Privacy Policy

Privacy Policy

Last updated: April 2026

Dilmoor S.p.A., with registered office at Via Giosuè Carducci 25, 24066 Pedrengo (BG), Italy, as Data Controller, processes the personal data of users of the website dilmoor.com in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection legislation.

1. Data Collected and Purposes of Processing

a) Contact form

Through the contact form on the "Contacts" page, we collect the following personal data:

  • First and last name (required)
  • Email address (required)
  • Telephone number (optional)
  • Company name (optional)
  • Message (required)

This data is processed solely to respond to user enquiries and manage commercial communications. Data submitted through the form is not stored in any database: it is transmitted by email to our internal team via Amazon SES (Simple Email Service) and retained only in the corporate email inbox.

b) Analytics cookies (Google Analytics)

The Site uses Google Analytics 4 to collect anonymous statistical data on site usage, such as pages visited, session duration and device type. Google Analytics is activated only upon the user's explicit consent, given via the cookie banner on the Site.

Without consent, no analytical data is collected or transmitted to Google. Users can change their preferences at any time by clearing site data in their browser.

c) Technical navigation data

The server hosting the Site (Vercel) automatically collects technical navigation data (IP address, browser type, operating system, pages visited) in the form of system logs. This data is processed solely to ensure the operation and security of the Site and is not used for profiling purposes.

d) Local storage (localStorage)

The Site uses browser localStorage to store:

  • Age verification status (required by law for websites featuring alcoholic beverage content);
  • Analytics cookie preference (acceptance or refusal).

This data is stored locally on the user's device and is not transmitted to third parties.

2. Legal Basis for Processing

  • Contact form: explicit user consent (Art. 6(1)(a) GDPR), given by ticking the acceptance checkbox.
  • Google Analytics: explicit user consent (Art. 6(1)(a) GDPR), given via the cookie banner.
  • Technical navigation data: legitimate interest of the Controller (Art. 6(1)(f) GDPR) for the security and operation of the Site.
  • Age verification: legal obligation (Art. 6(1)(c) GDPR).

3. Data Recipients

Personal data may be disclosed to the following third parties:

  • Amazon Web Services (AWS) — for sending emails from the contact form via the SES service, with servers located in the EU region (eu-west-1);
  • Google LLC — for the Google Analytics 4 service, only with the user's prior consent;
  • Vercel Inc. — for Site hosting and system log management;
  • Sanity AS — for Site content management (CMS), without processing any user personal data.

No personal data is sold, transferred to or shared with third parties for marketing purposes.

4. Data Transfers Outside the EU

Some of the services mentioned above (Google Analytics, Vercel) may involve the transfer of data to countries outside the European Economic Area. Such transfers are carried out on the basis of adequate safeguards provided for by the GDPR, including Standard Contractual Clauses approved by the European Commission and adequacy decisions (EU-US Data Privacy Framework).

5. Data Retention Period

  • Contact form data: retained in the corporate email inbox for the time necessary to respond to the enquiry, and in any event no longer than 24 months;
  • Google Analytics data: retained for a maximum period of 14 months (GA4 default setting);
  • System logs: retained in accordance with the hosting provider's (Vercel) retention policy;
  • localStorage data: stored on the user's device until manually cleared from the browser.

6. Data Subject Rights

Under Articles 15-22 of the GDPR, users have the right to:

  • access their personal data and obtain a copy;
  • rectify inaccurate or incomplete data;
  • request erasure of their data (right to be forgotten);
  • restrict the processing of their data;
  • object to the processing of their data;
  • receive their data in a structured, machine-readable format (data portability);
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal.

To exercise these rights, users may send a request to info@dilmoor.com.

7. Right to Lodge a Complaint

Users have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it) — if they believe that the processing of their data infringes the GDPR.

8. Changes to this Policy

This privacy policy may be updated periodically. Changes will be published on this page with an indication of the date of the last update.

9. Data Controller Contact Details

Dilmoor S.p.A.

Via Giosuè Carducci 25, 24066 Pedrengo (BG), Italy

Email: info@dilmoor.com