Privacy Policy
Last updated: September 27, 2025
This notice describes how INFESTANTE sas by Francesco Giannini (hereinafter, the “Holder” or “INFESTANT”) processes the personal data of users who consult and use the site infestante.com (hereinafter, the “Website”), in accordance with the Regulation (EU) 2016/679 (“GDPR”) and to current Italian legislation.
1) Who processes your data
Data controller:
INFESTANTE sas by Francesco Giannini
Registered office / operational headquarters: via A. Gabrieli 2, 70015 Noci (BA), Italy
Other locations/lands: Lama Tenera local road, Zone B/83 – 70015 Noci (BA); Elce municipal road 17 – 70017 Putignano (BA)
Email privacy: privacy@infestante.com
Order/Support Email: ordini@infestante.com
General Email: agricolainfestante@gmail.com
Telephone: +39 347 2419373 (Francesco) – +39 328 8013269 (Letizia)
VAT number: [INSERT VAT NUMBER] – REA: [INSERT REA]
DPO: not named.
2) Types of data processed
2.1 Browsing data
When you visit the Site, our computer systems may automatically acquire certain technical information (e.g., IP address, date/time, URL requested, user agent, pages visited, referrer). This data is necessary for the Site's operation, security, and abuse prevention.
2.2 Account and order data
Identification and contact information (name, surname, shipping/billing address, email, telephone number), order content, preferences and notes entered at checkout; any purchase history.
2.3 Payments
Payments are handled by PayPal e Stripe (for cards). INFESTANT does not preserve complete card data. Payment providers process the data as self-employed owners; Only the data necessary to complete the payment (e.g., amount, email/account name) is shared on the Site. Please see their respective privacy policies.
2.4 Shipping
To process orders we share strictly necessary data (name, address, telephone, delivery notes) with our shipping partner Mail Boxes Etc. (MBE) – Centro Noci (BA), which processes data as data controller on the instructions of the Owner.
2.5 Customer support
If you contact us (e.g., via email or form), we process the data you provide (identity, contact information, content of the request, any attachments) to respond to you and manage the ticket.
2.6 Analytics (66Analytics self-hosted)
We use 66Analytics on infrastructure self-hosted at our disposal, configured in cookieless mode and with IP anonymization active. The system records in essential form: URLs/pages visited, events (e.g. clicks/scrolls), time spent, referrer, device/operating system/browser, approximate geographical area (city/country), anonymized IP address.
- Legal basis: legitimate interest (art. 6.1.f GDPR) to aggregate audience measurement and improve the Site, with reduced impact on users' rights and freedoms thanks to the absence of cookies/identifiers and the anonymization of IP addresses.
- Cookies/Identifiers: unused from the current configuration of 66Analytics. If functions with non-technical cookies are activated in the future, the relevant processing will only take place after consent collection via banners and updates to this information.
Details on any technical cookies necessary for the functioning of the Site are described in the Cookie Policy.
3) Purposes and legal bases
- Site management, security, abuse prevention – Legitimate interest (art. 6.1.f)
- Account registration and profile management – Execution of the contract/pre-contractual (art. 6.1.b)
- Order management, payments, invoicing, delivery – Performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c)
- Customer service and complaints – Performance of the contract / Legitimate interest (art. 6.1.b / 6.1.f)
- Essential Analytics (66Analytics cookieless + IP anon.) – Legitimate interest (art. 6.1.f)
- Analytics with cookies/non-essential cookies (not active) – Consent (art. 6.1.a)
- Direct marketing (if active) – Consent (art. 6.1.a)
4) Nature of the transfer
The provision of data marked as mandatory At checkout, it is necessary to complete the order; otherwise, we will not be able to provide the requested products/services. Providing data for non-essential analytics/marketing purposes is optional.
5) Storage times
- Account and orders: for the duration of the relationship and, subsequently, for the legal terms (e.g. 10 years for civil/tax purposes).
- Customer Support: until 24 months from the closing of the ticket, barring disputes.
- Security logs: until 6 months (except for extensions due to accidents).
- Self-hosted Analytics: data aggregated/anonymized until 14 months (or configured term).
- Marketing (if active): until 24 months from the collection of consent or revocation.
6) Data recipients
- Payment providers: PayPal and Stripe – independent data controllers.
- Shipping Partner: Mail Boxes Etc. (MBE) – Centro Noci (BA) – data controller.
- IT/hosting, maintenance and security providers – data controllers.
- Accounting/tax consultants – responsible or autonomous as appropriate.
- Authority and subjects to whom communication is required by law or by order of the Authority.
List and details can be requested at privacy@infestante.com.
7) Transfers outside the EU
Payment providers may involve data transfers to non-EU countries (e.g. the USA). In such cases, the transfers are based on standard contractual clauses (Article 46 GDPR) and, if necessary, additional measures. Analytics is self-hosted on servers available to us; where such servers are located outside the SEE, we will apply appropriate guarantees.
8) Rights of the interested party
You have the right to log in to your data, rectify them, delete them (in the cases provided for), limit o to oppose to the treatment, and of portability of the data. You can also to revoke consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal. To exercise your rights: privacy@infestante.com.
You also have the right to lodge a complaint with the Guarantor for the Protection of Personal Data.
9) Minors
The Site is not intended for minors 16 years old; the sale of alcoholic beverages is prohibited to minors under 18 years of age. We do not knowingly collect data from minors; if you believe a minor has provided us with data, please contact us to delete it.
10) Security
We adopt appropriate technical and organizational measures to protect data (e.g., in-transit encryption, system hardening, access control, backups). However, no system can guarantee absolute security.
11) Cookies and similar technologies
Information on the use of cookies/tracking tools, the categories and choices available are described in the Cookie Policy of the Site, which integrates this information.
12) Changes to the information
We may update this policy to reflect regulatory or technical changes. Changes will be posted on this page with the new version. update date.
13) Contacts
For inquiries regarding data processing or to exercise your rights:
privacy@infestante.com
For orders and customer support:
ordini@infestante.com