Privacy Policy

Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how Grande Passione di JC Viens processes personal data through grandepassione.com, its newsletter subscriptions and communications relating to the website.

The website provides editorial content and information about Grande Passione, its publications and activities. During redevelopment, a welcome page provides information about Reading Wine and ways to subscribe to our communications. Existing content may remain accessible through direct links.

Purchases, customer accounts and bookings made through atelier.grandepassione.com are covered by the separate Privacy Policy available on that store. Purchases made through Amazon are subject to Amazon’s privacy information.

1. Who is responsible for your data?

The Data Controller is:

Grande Passione di JC Viens
Sole proprietorship
Via Mario Morgantini 2/A
37128 Verona (VR), Italy

VAT No. IT04781010238
Italian Tax Code VNSJCH68C14Z401Y
REA VR-446577

Email: contact@grandepassione.com
Certified email (PEC): grandepassione@pec.it

2. Personal data we process

The information we process depends on how you interact with the website and our communications.

Subscription information

We process your email address, any name or preferences you provide, language preferences, subscription status and records of consent and confirmation.

The embedded Welcome-page signup asks only for your email address. Our separate hosted signup page also requests your first name.

Enquiries and communications

When you contact us by email or through an available contact form, we process your contact details, the contents of your message and information necessary to respond.

Technical and website usage information

Squarespace and other enabled services may process IP addresses, browser and device information, online identifiers, pages requested, visits and interactions.

Some information is necessary to deliver and secure the website. Non-essential analytics and tracking technologies are subject to applicable consent requirements and settings.

Email engagement information

Klaviyo’s email-open and link-click tracking are enabled. These features collect information about interactions with our emails and may associate those interactions with your subscriber profile.

Where website tracking is permitted and enabled, Klaviyo may also associate website activity following an email link with that profile.

Email-open measurements are approximate because email applications and privacy features can affect their accuracy.

3. Sources of personal data

We receive personal data:

  • Directly from you when you subscribe, update your preferences, complete a form or contact us.

  • Automatically through Squarespace and enabled website technologies.

  • Through Klaviyo when you interact with our subscription pages and emails.

  • Through our shared Grande Passione systems where you have also interacted with the Atelier store, as described below and in the store’s Privacy Policy.

4. Purposes and legal bases

Website operation and security

We process technical information to deliver the website, maintain its reliability, investigate errors and prevent misuse.

The legal basis is our legitimate interest in operating and protecting the website under Article 6(1)(f) GDPR. Where storing or accessing information on your device requires consent, that requirement applies separately.

Responding to enquiries

We use the information you provide to respond and manage your request.

The legal basis is our legitimate interest in responding to enquiries under Article 6(1)(f) GDPR, or Article 6(1)(b) where processing is necessary for steps you request before entering into a contract.

Newsletter and promotional communications

We use Klaviyo to manage subscriptions, preferences and authorised email communications about articles, publications, events and other Grande Passione news.

Newsletter subscriptions use a double opt-in process. After submitting your details, you receive an email asking you to confirm your subscription.

The legal basis for promotional email subscriptions is consent under Article 6(1)(a) GDPR.

You can withdraw consent through the unsubscribe link in our emails or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Browsing the website, contacting us or purchasing a publication does not automatically subscribe you to promotional emails.

Audience measurement and email engagement

We use Squarespace analytics and the configured Google Analytics integration to understand website visits and interactions.

Klaviyo’s email-open, link-click and email-to-website tracking features help us understand engagement, assess the effectiveness of our communications and improve their relevance.

Non-essential website measurement is subject to applicable cookie choices. Where consent is required for a measurement activity, the applicable legal basis is consent under Article 6(1)(a) GDPR. Accepting website cookies does not itself provide consent to receive promotional emails.

Legal obligations and protection of rights

We may process information to comply with applicable legal obligations or establish, exercise or defend legal claims.

The legal bases are compliance with a legal obligation under Article 6(1)(c) GDPR and, where applicable, our legitimate interest in protecting our rights under Article 6(1)(f).

5. A shared Grande Passione subscription service

Grande Passione uses the same Klaviyo account to manage subscriptions originating from its Squarespace website and Shopify store.

English-language signups through this website join the existing Grande Passione English subscriber list. Subscription status and preferences are managed within this shared system rather than in separate newsletter databases for each website.

Where the same email address is already present, information may be associated with the existing profile. That profile may also contain store-related information received through the Shopify integration, as described in the store’s Privacy Policy.

Subscribing through this website does not create a Shopify customer account or require a purchase.

6. Cookies, analytics and embedded services

The website uses Squarespace’s cookie-preference controls. You can accept, reject or manage the available categories of non-essential cookies through Cookie Preferences.

Website analytics

The website uses Squarespace analytics and has a Google Analytics integration configured. These services can process technical and usage information about devices, browsers, visits and pages viewed.

Non-essential analytics technologies are subject to the applicable consent settings.

Klaviyo signup and website tracking

The Welcome page loads the embedded Klaviyo service only after the Advertising cookie category has been accepted.

