Privacy Policy
Pursuant to Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, this notice describes the methods and purposes of the processing of personal data carried out by eShop di Elena Stragliotto - VAT No. 10258290963 - REA No. MB-2609904 via the Idroponica Facile website.
1. Data Controller
eShop di Elena Stragliotto - VAT No. 10258290963 - REA No. MB-2609904
Registered office: Via Santa Giuliana 8, 20835 Muggiò (MB), Italy
2. Types of data processed
- Personal and contact details (first name, surname, address, telephone number, email, tax code or VAT number) provided during purchase, registration or when requesting information.
- Payment and billing data necessary to complete the order.
- Browsing data (IP addresses, logs, device identifiers) collected automatically for technical and security purposes.
- Cookies: technical cookies and, subject to consent, analytics or marketing cookies, as described in the Cookie Policy.
3. Purposes and legal basis of processing
Personal data is processed for the following purposes:
- management of orders, payments and deliveries (performance of a contract);
- compliance with legal and tax obligations (legal obligation);
- responding to requests or communications sent through the website (legitimate interest or consent);
- sending newsletters or promotional communications (explicit consent);
- anonymous statistical analysis and improvement of services (legitimate interest).
4. Methods of processing
Data is processed using IT and telematic tools in compliance with the principles of lawfulness, fairness, transparency, relevance and security set out in the GDPR. Appropriate technical and organisational measures are adopted to ensure the protection of personal data.
5. Mandatory provision of data
The provision of data is mandatory for contractual and tax purposes: refusal to provide such data will make it impossible to provide the requested services. For optional purposes (newsletter, marketing, etc.), failure to give consent will have no consequences.
6. Disclosure and recipients of data
Data may be disclosed to:
- IT and hosting service providers;
- carriers and couriers responsible for product delivery;
- accounting and tax advisers for regulatory compliance;
- credit institutions and payment platforms for transaction management;
- judicial or administrative authorities in cases provided for by law.
Personal data is not intended to be transferred to countries outside the EU, except where adequacy decisions or standard contractual clauses approved by the European Commission are in place.
7. Retention periods
Personal data will be retained for the time necessary for the purposes for which it was collected and, in any case:
- contractual and tax data: 10 years (civil and tax obligation);
- newsletter or marketing data: until consent is withdrawn;
- technical browsing data: generally 30 days, except where required for security or investigation purposes.
8. Rights of the data subject
The user has the right to:
- obtain access to their personal data;
- request its rectification or erasure;
- restrict or object to the processing;
- receive the data in a portable format (Art. 20 GDPR);
- withdraw any consent given at any time.
Requests may be sent to the data controller’s email address: info@idroponicafacile.it. It is also possible to lodge a complaint with the Italian Data Protection Authority.
9. Security measures
The website uses HTTPS protocols, firewalls, periodic backups and monitoring tools to ensure the integrity and confidentiality of data. Access to information is limited to authorised personnel trained in privacy matters.
10. Use of artificial intelligence
Some content published on the Idroponica Facile website may be created with the support of artificial intelligence tools, used exclusively for editorial and illustrative purposes. These tools are used to improve the organisation of texts, the clarity of explanations and the presentation of information, which are always conceived, curated and verified by the human team at Idroponica Facile.
Artificial intelligence is not used in any way for profiling, behavioural marketing, analysis of individual preferences or automated decision-making that may produce legal or significant effects for the user. No personal data is processed by artificial intelligence systems for purposes other than those strictly connected with the creation and improvement of the website’s editorial content.
Any content generated or supported by such tools is subject to human review and validation, in compliance with the principles of accuracy, transparency and protection of users’ rights.
11. Newsletter and commercial communications
Newsletters or promotional communications are sent only with the user’s explicit prior consent. Consent may be withdrawn at any time by clicking the unsubscribe link included in each email or by writing to the data controller.
12. Minors
The website’s services are not intended for minors under the age of 16. Any data submitted will be deleted as soon as the data controller becomes aware of it.
13. Changes to this notice
The data controller may amend this notice at any time in order to comply with legislative or technical updates. Changes will take effect upon publication on the website. Users are advised to check the updated version periodically.
Last updated: 2 November 2025