IData controller
The controller of the data collected through this website is:
Azienda Agricola “Progetto di Vita” di Raffaele e Maddalena
Località La Quercia, 01100 Viterbo (VT)
For any question about your data, write to us by post to Az. Agricola “Progetto di Vita”, Località La Quercia, 01100 Viterbo (VT).
IIWhat we collect
- Order data: full name, e-mail, phone (optional), delivery address, products and amounts.
- Payment data: card and other payment details are entered directly into Stripe’s forms and never pass through our servers; we only receive the outcome of the payment and what we need to recognise it.
- Technical data: like any website, our servers log IP address, time of request and pages visited, for as long as needed to keep the site running and secure.
- Visit statistics: we use Umami, an analytics tool hosted by our technical provider, which counts visits and a few actions (such as “add to cart”) without cookies and without keeping data that identifies the visitor.
IIIWhy, and on what legal basis
- Handling your order, payment, delivery or pickup and support: performance of the contract (art. 6.1.b GDPR).
- Tax and accounting obligations, such as keeping sales records: legal obligation (art. 6.1.c GDPR).
- Protecting the site and payments from fraud and measuring use of the site in aggregate: legitimate interest (art. 6.1.f GDPR).
IVWho we share it with
Your data is handled by us and, only as far as needed, by:
- Stripe Payments Europe, Ltd. (Ireland), which processes payments as an independent controller for its payment-services and anti-fraud duties. Stripe may transfer data to the United States under the EU-US Data Privacy Framework and standard contractual clauses; see stripe.com/privacy.
- The courier delivering your order (recipient’s name, address and phone).
- The provider hosting the website and the accountant who keeps our books.
We do not sell your data or use it for advertising or profiling.
VHow long we keep it
- Order data and sales records: 10 years, as Italian tax law requires (art. 2220 Civil Code).
- Support messages: as long as needed to resolve the request and any complaint.
- Server logs: a few days, unless needed to investigate abuse.
VICookies and browser storage
The site uses no profiling cookies and no third-party advertising cookies. Your cart is kept in your browser’s storage (localStorage) so a reload does not lose it; it is not sent to us until you check out.
The payment step loads Stripe, which may set technical cookies needed to prevent fraud. As these are technical tools, no consent is required.
Fonts are served from our own server: the site does not contact Google Fonts.
VIIYour rights
You may at any time ask to access, correct or erase your data once we no longer have to keep it, restrict its processing, object to processing based on legitimate interest, and receive it in a portable format (arts. 15-22 GDPR), by writing to us by post to Az. Agricola “Progetto di Vita”, Località La Quercia, 01100 Viterbo (VT).
You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).