplete data completed.
- Erasure (Article 17): have data deleted where they are no longer necessary, where you withdraw the consent on which the processing was based, or where you lawfully object.
- Restriction (Article 18): ask that data be merely stored and not otherwise processed, in the cases provided for.
- Portability (Article 20): receive, in a structured and commonly used format, the data you provided and which are processed by automated means on the basis of consent or contract, and transmit them to another controller.
- Objection (Article 21): object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.
- Withdrawal of consent (Article 7(3)): withdraw at any time a consent already given, without affecting the lawfulness of processing carried out before the withdrawal. For cookies, simply open the Cookie preferences panel.
Requests should be sent to info@carlomansi.com or by post to the address in point 1, enclosing a document that allows us to identify you. We reply without undue delay and in any case within one month of receipt, extendable by two months for complex requests, in which case we will tell you (Article 12 GDPR). Exercising your rights is free of charge; we may charge a reasonable fee only for manifestly unfounded or excessive requests.
If you believe that the processing of your data infringes the GDPR you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — +39 06 696771 — garanteprivacy.it), under Article 77 GDPR, or with the supervisory authority of your habitual residence, or to bring proceedings before the courts under Article 79 GDPR.
11. Minors
The site presents alcoholic beverages and is not intended for minors. We do not knowingly collect data from anyone under 18 and do not accept quotation requests from minors. For information society services based on consent, Italian law sets the minimum age at 14 (Article 2‑quinquies of the Privacy Code). If you believe a minor has given us personal data, please write to info@carlomansi.com and we will delete them.
12. External links, social networks and embedded content
The site contains links to our pages on Facebook, Instagram and YouTube. They are plain links: by clicking them you leave our site and enter a platform governed by the privacy notice of its own operator, over which we have no control. We encourage you to read those notices before interacting.
Some pages embed Google Maps maps and YouTube videos. That content stays blocked until you give consent: in its place you will see a box explaining what it is and leaving the decision to load it to you. Once loaded, the provider receives your IP address and may set cookies on your device.
13. Cookies
The full notice on cookies and similar technologies, with the detailed list by category, is in the Cookie Policy. You may change your choices at any time through the Cookie preferences panel.
14. Changes to this notice
We may update this notice to reflect changes in the law, decisions of supervisory authorities or changes to the services offered by the site. The version in force is always the one published at this address, with the effective date shown at the top of the page. Where changes concern processing based on consent, fresh consent will be requested.
This English text is a courtesy translation. In case of discrepancy, the Italian version prevails, as the processing is governed by Italian law.