Privacy policy
This policy describes how Primizie della Bottega del Fungo di Agazzi A. e Bruschi M. S.n.c. collects, uses and protects the personal data of users who visit the website www.bottegadelfungo.it and use the browsing, online sales, contact and newsletter services.
This policy is provided pursuant to Regulation EU 2016/679, the “GDPR”, and the applicable Italian legislation on the protection of personal data and cookies.
1. Data Controller
The data controller is:
Primizie della Bottega del Fungo di Agazzi A. e Bruschi M. S.n.c.
Via Nazionale 66
43043 Borgo Val di Taro (PR) – Italy
VAT No.: 01943060341
Email: info@bottegadelfungo.it
Phone: +39 0525 96900
Website: www.bottegadelfungo.it
2. Types of data collected
During browsing and use of the website, different categories of personal data may be collected.
Data provided directly by the user
The following data may be collected:
-
first name and surname;
-
email address;
-
telephone number;
-
billing address;
-
shipping address;
-
data required for the issuing of tax documents;
-
data entered when creating a customer account;
-
content of any messages sent by email, contact forms or other channels;
-
data required to manage orders placed on the website.
Data relating to purchases
In the event of an online purchase, data relating to the following may be processed:
-
products purchased;
-
order amount;
-
selected payment method;
-
order status;
-
shipping details;
-
billing details;
-
any requests for assistance, returns or after-sales support.
Complete payment data, such as full credit card numbers or other sensitive financial information, is not managed directly by the data controller, but by the payment service providers used on the website.
Browsing and technical data
The IT systems and tools used for the operation of the website may automatically collect certain technical data, including:
-
IP address;
-
type of browser used;
-
device used;
-
operating system;
-
pages visited;
-
date and time of access;
-
data relating to interaction with the website;
-
technical information relating to browsing;
-
data collected through cookies or similar technologies, according to the preferences expressed by the user.
3. Purposes of processing
Personal data is processed for the following purposes.
Order management and online sales
Data is used to:
-
receive and manage orders;
-
prepare and ship purchased products;
-
manage payments, billing and tax obligations;
-
provide customer support;
-
communicate information relating to the order, shipment or requested service.
Tax, accounting and legal obligations
Data may be processed to comply with obligations provided for by law, regulations or applicable tax and accounting legislation.
Communications with the user
Data provided by email, contact forms or other channels is used to respond to user requests, provide information about products, and manage any complaints or requests for assistance.
Newsletter and commercial communications
With the user’s consent, the email address may be used to send newsletters, promotions, product updates, company news and commercial communications relating to Bottega del Fungo.
The user may withdraw consent at any time by using the unsubscribe link included in the emails received or by contacting the data controller at the email address indicated in this policy.
Statistical analysis and website improvement
Subject to consent, where required, analytics tools such as Google Analytics 4 and statistical tools connected to the Shopify platform may be used to understand how users interact with the website, improve content, browsing and the shopping experience.
Marketing, remarketing and conversion measurement
Subject to consent, where required, marketing and tracking tools may be used, including Google Ads, Google Merchant Center, Meta Pixel, Facebook and Instagram, in order to:
-
measure the effectiveness of advertising campaigns;
-
record conversions and purchases generated by advertisements;
-
create custom or similar audiences;
-
show advertisements that are more relevant to the user’s interests;
-
improve advertising communication.
The use of these tools takes place according to the preferences expressed by the user through the cookie banner and the consent management system available on the website.
4. Legal basis for processing
The processing of personal data is based on the following legal bases.
Performance of a contract or pre-contractual measures
For the management of orders, shipment of products, customer support and communications relating to purchases.
Legal obligation
For tax, accounting, administrative obligations and obligations provided for by applicable legislation.
User consent
For sending newsletters, the use of non-technical cookies, analytics tools, marketing, remarketing, conversion measurement and advertising profiling.
Legitimate interest
To ensure website security, prevent fraud, manage any disputes, improve the service and protect the rights of the data controller, in compliance with the fundamental rights and freedoms of the user.
5. Processing methods
Personal data is processed using IT, electronic and, where necessary, paper-based tools, adopting appropriate technical and organisational measures to protect the data from unauthorised access, loss, alteration, disclosure or misuse.
Access to data is limited to authorised persons and suppliers who provide services necessary for the operation of the website, order management, payments, shipping, communication and marketing.
6. Recipients of the data
Personal data may be communicated, within the limits necessary, to the following categories of recipients:
-
providers of the e-commerce platform, in particular Shopify, used for the management of the website, cart, checkout, orders and tools connected to online sales;
-
payment service providers;
-
couriers and shipping companies;
-
tax, accounting, legal and administrative consultants;
-
email and newsletter service providers;
-
cookie consent management tools integrated into the Shopify platform;
-
analytics and marketing service providers, including Google Ireland Limited / Google LLC for Google Analytics 4, Google Ads and Google Merchant Center;
-
advertising and social media service providers, including Meta Platforms Ireland Limited for Meta Pixel, Facebook and Instagram;
-
public authorities or parties to whom communication is required by law.
