Privacy & Cookie Policy
Last updated: 29/06/2026
This policy explains how Badi Farm S.r.l. processes the personal data of users of badifarm.com, under Regulation (EU) 2016/679 (GDPR).
1. Data controller
Badi Farm S.r.l. — Via Trento 18, 21040 Sumirago (VA), Italy
VAT 02389000122 — Tel. +39 0331 908003 — Email: info@badifarm.com
2. What data we collect and why
- Purchases & orders (name, address, email, phone, tax data): to perform and manage the contract, ship goods, issue invoices and provide support. Legal basis: performance of the contract and legal obligations.
- Customer account (optional): to manage your orders and preferences. Legal basis: performance of the contract.
- Payments: card payments take place on the secure page of our provider Nexi; card data never passes through or is stored on our systems. Offline methods (bank transfer, cash on delivery) are also available.
- Contact / quote forms (name, email, message): to answer your requests. Legal basis: handling your request.
- Right of withdrawal (order reference, email, request details): to manage withdrawal requests under consumer law. Legal basis: legal obligation.
- Virtual assistant (chat): the messages you type are sent to the AI provider Anthropic to generate the reply. Please do not enter personal or sensitive data in the chat.
- Newsletter (if you subscribe): to send updates and offers. Legal basis: consent, revocable at any time.
- Browsing data and cookies: see section 6.
3. Recipients / processors
Data may be processed on our behalf by providers appointed as data processors, including: Aruba S.p.A. (hosting, in Italy/EU), Nexi S.p.A. (card payments), Anthropic (virtual assistant), our email provider and, where enabled, Cloudflare (security/content delivery). Data is never disclosed or sold to third parties.
4. Transfers outside the EU
Some providers (e.g. the virtual assistant) may process data outside the EU/EEA. In such cases the transfer relies on appropriate safeguards (e.g. the EU Standard Contractual Clauses).
5. Retention
We keep data for as long as necessary for the stated purposes and to comply with legal obligations (e.g. tax records: 10 years). Data processed on the basis of consent is kept until consent is withdrawn.
6. Cookies
We use cookies and similar technologies. On your first visit a banner lets you accept or reject non-essential cookies; you can change your choice at any time via the “Cookie preferences” link in the footer.
a) Technical / necessary cookies (always on)
Essential to the site (session, cart, authentication, language, storing your cookie choice). No consent required.
| Cookie | Purpose | Duration |
|---|---|---|
| PrestaShop-* | Session, cart, authentication | Session / up to 20 days |
| PHPSESSID | Server session identifier | Session |
| bf_consent | Stores your cookie choices | 12 months |
b) Analytics / marketing cookies (with consent)
Currently not active. If statistics or advertising tools (e.g. Google Analytics/Ads) are enabled, they will be installed only after your consent via the banner. You can also manage cookies from your browser settings.
7. Your rights
You may exercise the rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent, by writing to info@badifarm.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it).
8. Changes
We may update this policy; the current version is always published on this page.