Effective date: 26 October 2026 Last updated: 26 October 2026
This Privacy Policy describes how Agricola Frettoli S.r.l. collects and processes the personal data of users who visit the website https://www.agricolafrettoli.it (hereinafter referred to as the “Website”) or use the services available through it.
Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Italian Legislative Decree No. 196/2003, as amended, and other applicable data protection laws.
The Data Controller responsible for the personal data collected through the Website is:
Agricola Frettoli S.r.l.
Registered office: Piazza S. Stefano 6, 20122 Milan (MI), Italy
Operational headquarters: Via Matteotti 101, 20872 Cornate d’Adda (MB), Italy
VAT number: 10250490967
Email: info@agricolafrettoli.it
Telephone: +39 039 692 7055
Website: https://www.agricolafrettoli.it
For any questions regarding the processing of personal data or to exercise your rights, you may contact the Data Controller using the email address provided above.
When browsing or using the Website, the following categories of personal data may be collected and processed.
Data provided voluntarily
When a user completes a contact form or sends an email, the following information may be collected:
First and last name.
Email address.
Telephone number, if provided.
Company name, if specified.
Message content and any other information voluntarily submitted.
This data is used solely to handle the requests received and any subsequent communications related to them, unless further processing is otherwise lawfully permitted.
Technical and browsing data
While browsing the Website, the IT systems used to operate it may automatically collect certain information, including IP addresses, browser type, operating system, date and time of access, requested pages, technical connection data and other online identifiers.
This information is processed to ensure the proper functioning and security of the Website and, where applicable and subject to the necessary consent, to analyse how it is used.
Data collected through third-party services
Interaction with external tools such as Google Analytics, Google Maps, YouTube and Cloudflare Turnstile may involve the processing of technical data and information relating to the use of these services, as described in the following sections.
The Website is not intended to collect special categories of personal data, such as information concerning health, religious beliefs or other data referred to in Article 9 of the GDPR. Users are therefore encouraged not to include such information in contact forms unless strictly necessary.
Personal data is processed for specific and legitimate purposes, based on the legal grounds set out in Article 6 of the GDPR.
Handling contact and business enquiries
To respond to requests for product information, quotations, partnerships, supplies and other communications addressed to the company.
Legal basis: taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR), or the Data Controller’s legitimate interest in managing communications received (Article 6(1)(f) GDPR), depending on the nature of the request.
Website operation and security
To ensure the proper functioning of the Website, perform technical maintenance, maintain IT security and protect against unauthorised access, spam and automated activities.
Legal basis: the Data Controller’s legitimate interest in protecting the Website and its systems (Article 6(1)(f) GDPR), while respecting the rights and freedoms of data subjects.
Statistical analysis
To understand how users interact with the Website, monitor its performance and improve its content, structure and navigation through Google Analytics 4.
Legal basis: the data subject’s consent (Article 6(1)(a) GDPR), where required for the technologies used.
Displaying external content
To enable users to view interactive maps and embedded videos through services such as Google Maps and YouTube.
External content involving optional processing activities subject to consent is loaded only after the user has made an affirmative choice.
Legal basis: the data subject’s consent (Article 6(1)(a) GDPR), for processing activities that require it.
Compliance with legal obligations
To comply with applicable legal requirements and respond to lawful requests from competent authorities.
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
Providing personal data through contact forms is voluntary. However, failure to provide information marked as mandatory may prevent the submission or handling of a request.
Technical data necessary for the operation and security of the Website is processed as part of normal browsing activities.
Consent to the use of non-essential cookies and tracking technologies is optional. Refusing consent does not prevent users from accessing the main content of the Website, although certain external features may be unavailable.
Personal data is processed using IT and electronic systems in accordance with the GDPR principles of lawfulness, fairness, transparency, data minimisation and purpose limitation.
The Data Controller implements appropriate technical and organisational measures to address the relevant risks and prevent loss, alteration, disclosure or unauthorised access to personal data.
These measures may include encrypted HTTPS connections, authentication systems, access controls, backup procedures, security updates and anti-spam tools.
Access to personal data is restricted to authorised personnel and service providers who require it to perform their assigned tasks.
However, no IT system can guarantee absolute security.
Personal data is not sold to third parties.
It may be disclosed, within the limits of the relevant purposes, to service providers and other parties involved in the management of the Website and the company’s services.
These may include:
Hosting provider: for data storage and the operation of the web infrastructure.
WordPress and Elementor: tools used to manage the Website and its contact forms.
Cloudflare, Inc.: provider of Turnstile, used for spam protection.
Google Ireland Limited and other Google group companies: providers of Google Analytics 4, Google Maps and YouTube.
Google Search Console: a tool used to monitor the Website’s indexing and visibility in search results.
CookieYes: a system used to manage preferences relating to cookies and other tracking technologies.
Email service providers: for receiving and managing communications sent to the company.
Technical service providers and professionals: for Website maintenance, updates and IT security.
Where service providers process personal data on behalf of the Data Controller, they are appointed as data processors pursuant to Article 28 of the GDPR, where applicable.
Certain providers may act as independent data controllers for specific processing activities, in accordance with their respective privacy policies.
Personal data may also be disclosed to public authorities and other parties when required by law.
The use of certain technology providers, particularly services belonging to international corporate groups, may involve the processing or transfer of personal data outside the European Economic Area (EEA).
Where such transfers take place, the requirements of Chapter V of the GDPR must be met.
In particular, transfers may be based on adequacy decisions adopted by the European Commission, including the EU-US Data Privacy Framework where applicable to a certified recipient, or on appropriate safeguards such as Standard Contractual Clauses, supplemented by any additional measures that may be necessary.
For further information on international transfers actually carried out and the applicable safeguards, users may contact the Data Controller.
Personal data is retained for periods proportionate to the purposes for which it was collected and is subsequently deleted or anonymised, unless further retention is required by law or justified by other legitimate needs.
In particular:
Contact requests and enquiries: up to 24 months from the last interaction, unless a business relationship is established or other justified retention requirements apply.
Data relating to contractual or business relationships: for as long as necessary to manage the relationship and subsequently for the periods required by applicable law or necessary to protect legal rights.
Technical data and security logs: for the period necessary for security, maintenance and abuse prevention purposes, in accordance with the criteria established by the Data Controller and the infrastructure provider.
Data collected through analytics tools and cookies: according to the settings of the services used and the retention periods specified in the Cookie Policy.
Cookie preferences: for the period established by the consent management system, without prejudice to the user’s ability to modify or withdraw their preferences.
Where it is necessary to retain certain data to comply with legal obligations or establish, exercise or defend legal claims, retention may continue for as long as strictly necessary for those purposes.
The Website uses cookies and similar technologies to ensure its proper operation, protect its services and, subject to consent where required, collect statistical information or display external content.
Strictly necessary technical cookies do not require prior consent but are described in the relevant information notice.
Optional cookies and tracking technologies are activated only after obtaining the consent required by applicable law.
Cookie preferences are managed through CookieYes, which allows users to accept, reject or customise non-essential cookie categories.
Users may change or withdraw their choices at any time through the cookie settings link available on the Website.
For detailed information about the cookies actually used, their providers, purposes and retention periods, please refer to the Cookie Policy:
https://www.agricolafrettoli.it/cookie-policy/
The Website uses Google Analytics 4, a service provided by Google, to obtain statistical information about how visitors use the Website.
The service may collect information about pages visited, user interactions, devices, browsers and other technical browsing data.
This information is used to understand Website performance and improve its content and functionality.
Processing through analytics technologies requiring consent takes place only after the user has provided prior authorisation through the cookie management system.
