Privacy & Cookie Notice
Last updated: 03/09/2026
This notice explains how Badi Farm S.r.l. processes the personal data of users of the badifarm.com website, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Decree 101/2018.
1. Data controller
Badi Farm S.r.l. — Via Trento 18, 21040 Sumirago (VA), Italy
VAT no. 02389000122 — Tel. +39 0331 908003 — Email: info@badifarm.com
2. What data we collect and why
- Purchases and order management (identity, address, email, phone, tax data): to conclude and manage the contract, ship goods, issue tax documents and provide support. Legal basis: performance of the contract and legal obligations.
- Customer account (optional): to manage your orders and preferences. Legal basis: performance of the contract.
- Payments: card and PayPal payments take place on the secure pages of our providers Nexi and PayPal; card data never passes through or is stored on our systems. Offline methods (bank transfer, cash on delivery) are also available. Legal basis: performance of the contract.
- Contact / quote request forms (name, email, message): to respond to your requests. Legal basis: responding to your request.
- Right of withdrawal (order reference, email, request data): to handle withdrawal requests under the Consumer Code. Legal basis: legal obligation.
- Virtual assistant (chat): the messages you type in the chat are sent to the AI provider Anthropic to generate a reply. Please do not enter personal or sensitive data in the chat. Legal basis: legitimate interest in providing assistance.
- Newsletter (if you subscribe): to send you updates and offers via our provider Brevo. Legal basis: consent, which can be withdrawn at any time.
- Statistics and marketing (browsing data, cookie identifiers): to measure use of the site and the effectiveness of advertising campaigns. Legal basis: consent. See section 6.
3. Recipients and processors
Data may be processed on our behalf by providers appointed as data processors, including:
- Aruba S.p.A. — website hosting (data centres in Italy/EU);
- Nexi S.p.A. and PayPal (Europe) S.à r.l. — payment processing;
- Google Ireland Ltd — statistics (Google Analytics), advertising (Google Ads), tag management (Google Tag Manager) and location map (Google Maps), enabled only after consent;
- Brevo (Sendinblue) — sending transactional emails and the newsletter;
- Anthropic — virtual assistant (chat);
- the courier handling shipment and, for cash on delivery, collection;
- where enabled, Cloudflare — security and content delivery.
Data is never disclosed or sold to third parties.
4. Transfers outside the EU
Some providers (in particular Google, PayPal and Anthropic) may process data outside the EU/EEA, including in the United States. In such cases the transfer relies on appropriate safeguards, such as certification under the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
5. Retention
We keep data for as long as necessary for the stated purposes and in compliance with legal obligations (e.g. tax documents: 10 years). Data processed on the basis of consent is kept until withdrawal; cookies have the durations indicated in section 6.
6. Cookies
We use cookies and similar technologies. On your first visit a banner lets you accept or reject non-essential cookies; you can change your choice at any time via the "Cookie preferences" link in the footer. Non-essential cookies (statistics and marketing) are set only after your consent.
a) Technical and necessary cookies (always active)
Essential to the operation of the site (session, cart, authentication, language, storing your cookie choices). They do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
| PrestaShop-* | Session, cart, authentication | Session / up to 20 days |
| PHPSESSID | Session identifier | Session |
| bf_consent | Stores your cookie choices | 12 months |
b) Statistics and marketing cookies (subject to consent)
Used, only after your consent, to analyse use of the site and measure advertising campaigns. Google tags are managed via Google Tag Manager and, without consent, run in "Consent Mode" with no cookies and without identifying the user.
| Cookie | Provider / Purpose | Duration |
|---|---|---|
| _ga, _ga_* | Google Analytics — site usage statistics | up to 13 months |
| _gcl_au | Google Ads — advertising conversion measurement | up to 90 days |
In addition, the location map (Google Maps) on the home page is loaded from Google only after your consent or after you click to view it.
You can also manage or delete cookies from your browser settings (Chrome, Firefox, Safari, Edge).
7. Your rights
You may exercise at any time the rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent, by writing to info@badifarm.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Changes
We may update this notice; the current version is always published on this page.