Privacy Policy
Associazione Culturale Ecologista Principato di Valboscosa Last updated: 15 September 2026
1. Data controller
The data controller is Principato di Valboscosa – Associazione Culturale Ecologista, with registered office at Borgata Sella 8, Loc. Mosso, Valdilana (BI), 13385, Italy, VAT no. IT12021080960 – Tax code 97803780150, who can be contacted by email at [email protected].
2. What data we collect
We collect the data you voluntarily provide to us when you:
- place an order in our online shop (first name, last name, email address, shipping and billing address, details needed to issue the symbolic certificate/title in your name);
- register as a customer;
- contact us through the contact form or by email.
Like any website, the server hosting the site automatically records some basic technical data (IP address, browser type, date and time of the request) in its access logs, for security purposes and to prevent unlawful use (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
The site also uses Google Analytics 4, a Google statistics tool that collects browsing data (pages visited, traffic source, device/browser type, IP address), only with your prior consent given through the cookie banner — see the Cookies section below.
3. Why we process your data (purposes and legal basis)
| Purpose | Legal basis |
|---|---|
| Handling and fulfilling your order (creation of the certificate/title, shipping, invoicing) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Answering support requests | Performance of a contract / legitimate interest |
| Tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Fraud prevention and website security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Statistical analysis of website browsing (Google Analytics 4) | Consent (Art. 6(1)(a) GDPR) |
4. Who we share your data with
To fulfil your order we rely on external providers, including our hosting provider and the courier/postal service (for orders shipped physically), who process the data on our behalf, as data processors, according to our instructions.
Payments — independent processing, not under our responsibility. When you choose to pay through an external payment system (e.g. PayPal, credit card network), your payment data is collected and processed directly by the payment service provider, which acts as an independent data controller under its own privacy policy — not ours. We do not receive or store your card details, and we are not responsible for the processing these parties carry out independently on your data. We invite you to read the privacy policy of the chosen payment provider before using it.
Google Analytics 4. If you give your consent through the cookie banner, statistical browsing data is processed by Google Ireland Limited (or Google LLC), which may also transfer data outside the European Union, on the basis of the safeguards provided for by law (standard contractual clauses). You can read Google’s privacy policy at policies.google.com/privacy.
We do not sell or pass on your data to third parties for marketing purposes.
5. How long we keep your data
Order data is kept for the period required by Italian tax and civil law (normally 10 years for accounting records).
6. Your rights
As a data subject, you have the right to:
- access your personal data;
- request its rectification or erasure;
- restrict or object to the processing;
- request data portability;
- withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
To exercise these rights you can write to [email protected].
7. Cookies
The site uses:
- technical cookies, needed for the cart and the customer area to work, always active;
- statistics cookies (Google Analytics 4), set only if you give your consent through the cookie banner shown on your first visit. You can change or withdraw your consent at any time through the banner itself.
We do not use profiling cookies for advertising purposes.