This notice describes how Noccioro processes the personal data of users of the noccioro.it website, pursuant to the EU General Data Protection Regulation 2016/679 (“GDPR”) and applicable Italian law.
Data Controller
The data controller is Az. Agr. Maietta Marco (hereinafter “Noccioro”), Via Parroco Ercolino 19, 83021 Avella (AV), Italy. P.IVA IT02956630640. Email: e-mail · Phone: +39 388 1188931.
What Data We Collect
- Contact and order data: first name, last name, shipping and billing address, email, phone.
- Payment data: handled directly by the payment networks and the Shopify platform. Noccioro does not store full card details.
- Browsing data: IP address, device and browser, pages visited, by means of cookies and similar technologies (see Cookie Policy).
- Newsletter data: your email address, if you choose to subscribe.
Why We Process Your Data
- To fulfil and manage orders, billing and customer support — performance of the contract.
- To comply with legal, tax and accounting obligations — legal obligation.
- To send you the newsletter and promotional communications — consent, which may be withdrawn at any time.
- To improve the site, ensure its security and produce statistics — legitimate interest and/or consent for non-essential cookies.
How and Where We Process Data
We process data using electronic tools and appropriate security measures. The website and the shop are operated through Shopify. Some providers may also process data outside the European Union: in such cases, the transfer takes place with the safeguards provided for by the GDPR (e.g. Standard Contractual Clauses).
To Whom We Disclose Data
We disclose data, solely for the purposes indicated above, to parties acting as data processors, including:
- Shopify — e-commerce platform;
- the courier responsible for shipping (GLS, Liccardi, SDA);
- the payment provider (Shopify Payments and the credit and debit card networks);
- Brevo — sending of the newsletter and email marketing communications;
- Judge.me — management of reviews;
- Web3Forms — sending of contact forms and price list requests;
- Gemma (virtual AI assistant) — support chat, with replies processed by Anthropic (Claude API) via a function hosted on Cloudflare, where conversations are stored anonymously for up to 90 days to analyse frequent questions and improve the service;
- Google — fonts, maps and any statistics.
We do not sell your personal data to third parties.
How Long We Retain Data
We retain data for as long as necessary for the purposes indicated and, for tax documents, for the period required by law (generally 10 years). Data collected for the newsletter is retained until you withdraw your consent.
Your Rights
Pursuant to Articles 15-22 of the GDPR, you have the right to access your data, request its rectification or erasure, restrict or object to its processing, obtain its portability and withdraw your consent at any time. You may exercise these rights by writing to e-mail.
You also have the right to lodge a complaint with the supervisory authority: the Italian Data Protection Authority (garanteprivacy.it).
Changes to This Notice
We may update this notice over time. The version in force is always published on this page, with the date of last update shown at the top.