Last updated: 23 July 2026.
WHO WE ARE
This website is operated by La Togata S.S.S.A., Via del Colombaio 7b, 53024 Montalcino (SI), Italy, VAT no. 01237940521 (“La Togata”, “we”). We are the controller responsible for personal data processed through this website. You can reach us at any time at winery@latogata.com or +39 347 818 3462.
This is an informational website about our estate and our wines. It has no user accounts and no online shop, and we do not run advertising. Personal data is processed in three situations only: when you use the contact form, in the technical server logs of our hosting provider, and as cookieless aggregate statistics. The website is not directed at minors and we do not knowingly collect their data.
CONTACT ENQUIRIES, HOSTING AND EMAIL DELIVERY
When you submit the contact form, we collect your name, email address and message, plus your surname and telephone number if you provide them. We also receive the selected site language and your choice about occasional news. Fields marked as required are needed so that we can understand and answer your enquiry; all other fields are optional.
We use these details to answer enquiries, arrange cellar visits and handle requests concerning our wines, orders or services. Where processing is necessary to take steps at your request before entering into a contract or to perform a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is our legitimate interest in communicating with visitors and customers and operating the website securely under Article 6(1)(f) GDPR. To limit automated abuse, the hosting environment also processes the request IP address in temporary memory for a maximum of one hour.
If you select the optional box for occasional news, we use your email address for that purpose on the basis of your consent under Article 6(1)(a) GDPR. Giving consent is not required in order to send an enquiry. You can withdraw it at any time by emailing winery@latogata.com; withdrawal does not affect processing carried out before it.
The website and contact endpoint are hosted by Vercel Inc. Resend, operated by Plus Five Five, Inc., transmits the form contents to La Togata's configured mailbox. The message is received by our email provider and authorized La Togata personnel. These providers process the data on our behalf to host the site, prevent abuse and deliver the enquiry; we do not sell contact-form data.
Vercel, Resend and their authorized subprocessors may process data in the United States and other countries. Our services with both providers are covered by data-processing terms that incorporate the European Commission's Standard Contractual Clauses for transfers to countries without an adequacy decision. Resend states that account data, including email metadata, logs and API records, is stored in the United States regardless of the selected sending region. Provider information and safeguards are available at https://vercel.com/legal/dpa, https://resend.com/legal/dpa and https://resend.com/legal/subprocessors, or from us on request.
The temporary IP-based rate-limit data expires after no more than one hour. Vercel retains standard request logs according to the configured account plan and its service terms. Resend currently retains email data for 30 days on standard plans. The copy delivered to our mailbox is kept until the enquiry has been handled and afterwards only for as long as needed to manage the resulting relationship, comply with legal obligations or establish, exercise or defend legal claims. A record of newsletter consent is kept while the consent is active and, where necessary, afterwards as evidence of compliance.
ANALYTICS AND COOKIES
This website does not set cookies.
We use Plausible Analytics for aggregate website statistics on the basis of our legitimate interest in improving the website. Plausible does not use cookies, create persistent identifiers, or store IP addresses, and processes data on systems in the European Union. These statistics help us understand which pages are viewed and whether the contact journey works, without tracking people across websites.
SECURITY
We take appropriate security measures to protect against the unauthorized access or use, alteration, or loss of data, including, information that we have collected from you on our site.
YOUR RIGHTS
You may ask us for access to, correction or deletion of your personal data, restriction of processing, data portability where applicable, or object to processing based on legitimate interests. You may withdraw consent at any time. The contact form is not used for automated decision-making or profiling. To exercise your rights, email winery@latogata.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it or with the competent authority where you live or work.
CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time, for example when our tools or legal requirements change. The current version is always available on this page; the date of the most recent update is shown above.
CONTACT INFORMATION
For questions about this privacy policy or your personal data, you can reach us at:
Via del Colombaio 7b, 53024 Montalcino, SI
+39 347 818 3462
VAT n. 01237940521