This Privacy Policy explains how Bistri Serton processes personal data through bistriserton.beer. It follows the data lifecycle from collection and use to disclosure, retention, and deletion, and is intended to describe the main processing activities connected with the website and its contact functions.
When you use the contact form or otherwise reach out to Bistri Serton, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser and device information to deliver the website, protect it from misuse, and support troubleshooting.
We receive personal data from you when you complete a form, send a message, or choose to share contact details and preferences. Technical data is generated automatically by the website and hosting environment when pages are requested and when the site is used in the normal course of operation.
The site uses essential cookies to support basic page functions, security, and technical delivery. Preference cookies may also be used to remember privacy choices. We do not confirm the use of analytics cookies or marketing cookies on this website.
We use only essential cookies needed for site operation and cookies that remember privacy preferences. You can usually control cookies through your browser settings, including blocking or deleting them, although some site functions may not work as intended if essential cookies are disabled.
We use personal data to respond to contact requests, manage service preferences, deliver and maintain the website, monitor security, diagnose technical issues, and keep records needed to support the handling of inquiries. Processing is limited to what is reasonably necessary for these purposes and is not extended to unconfirmed analytics or marketing activities.
Personal data may be shared with service providers that support website hosting, technical maintenance, security, and message delivery. These recipients may process data only to perform their assigned functions and are expected to handle it under appropriate confidentiality and security obligations. We do not state that analytics or advertising partners are used.
We may disclose personal data when required to comply with applicable law, a valid legal process, or a binding request from a competent authority. Disclosure may also occur where it is necessary to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and its users.
Privacy rights lifecycle
You may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction where the law allows it. In some cases, you may also request a copy of the data you provided or ask us to review how a specific processing activity applies to your situation. These rights are not absolute and may be limited by legal duties, security needs, or the need to complete a request you initiated.
To exercise a privacy right, send a request through one of the contact channels listed in this policy and describe the data or processing activity involved. We may ask for information needed to verify your identity and to understand the request. Once verified, we will review the request, respond within the applicable legal timeframe, and explain any limitation if we cannot fully comply.
We retain personal data according to its lifecycle. Inquiry records are kept while the request is being handled and for any follow-up that is reasonably connected to it. Technical data is retained for the period needed to operate, secure, and maintain the website, then removed or anonymised when it is no longer required. Where legal obligations apply, data may be kept for the period necessary to meet those obligations and then deleted or otherwise disposed of securely.
If this policy changes in a material way, the updated version will be made available on the website and, where appropriate, additional notice may be provided through the usual service channels. The effective date should be read together with the version currently published.
Under the GDPR, personal data must be processed lawfully, fairly, and transparently. For this website, processing is limited to contact handling, technical delivery, security, and related operational needs, with attention to data minimisation and purpose limitation.
Because Bistri Serton operates in Italy and serves users in the European context, GDPR rules apply where the regulation governs the processing of personal data.
Where the GDPR applies, you may request access, rectification, erasure, restriction, portability, or objection, subject to legal limits and the context of the processing. If consent is used for any specific processing activity, you may withdraw it without affecting prior lawful processing. Requests are reviewed, verified where needed, and answered through the channels described in this policy.
Use the listed service channels for questions about this policy or the handling of personal data.
