About Us
In accordance with European Union Regulation No. 679/2016 (hereinafter “GDPR”), and specifically Article 13 thereof, we hereby provide the information required by law regarding the processing of personal data.

The website www.aziendaagricoladanonnamaria.it is owned by AZIENDA AGRICOLA DA NONNA MARIA, based at Via G. Sclavo 58, 84010, Tramonti (Amalfi Coast), Salerno, Italy (VAT No. 03190950653).

This notice is addressed to users interacting with the Site’s web services (hereinafter “Data Subjects”) not only to comply with legal obligations but also because transparency and fairness towards Data Subjects are fundamental to our business.

Browsing the Site is free and does not require any registration.

What is personal data?
Pursuant to Article 4 of the GDPR, personal data is defined as any information relating to an identified or identifiable natural person—directly or indirectly—with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Personal data will be collected directly from the data subject, by means of:

The categories of data listed below may be subject to processing:

Direct provision by the user
(“Data voluntarily provided by the user”);

Automatic collection
(“Browsing data” and “Cookies” or similar technologies)

Data categories
The following categories of data may be processed:

Browsing data:
During their normal operation, the IT systems and software procedures used to operate the Site acquire certain personal data (such as IP addresses or domain names of computers used by users, pages visited, and the date/time of the visit), the transmission of which is inherent to the use of Internet communication protocols. This information is not collected to be associated with identified data subjects but, by its very nature, could allow users to be identified through processing and association with data held by third parties.

This data is recorded anonymously and used solely to obtain statistical information on the use of the Site and to monitor its proper functioning.

The data could be used to establish liability in the event of hypothetical cybercrimes committed against the Site.

Cookies:
To make browsing this Site more efficient and immediate, cookies are used when users access the website; these are small text strings that allow the connection to the Site to be maintained.

Data voluntarily provided by the user:
This refers to personal data freely provided by the user to access specific, voluntarily chosen services. Failure to provide such data may make it impossible to obtain the requested service. Specific notices and requests for consent are provided on the Site pages dedicated to on-demand services.

Purposes of processing
Data is processed for the following purposes:

Managing registrations for the website aziendaagricoladanonnamaria.it and managing activities directly related to registration.

Managing orders, supplying products and services, processing and managing payments, and communicating with the data subject regarding orders and shipments.

Preventing or detecting fraud or abuse targeting our Site, and enabling third parties to carry out technical, logistical, and other activities on our behalf.

Sending administrative information, marketing communications, advertising and promotional initiatives (via hard copy, SMS, email, etc.), promotional offers, periodic customer satisfaction surveys, market research, or quality surveys originating from the company itself, its connected, related, parent, or affiliated companies, or from third parties appointed by aziendaagricoladanonnamaria.it.

Analyzing consumption habits or choices in order to offer a personalized service aligned with the data subject’s interests.

The processing of personal data for “marketing” purposes is based on the data subject’s consent, pursuant to Art. 6, paragraph 1, letter (a) of the GDPR.

Communication and Disclosure of Data
Data collected in the course of providing the service may be communicated to: companies performing functions strictly connected and instrumental to the operations—including technical operations—of AZIENDA AGRICOLA DA NONNA MARIA’s services, such as suppliers providing services for the review and verification of listings, direct marketing and customer care service providers, companies providing archiving, administrative, payment, and invoicing services, and companies supplying technical components for the delivery of specific service features;

freight transport companies, couriers, shipping agents, and similar entities in the freight transport sector;
credit institutions, for the purpose of executing payments or credits;
administrative and judicial bodies and authorities, in compliance with legal obligations;

Data may be communicated to other companies belonging to the AZIENDA AGRICOLA DA NONNA MARIA group or otherwise affiliated with it, as well as to other third parties engaged by AZIENDA AGRICOLA DA NONNA MARIA to optimize the services offered via the Site.

Under no circumstances do we transfer personal data to third parties on any basis (including sale).

Should the Data Controller entrust processing operations to third parties, such parties shall be appointed as data processors pursuant to Article 28 of the GDPR, following verification that their activities comply with personal data protection regulations.

The Data Controller shall engage only data processors who provide sufficient guarantees to implement appropriate technical and organizational measures, ensuring that processing meets GDPR requirements and safeguards the rights of the data subject.

Mandatory or Optional Nature of Data Provision
The provision of personal data is mandatory solely for processing operations necessary to provide the services offered by AZIENDA AGRICOLA DA NONNA MARIA (any refusal to provide data for service delivery purposes makes it impossible to use the service itself); conversely, it is optional for promotional and profiling purposes, and a refusal to provide consent has no negative consequences on the provision of the service offered via the Site.

Processing Methods and Duration
Personal data will be processed by authorized persons acting under the authority of the Data Controller—and adequately instructed by the Controller—in compliance with Art. 29 of the GDPR. Processing will be carried out using automated tools for the time strictly necessary to achieve the purposes for which the data were collected, as well as for any additional period required to fulfill specific legal obligations.

Except in cases where liability must be established regarding hypothetical cybercrimes against the Site, data relating to Site navigation will not be retained for more than 30 (thirty) days.

Data may be processed in either electronic or paper format.
For analysis purposes aimed at service development and improvement, the user’s personal data will be retained for 36 (thirty-six) months.
Electronic traffic data—excluding the content of communications—will be retained for a period not exceeding 6 years from the date of communication, pursuant to Art. 24 of Law no. 167/2017, which transposed EU Directive 2017/541 on counter-terrorism.

For direct marketing purposes, we retain your data for a maximum period equal to that provided by applicable regulations, specifically 24 (twenty-four) months.

Invoices, accounting documents, and transaction data are retained for 10 (ten) years in accordance with the law (including tax record-keeping obligations).

AZIENDA AGRICOLA DA NONNA MARIA guarantees the lawful and fair processing of personal data provided through the Site, in full compliance with current regulations, as well as the utmost confidentiality regarding data provided during registration.

All data are collected in accordance with relevant regulations, with particular regard to the security measures provided for by Art. …Article 32 of the GDPR regarding their processing by means of electronic, manual, and automated tools, and using logic strictly related to the purposes indicated in Article 4, and in any case in a manner that ensures the security and confidentiality of the data themselves.

Data Transfer Abroad

This Site may share some of the collected data with services located outside the European Union—specifically Google, Facebook, and Instagram—via social plugins and the Google Analytics service. Such transfers are authorized based on specific decisions by the European Union and the Italian Data Protection Authority (specifically Decision 1250/2016, or the Privacy Shield); therefore, no further consent is required. The aforementioned companies guarantee their adherence to the Privacy Shield.

Revision Clause

This notice may be subject to change. Should the Data Controller make substantial changes to the use of the user’s Data, the Controller will notify the user by prominently publishing such changes on its webpages or via alternative or similar means.