Privacy & Cookie Policy
Information notice pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003
Contents
1Data controller
The controller of the personal data collected through the website shop.laterradipuglia.it is:
Data controller
Laterradipuglia Srl
Via G. Garibaldi, 33 – 73020 Cutrofiano (LE), Italy
VAT and tax code: 04795390758
Email: info@laterradipuglia.it
For any matter concerning the processing of your personal data, you can contact us at any time at the addresses above.
For the general terms of sale and the use of the website, please see the General conditions of sale.
2Data collected
We collect different categories of data depending on how you interact with our website. None of them falls within the special categories of personal data referred to in Art. 9 GDPR.
Data provided directly by you
- First name, last name, email address, phone number (registration, order, contact)
- Shipping and billing address
- Payment data (handled in a secure environment by a PCI-DSS certified provider — not stored by us)
- Messages sent through the contact form or chat
Data collected automatically
- IP address, browser type, operating system, device
- Pages visited, time spent, browsing path
- Conversion data (purchase, add to cart, abandonment)
- Cookies and similar identifiers (see section 4)
3Purposes and legal bases
| Purpose | Legal basis | Mandatory? |
|---|---|---|
| Performance of the purchase contract Order management, shipping, invoicing, after-sales support |
Art. 6(1)(b) GDPR – performance of a contract | Yes |
| Legal and tax obligations Retention of accounting records, tax compliance |
Art. 6(1)(c) GDPR – legal obligation | Yes |
| Website analysis and improvement Browsing statistics, UX optimisation |
Art. 6(1)(a) GDPR – consent | No |
| Marketing and remarketing Google Ads and Facebook Ads campaigns, email marketing |
Art. 6(1)(a) GDPR – consent | No |
| Newsletter and commercial communications Offers, news and promotions by email |
Art. 6(1)(a) GDPR – consent | No |
| Fraud prevention and security | Art. 6(1)(f) GDPR – legitimate interest | Automatic |
5Third-party tools
We use the following external services. They are activated only with prior consent, given through the cookie banner, except for strictly necessary tools. Google Analytics, Google Ads, Meta, Microsoft and Pinterest run through Google Tag Manager, which loads on every visit. Without your consent, Meta, Microsoft, Pinterest and Brevo are not activated, and Google Analytics and Google Ads do not store cookies or identifiers: they only send signals without cookies or identifiers (for example, that a visit or a purchase took place), which Google uses for aggregate estimates (Google’s “consent mode”). These rules also apply to cesti.laterradipuglia.it, our corporate gifts website, which uses Google Analytics, Google Ads and Meta with the same cookie banner and the same consent mode.
Google Analytics 4
Statistics
Traffic analysis, user behaviour, conversions. Data anonymised through IP anonymisation. Google Privacy Policy →
Google Ads
Marketing & Remarketing
Conversion tracking for campaigns on Google Search and Display. Active only with marketing consent. Google Privacy Policy →
Meta Pixel (Facebook Ads)
Marketing & Remarketing
Measures the effectiveness of Facebook/Instagram campaigns and builds remarketing audiences. Active only with marketing consent. Meta Privacy Policy →
Brevo (formerly Sendinblue)
Email Marketing
Sending of transactional and commercial emails. With marketing consent it also records the pages visited and abandoned carts, for newsletter communications. Data hosted in Europe. Brevo Privacy Policy →
Microsoft Advertising (Bing)
Marketing
Measures conversions from campaigns on the Bing search engine. Active only with marketing consent. Microsoft Privacy Statement →
Marketing
Measures the effectiveness of campaigns on Pinterest. Active only with marketing consent. Pinterest Privacy Policy →
6Data retention
| Type of data | Retention period |
|---|---|
| Order and billing data | 10 years (tax obligation – Art. 2220 of the Italian Civil Code) |
| Customer account data | Until the account is deleted + 12 months |
| Newsletter / email marketing data | Until consent is withdrawn or deletion is requested |
| Browsing logs (analytics) | 14 months (Google Analytics 4 default setting) |
| Session cookies | Deleted when the browser is closed |
| Persistent third-party cookies | Varies by provider – see the notices of the individual services (section 5) |
| Your cookie choice | 6 months in your browser (cookie cc_cookie), then the banner asks again |
7Recipients and transfers outside the EU
Your data is not sold to third parties. It may be disclosed only to the following categories of recipients:
- Couriers and carriers (SDA, BRT, FedEx) to deliver orders
- Payment providers (PCI-DSS certified gateway) for transactions
- SaaS providers listed in section 5 (Google, Meta, Brevo, etc.) as data processors
- Tax and legal advisers for regulatory compliance
- Public authorities when required by law
Transfers to countries outside the EU
Google LLC and Meta Platforms Inc. are based in the USA. The transfer is protected by the EU-US Data Privacy Framework (adequacy decision of the European Commission, July 2023) and by standard contractual clauses (SCC).
8Email marketing and newsletter
We send commercial communications by email — discount vouchers, seasonal offers, product news — only to those who have given explicit consent:
- Subscribers to the newsletter through the form on the website
- Customers registered on the shop who ticked the relevant box during registration or when ordering
- Contacts from other sources (e.g. trade fairs, events) who signed a specific written consent
We never send commercial emails to anyone who has not given consent. The email address collected when ordering is used only for transactional communications (order confirmation, shipping updates) and is not automatically added to marketing lists.
How to unsubscribe
You can withdraw your consent at any time, without any consequence, in two ways:
- Automatic unsubscribe link — at the bottom of every email there is an “Unsubscribe” link. One click is enough: removal is immediate through Brevo.
- Direct request — by writing to info@laterradipuglia.it with the subject “Newsletter unsubscribe”. We will process it within 5 working days.
Sending platform
Marketing emails are managed through Brevo (formerly Sendinblue), with servers and data hosted in Europe. Brevo acts as data processor under Art. 28 GDPR. See the Brevo Privacy Policy.
9Your rights
Under Articles 15–22 GDPR you have the right to:
- Access – obtain confirmation of the processing and receive a copy
- Rectification – correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) – request deletion, subject to legal obligations
- Restriction – restrict processing in certain cases
- Portability – receive your data in a structured, machine-readable format
- Objection – object to processing based on legitimate interest or for direct marketing purposes
- Withdrawal of consent – withdraw the consent given at any time, without affecting processing already carried out
10Minors
This website is intended for people aged 18 or over. We do not knowingly collect personal data from minors. If you believe that a minor has provided data without the consent of a parent or guardian, please contact us immediately.
11Updates to this notice
We reserve the right to update this notice following regulatory, technological or operational changes. Substantial changes will be communicated through a prominent notice on the website or by email to registered users.
The date of the last revision is shown at the bottom of the page.
Last revision: September 2026 | Laterradipuglia Srl – Via G. Garibaldi 33, 73020 Cutrofiano (LE), Italy | VAT no. 04795390758
Notice drawn up pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.