Privacy Policy
Pursuant to articles 13-14 of EU Regulation 2016/679 (GDPR) – Last revised: June 2025
1. Data Controller
Essentia Puglia, Via San Francesco, 24 – 72015 Fasano (BR), Italy
Email: info@essentiapuglia.com ·
2. Types of data collected
Data voluntarily provided by the user
- Personal data: name, surname, address
- Contact details: e-mail, telephone number
- Payment data (managed by the secure payment provider, not stored by Essentia Puglia)
- Communications sent via contact forms or e-mail
Data collected automatically
- Navigation data: IP address, browser type, pages visited, access times
- Cookies and tracking technologies (see Cookie Policy)
3. Purposes and legal basis of processing
| Purpose | Legal basis | Retention |
|---|---|---|
| Order management and sales contract | Contract execution (Art. 6.1.b GDPR) | 10 years (tax obligations) |
| User account registration | Contract execution (Art. 6.1.b GDPR) | Until account deletion |
| Customer support | Legitimate interest (Art. 6.1.f GDPR) | 2 years |
| Sending newsletters and promotional communications | Consent (Art. 6.1.a GDPR) | Until consent is revoked |
| Tax and accounting compliance | Legal obligation (Art. 6.1.c GDPR) | 10 years |
| Website security and fraud prevention | Legitimate interest (Art. 6.1.f GDPR) | 12 months |
| Google Customer Reviews | Consent (Art. 6.1.a GDPR) | Managed by Google |
4. Communication and transfer of data
Personal data may be disclosed to:
- Couriers and shipping companies for order delivery
- Payment providers (PayPal, Stripe or equivalents)
- Email marketing providers for sending newsletters
- Google LLC for analytics and Customer Reviews services
- Consultants and professionals for tax and legal compliance
- Competent authorities upon legal request
Data will not be sold to third parties. Any extra-EU transfers will take place in compliance with the guarantees provided by the GDPR (Adequacy Decisions, Standard Contractual Clauses).
5. Data Subject Rights
The data subject has the right to:
- Access their personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure – right to be forgotten (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time, without affecting the lawfulness of processing before such withdrawal
To exercise your rights: info@essentiapuglia.com
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it
6. Cookies
For detailed information on the use of cookies, please refer to the Cookie Policy.