Privacy Policy

1. Data controller

The data controller is Società agricola Valdiverdura s.s., Contrada Castellana, 92016 Ribera (AG), Italy, VAT No. 02700340843.

For privacy requests or to exercise GDPR rights, write to ordini@valdiverdura.com.

2. Personal data we process

Depending on how you use the shop, we may process identification and contact details, billing and delivery addresses, account information, order and transaction data, customer-support communications, marketing preferences and technical browsing data such as IP address, logs, browser and device information.

3. Purposes and legal bases

We process data to manage accounts, orders, payments, deliveries and customer support on the basis of performance of a contract or pre-contractual steps under Article 6(1)(b) GDPR; to comply with tax, accounting and other legal obligations under Article 6(1)(c); for security, abuse prevention and protection of our rights on the basis of legitimate interests under Article 6(1)(f); and, where consent has been given, for newsletters, promotional communications and non-essential cookies or similar technologies under Article 6(1)(a).

4. Providing data

Data required for registration, ordering, payment, invoicing and delivery must be provided in order to perform the contract and related obligations. If it is not provided, the purchase or requested service may not be possible. Consent for marketing and non-essential cookies is optional and may be withdrawn at any time.

5. Recipients

Where necessary, data may be shared with hosting and IT providers, payment platforms, couriers and logistics operators, administrative, tax or legal advisers, communication and marketing providers where used, and public authorities or other parties where required by law. Depending on the activity, these recipients may act as processors or independent controllers. Personal data is not publicly disseminated.

6. Payments

Payments are handled through the methods available at checkout. Payment providers may process transaction data directly under their own privacy notices. Valdiverdura processes the information necessary to manage the order, payment confirmation, refunds and accounting obligations.

7. Transfers outside the EEA

Some service providers may process data outside the European Economic Area. Where applicable, transfers are carried out under an adequacy decision or other safeguards permitted by Chapter V of the GDPR, including standard contractual clauses.

8. Retention

Data is retained for as long as necessary for the purposes for which it was collected and afterwards for the periods required by tax, accounting and civil-law obligations or to protect legal rights. Account data is retained while the account remains active or until deletion is requested, subject to legal obligations. Marketing data is retained until consent is withdrawn or an objection is made. Cookie durations are described in the Cookie Policy.

9. Security

Valdiverdura applies technical and organisational measures appropriate to the risk to protect data from loss, unlawful use, unauthorised access, alteration or disclosure.

10. Your rights

Where the GDPR applies, you may request access, rectification, erasure, restriction and portability of your personal data and may object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting processing lawfully carried out before withdrawal.

Requests may be sent to ordini@valdiverdura.com. You also have the right to lodge a complaint with the Italian Data Protection Authority.

11. Cookies and tracking technologies

For information about cookies, their purposes and consent preferences, read our Cookie Policy and use the consent-management panel available on the website.

12. Changes to this notice

This Privacy Policy may be updated to reflect legal, technical or organisational changes. The version published on the website states the latest update date.