Privacy & cookies
Privacy & Cookie Policy
Last updated: 11 October 2026
This policy explains, in plain language, how Gossip Wine handles the personal data of people who visit gossipwine.com, write to us, request an experience or subscribe to The Gossip Letter, under Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003).
1. Data controller
The data controller is Luciana Dias, who runs the Gossip Wine editorial and experience project, Via Dino Compagni 18, 36015 Schio (VI), Italia. For any privacy question, write to info@gossipwine.com. No Data Protection Officer (DPO) has been appointed, as one is not required for this activity.
2. What we collect
We only collect the data you give us, plus the minimum technical data needed for the site to work:
- Contact form: name, email, phone (optional), subject and message.
- Company enquiries: name, company, email, phone (optional), type of event, number of guests, date, location, indicative budget and message.
- Experience requests and waiting lists: name, email, phone, number of guests and any message.
- Newsletter (The Gossip Letter): email, first name (optional), and for trade subscribers company and role; we also record the topic or article you subscribed from.
- Account (if you create one): email, login data and related bookings.
- Technical data: IP address, browser type, pages requested and times, logged automatically by servers for security and operation.
Please do not enter special categories of data, such as health information, in our forms. If you have an allergy or dietary need for an experience, tell us by email at info@gossipwine.com: we use it only to organise that evening and delete it straight afterwards.
3. Why we use it and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Replying to messages and quote requests | Pre-contractual steps at your request, Art. 6(1)(b); legitimate interest in replying, Art. 6(1)(f) |
| Managing your participation in experiences and bookings | Performance of a contract, Art. 6(1)(b) |
| Sending the newsletter | Consent, Art. 6(1)(a), which you can withdraw at any time |
| Site security and abuse prevention | Legitimate interest, Art. 6(1)(f) |
| Tax and accounting obligations, if you buy an experience | Legal obligation, Art. 6(1)(c) |
4. Do you have to give us your data?
No. But without the fields marked as required we cannot reply, handle your request or subscribe you to the newsletter. We do not use automated decision-making or profiling.
5. Who processes data on our behalf
We do not sell or hand over your data. It is processed on our behalf, as processors under Art. 28 GDPR, only by the providers needed to run the service:
| Provider | Service | Location |
|---|---|---|
| Lovable Labs Inc. | Platform the site is built on; database for forms, subscriptions and accounts (Lovable Cloud, on Supabase infrastructure) | USA |
| Cloudflare | Hosting, content delivery and site protection | USA |
| Sanity | Magazine content and image management | Norway (EEA) |
| Google (Google Fonts) | Typefaces loaded by your browser | Ireland / USA |
| Brevo | Newsletter and service email delivery | France (EU) |
Data may also be shared with the wineries or venues hosting an experience, only as far as needed to organise it (for example your name on the guest list), and with authorities where the law requires it.
6. Transfers outside the European Union
Some providers are based in the United States or may access data from there. In these cases transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework, for certified companies, or on the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR). You can ask for a copy of these safeguards by writing to info@gossipwine.com.
7. How long we keep data
- Messages and quote requests: 24 months from the last contact, then deleted.
- Experience requests and bookings: 24 months from the date of the experience.
- Tax and accounting records: 10 years, as required by law.
- Newsletter: until you unsubscribe; afterwards we keep only your email on a suppression list so we never write to you again.
- Account: while it is active; we delete it on request.
- Server technical data: for the period set by the providers, usually a few days or weeks.
8. Your rights
Under Articles 15–22 GDPR you can at any time ask to access, correct or delete your data, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. You can withdraw newsletter consent at any time, through the link in every email or by writing to us, without affecting earlier processing.
To exercise your rights, write to info@gossipwine.com: we reply within one month. If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.
10. Minors
Gossip Wine is about wine and organises tastings: the site, the newsletter and the experiences are intended for adults only. We do not knowingly collect data from anyone under 18; if we find we have, we delete it.
11. Security
The site uses an encrypted connection (HTTPS). Form data is kept in protected databases accessible only to those who run Gossip Wine. No system is one hundred percent secure, but we take appropriate measures to protect your data and, in the event of a breach, follow the procedures in Articles 33 and 34 GDPR.
12. Changes to this policy
We may update this policy, for example when we switch on a new service. The date of the last update is shown at the top of the page; we will tell newsletter subscribers about significant changes.