01Data controller
- Argentalia Labs Srl
- Registered office: Via Oceano Atlantico 25/2, 41012 Carpi (MO), località Fossoli
- VAT no. 04234830364
- Modena Companies Register, REA MO-454018
- Share capital €10,000.00 fully paid-up
- PEC argentalialabs@pec.it
- Email info@amaroyerba.com
For any question about your data, write to info@amaroyerba.com.
02What we collect and why
Orders. To process and deliver your order we collect your name, delivery address, email and phone number (the phone is passed to the courier for delivery only). Payment is handled by Stripe: we never see or store your card details. The order is kept in our order archive, which only authorised Argentalia staff can access, to prepare the shipment and handle any requests. Legal basis: performance of the contract and legal tax obligations.
Order emails. We send you an order confirmation by email and receive a copy of the order to prepare the shipment. Legal basis: performance of the contract.
Contact forms. When you write to us through the assistance or HoReCa forms we receive what you enter (name, email, and — depending on the form — order number, business, city, phone, message) in order to reply. The message is delivered by email. Through the HoReCa form we also send you our trade brochure and keep your business details in our contact archive. Legal basis: your request.
Newsletter. If you tick the box when you buy, we ask you to confirm by email; only then do you receive the newsletter (news, cocktails, offers). If you tick the box but don't complete your purchase, we send you a single reminder about the bottles left in your basket, with the link to confirm the newsletter. We also send it to customers of our previous shop who had subscribed to it. Legal basis: your consent, which you can withdraw at any time with the link in every email.
Updates for the trade. We send professional contacts (trade fairs, the HoReCa form, our previous website) news about our products for their business. Legal basis: your consent or our legitimate interest in a professional relationship you started; you can stop them at any time with the link in every email.
Emails for customers. If you buy on the site, we use the order email to write to you now and then about Amaro Yerba: recipes, news, a request for your opinion after delivery and a reminder when the bottle is running low. At checkout you can say no with the box provided, and every email has a link to stop receiving them. Legal basis: our legitimate interest in promoting products similar to those you bought (art. 130(4) of the Italian Privacy Code).
Gift cards. When you buy a gift card we use your name and email for the confirmation, and the recipient's name and email, together with your message, only to deliver the gift card on the chosen day. We keep them with the gift card for as long as it can be used and for the accounting retention period. They don't subscribe anyone to anything. Legal basis: performance of the contract.
Back-in-stock alerts. If the product is sold out and you leave your email to know when it's back, we use it only for that alert: one email, then we delete it after 30 days (after 12 months if it doesn't come back). It doesn't subscribe you to the newsletter. Legal basis: your request.
Email statistics. For newsletters and trade updates we record whether the email was delivered, opened or clicked, and any bounces or spam reports, to improve our messages and keep our lists clean. Legal basis: our legitimate interest.
Trade fairs and professional contacts. At trade fairs you can leave us your details on our stand page (via QR code), or our staff can note them down: name, email, business, role, city, country, sector, phone and, if you hand it to us, a photo of your business card. We use them to send you the brochure you asked for and, only if you agree, to contact you again after the event with a thank-you note. Legal basis: your request; your consent for the follow-up, which you can withdraw at any time with the link in our emails or by writing to info@amaroyerba.com.
Browsing. The hosting provider records technical data (IP address, browser, pages requested) in its logs for security and to operate the service. Legal basis: our legitimate interest in keeping the site secure.
Anonymous statistics. To know which pages are read and where visitors come from (for example a newsletter, Instagram or a QR code at a fair), the site counts page views per day and the source of the first page, without cookies, without storing anything in your browser and without recording your IP address or other identifiers (to prevent inflated counts, only an encrypted fingerprint of the address is kept, for one day). The counts are aggregated and cannot be traced back to you; if you buy, the order records only that source. Legal basis: our legitimate interest in measuring the site.
Advertising (Meta Pixel). Only if you accept advertising cookies, the site uses the Meta Pixel to measure the effectiveness of our ads on Facebook and Instagram and to show them to people who visited the site. Meta receives the pages you visit and the actions you take (for example a purchase), your IP address and browser identifiers. Legal basis: your consent, which you can withdraw at any time. For the collection and transmission of these data we act as joint controllers with Meta Platforms Ireland Ltd; Meta then processes them as an independent controller under its privacy policy.
03Who handles the data
We do not sell your data. They are handled, only as needed, by these providers:
- Stripe (Stripe Payments Europe Ltd, Ireland): payments and order data.
- Resend (United States): delivery of order emails, contact messages, newsletters and trade updates.
- Vercel (Vercel Inc., United States): hosting of the site.
- Neon (Neon Inc., servers in Frankfurt, EU): the order and contact archive, including business card photos.
- Meta (Meta Platforms Ireland Ltd): advertising measurement, only with your consent.
- Poste Italiane, which delivers the order: name, address and phone.
- Our accountant and the authorities, where required by law.
Some providers are based in the United States. Transfers take place under the EU–US Data Privacy Framework adequacy decision, for companies certified under it, or under the standard contractual clauses adopted by the European Commission.
04How long we keep them
- Order data and accounting documents: 10 years, as required by tax law.
- Contact messages: as long as needed to reply and, in any case, no longer than 24 months.
- Professional contacts from trade fairs and the HoReCa form: until you ask us to delete them, and in any case no longer than 24 months after our last meeting.
- Newsletter and trade updates: the record of your consent (date and source) as long as you are subscribed and for the time needed to prove it afterwards; email statistics for 24 months.
- Server logs: for the short period set by the hosting provider.
- Your cookie choice: 6 months, then we ask again.
06Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format; you can withdraw your consent at any time, without affecting what was done before. Write to info@amaroyerba.com: we reply within one month.
You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
07Minors
The site and the sale of our products are reserved for adults of legal drinking age. We do not knowingly collect data from minors.
08Changes
We may update this policy; the date at the top shows the latest version.