Privacy Policy
Last updated: 19 October 2026
1. Data Controller
The Data Controller is Agriturismo Casa Olivo di Scafuro Gianluca.
Operating office: S.P. delle Conce 35, 58042 Campagnatico (GR), Italy.
Administrative office and pick-up point: Via Marmolada 4, 58100 Grosseto, Italy.
VAT number: 01257360535.
Email: info@olioaroldo.com
Phone: +39 349 584 9888.
2. Personal data processed
The website olioaroldo.com may collect and process:
- browsing data, IP address and technical information about the device;
- identification and contact details provided through forms;
- data needed to manage orders, payments, shipping and invoicing;
- email addresses used for the new harvest notification and for the newsletter;
- data collected through cookies and statistical analysis and advertising measurement tools, according to the preferences expressed by the user.
3. Purposes and legal bases
Personal data is processed for:
- Website operation and security: legitimate interest of the Data Controller, where applicable.
- Requests for information and quotes: handling the user’s requests and any pre-contractual measures.
- Orders and payments: performance of the purchase contract.
- Tax and accounting obligations: compliance with legal obligations.
- New harvest notification: sending the single message requested by the user.
- Newsletter and marketing: sending promotional communications based on consent, where required.
- Statistical analysis: use of Google Analytics 4, subject to prior consent where required by law.
- Advertising and conversion measurement: use of Google Ads to show ads on Google’s search network and to measure their results (for example orders coming from an ad), linked to Google Analytics 4, subject to prior consent.
- Protection of rights: establishment, exercise or defence of a legal claim, where applicable.
4. New harvest notification and newsletter
The site allows users to request an email when the oil from the new harvest is available. Brevo is used for this service.
The notification is a single, specific message: it does not entail subscription to the newsletter or authorise further promotional communications.
The newsletter is a separate service, managed through Brevo, which users can subscribe to by giving the consent required by law.
Consent to the newsletter can be withdrawn at any time through the unsubscribe link in the emails or by writing to info@olioaroldo.com.
5. Website forms and request archive
The site offers forms to ask for information, to request the price list for professionals and to receive the new harvest notification. The data entered (for example name, email address, message) is used solely to reply to the request or, for the “Notify me” form, to send the notification requested.
Each request is sent by email to the Data Controller and is kept in the site’s archive, managed through the Flamingo plugin, together with the date, the time, the form page and the confirmation of consent. The site does not record the IP address of people who fill in the forms.
For the new harvest notification, the email address may be entered in Brevo (see section 4) solely to send the communication requested.
6. “Which oil do you need?” quiz
The quiz does not require any personal data. At the end, the site records, anonymously and in aggregate form, only the score obtained and the questions answered incorrectly, in order to show participation statistics and compare the result with that of other participants.
The site does not keep IP addresses, cookies or other identifiers linked to the quiz, and individual attempts cannot be traced back to a person.
7. How data is processed and security
Data is processed using computer tools and, where necessary, on paper, adopting technical and organisational measures appropriate to protect it against unauthorised access, loss, disclosure or unlawful use.
8. Recipients of data
Data may be communicated, to the extent necessary, to hosting and IT support providers, e-commerce services, payment providers, couriers, form and newsletter providers, consultants and authorised authorities.
In particular, the site uses:
- WooCommerce to manage the online shop;
- PayPal for electronic payments;
- Brevo to manage email communications and the newsletter;
- Google Analytics 4 for statistical analysis;
- Google Ads for online advertising and conversion measurement.
Providers that process data on behalf of the Data Controller are appointed data processors where required by Article 28 of the GDPR. Other parties may act as independent controllers for specific processing.
9. Data transfers
The site is hosted, according to the information available, on infrastructure in Italy or in the European Union. However, some providers may also process data outside the European Economic Area.
Any international transfers are carried out in compliance with Articles 44 et seq. of the GDPR, on the basis of the safeguards provided by the applicable legislation.
This applies in particular to Google, which may also process data outside the European Economic Area (for example in the United States) on the basis of the safeguards provided by law, such as the EU-US Data Privacy Framework or standard contractual clauses.
10. Data retention
Data is kept for the time necessary for the purposes for which it is collected and in compliance with legal obligations.
- Orders and accounting documentation: for the periods required by the applicable legislation, generally ten years for documentation subject to that obligation.
- Contact requests: for the time needed to handle them and for any legitimate subsequent needs.
- New harvest notification: until the message is sent and the related activity is completed.
- Newsletter: until consent is withdrawn or the service ends, except for the minimum retention needed to document the withdrawal.
- Cookies and tracking tools: for the periods set by the actual settings of the services and described in the Cookie Policy.
11. Cookies and tracking tools
The site uses technical cookies necessary for its operation and, subject to consent, Google Analytics 4 and Google Ads.
Non-essential tools for which consent is required must not be activated before the user has given a valid choice.
Users can manage or change their preferences through the cookie management system on the site. For information on categories, purposes, duration and providers, please see the Cookie Policy.
12. Rights of the data subject
Under the GDPR, data subjects may request access, rectification, erasure or restriction of their data, exercise the right to data portability in the cases provided for, object to processing based on legitimate interest and withdraw any consent given.
Data subjects may also object at any time to processing for direct marketing purposes.
Requests can be sent to info@olioaroldo.com.
Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.
13. Automated decision-making
The Data Controller does not declare that it uses exclusively automated decision-making processes that produce legal effects or similarly significantly affect the data subject.
14. Changes to this Privacy Policy
The Data Controller may update this policy in the event of legislative, organisational or technical changes. The updated version is published on this page together with the date of the update.