Information on the processing of Personal Data collected through this website

1. Foreword and regulatory references
This information explains the processing of personal data collected through this website, including those obtained through cookies, tracking technologies and, where applicable, contact forms and other features that may be active on the site.
This notice is addressed to anyone who accesses or uses this site, describing the methods of collection, use and protection of the user's personal data, as well as the rights recognised by law.
These provisions do not apply to other sites, pages or online services accessible via external links that may be present on the site, in respect of which you are invited to consult the relevant privacy notices.
This information is provided in compliance with the main national and international data protection regulations, including:

• Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC, known as the ePrivacy Directive
• Other regulations that may apply.

2. Who manages your data and how can you contact us?
Your personal data are processed by:
Petra s.r.l.
Via Paolo VI, 39, Santa Croce Camerina RG 97017
petragiardinonaturale@gmail.com
VAT number: 01763050885

For any information on the processing of personal data or to exercise their rights under the law, data subjects may contact the Data Controller.

3. On what legal basis do we process your data?
The processing of personal data collected through this website (including that obtained through cookies, similar technologies, contact forms and other features that may be active on the site) is based on one or more of the following legal bases:

1. Execution of pre-contractual or contractual measures: when processing is necessary to respond to user requests, provide requested services and, where the site provides for it, manage orders, accounts or contractual relationships.
2. Fulfilment of legal obligations when the processing is necessary to comply with tax, accounting, administrative, or security obligations, or requests from authorities.

A further legal basis, the legitimate interest of the Controllermay be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the holder's rights in court).

The failure to accept or the withdrawal of consent may limit some of the features or services of the site.

4. What data do we collect when you visit the site?
When browsing this site, the following data may be collected, including through cookies and similar technologies such as pixel tags, web beacons, local storage and equivalent technologies:

• Browsing and technical data: information such as IP address, device identifiers, operating system and browser data, requested URLs, connection times, technical logs, technical preferences, usage data collected via cookies and tracking technologies (pixel tags, web beacons, local storage and equivalent tools).

5. How do we process your data, how do we protect them and how long do we keep them?
Personal data collected through this site are processed mainly by electronic and digital means according to principles of lawfulness, correctness, data minimisation, integrity and confidentiality.

Data are stored according to the following timeframe:

• Cookie preferences and consensus: stored for 180 days, as per the Cookie Policy on this site.
• Browsing and technical data: retained for the time strictly necessary for security purposes and, as a rule, no longer than 12 months, after which they are deleted or anonymised, unless longer periods are imposed by legal obligations or by the need to ascertain, exercise or defend a right in court.
• Data relating to any contractual relationships established with the Data Controller: where they exist, are kept for the duration of the relationship and subsequently for the time required by applicable legal obligations (e.g. in accounting and tax matters).
• Data entered via forms or specific requests: retained for the time necessary to respond to the request and fulfil its purpose, and subsequently for the period that may be required by legal obligations.

6. Who can receive your data?
They may access personal data collected through this site, within the limits of their respective competences and purposes:

• Internal authorised parties by the Controller, duly trained in privacy and security;
• Suppliers and third parties appointed as data processors (for example: technical providers and IT services, site maintenance, email providers, consultants, where applicable);
• Third parties providing services integrated into the site (e.g., fonts, maps, image display), which may process technical data as independent data controllers in accordance with their own information (in such case, please also consult the individual information of these third parties);
• Competent public authorities and supervisory bodies, to the extent required by law or to comply with requests by judicial authorities;

The updated list of external addressees can be made available on request by writing to the Holder's contact details.

7. Where can your data be transferred?
The personal data collected through this website may be processed within the European Union / European Economic Area. In some cases, the use of third-party services may involve a transfer to third countries. In the case of any transfers to the United States, these take place to providers that adhere to the EU-US adequacy framework (Data Privacy Framework) or, failing that, on the basis of Standard Contractual Clauses.

8. What are your rights with regard to the data collected?
The user, according to the applicable legislation, has the right to:

• To obtain confirmation as to whether or not personal data concerning him/her are being processed and, if so, to obtain access to such data and related information (right of access).
• Request the rectification, updating or deletion of inaccurate or no longer required data (right of rectification and deletion).
• Request the restriction or object to the processing of data, including for promotional/profiling purposes, where applicable.
• Request the portability of data in a structured and interoperable format (where technically possible).
• To withdraw the consent granted at any time, without prejudice to the legality of the processing based on the consent given before the withdrawal (for example, for the sending of commercial communications or newsletters, where active).
• Withdraw consent given to the use of non-technical cookies, to the processing of data collected via tracking tools.
• Report any irregularities or abuses to the competent control authorities.

To exercise these rights, it is sufficient to send a request to the contact details of the Data Controller. The Data Controller will respond without undue delay and, in any case, within one month of receiving the request, a period of two additional months may be extended in case of particular complexity or a high number of requests, in which case the Data Controller will inform the person concerned.

9. How are children's data processed?
Child protection is a key priority.

This website is not directed directly at minors and does not intentionally collect data from them through its forms. If, in the context of a request or question, the user provides personal data relating to third parties — including any minors — they must ensure that they have the necessary legal authorization; such data will be processed within the limits and for the purposes of the request, in compliance with applicable regulations. For requests for rectification, restriction or deletion, please contact the Controller.

10. How to make reports or complaints to the authorities?
If you believe that the processing of your personal data through this site does not comply with the applicable legislation, you may lodge a complaint free of charge with the competent supervisory authorities, including:

• The Garante or the Data Protection Authority of your State of citizenship or residence;

11. How will we inform you about changes to this privacy policy?
This policy is subject to periodic review for regulatory compliance or changes to the services offered through the site. Any significant changes will be communicated via this page.