These parties may act, depending on the case, as data processors, independent data controllers or joint controllers, according to their respective privacy policies and applicable contractual terms.
7. Transfer of data outside the European Economic Area
Some providers used by the website may process personal data outside the European Economic Area.
In such cases, the transfer takes place in compliance with the applicable legislation, on the basis of appropriate safeguards, including:
-
adequacy decisions of the European Commission;
-
Standard Contractual Clauses approved by the European Commission;
-
participation in the EU-US Data Privacy Framework, where applicable;
-
further protection measures required by the legislation.
8. Data retention periods
Personal data is retained for the time necessary to achieve the purposes for which it was collected and, subsequently, for the periods required by law.
In particular:
-
data relating to orders and billing is retained for the period required by tax and accounting legislation;
-
data relating to contact requests is retained for the time necessary to manage the request;
-
data used for newsletters and commercial communications is retained until consent is withdrawn or deletion is requested;
-
data collected through cookies and tracking tools is retained according to the durations indicated in the cookie management system and in the policies of the respective providers;
-
data necessary to protect the rights of the data controller may be retained for the time necessary to manage any disputes or claims.
9. Newsletter
Subscription to the newsletter is optional and takes place only with the user’s consent.
The newsletter may contain communications relating to products, promotions, news, informational content and updates related to Bottega del Fungo.
The user may unsubscribe at any time by clicking the unsubscribe link included in each email or by writing to:
10. Cookie Policy
The website uses cookies and similar technologies to ensure the proper functioning of the website, improve the browsing experience, analyse traffic and, subject to consent, carry out marketing, remarketing and conversion measurement activities.
Cookies are small text files that the website sends to the user’s device, where they are stored and then sent back to the website on the next visit.
11. Types of cookies used
Necessary technical cookies
These cookies are essential for the operation of the website and do not require the user’s consent.
They are used, for example, for:
-
cart management;
-
checkout;
-
website security;
-
authentication;
-
technical preferences;
-
session management;
-
operation of the Shopify platform;
-
storage of the preferences expressed by the user regarding cookies and consent.
Without these cookies, some website functions may not be available or may not work properly.
Statistical and analytics cookies
These cookies allow information to be collected on the use of the website, such as pages visited, browsing time, interactions and traffic source.
The website may use tools such as:
-
Google Analytics 4;
-
Shopify Analytics;
-
other statistical tools connected to the e-commerce platform.
These tools are used according to the consent settings and, where required by legislation, only after the user’s consent.
Marketing and profiling cookies
These cookies and similar technologies may be used, subject to consent, to show personalised advertisements, measure conversions and create advertising audiences.
The website may use tools such as:
-
Google Ads;
-
Google Merchant Center;
-
Meta Pixel;
-
Facebook;
-
Instagram.
These tools may collect information about the user’s browsing and interactions with the website, including to link them to advertisements displayed on external platforms.
Third-party cookies
During browsing, cookies or similar technologies may be installed by third parties, such as payment service providers, social media tools, advertising platforms, analytics services or tools integrated into the website.
The user may consult the privacy policies of the respective providers for more information on the processing carried out.
12. Cookie consent management
When first accessing the website, the user may manage their preferences through the cookie banner and consent management tools made available by the Shopify platform.
Through the banner or the consent management panel, the user may:
-
accept all cookies;
-
reject non-necessary cookies;
-
customise their preferences, where available;
-
modify or withdraw consent at any time through the cookie settings available on the website.
Technical cookies necessary for the operation of the website, cart, checkout, security and order management may be used without the user’s prior consent.
Cookies and tracking tools used for statistical, marketing, remarketing, conversion measurement or advertising profiling purposes are instead activated, where required by legislation, only after the user’s consent.
13. How to disable cookies from the browser
The user may also manage or disable cookies through the settings of their browser.
Disabling technical cookies may compromise the proper functioning of the website, cart or checkout.
14. Rights of the data subject
The user, as data subject, may exercise the rights provided for by Articles 15 and following of the GDPR, including:
-
right of access to personal data;
-
right to rectification;
-
right to erasure;
-
right to restriction of processing;
-
right to object;
-
right to data portability;
-
right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Requests may be sent to:
The user also has the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of personal data is carried out in breach of the applicable legislation.
15. Data security
The data controller adopts appropriate technical and organisational measures to protect personal data processed through the website.
However, no system for transmitting or storing data over the Internet can be considered completely secure. Users are invited to use secure devices and connections and to protect their access credentials.
16. Minors
The website and online sales services are not specifically intended for minors.
Online purchases must be made by adults or, in any case, by persons authorised under the applicable legislation.
17. Changes to this policy
This policy may be updated over time due to regulatory changes, technical changes, new website features or new services used.
The updated version will be published on this page.
Last updated: 7 May 2026