Skip to content
EN
Request information

This page is a translation. In the event of any discrepancy, the Italian text shall prevail: Italiano

Privacy policy

Last updated: 9 November 2026

This policy explains how Vivai Isgrò Salvatore (“we”) processes the personal data of visitors to vivaisalvatoreisgro.it and of anyone who contacts us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Vivai Isgrò Salvatore
Registered office: Via Sottochiesa 47, 98050 Terme Vigliatore (ME)
VAT No. 01560340836
Email: salvatore.isgro1@virgilio.it
Phone: 388 766 3616

What data we process

  • Browsing data: IP address, browser and device type, pages visited, date and time. It is collected automatically by the systems that run and protect the website.
  • Form data: full name, company, country, email, phone number and the plants you are interested in.
  • WhatsApp messages: your number, your profile name and what you write to us, including attachments.
  • Emails and phone calls: your email address or phone number, and what you write or tell us.

In your messages, include only what your request needs: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use the data and on what legal basis

For each purpose we state the legal basis, that is, the point of Article 6(1) GDPR that allows it.

  • Replying to your requests and, if you ask, preparing a quotation or an offer for you: pre-contractual measures taken at your request (point b).
  • Managing the contract that arises from the request: performance of a contract (point b).
  • Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (point f).
  • Complying with legal obligations, for example tax and accounting obligations: legal obligation (point c).
  • Protecting the website from abuse and automated programs: legitimate interest in security (point f).
  • Counting visits in aggregate form, with Cloudflare Web Analytics: legitimate interest in understanding how the website is used (point f). The tool stores nothing on your device, creates no profiles and does not track individual visitors.
  • Showing you the Google map, if you choose to load it: your consent, given by clicking (point a).
  • Asserting or defending a legal right: legitimate interest (point f).

Mandatory and optional data

Providing your data is your choice: without the data we need, however, we cannot reply to you.

In the form you must fill in your full name, company, email and the plants you are interested in; the other fields are optional.

When we ask for your consent, giving it is optional: if you say no, the website and the service still work.

How and for how long we keep the data

We process the data electronically and, where necessary, on paper. Only authorised people can see it, and we protect it with appropriate security measures.

The website has a password-protected private area, from which Vivai Isgrò Salvatore updates the content. Website visitors do not access it and do not receive its cookies.

  • Browsing data is kept by the provider that hosts the website for as long as security requires, according to its own rules.
  • Requests and messages that do not lead to a contract are kept for as long as needed to reply and follow up the negotiation, and in any case for no more than 6 months from the last contact.
  • To protect the form and the private area from abuse, the website keeps for a short time, at most 48 hours, a hash of the IP address calculated with a secret key, which does not contain the address in plain text.
  • If a contract results from the request, we keep the data for its entire duration and then for 10 years, as the law requires for accounting and tax records (Article 2220 of the Codice civile).

Who receives the data

The data is not sold or disseminated. Only the following parties may receive it, each for its own part:

  • people authorised by Vivai Isgrò Salvatore, who are bound by confidentiality;
  • OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the website: it processes the data on our behalf, solely for the technical management of the website;
  • Cloudflare, Inc. (United States), which hosts and protects the website and provides the technical tools described on this page: it processes the data on behalf of OnlinePerTutti.com, as its supplier;
  • WhatsApp Ireland Limited, if you write to us on WhatsApp: it processes the messages as an independent controller (WhatsApp privacy policy);
  • Google Ireland Limited, if you load the map: it receives your IP address and may use its cookies, as an independent controller (Google privacy policy);
  • our accountant and other advisers, banks and public authorities, when the law or the contract requires it.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process part of the data there. They do so with the safeguards provided for by the GDPR (Articles 44-46):

  • for US companies that participate in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795);
  • in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which does not have an adequacy decision from the European Commission. The data is stored on the systems of the providers listed above: T.H.K. Consulting Limited accesses them only for the technical management of the website, on our behalf.

For information on these safeguards, or a copy of them, write to salvatore.isgro1@virgilio.it.

Your rights

At any time you can ask us:

  • to see your data and receive a copy of it (access, Art. 15 GDPR);
  • to correct or complete it (rectification, Art. 16);
  • to erase it, when it is no longer needed or the law does not require us to keep it (erasure, Art. 17);
  • to restrict its use (restriction, Art. 18);
  • to receive it in a machine-readable format, to take it elsewhere (portability, Art. 20);
  • to stop using it where we rely on our legitimate interest and, in all cases, for marketing purposes (objection, Art. 21).

If you have given us your consent, you can withdraw it at any time: withdrawal does not affect what we did before (Art. 7(3)).

To exercise your rights, write to salvatore.isgro1@virgilio.it. We will reply within one month. In more complex cases this period may be extended by a further two months: if so, we will tell you within the first month (Art. 12(3)).

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22).

Complaint to the Garante

If you believe that your data is processed in a way that does not comply with the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority), Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it (Art. 77 GDPR).

The cookie policy explains which cookies and similar tools the website uses, and how you can manage them.

Changes to this policy

This policy may change, for example if the website adds a feature or a regulation changes. The version in force is always this page, with the date at the top.