Data controller
The data controller is Agata Automation S.r.l., Via Trioni 14 - 26032 Ostiano (CR), Italy, VAT number and tax code 01665440192.
For any question about your data, or to exercise your rights, write to info@agatastore.it. We reply within one month, as the GDPR requires, and usually much sooner.
What data we process
- Browsing data. IP address, browser and device type, pages visited, date and time. They are recorded by the website server to run and protect it.
- Account data. First name, last name, e-mail, telephone, company name, VAT number, tax code, SDI recipient code, billing and shipping addresses, password (stored in a non-reversible form: not even we can read it).
- Order data. Products, quantities, prices, payment and shipping method, order and return history. For bank receipts (RiBa), your company's bank.
- Messages. What you write to us through the contact form, by e-mail or by phone.
- Preferences. Your newsletter subscription and your cookie choice.
We do not process payment card data: the website does not accept cards. We do not collect data about health, opinions or other special categories.
Why we process them, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, fulfilling orders, shipping, handling returns and warranties, supporting you | Performance of the contract or pre-contractual measures (Art. 6.1.b GDPR) |
| Assigning your account to a price-list group according to your type of business (for example installer or system integrator), to show you the prices reserved for you | Performance of the contract (Art. 6.1.b) |
| Assessing and managing payment by bank receipt (RiBa): your company's data is shared with the finance company that approves the credit line | Pre-contractual measures and performance of the contract (Art. 6.1.b) |
| Issuing the electronic invoice through the Italian Exchange System (SDI), keeping the accounts, meeting tax obligations and requests from the authorities | Legal obligation (Art. 6.1.c) |
| Replying to your messages and quote requests | Pre-contractual measures at your request (Art. 6.1.b) |
| Protecting the website from abuse and unauthorised access (server logs, anti-robot check in forms), defending our rights | Legitimate interest (Art. 6.1.f) |
| Sending you the newsletter with news, offers and technical content | Consent (Art. 6.1.a), which you can withdraw at any time |
| Measuring visits with Google Analytics to improve the website | Consent given through the cookie banner (Art. 6.1.a and Art. 122 of the Italian Code) |
We do not take decisions based solely on automated processing that produce legal effects concerning you.
What is required and what is not
Account, order and billing data are required: without them we cannot register you, fulfil an order or issue the invoice. The SDI recipient code is needed for the electronic invoice and must be given when you register.
The newsletter and Google Analytics are optional: if you do not give your consent, the website works in the same way.
Data outside the European Union
Google may process data in the United States. The transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (10 July 2023), to which Google adheres, and on the standard contractual clauses approved by the Commission. The other suppliers, Brevo included, process data within the European Union.
How long we keep them
- Account: for as long as it is active. If you ask us to close it, we delete it, except for the data we are required by law to keep.
- Invoices, orders and accounting records: 10 years, as required by Article 2220 of the Italian Civil Code.
- Messages and requests: for as long as needed to handle them.
- Newsletter: until you unsubscribe.
- Google Analytics statistics: 14 months at most.
- Server logs: for as long as needed for the security of the website.
Your rights
At any time you can ask us to:
- know what data we hold and get a copy (Art. 15);
- correct or complete it (Art. 16) — you can change much of it yourself in your account area;
- erase it (Art. 17), unless we must keep it by law;
- restrict its processing (Art. 18);
- receive it in a machine-readable format, to take it elsewhere (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw a consent already given, without affecting what was done before (Art. 7). You can turn off the newsletter from your account area, and cookies from «Cookie preferences» at the bottom of every page.
Just write to info@agatastore.it. To get a copy of your data, or to delete your account, you can also use the Your data (GDPR) page: you confirm the request from your mailbox and we handle it. If you believe the processing breaches the GDPR, you can also lodge a complaint with the Italian Data Protection Authority (Garante), or with the authority of the country where you live or work.
Security
The website uses an encrypted connection (HTTPS). Passwords are stored in a non-reversible form. The administration panel is reserved for authorised people, and every login from a new device must be confirmed with a code. In the event of a data breach, we record it and, where the law requires, notify the Garante and the people concerned.
Changes to this notice
If we change the way we process data, we update this page. If a change concerns processing based on consent, we ask you again.
Last updated: 28 September 2026.