Data Protection

Information notice update at 01/03/2021.

Pursuant to art. 13 of GDPR n. 2016/679 (GDPR 2016/679),laying down provisions for the protection of persons and other subjects regarding the processing of personal data, with this document we inform you that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which this company is bound for the performance of the necessary and mandatory services for the correct management of the commercial relationship.

Data Controller

The Data Controller is the FARM MOLINARI which for this position is domiciled in VIA dei FERRARI 1 / T – 83048 MONTELLA (AV), and can be contacted at +39 327.3155137 or via email at

Purpose of the processing

The personal data provided are processed both for the obligations required by law and for the management of the commercial relationship, including any communications to third parties for the sole fulfillment of the order received (eg: express courier). The Company does not carry out profiling activities for its users in any way.

Personal Data collection

We collect the data necessary to manage the payment of the purchased products and the delivery of the same (your name, surname, delivery address, and shipping number), as well as information relating to your purchases and your authentication in your personal area. Your phone number and email address allow us to keep you updated on the status of your shipment.

We process your personal data to be able to manage the billing of your purchases: your name, surname, your email address, your social security number / VAT number, telephone number, billing address, address shipping method, your means of payment, the economic amount of your order and the details of the products purchased and the date of your purchase.


All data related to the order and billing are kept for 10 years, in full compliance with the relevant tax legislation. After this deadline, the data is anonymized or deleted.

The data relating to users who have not logged into the Il Castagneto WebShop for over 5 years will be deleted, upon notice by email.

Legal basis of the processing

When you place an order on, in legal terms it is called a contract and, in order to fulfill the obligations deriving from this contract, we need to process your personal data.

When you register a user on in a free and voluntary manner, certain data are mandatory and in the absence of them we will not be able to provide you with sales and after-sales services. Others, on the other hand, to allow us, for example, if the “Personalized marketing and profiling” activity is provided, the legal basis is your consent. You are free to provide us with your data and your consent for this purpose or not. Without your consent we will not be able to carry out the activities indicated. Failure to provide data for this purpose or failure to consent will not prevent the possibility of registering and having access to our online store.

Communication and dissemination of data

All data collected will not be disclosed or transferred to third parties and will not be communicated without your explicit consent.

Without prejudice to this right, the data will be communicated to accountants (for administrative management and tax compliance) and legal (in the case of credit recovery or any legal defenses), and to shipping companies (express couriers) to whom we will entrust the order fulfillment.

Data transfer

Your data will not be transferred either to member states of the European Economic Area or to third countries not belonging to the European Economic Area. Your data will be stored on the systems of the Aruba provider (for more information see their privacy policy).

Special categories of personal data.

For the purposes described above, the Company does not need to acquire and process particular data (articles 9 and 10 of EU Regulation no. 2016/679). In any case, these categories of data may be processed by our company only with the free and explicit informed consent expressed in writing.

Existence of an automated decision-making process, including profiling

the Company does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 2016/679.

Data Subject rights

At any time, you can exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, the right of:

  • ask for confirmation of the existence or not of their personal data;
  • obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
  • obtain the correction and deletion of data;
  • obtain the limitation of the processing;
  • obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance;
  • oppose the processing at any time and also in the case of processing for direct marketing purposes;
  • oppose an automated decision-making process relating to natural persons, including profiling;
  • ask the data controller to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
  • withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
  • lodge a complaint with a supervisory authority.

You can exercise your rights with a written request sent by email to, or alternatively to the postal address of the registered office. Furthermore, once the sales contract has been concluded, you can request a copy or deletion of your personal data at any time.
To better process your request, we suggest you use the form of the guarantor: Modulo di Richiesta per l’Esercizio dei propri diritti,

information on Cookies

The site uses only cookies necessary for the proper functioning of the same (see Cookie Policy). No profiling activity is carried out.