Privacy
policy

Data controller: Associazione Borgo in Festa — event organised under the patronage of the Municipality of Lazzate. Website: https://www.borgoinfesta.eu/VNB/ — Contact: amministrazioneborgoinfesta@gmail.com.

I – Information about the website's privacy policy

1. This section sets out how the Festival del Vino website is managed with regard to the processing of the data of users who browse it and make a booking.

2. This notice is also provided pursuant to art. 13 of Italian Legislative Decree no. 196/2003 (Personal Data Protection Code) and art. 13 of EU Regulation no. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, for those who interact with the Festival del Vino website, reachable at the address of its home page: https://www.borgoinfesta.eu/VNB/

3. This notice applies only to the Festival del Vino website and not to any other websites the user may visit through links contained in it.

4. The purpose of this document is to provide information on the means, timing and nature of the information that data controllers must give to users when they connect to the web pages of the Festival del Vino website, regardless of the purpose of the connection, in accordance with Italian and European law.

5. This notice may change following the introduction of new rules on the matter: users are therefore invited to check this page periodically.

6. If the user is under sixteen years of age, pursuant to art. 8(1) of EU Regulation 2016/679, their consent must be authorised by a parent or legal guardian.

II – Data processing

1. Data controller

1. The data controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller also handles security matters.

2. For this website the data controller is Associazione Borgo in Festa, which may be contacted for any clarification or to exercise user rights at the following email address: amministrazioneborgoinfesta@gmail.com

2. Data processor

1. The data processor is the natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

2. Pursuant to art. 28 of EU Regulation no. 2016/679, as appointed by the data controller, the data processor for the Festival del Vino website is Associazione Borgo in Festa, which can be contacted at amministrazioneborgoinfesta@gmail.com

3. Place of data processing

1. The processing of data generated by the use of the Festival del Vino website takes place at the offices of Associazione Borgo in Festa in Lazzate (MB).

2. Where necessary, data related to the booking and communication service may be processed by the data processor or by persons appointed for that purpose, at its premises.

III – Cookies

1. Types of cookies

1. The Festival del Vino website uses cookies to make browsing easier and more intuitive: cookies are small text strings used to store some information that may concern the user, their preferences or the device used to access the internet (computer, tablet or mobile phone), and are mainly used to adapt how the site works to the user's expectations.

2. A cookie consists of a small set of data transferred to the user's browser by a web server and can be read only by the server that made the transfer. It is not executable code and does not transmit viruses.

3. Cookies do not record any personal information and any identifiable data will not be stored. If you wish, you can prevent some or all cookies from being saved; however, in that case the use of the site and the services offered may be impaired. To continue without changing the cookie options, simply carry on browsing.

2. Technical cookies

1. These are used for navigation and to facilitate the user's access to and use of the site. They are necessary for transmitting communications over an electronic network or for the provider to deliver the service requested by the customer.

2. The settings to manage or disable cookies may vary depending on the internet browser used. The user can manage or request the general disabling or deletion of cookies by changing their browser settings. Such disabling may slow down or prevent access to some parts of the site.

3. The use of technical cookies allows safe and efficient use of the site.

4. In terms of duration, a distinction is made between temporary session cookies, which are automatically deleted at the end of the browsing session, and permanent cookies, which remain active until they expire or are deleted by the user. The site uses session cookies to allow access to and continued use of the reserved area as an authenticated user: they are limited to transmitting session identifiers (random numbers generated by the server) needed for safe browsing of the site.

3. Third-party cookies

1. As regards their origin, a distinction is made between cookies sent to the browser directly by the site being visited and third-party cookies, sent to the computer by other sites. The site uses the Google Fonts service for typography; the use of such cookies is governed by the rules of the respective third parties, whose privacy notices you are invited to read.

4. Visit statistics (cookie-free)

1. To know how many people visit the site and which pages they read, this site uses Umami (umami.is), an analytics tool that does not use cookies. Umami does not store visitors' IP addresses, does not install identifiers on the device and does not build profiles: it collects only aggregated, anonymous data such as the page visited, the referring site or search engine, the country, and the device and browser type. Since none of the data allows the user to be identified and no cookie is used, no consent is required for this measurement.

IV – Data processed

1. How data is processed

1. Like all websites, this site uses log files that store information collected automatically during user visits, such as: Internet Protocol (IP) address; browser type and parameters of the device used to connect to the site; name of the Internet Service Provider (ISP); date and time of visit; referring and exit web page; and possibly the number of clicks.

2. The above information is processed automatically and collected in aggregate form only, in order to check that the site works correctly and for security reasons, based on the controller's legitimate interests.

3. For security purposes (anti-spam filters, firewalls, virus detection) the automatically recorded data may also include personal data such as the IP address, which may be used — in accordance with applicable laws — to block attempts to damage the site. Such data is never used to identify or profile the user.

4. For the table booking service, the site collects the data the user voluntarily provides by filling in the form: first name, surname, email, phone (optional), number of people, selected tables and any notes. This data is provided voluntarily at the time of the request and used exclusively to manage the booking and to send communications relating to the event.

2. Purposes of processing

1. The data collected by the site is used exclusively for the purposes stated above and kept only for as long as strictly necessary to carry out the specified activities and, in any case, no longer than 2 years.

2. Data used for security purposes is kept only for as long as strictly necessary to achieve the stated purpose.

3. Data provided by the user

1. The optional, explicit and voluntary sending of email to the addresses given on this site entails acquiring the sender's address, needed to reply to requests, as well as any other personal data included in the message.

V – User rights

1. Art. 13(2) of EU Regulation 2016/679 lists the user's rights.

2. The controller informs the user of the right to request access to their personal data (art. 15), its updating and rectification (art. 16), its integration, the restriction of processing (art. 18) or to object to its processing (art. 21), as well as the right to data portability (art. 20) and erasure (art. 17).

3. Requests may be addressed to the data controller at amministrazioneborgoinfesta@gmail.com (informally) or using the form provided by the Italian Data Protection Authority (Garante).

4. Where processing is based on consent, the user has the right to withdraw it at any time without affecting the lawfulness of processing based on consent given before its withdrawal.

5. In the event of a breach of the rules, the user has the right to lodge a complaint with the Italian Data Protection Authority (Garante).

VI – Security of the data provided

1. This site processes user data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the data. Processing is carried out using IT and/or telematic tools, with organisational and logical methods strictly related to the stated purposes.

2. In addition to the controller, in some cases data may be accessible to categories of appointed persons involved in organising the event (volunteers and collaborators of Associazione Borgo in Festa) or external parties (technical service providers, hosting providers, IT companies).

VII – Changes to this document

1. This document, published at https://www.borgoinfesta.eu/VNB/privacy.php, constitutes the privacy policy of this site.

2. It may be subject to changes or updates. Where the changes are significant, they will be notified to users appropriately.

3. This document is kept up to date to comply with EU Regulation 2016/679.

Last updated: 2026.