Info
Follow us online
Tel. +39 0183 54007
Email: info@oliogandolfo.com
VAT No. IT01101110086
Via Ambrogio Guglieri, 17
18021 - Borgomaro (IM)
Italy
Corso Dante Alighieri, 68
17021 - Alassio (SV)
Italy
Privacy Policy
© 2025 From the Earth to the Table. All rights reserved.
(pursuant to Articles 13-14 of EU Regulation 2016/679 – GDPR)
From the Earth to the Table by Giacomo Gandolfo
www.oliogandolfo.com
1. Data Controller
The Data Controller is:
From the Earth to the Table by Giacomo Gandolfo
Via Ambrogio Guglieri, 18021 Borgomaro (IM), Italy
C.F./VAT 01101110086
Email: info@oliogandolfo.com
2. Types of Data Collected
The Data Controller processes different categories of personal data:
a. Data provided directly by the user
– Name, surname– Shipping and/or billing address
– Email address
– Phone number
– Payment information (managed through secure external providers)
– Any communications sent via email or contact forms
b. Data collected automatically during navigation
– IP address
– Information about the device and browser
– Site usage data (technical and analytical cookies)
Cookies are governed in a separate document: Cookie Policy.
c. Data resulting from integrations with third parties
– Payment services (e.g. PayPal, Stripe and banking providers)
– Couriers and freight forwarders
These entities process the data as independent controllers or data processors.
3. Purpose of Processing and Legal Bases
Personal data are processed for the following purposes:
3.1. Execution of the sales contract
– Order management, payment, invoicing, shipping
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
3.2. Legal requirements
– Tax and accounting obligations
Legal basis: Art. 6(1)(c) GDPR (legal obligation)
3.3. After-sales support and customer communications
Legal basis: art. 6(1)(b) GDPR
3.4. Site security and fraud prevention
Legal basis: art. 6(1)(f) GDPR (legitimate interest)
3.5. Optional marketing
– Sending newsletters or promotional communications
Legal basis: art. 6(1)(a) GDPR (consent)
Consent can be revoked at any time.
4. Methods of Processing
The data is processed using electronic tools and partly manually.
Appropriate technical and organizational measures are adopted to protect data from unauthorized access, alteration, or dissemination.
5. Data Recipients
The data may be communicated to:
– Couriers and logistics services
– Payment provider
– IT and hosting service providers
– Tax or legal consultants, where necessary
– Public authorities, in cases provided for by law
All third parties process data in compliance with the GDPR.
6. Transfer of Data Outside the EU
The Data Controller does not transfer data outside the EEA, except for the use of services that guarantee GDPR compliance (e.g., standard contractual clauses).
7. Retention Period
The data are stored for:
– Contractual and fiscal data: 10 years (legal obligation)
– Customer account data: until the deletion request
– Marketing data: until consent is withdrawn
– Technical navigation data: as indicated in the Cookie Policy
8. Data Subject Rights
The user may exercise the following rights (art. 15-22 GDPR):
– Data access
– Correction
– Erasure (right to be forgotten)
– Restriction of processing
– Opposition
– Data portability
– Withdrawal of consent (when applicable)
To exercise your rights: info@oliogandolfo.com
9. Complaints
The user may file a complaint with the Data Protection Authority:
www.garanteprivacy.it
10. Changes to this Policy
The Data Controller may update this information at any time.
The current version is published on this page and, if necessary, shows the date of the last update.
***
(Pursuant to Articles 13-14 of Regulation (EU) 2016/679 – GDPR)
From the Earth to the Table by Giacomo Gandolfo
www.oliogandolfo.com
1. Data Controller
The Data Controller for the processing of personal data is:
From the Earth to the Table by Giacomo Gandolfo
Via Ambrogio Guglieri, 18021 Borgomaro (IM), Italy
Tax Code/VAT Number 01101110086
Email: info@oliogandolfo.com
2. Categories of Personal Data Processed
The Controller processes several categories of personal data:
a. Data directly provided by the Data Subject
Name, surname
Shipping and/or billing address
Email address
Telephone number
Payment information (managed via secure external providers)
Any communications sent via email or contact forms
b. Data automatically collected during browsing
IP address
Device and browser information
Website usage data (technical and analytical cookies)
Cookies are regulated in a separate document: Cookie Policy.
c. Data derived from third-party integrations
Payment services (e.g., PayPal, Stripe, and banking providers)
Couriers and shippers
These parties process data as independent Data Controllers or Data Processors.
3. Purposes of Processing and Legal Basis
Personal data is processed for the following purposes:
3.1. Contractual Fulfilment
Order management, payment, invoicing, shipping
Legal basis: Article 6(1)(b) GDPR (performance of a contract)
3.2. Legal Compliance
Tax and accounting obligations
Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation)
3.3. Customer Relationship Management
Post-sales assistance and customer communications
Legal basis: Article 6(1)(b) GDPR
3.4. Security and Fraud Prevention
Ensuring system security and protecting against fraudulent activities
Legal basis: Article 6(1)(f) GDPR (legitimate interests pursued by the Controller)
3.5. Optional Direct Marketing
Sending newsletters or promotional communications
Legal basis: Article 6(1)(a) GDPR (consent of the data subject)
Consent may be withdrawn at any time.
4. Modalities of Processing
The data processing is carried out using electronic instruments and, in part, manually.
Appropriate technical and organisational measures are adopted to protect data against unauthorised access, alteration, or unlawful disclosure.
5. Recipients of the Personal Data
Personal data may be communicated to:
Couriers and logistics services
Payment providers
IT and hosting service providers
Fiscal, accounting, or legal consultants, where necessary
Public authorities, in compliance with statutory provisions
All third parties process the data in compliance with the GDPR.
6. Transfer of Data Outside the EEA
The Controller does not generally transfer personal data outside the European Economic Area (EEA), unless it utilises services that ensure compliance with the GDPR requirements (e.g., Standard Contractual Clauses).
7. Data Retention Period
The data are retained for:
Contractual and fiscal data: 10 years (statutory legal obligation)
Customer account data: until the Data Subject requests erasure
Marketing data (Consent-based): until consent is withdrawn
Technical navigation data: as specified in the Cookie Policy
8. Rights of the Data Subject
The Data Subject may exercise the following rights (Articles 15-22 GDPR):
Right of Access
Right to Rectification
Right to Erasure
Right to Restriction of Processing
Right to Object
Right to Data Portability
Right to Withdraw Consent (where applicable)
To exercise these rights, please contact: info@oliogandolfo.com
9. Right to Lodge a Complaint
The Data Subject is entitled to lodge a complaint with the Supervisory Authority (Italian Data Protection Authority):
www.garanteprivacy.it
10. Amendments to this Privacy Policy
The Controller reserves the right to update this policy at any time.
The current version is published on this page and indicates the date of the last update, where applicable.
Info
Follow us online
Tel. +39 0183 54007
Email: info@oliogandolfo.com
VAT No. IT01101110086
Via Ambrogio Guglieri, 17
18021 - Borgomaro (IM)
Italy
Corso Dante Alighieri, 68
17021 - Alassio (SV)
Italy
© 2025 From the Earth to the Table. All rights reserved.