Privacy policy

Data controller

The data controller is Apicoltura Mille Terre. For any question about your data you can write to us at the address below.

Data controller

Apicoltura Mille Terre

VAT number

IT05273880752

Email

ordini@apicolturamilleterre.com

What data we process

Browsing data: during your visit, the systems hosting the site automatically record some technical information (for example IP address, browser type, date and time of access, pages requested). It is used only to keep the site working and secure and is not used to identify you.

Data you give us: when you write to us, including through the order form, we process the data you choose to include in your message: full name, email or phone number, products, quantities and genetics requested, and any notes such as delivery area or period. If the order goes ahead, we will also process the data needed for delivery and invoicing.

For cookies and similar technologies, see the Cookie policy.

Why we process it and on what basis

• Replying to your requests and preparing a quote or an order — legal basis: pre-contractual measures and performance of the contract (Art. 6.1.b GDPR).
• Handling delivery, invoicing and tax and accounting obligations — legal basis: legal obligation (Art. 6.1.c GDPR).
• Keeping the site working and secure — legal basis: our legitimate interest (Art. 6.1.f GDPR).

We do not use your data for marketing messages without your explicit consent, and we carry out no profiling or automated decision-making.

Do you have to provide your data?

No, but without your contact details we cannot reply to you or handle your order.

Who it may be shared with

Your data is processed by us and is never sold or published. It may be processed, only for the purposes above, by suppliers who support us: the email service we use to receive orders, the site's hosting provider, couriers for deliveries and our tax adviser. Where required, they act as data processors.

Some suppliers, such as the email service, may also process data outside the European Union: in these cases the transfer is based on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or on standard contractual clauses.

How long we keep it

• Requests for information not followed by an order: for as long as needed to reply and in any case no longer than 24 months.
• Order and invoice data: 10 years, as required by Italian civil and tax law.
• Browsing data: for the technical period set by the hosting provider, unless needed to investigate misuse.

Your rights

At any time you can ask us for access to your data, its rectification or erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). Just write to the email address above: we will reply within one month.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Changes to this notice

We may update this notice, for example if we add new services to the site. The date of the latest update is shown at the top of the page.