Last updated: July 2026
This notice explains how we handle the personal data of those who visit the website of La Magione di Loppiano and of those who leave us their details to be contacted, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
This notice covers this website only, and not any external sites you may reach through links.
Who handles your data
The data controller is Simone Musmeci, sole trader (cultivation of oleaginous fruits), Italian VAT no. 02535140517, whose farm is at Località Tracolle, Loppiano — 50063 Figline e Incisa Valdarno (FI), Italy.
For any question about this notice, to make a complaint or to exercise your rights, you can write to info@lamagionediloppiano.it or call +39 328 191 4968.
We have not appointed a Data Protection Officer (DPO): we do not fall within the cases in which the GDPR requires one.
What data we collect
The data you give us
If you fill in the Request a call form we collect your first name, last name, mobile number, email address and any notes you write. These are the only data we ask for, and all of them serve to get back to you.
Please do not include special category data in the notes (for example information about health or personal beliefs): we do not need them and we do not process them.
If you then buy our oil, we may also process the data needed for invoicing, in order to issue tax documents.
Browsing data
Like any website, the server automatically records some technical information: IP address, browser type, date and time of the visit, pages requested. It serves to keep the site running securely, and is not used to identify you nor cross-referenced with other data.
Why we process them, and on what basis
- To get back to you after a request, and to arrange visits and tastings: the legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form. You can withdraw it at any time.
- To sell you the oil and handle the order and collection: the legal basis is the performance of a contract, or pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- For tax and accounting obligations arising from a sale: the legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR).
- For the security of the website: the legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in protecting the site from abuse and intrusion attempts.
We do not carry out profiling and we do not take automated decisions about you. We do not send you marketing messages unless you expressly ask us to.
Giving us the data on the form is up to you, but without it we cannot get back to you: that is the only consequence of not doing so.
How long we keep them
- Contact requests: up to 24 months from our last exchange with you, then we delete them. If you ask us to delete them sooner, we do it straight away.
- Data relating to a purchase: for 10 years, the period Italian law requires for accounting records and tax documents.
- Browsing data: for as long as is strictly necessary for the security of the site.
Who we share them with
Your data is never sold, transferred or shared with third parties for marketing purposes. There are no partner companies to whom we pass your contact details.
They may only be seen by:
- those who provide technical services essential to the site (server hosting, email management), appointed as data processors under Art. 28 GDPR;
- our accountant, for accounting obligations in the event of a purchase;
- the authorities, if and when the law requires it.
Where they are processed
Data is processed on servers located in the European Union. We do not transfer your data outside the European Union.
This site uses no Google Analytics or other statistics tools, embeds no maps, videos or third-party content and has no social buttons: when you open these pages your browser contacts no external server. Even the fonts are served from our own site.
How we protect them
We process data with IT tools and security measures suited to preventing unauthorised access, disclosure, alteration or destruction. Access is limited to those who genuinely need it in order to answer requests.
Cookies
This site uses technical cookies only — those needed to make it work and to protect form submissions. Technical cookies do not require your consent.
We use no profiling cookies and no third-party cookies: nobody follows you around this site in order to show you adverts.
You can block cookies from your browser settings anyway, bearing in mind that parts of the site may then stop working.
Your rights
At any time you can ask us to:
- give you access to your data and tell you what we process (Art. 15 GDPR);
- correct it if it is wrong or incomplete (Art. 16);
- erase it (Art. 17);
- restrict its processing (Art. 18);
- give it to you in a readable format, or transfer it to someone else (Art. 20);
- let you object to the processing (Art. 21);
- withdraw the consent you gave us, without affecting the lawfulness of what was done before you withdrew it.
Just write to info@lamagionediloppiano.it, no formality needed. We reply within one month.
If you believe that the processing of your data breaches the GDPR, you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the courts.
Children
This site is not aimed at children under 16. If you are under 16, please do not send us your data without the consent of the person holding parental responsibility for you, as required by Art. 8 GDPR.
Changes
We may update this notice, for instance if the site’s services or the rules change. The date at the top shows the last revision: if something important changes, we will say so on the site.