PRIVACY POLICY  – AZIENDA AGRICOLA PILANDRO (pilandro.com)

AZIENDA AGRICOLA PILANDRO
Azienda Agricola Pilandro – P.IVA 02810080230
Località Pilandro, 1 – 25015 Desenzano del Garda (BS) – Italy
Tel. +39 0309910363
Privacy contact: [email protected]

1) DATA CONTROLLER
For the purposes of Regulation (EU) 2016/679 (“GDPR”), the Data Controller is Azienda Agricola Pilandro (details above).

2) SCOPE
This Privacy Policy applies to personal data processed through pilandro.com, including navigation data, contact requests and newsletter subscriptions.
It does not apply to third-party websites accessed via links.

3) CATEGORIES OF PERSONAL DATA WE PROCESS
Depending on how you use the website, we may process:
A) Browsing/technical data: IP address, browser type, device parameters, ISP, date/time of visit, referring/outbound pages, country, logs, security events.
B) Data you provide voluntarily: name, email address, phone number, message content (e.g., contact forms or direct emails).
C) Newsletter data: email address (and any optional fields you choose to provide) plus technical evidence of consent (date/time, source, form ID, and similar records).
D) Interaction data (newsletter): basic delivery and interaction events (e.g., sending status, bounces; and, where enabled, opens/clicks) for operational purposes and performance measurement.

4) PURPOSES AND LEGAL BASES
We process personal data only when there is a valid legal basis under GDPR:

4.1 Website operation and security
Purpose: ensure correct operation, prevent abuse/fraud, IT security, and defend legal claims.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

4.2 Replying to requests / communications
Purpose: respond to enquiries and provide requested information.
Legal basis: pre-contractual steps / contract (Art. 6(1)(b) GDPR) and/or legitimate interests (Art. 6(1)(f) GDPR), depending on the request.

4.3 Legal and accounting obligations
Purpose: compliance with applicable laws (e.g., tax/accounting) and lawful requests from authorities.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4.4 Newsletter and informational communications (direct marketing by email)
Purpose: send newsletters and informational/promotional communications by email.
Legal basis: your consent (Art. 6(1)(a) GDPR), collected through a dedicated checkbox that is not pre-ticked.

5) NEWSLETTER SUBSCRIPTION AND HOW TO UNSUBSCRIBE
If you subscribe to our newsletter, we will use your email address to send you informational communications as described above.

You can unsubscribe at any time:
– by clicking the unsubscribe link in the footer of each email; or
– by contacting us at [email protected].

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6) COOKIES AND SIMILAR TECHNOLOGIES
We use technical cookies necessary for website operation and security.
If the website uses analytics/marketing cookies or similar tracking technologies, these will be activated only after your consent, where required by law, through a cookie banner/preferences tool.
For details, please refer to the Cookie Policy and cookie settings available on this website.

7) RECIPIENTS, PROCESSORS AND THE WHITE-LABEL HIGHLEVEL PLATFORM (LASTSUITE.COM)
Your personal data may be processed by authorized staff of the Controller and by third-party service providers acting as data processors (Art. 28 GDPR), strictly for the purposes listed above, such as:

(a) Website hosting and maintenance
Hosting provider: InfoServizi Sas (Viale del Lavoro 33 – 37036 San Martino Buon Albergo (VR), Italy), for hosting and technical maintenance.

(b) Newsletter / CRM / marketing automation platform (HighLevel / GoHighLevel – white label)
We use a marketing automation and CRM platform provided by HighLevel Inc. (“HighLevel”) to manage newsletter subscriptions and email delivery. This platform may be accessed through a white-label domain: lastsuite.com.
HighLevel may use sub-processors (e.g., cloud infrastructure and communication services). Personal data may be processed outside the European Economic Area (e.g., in the United States). Where applicable, appropriate safeguards are used, such as Standard Contractual Clauses (EU 2021 SCCs) and/or other mechanisms recognized under GDPR.

(c) Our marketing/technical service provider (white-label administration)
The white-label environment and related configurations may be administered by: [INSERT YOUR AGENCY / PROVIDER LEGAL NAME], acting as a data processor on our behalf under Art. 28 GDPR, limited to the instructions of the Controller.

8) INTERNATIONAL DATA TRANSFERS (OUTSIDE THE EEA)
Where personal data is processed outside the European Economic Area, we adopt appropriate safeguards required by GDPR (e.g., Standard Contractual Clauses and, where applicable, other recognized transfer mechanisms). You may request information about applicable safeguards by contacting [email protected].

9) DATA RETENTION
We retain personal data only for as long as necessary for the purposes described:
– Technical/security logs: limited period necessary for security and incident investigation.
– Contact requests: for the time required to handle the request and follow-up.
– Newsletter: until you unsubscribe/withdraw consent.
– Legal/accounting records: as required by applicable law.

10) DATA SUBJECT RIGHTS
You may request access, rectification, erasure, restriction, portability, and objection where applicable, and withdraw consent at any time for consent-based processing.
To exercise your rights, contact: [email protected].
You may also lodge a complaint with the competent supervisory authority. In Italy: Garante per la Protezione dei Dati Personali.

11) MINORS
This website and newsletter are intended for adults. If we become aware that we have collected personal data from individuals under the age required to provide valid consent in Italy for online services, we will take steps to delete such data.

12) UPDATES
This Privacy Policy may be updated from time to time. The “Last updated” date below indicates the latest revision.

Last updated: 08/01/2026