If that category is declined, a separate link allows you to visit our Klaviyo-hosted signup page. That external page operates under the privacy and technology arrangements applicable to that service.

Klaviyo’s email-to-website tracking is enabled. Where permitted by the website’s consent settings, it can associate website activity following an email link with a subscriber profile.

Tracking within emails

Klaviyo’s email-open and link-click tracking are enabled. Website cookie preferences do not themselves switch off tracking within emails.

You can stop receiving promotional emails using the unsubscribe link in each message. You may also contact us about the processing of your engagement information.

Externally hosted fonts

Our embedded signup service may load fonts supplied through Adobe Fonts and Google Fonts. Requests to these providers can disclose technical information, including an IP address and browser information.

Separate choices

Accepting website cookies does not subscribe you to emails. Email subscription and website cookie preferences are separate choices.

Further information is available in our Cookie Policy.

7. Who receives your data?

Where necessary for the purposes described in this policy, recipients may include:

  • Squarespace, for website hosting, content delivery, forms, analytics, security and associated website functions.

  • Klaviyo, for subscription forms, subscriber profiles, preferences, email delivery, engagement measurement and automation.

  • Google, through the configured Google Analytics integration and, where used, Google Fonts.

  • Adobe, where Adobe Fonts is used to deliver fonts.

  • Providers supporting our email, technical maintenance and business administration.

  • Professional advisers and competent authorities where disclosure is necessary or required by law.

Providers may act as processors on our behalf or as independent controllers for particular activities under their respective terms and privacy policies.

We do not sell personal data in exchange for money.

8. International transfers

Our technology providers may process personal data, or make it accessible, outside the European Economic Area.

Where required by the GDPR, transfers rely on an applicable European Commission adequacy decision, Standard Contractual Clauses or another recognised transfer mechanism, with supplementary safeguards where necessary.

You can contact us for information about the safeguards applicable to your data and how to obtain a copy.

9. Data retention

We retain personal data for the period necessary for its purpose and to meet applicable obligations.

  • Newsletter information: while the subscription remains active, subject to periodic review of whether continued retention is necessary.

  • Consent records: for the period necessary to demonstrate consent and address related legal requirements or claims.

  • Unsubscribe records: limited information may be retained to honour your choice and prevent further promotional emails.

  • Enquiries: normally up to 24 months after resolution, unless a contract, dispute or legal obligation requires longer retention.

  • Email engagement information: for the period needed to assess communications and manage relevant preferences, subject to the retention settings of the services used and periodic review.

  • Technical and website usage information: according to its purpose and the retention settings of the relevant service. Cookie durations are described in the Cookie Policy.

Data is deleted or anonymised when no longer necessary, unless further retention is legally justified.

10. Mandatory and optional information

Providing information for a newsletter subscription is optional. Without an email address, we cannot provide the subscription service.

You can browse the public website without subscribing. Declining non-essential cookies may prevent some embedded features from appearing; the Welcome page provides a separate signup link.

When you contact us, we need sufficient information to understand and respond to your request.

11. Security

We adopt proportionate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration or disclosure.

Security also depends on the systems of our service providers. We encourage you to protect access to your email account and contact us if you suspect misuse of your information.

12. Automated decision-making

Grande Passione does not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Subscription confirmations, welcome emails and other routine communications may be automated. These functions do not themselves constitute decisions with legal or similarly significant effects.

13. Your rights

Subject to the conditions established by applicable law, you may request:

  • Access to your personal data.

  • Correction or completion of inaccurate or incomplete information.

  • Deletion of your data.

  • Restriction of processing.

  • Data portability.

  • Objection to processing based on legitimate interests.

  • Objection to processing for direct marketing.

  • Withdrawal of consent where processing is based on consent.

To exercise your rights, contact:

contact@grandepassione.com
PEC: grandepassione@pec.it

We may request information reasonably necessary to verify your identity.

We normally respond within one month of receiving a request. Where permitted by law, this period may be extended, and we will explain the extension.

14. Complaints

If you believe that the processing of your personal data breaches applicable law, you may lodge a complaint with the Italian Garante per la protezione dei dati personali or another competent supervisory authority, including in the EU country where you habitually reside or work.

Other remedies available under applicable law remain unaffected.

15. External links and services

The website includes links to external services, including Amazon, social networks and the Atelier store.

When you follow a link, the destination service may receive technical information and process information you provide under its own privacy policy.

Some links may contain referral or affiliate identifiers. Where a link is an affiliate link, the destination service may use that identifier to attribute a visit or purchase.

Following an external link does not subscribe you to Grande Passione communications.

16. Changes to this policy

We may update this policy when our services, providers, technologies or processing activities change.

The current version will be published on this website with its revision date. Where required, we will provide additional information or obtain consent before introducing a new processing activity.

17. Contact

For questions about this policy, our processing of personal data or your rights:

Grande Passione di JC Viens
Via Mario Morgantini 2/A
37128 Verona (VR), Italy

VAT No. IT04781010238
Italian Tax Code VNSJCH68C14Z401Y
REA VR-446577

Email: contact@grandepassione.com
Certified email (PEC): grandepassione@pec.it

12:09 PM