Privacy Policy

Last updated: 30 September 2026

This notice explains how we process the personal data of people who visit loliveta.eu and who contact us through the forms on the site, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Azienda Agricola l’Oliveta di Roberta Tiberi
Località Stabbiatelli, 58033 Montenero d’Orcia (GR), Italy
VAT number IT01079200539
Contact: the «Write to us» form on the homepage

What data we process and why

Visit bookings and enquiries

Through the «Book a visit» and «Write to us» forms we collect: full name, email address, phone number (optional), chosen experience, date and number of guests, topic and text of the message, language of the page.

  • Purpose: to answer your request, organise the visit and give information about products and shipping.
  • Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Providing the data: optional, but without your name and email we cannot reply.

The data reaches us by email and is not stored in a database on the site.

Purchases

If your request leads to a purchase, we process the data needed for the sale, shipping and invoicing, to perform the contract and to meet our tax obligations (Art. 6(1)(b) and (c) GDPR).

Spam protection

The forms are protected by Cloudflare Turnstile, which checks that they are used by a person and not by an automated program. To do so, Cloudflare receives your IP address and technical information about your browser; the check starts when the page is opened.

  • Legal basis: legitimate interest in protecting the site from abuse (Art. 6(1)(f) GDPR).

Map

The Google Maps map loads only if you click «Show the map». From that moment Google receives your IP address and may set its own cookies.

  • Legal basis: consent, given by clicking (Art. 6(1)(a) GDPR).

Browsing data

The server hosting the site automatically records technical data (IP address, date and time, requested page, browser type) to keep it running and secure.

  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Cookies

The site uses only technical cookies: one remembers the chosen language (pll_language, 1 year). We do not use statistics, profiling or advertising cookies. Google cookies may be set only after you click «Show the map». More details in the Cookie Policy.

Who we share data with

We do not sell or pass on your data. It is processed on our behalf only by the providers we need:

ProviderService
Netsons S.r.l., Pescara (Italy)Website hosting and domain mailbox
Google Ireland Ltd / Google LLCMailbox where we receive requests (Gmail); map, only on request
Cloudflare, Inc.Spam protection for the forms

Transfers outside the European Union

Google and Cloudflare may process data in the United States. Both participate in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission (decision of 10 July 2023).

How long we keep data

  • Visit bookings and enquiries: 3 months after the last contact or the visit, then we delete them (unless they lead to a purchase).
  • Data relating to purchases and invoices: 10 years, as required by Italian law (Art. 2220 of the Civil Code).

Your rights

At any time you can ask us to access, correct or delete your data, restrict its processing, receive it in a portable format or object to its processing (Arts. 15–22 GDPR), and withdraw the consent given for the map. You can do so through the «Write to us» form on the homepage, choosing the topic «Something else».

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country of residence.

Changes

We may update this notice; the date at the top shows the latest version. In case of discrepancies, the Italian version prevails.