How we handle your data

The data controller is Azienda Agricola Nicola Salerno, Via Ruvo 275, 76011 Bisceglie (BT), Puglia, Italy. Write to nicola@oliosalerno.com for anything in this notice.

What we collect

To fulfil an order: your name, email, delivery address and phone number, and what you bought. To adopt a tree: the name for the certificate. Payment details go directly to Stripe; we never see your card number.

Customer details, order history and newsletter choices from our previous Shopify shop were carried over to this site.

If you adopt a tree, the first name and initial on the certificate are shown on the public estate map (e.g. Maria R.).

If you review a product, your name, your town if you give it, and your review appear on the site once we have read it. Your email is never shown; we use it to check the review is real.

If you ask for our trade price list, we keep the business details you give us (name, company, contact details, country, VAT number) to answer the request and follow up about supply.

Why

To deliver what you bought, to send you the receipts, shipping notices and tree updates you asked for, and to meet Italian tax law, which requires us to keep invoices for ten years. We send marketing email only if you signed up for the newsletter and confirmed your address by email, or agreed to it in our previous Shopify shop. You can withdraw that consent at any time by writing to the address above.

Legal basis

Orders, adoptions and trade requests are processed to perform the contract, or the steps you asked for before one (GDPR art. 6(1)(b)). Invoices are kept for ten years as a legal obligation (art. 6(1)(c)). The newsletter relies on your consent (art. 6(1)(a)).

Who else sees it

Stripe (payments), our courier (delivery), Resend (email delivery), Neon (database hosting) and Vercel (website hosting). Nobody else, and we never sell data.

Stripe, Vercel, Resend and Neon are US companies; transfers of your data to them rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses in their data-processing terms. Neon stores the database in the EU (Frankfurt).

Cookies

The site uses one functional storage item for your cart and one for your login. There is no advertising tracking. We count visits with Vercel Web Analytics, which sets no cookies and does not identify you.

Your rights

You may ask for a copy of your data, correct it, or have it deleted (except what tax law obliges us to keep) or its use restricted. You may object to its processing, receive the data you gave us in a portable format, and withdraw your newsletter consent at any time. You may complain to the Italian data protection authority, the Garante.