Version updated on December 2, 2025
We inform you pursuant to Articles 13 et seq. of EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the manner and for the purposes set out below, in accordance with the provisions of Legislative Decree no. 196/2003 (Privacy Code) and the GDPR.
The Data Controller of your personal data (hereinafter “Controller”) is:
●Name: Società Agricola Montenibbio Srl
●Registered and Operating Headquarters: VIA PALOMBARA, 1005023 BASCHI TR
VAT/Tax Code: 01609250558
●Contact Privacy: poderedelnibbio@gmail.com
The Data Controller collects and processes the following categories of personal data:
•Personal and contact details: name, surname, residential or domicile address, email address, telephone number.
•Data of third-party recipients of the products: when orders are placed for the products, the name, surname, address and telephone number of the recipient are collected.
•Tax information: tax code and/or VAT number, bank and payment details for the purchase and invoicing of products.
This website uses cookies and similar tracking tools. To view the detailed information, please consult the Cookie Policy
If applicable, delete or add data that will be processed. For example:
- usage information, including behavioral information about how you navigate our Services and the elements of our Services you use most, as well as information about the goods and/or services you wish to order, your wish list, preferences, interests, etc.,
- information about your computer, device, and connection, including your IP address, browser type and version, and location, advertising identifiers, cookie or tracking identifiers, and related information;
According to the principle of data minimisation, only those personal data which are actually essential to achieve the processing purposes can be requested and processed.
Your personal data is processed for the following purposes and on the relevant legal bases:
Purpose of the Processing
Legal Basis for Processing (Art. 6 GDPR)
Personal data retention period
A) Management and execution of the contract: Provision of the requested services (sale and home delivery of products), pre-contractual and contractual obligations, administrative and payment management
Performance of a contract to which the data subject is party or of pre-contractual measures taken at the request of the data subject (Art. 6, par. 1, letter b of the GDPR) 10 years from the termination of the contractual relationship or from the last invoice
B) Legal obligations: Fulfilling the Data Controller's obligations under the law, for 10 years, as required by civil and tax legislation.
Purpose of the Processing Legal Basis of the Processing (Art. 6 GDPR) Period of Retention of Personal Data Regulations or EU legislation (e.g. tax and accounting rules). (Art. 6, par. 1, letter c of the GDPR)
C) Subscription to and sending of newsletters and commercial/promotional communications:
Sending communications relating to new products, offers, events, or promotions. Consent expressed by the interested party, collected via the website or in person (Art. 6, par. 1, letter a of the GDPR). Until consent is revoked (unsubscribing by the user via the appropriate link at the bottom of the newsletter or by communicating via email to the Data Controller). D) Management of recipient data (third party): The data of the recipient of the products are processed solely for the delivery of the same.
Legitimate interest of the Data Controller in fulfilling the order received from the customer (Art. 6, par. 1, letter f, of the GDPR) For the time strictly necessary to complete the delivery and in any case not beyond the administrative and accounting deadlines related to the order.
E) Defense in court
Legitimate interest of the Data Controller in exercising its rights in court or in the preparatory stages leading to its possible establishment (Art. 6, par. 1, letter f, of the GDPR) For the time strictly necessary and in any case not beyond the limitation period of the relevant rights (usually ten years).
4. Processing Methods Personal data is processed using paper, computer, and electronic means, adopting appropriate technical and organizational measures to protect the security and confidentiality of your personal data (for example, storing paper documents in locked archives, password-protecting digital devices). Personal data is stored on servers located within the European Union. Personal data is not used for automated decision-making processes (Article 22 of the GDPR).
5. Nature of the Data Provision The provision of personal data for the purposes of managing and executing the contract (purpose A) and for legal obligations (purpose B) is necessary.
Failure to provide such data will make it impossible for the Data Controller to perform the requested service (for example, product delivery). Providing data for purpose (C) (Newsletter and commercial/promotional communications) is optional, and failure to provide consent will not affect the performance of contractual services. You may decide not to provide your consent or to withdraw it at any time by using the appropriate link at the bottom of the newsletter or by sending a communication to the Data Controller at the email address poderedelnibbio@gmail.com.
The withdrawal of consent does not affect the lawfulness of processing based on the consent given before the withdrawal and makes it impossible for the Data Controller to continue using the data for purpose (C) (Newsletter and commercial/promotional communications).
6. Access to Data Your data may be made accessible for the purposes set out above to the Data Controller's employees and collaborators, in their capacity as persons in charge and/or internal data processors and/or system administrators. The data provided will not be disclosed or communicated to third parties, except for persons outside the Data Controller's organization who are granted the right to access the data by law or by order of the authorities, as well as third parties the Data Controller uses to fulfill legal obligations and/or carry out activities instrumental to the management and provision of services, including, but not limited to, IT companies and software and web application providers, including for newsletters and commercial/promotional communications, communications agencies, banks and/or credit institutions for managing collections and payments, product shippers and transporters, tax, accounting, and/or legal advisors.
These third parties, where required by law, are formally appointed by the Data Controller as Data Processors (Art. 28 GDPR) and are required to comply with the GDPR. An updated list of Data Processors can be requested from the Data Controller at the email address poderedelnibbio@gmail.com.
7. Rights of the Data Subject As a Data Subject, you have the right to exercise, in accordance with and under the conditions set forth in Articles 15 - 21 of the GDPR, the following rights:
•right to obtain access to personal data;
• right to rectification and integration of personal data;
•right to erasure of data;
•right to restriction of processing;
•right to data portability;
• right to object to the processing of data for marketing or profiling activities if you have not consented to them;
• right to withdraw consent at any time for personal data processing that requires consent (without prejudice to the lawfulness of processing based on consent given before its withdrawal).
You can exercise these rights by sending a communication to the dedicated email address: poderedelnibbio@gmail.com Furthermore, you have the right to lodge a complaint with the Italian Data Protection Authority if you believe your rights have not been respected.