the iris garden in Monferrato




Via Scallaro 7
10020 Cavagnolo TO
+39 333 53 77 703

Follow Us



This website collects some personal information from its visitors.


Data Controller of information

Name: Orietta Giorcelli

Tax code: GRCRTT72A46B885L

Address: Via Scallaro 7 - 10020 - Cavagnolo (TO)



Type of information processed

Below is the list of information collected by this website, in addition to information automatically collected through third-party services: contact information, including company name and VAT number, name and surname, tax code, address, e-mail address, fax, website and date of birth, telephone or mobile number for natural persons, and information provided during registration and unique IDs used by advertising services such as, for example, Google Ads).

The information collected may have been provided by the Visitor or acquired through third parties. This information will be used for the purposes described in this Policy. The visitor has the right to rectify, at any time, his personal information or to prevent, revoke or oppose their processing.

The information that is processed may be entered manually by the Visitor, collected automatically, or acquired through third parties.

The use of cookies (which are not permanently stored on physical devices) is limited to providing safe and efficient exploration of the site and to identify the visitor in order to provide the service requested on this site. Under no circumstances does the use of cookies have the purpose of transmitting information of a personal nature.

In order for the website to function properly, the site visitor is required to enter the requested personal information. If some information is not entered, the functioning of the website could be compromised and its performance altered, even leading to the impossibility of using some functions for which the inclusion of information is necessary.

The visitor of the site indemnifies the owner of the website from any liability that may be claimed by third parties, for the information that the visitor may have inserted and published within the same website.


Information management methods

The processing of the information provided is carried out taking into consideration all the necessary measures to prevent sharing online, deletion and involuntary modification of the information indicated.

The way in which we collect and store information is strictly connected to the ways in which we use our website and related services and is achieved through IT and telematic tools.


Legal basis

This website may use the personal information stored exclusively for purposes related to the execution of the purposes requested by the visitor when:

- the Owner may need to use them for his own purposes and in his own interest.

- the Data Controller must respond to requests of public interest, including from authorities.

- If the information is functional to the fulfillment of legal obligations or provided for by community legislation.

- it is necessary to fulfill the contractual agreements for the provision of one or more services, including any personalized ones.

- The visitor has given his consent to the processing of his information.

In case of doubts about the legal basis of the processing it is possible to contact the Data Controller and the DPO for clarification.


Place of processing of information

The processing connected to the web services of this website takes place at the company headquarters of the Data Controller and is handled only by personnel in charge of processing. No information deriving from the web service is communicated or disseminated. The information provided by the Visitor who requests the sending of informative material is used for the sole purpose of carrying out the service or provision requested and is communicated to third parties only if this is necessary for this purpose (art. 3 GDPR).

The information provided is communicated to third parties only if this is necessary for this purpose (art. 3 GDPR) and may be transferred to another country.

The site visitor retains all rights and can request to know details relating to the tools used by the website owner for information security, and can also request details regarding the transfer of his personal information to countries outside from the EU and/or to non-governmental organizations which are not subject to any specific legislation.

The Visitor may request further information on the use of his information and on the transfer of the same by contacting the Data Controller and the DPO directly.

Information retention time window

The duration of storage of the information is linked to the purpose of the ongoing processing. The information will not be processed for longer than is strictly necessary to fulfill the purposes for which this information was collected and processed.

The information collected by the Data Controller will be retained until the purposes for which it was collected are fulfilled.

The information collected to follow up on a contractual commitment will be retained until the conclusion of this commitment.

The processing provided through consent may be retained until the Visitor revokes such consent.

At the end of the indicated purposes, the information will be deleted and all rights of access to information, cancellation and portability can no longer be exercised.


Purpose of the processing

Visitor information is processed for the provision of services provided through this website. Some of the features are: possibility of commenting, storing and viewing statistics, accessing third-party services embedded within the site or via API, possibility of chatting with an operator or other users, possibility of having direct contact with a operator or with other users, payment management, contact requests, information of various kinds. Hosting and other functions aimed at completing the purpose requested by the Visitor.

Advertising, targeting, profiling, content testing, access to information through devices, anti-spam, use of third-party platforms for managing requests and assistance, registration and access and transfer of information.

For more information on all purposes, the Visitor can contact the Data Controller directly.


Interaction with social networks and external platforms,

Heat mapping and session recording,

Interaction with live chat platforms,

For any request on the processing of information on write to us at This website does not support “Do Not Track” requests. To find out if any third-party services used support them, consult their privacy policies.


Subsequent Privacy Policy updates

The Data Controller may update this privacy policy contained on this page at any time. Visitors will be able to stay updated on changes made to this Privacy Policy by consulting this page which bears the same name and which will remain public for easy consultation. At any time and/or following a modification of this Privacy Policy, the visitor may request the destruction and deletion of any personal information concerning him, and in this case this could lead to the cessation of part and/or all of the features offered to the visitor by this website.


Definitions and legal references

Personal informations

Personal information is information that identifies or makes identifiable, directly or indirectly, a natural person and which can provide information on his characteristics, habits, lifestyle, personal relationships, state of health, economic situation, etc.



This refers to all information collected automatically or manually, directly or indirectly through third-party services.



The website visitor who uses the services using his or her personal information.



The person to whom the personal information entered and/or published on the website refers.


Data Controller

The data controller ("data processor") in the GDPR is defined in art. 4, par. 1, no. 8) as "the natural person, legal entity, PA or body that processes personal information on behalf of the data controller".


Data Controller (Site Owner)

The Data Controller (data controller) is "the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data" (art. 4. par. 1, no. 7 GDPR). In essence, the owner is the one who processes the information without receiving instructions from others, the one who decides "why" and "how" the information should be processed.



