Privacy Policy

Last updated: May 7, 2026

Data controller

Azienda Agricola le Forre del Treja di Marco Calderini Nannerini — Via Castel Sant'Elia 7, 01033 Civita Castellana (VT), Italy. Email: info@forredeltreja.it.

Data we collect

To fulfil product orders we collect: full name, email, phone, shipping address, optional delivery notes. For account holders: email and password (stored hashed).

Each order stores its items, amount, expected delivery date. We do not handle or store payment-card data; payment is processed entirely by Stripe (see below).

Purposes and legal basis

• Contract execution (GDPR art. 6.1.b): order processing, delivery, invoicing, service communications.
• Legal obligation (art. 6.1.c): retention of fiscal data per Italian law.
• Legitimate interest (art. 6.1.f): post-delivery feedback request (5 days after delivery), to improve our service.

Sub-processors

• Stripe Payments Europe Ltd. (Ireland) — payment processing.
• Resend Inc. (USA) — transactional email delivery.
• Supabase Inc. (USA, EU region) — database and storage.
• Railway Corp. (USA) — website hosting.
• Easyship (shipping management platform) and the courier chosen for delivery (e.g. Poste Italiane, BRT, SDA, GLS, DHL, UPS) — recipients of name, address, phone and email solely to deliver the order.

Cookies

Only technical cookies strictly necessary for the site to function (cart, authentication). No third-party tracking or profiling cookies.

Your rights

Under GDPR articles 15-22 you may request access, rectification, erasure, restriction, portability, and objection. Contact us at info@forredeltreja.it; we respond within 30 days.

Retention

Order data: 10 years (Italian fiscal obligation). Account data (if created): for the active life of the account plus 30 days after deletion request. Reviews: indefinitely, anonymized on request.

Complaints

You may lodge a complaint with the Italian Data Protection Authority (Garante Privacy, garanteprivacy.it).