Privacy notice

Data controller

Olio Pantanella di [Nome Cognome], [registered office to be completed], VAT [VAT number to be completed], email info@pantanella.farm.

What data we process and why

• Orders: first name, surname, email, phone, delivery address, any invoicing details and the contents of the order. We need them to perform the contract (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c)).
• Account: name, email, phone and password (stored only in encrypted form), so that you can sign in and see your orders (Art. 6(1)(b)).
• Messages: what you write to us from the contact page, so that we can reply (Art. 6(1)(b) and 6(1)(f)).
• Security: technical data such as your IP address, used to limit sign-in attempts and abuse (legitimate interest, Art. 6(1)(f)).
• Where the order comes from: if you arrive from one of our ads or from another website, we record the campaign name and the referring site with the order, to understand which initiatives work (legitimate interest, Art. 6(1)(f)). We record the click identifiers of Google and Meta ads only if you have accepted advertising cookies.
• Statistics and advertising: only if you accept them in the cookie banner, we use Google Analytics to count visits and page views, and the advertising services of Google and Meta to measure our ads and show them to people who have already visited us (consent, Art. 6(1)(a)). You can withdraw your consent at any time from “Cookie preferences” at the bottom of every page. The details are in the cookie policy.

We do not sell your data. We do not send you newsletters without your consent.

Payments

Payments take place on the systems of Stripe, PayPal or Satispay, which act as independent controllers for payment data. We only receive the outcome of the payment and a transaction reference.

Who we entrust it to

To the providers we need to run the shop, appointed as data processors: website hosting (Vercel), database (Supabase), sending of transactional emails, the courier for delivery and, only with your consent, Google (Analytics and Ads) and Meta (Facebook and Instagram). Some are based outside the European Union: in that case the transfer is protected by the standard contractual clauses or by the EU-US Data Privacy Framework.

How long we keep it

Order data for 10 years, as required by tax law. Account data until you ask us to delete the account. Messages for as long as needed to reply, and in any case no longer than 2 years.

Your rights

At any time you can ask us for access to your data, its rectification, erasure, restriction or portability, or object to its processing, by writing to info@pantanella.farm. You can also lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it).