This notice explains how we process the personal data of visitors to oliorivitti.it and of those who fill in the pre-order form, under Article 13 of Regulation (EU) 2016/679 (“GDPR”).

1. Data controller

Azienda Agricola Rivitti Gaetano, Contrada Sorrenti, 87064 Corigliano-Rossano (CS), Italia, VAT no. IT01814960785. Email: info@oliorivitti.it. Phone: +39 331 359 5359 (Vincenzo).

2. Data we collect

Pre-order form data: full name, email address, phone number, chosen oils, sizes and quantities, delivery method and shipping address, any notes, language, date and time of the consents given.
Technical data: IP address and browser information, processed by the server to run the website, keep it secure and prevent abuse (e.g. automated submissions).

3. Purposes and legal bases

Managing the pre-order: reserving the products you chose, sending you the summary and contacting you, by email or phone, when the new oil is ready to confirm the order, delivery and payment. Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR) and your consent (Art. 6.1.a).
News and offers (optional): sending you news about new vintages and exclusive offers, including offers tailored to the preferences you indicated (e.g. the oil you chose). Legal basis: consent (Art. 6.1.a), which you can withdraw at any time.
Website security: preventing spam and fraudulent use of the form. Legal basis: legitimate interest of the controller (Art. 6.1.f).
Legal obligations: complying with tax and regulatory obligations. Legal basis: Art. 6.1.c.

After submitting the form you receive an email with the summary of your pre-order. If you did not make the request, reply to that email or write to us and we will delete the pre-order and your details. You only receive news and offers if you have given your consent to them.

4. Whether providing data is mandatory

Your full name, email address, phone number, shipping address (unless you choose collection at the mill) and consent to this notice are required to register the pre-order: without them we cannot handle your request. Consent to receive news and offers is optional and does not affect the pre-order.

5. Recipients and processors

Data is processed by authorised staff of the controller and by the following providers, appointed as data processors:

Brevo (Sendinblue SAS), Paris, France: contact management and email platform. Data is stored in the European Union.
Aruba S.p.A., Italy: website hosting and pre-order archive.
Google Ireland Ltd., Dublin, Ireland: spreadsheet (Google Sheets) used to manage pre-orders and deliveries.

Data is never sold or disclosed. Google may process data outside the European Union, with the safeguards required by the GDPR (EU-U.S. Data Privacy Framework and standard contractual clauses); no other transfers outside the EU are planned.

If you choose to load the map on the Contact page, your browser connects to Google Maps (Google Ireland Ltd.), which processes browsing data as an independent controller under its own privacy policy.

6. Retention

Pre-order data: for the time needed to manage the sales campaign for the vintage and in any case no longer than 24 months from collection, unless legal obligations apply after a purchase.
News and offers data: until you withdraw consent or unsubscribe.
Technical security data: for the strictly necessary time, normally no longer than a few days.

7. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing, portability, and object to processing (Arts. 15–22 GDPR) by writing to info@oliorivitti.it. You may withdraw consent at any time, including via the unsubscribe link in every email, without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Cookies

The website only uses strictly necessary technical tools. See the cookie policy for details.

9. Changes

This notice may be updated; the date of the latest change is shown at the top.