Privacy notice
Under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Updated 30 September 2026.
Data controller
Az. Agr. Toppini di Toppini Giacomo, Loc. Pascianella 32, 53020 Trequanda (SI), Italy, VAT IT01009920529. Email: info@pascianella.it. Certified email: pascianella@pec.it.
What data we process and why
- Requests sent through the forms (stay, tasting, contact): name, email, phone, dates, message. We use them only to reply to you (art. 6.1.b GDPR). Forms are handled by Netlify, which hosts the site.
- Online orders: shipping, contact and payment details are collected directly by Stripe Payments Europe Ltd. on the payment page, to perform the sales contract (art. 6.1.b) and meet tax obligations (art. 6.1.c). We receive name, address, email and phone to prepare and ship the order; we never see card details.
- Reviews: name, town, email and the text of the review. The email is only used to verify the purchase and is never published; name, town and text are published on the site with your consent (art. 6.1.a GDPR), which you can withdraw at any time by writing to us: we will remove the review.
- New oil notice: your email, if you sign up. We send just one email a year, when the new oil is ready. The legal basis is your consent (art. 6.1.a GDPR), which you can withdraw at any time by replying to the email or writing to info@pascianella.it. We keep the email until you withdraw consent. The form is handled by Netlify.
- Technical browsing data (IP address, server logs): processed by the hosting provider for security and operation of the site (art. 6.1.f).
The cart is stored only in your browser (localStorage) and is not sent anywhere until you proceed to payment. We use no analytics or profiling tools.
Recipients
Netlify Inc. (site hosting and forms; USA, transfer based on the EU-US Data Privacy Framework and standard contractual clauses); Stripe Payments Europe Ltd. (payments; for fraud checks it acts as an independent controller, with transfers to Stripe Inc. in the USA based on the Data Privacy Framework); Register.it S.p.A. (mailbox); WhatsApp Ireland Ltd., only if you write to us on WhatsApp; the courier delivering your order; our accountant. YouTube, Google Maps, OpenStreetMap, Facebook, Instagram and Tripadvisor appear only as links: no data is sent until you open them. The video on the "Our story" page is also a link: it opens on YouTube, where Google's privacy policy applies.
Retention
Form requests: 12 months. Order data: 10 years, as required by tax law. Reviews: published until you ask us to remove them. New oil notice subscribers: until consent is withdrawn. Technical logs: per the hosting provider's settings, normally 30 days.
Your rights
You may request access, rectification, erasure, restriction, portability and object to processing (arts. 15-22 GDPR) by writing to info@pascianella.it. Where processing is based on consent (reviews, new oil notice), you may withdraw it at any time (art. 7.3 GDPR), without affecting the lawfulness of processing carried out before withdrawal. You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority.
Provision of data
Providing the data requested in the forms and at checkout is necessary to receive a reply or complete a purchase. Without it we cannot process your request.