Privacy Policy

Privacy Policy

Last updated: July 23, 2026

1. Data Controller

Pursuant to Regulation (EU) 2016/679 (“GDPR”), the Data Controller of the personal data collected through the website www.oliverabio.com is:

Paola Tedesco – Sole Proprietorship
Trading name: Olivèra
Registered office: Strada Statale 113 No. 48 – 90017 Santa Flavia (PA), Italy
VAT No.: 04937280826
E-mail: info@oliverabio.com

2. Types of Personal Data Collected

While browsing this website, the following personal data may be collected:

  • identification data (first and last name);
  • email address;
  • telephone number (if provided);
  • billing and shipping address;
  • order information;
  • technical browsing data (IP address, browser, device, operating system);
  • data collected through cookies and analytics tools, subject to the user’s consent where required.

Providing the personal data required to place an order or submit a request through the contact form is necessary in order to provide the requested service.

3. Purposes of the Processing

Personal data are processed in order to:

  • manage orders placed through the website;
  • prepare and ship purchased products;
  • process payments;
  • respond to requests submitted through the contact form;
  • comply with tax, accounting and legal obligations;
  • improve the performance of the website through statistical tools;
  • ensure website security and prevent unlawful use.

This website does not carry out newsletter activities or direct marketing.

4. Legal Basis for Processing

Personal data are processed on the basis of:

  • the performance of a contract or pre-contractual measures;
  • compliance with legal obligations;
  • the data subject’s consent, where required (for example, for non-essential cookies);
  • the legitimate interest of the Data Controller in ensuring website security and protecting its legal rights.

5. Processing Methods

Personal data are processed using electronic systems and, where necessary, paper records, adopting appropriate technical and organisational measures to protect them against unauthorised access, loss, destruction or disclosure.

6. Recipients of the Data

Personal data may be disclosed exclusively to parties involved in providing the requested services, including:

  • IT service providers and hosting providers;
  • electronic payment service providers (such as WooPayments and PayPal);
  • couriers and shipping companies responsible for product delivery;
  • tax advisors, accountants and professional consultants;
  • competent public authorities where required by law.

Where applicable, parties processing personal data on behalf of the Data Controller act as Data Processorspursuant to Article 28 of the GDPR.

7. Payments

Payments made through the website are processed via secure payment platforms.

Payment card details are not stored or processed directly by the Data Controller but exclusively by the payment service providers in accordance with their respective privacy policies.

8. Order Delivery

To deliver purchased products, certain personal data (such as first name, last name, delivery address and, where necessary, telephone number) will be shared with the couriers responsible for shipment.

9. Cookies

The website uses technical cookies that are necessary for the proper functioning of the platform.

Subject to the user’s consent, statistical cookies and other analytics tools may also be used.

Consent is managed through the cookie banner available on the website.

For further information, please refer to the Cookie Policy.

10. Google Analytics

The website uses Google Analytics to collect aggregated statistical information regarding website traffic and usage.

Analytical cookies are activated only after the user’s consent has been obtained through the cookie banner.

11. Data Retention

Personal data are retained only for the time necessary to fulfil the purposes for which they were collected.

Order-related data are retained for the period required under applicable tax and accounting laws.

Data submitted through the contact form are retained for the time necessary to manage the request.

12. International Data Transfers

Some service providers used by the website may process personal data outside the European Economic Area (EEA).

In such cases, personal data are processed in accordance with Articles 44 et seq. of the GDPR, adopting the safeguards required by European legislation.

13. Rights of the Data Subject

Data subjects may exercise at any time the rights provided for under Articles 15–22 of the GDPR, including the right to:

  • obtain confirmation that personal data are being processed;
  • access their personal data;
  • request rectification;
  • request erasure where permitted by law;
  • request restriction of processing;
  • object to processing where applicable;
  • receive their personal data in a portable format;
  • withdraw consent at any time;
  • lodge a complaint with the competent Data Protection Authority.

14. Exercising Your Rights

For any request concerning the processing of personal data, you may contact the Data Controller at:

Paola Tedesco
E-mail: info@oliverabio.com

15. Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time.

Any changes will be published on this page together with the updated revision date.