It is a set of related web pages, or a hypertextual structure of documents that can collect personal information regarding their visitors.



Particular type of information that can be useful to identify the visitor and is used by server-side web applications to store and retrieve long-term information on the client side.


Legal references

This privacy policy has been drawn up on the basis of the legal systems in force, including the European Union Regulation 2016/679 and the Swiss Federal Law on Data Protection (LPD) and refers to this website.



The website may require identification via Facebook in order to interact with it via the Visitor's Facebook account.

For further information, you can directly consult the Facebook permissions documentation and the Facebook Privacy page.



Visitor ID, visitor name, profile image, visitor gender, language, list of visitor friends and/or followers, and in general all the information that the visitor may have entered into their profile.


Additional details

The information collected is used by the following services:

Access to third party services

Third-party services may require you to share information in your accounts in order to interact with them.

In any case, authorization will always be required, to be provided before the activation of third party services.



Visitors can leave some comments on the website using specific comment services.

Visitors will also be able to leave comments on the website anonymously. Visitors are responsible for the content published through their comments.

Third-party commenting services may request the collection of information, including for statistical purposes.


Contact the visitor


External payments and gateways

Third party payment services (e.g. Braintree, Stripe, Paypal, Satispay, Nexi) can be used by the owner to process payments received via automatic and/or recurring payment methods. The information is collected and processed directly by the payment service used to process the payment itself.

The owner is not responsible for any direct or indirect contacts that may occur between the Visitor and third parties.



PayPal is a gateway and payment system that allows economic transactions online.

Required information: specified in PayPal's privacy policy.

Place of processing: Privacy Policy.



The services relating to hosting collect information necessary for the correct functioning of the website and its functions in order to provide the services requested by the visitor.

Hosting services use servers located in different locations, therefore it is not possible to establish exactly where the information is stored.


Google Cloud Storage

Google Cloud Storage is a cloud hosting platform managed by Google Ireland ltd.

Information requested: the information collected is specified in Google's privacy policy.

Place of processing: Ireland – Privacy Policy.


Newsletter/Mailing list

The visitor to the site, by entering his e-mail address when purchasing a product, registering on the site, or subscribing to the site's newsletter/mailing list, authorizes the site owner to be able to send him informative and/or advertising messages.

Information requested: the e-mail address of the visitor who registers on the site or the newsletter.


Telephone number

By leaving their telephone number, visitors could be contacted for various purposes expressed at the time of entering the numerical data.

Telephone number


Contact form

The information indicated by the visitor when completing the form and the information entered in the body of the message are used exclusively to respond to the visitor's request.

General information such as name and surname, physical address and email and other types of information in order to have more information regarding the request forwarded.


Sending messages

Third party services that manage databases of contact information, used for the purpose of communicating with the visitor.

These services may collect contact information related to mailings, opens and other types of interactions.



Mailgun, Inc. is a third-party service that allows the management of mailing lists, mailings and statistics on mailings for newsletters and automations.

Required information: Name, surname, email and other information required for personalizing the communication.

Place of processing: United States of America – Privacy Policy.


Live Chat

Third-party live chat services allow you to contact a website operator for information requests, while the visitor is present on the website itself.

These services may collect information about your contact information related to messages you send.

Social Networks

This functionality allows Visitors to interact with the main social networks within the website via the Visitor's social profiles.

The information collected: user ID, username, profile image, user gender, user language, list of the user's friends and/or followers, and in general all the information that the user may have entered into his/her profile.

These services may collect contact information relating to the use of your profile on the social network owner of the application in use, hosted on this site.



The Paypal button is provided by PayPal Inc.

Information requested: Cookies and information used.

Place of processing: Privacy Policy.


Facebook “Like” button

The “Like” button is provided by Facebook, Inc, and allows you to like the Facebook page relating to this website.

Information requested: Cookies and information used.

Place of processing: United States of America – Privacy Policy.



Statistics services allow the owner to monitor the performance of the website and the behavior of visitors.


Flazio Stats

Flazio provides a statistics service that analyzes and displays the personal information of visitors who visit websites.

Information requested: Cookies and usage information.

Place of processing: Ireland – Privacy Policy Opt Out.


Migration of information outside the European Union

The owner could move the information collected outside the EU only by respecting a certain legal basis.

For more information on the legal bases that may determine the transfer of information, you can contact the data controller directly.


Contents and graphic elements

These services allow you to show some third-party graphics or content directly on the website.

The information collected is specified in the privacy policy of the third-party service owner of the application in use hosted on this site.


Google Fonts

Google Fonts is a text font operated by Google Ireland Limited.

Requested information: is specified in the privacy policy of the Social Network owner of the application in use hosted on this site.

Place of processing: United States of America – Privacy Policy.


Geolocation and position

Geolocation not continuous

The website and some third-party tracking services may share visitor positioning information for the purpose of providing personalized services.

The website may access information relating to positioning if the visitor has not denied tracking of his position via browser or his devices.

Information requested: geographical location.


Instagram component

Instagram allows the viewing of image and video posts contained on Instagram, Inc.

Information requested: Cookies and usage information.

Place of processing: United States of America – Privacy Policy.


Anti Spam

These third-party services are intended to protect the website from Spam activities.


Google reCAPTCHA

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.

The reCAPTCHA system is subject to Google's privacy policy and terms of use.

Information requested: Cookies and usage information.

Place of processing: Ireland – Privacy Policy.


Registration and login

Services with registration and authentication allow the visitor to have their own profile on the website.


Log in with PayPal

“Log In with PayPal” is a registration and access service provided by PayPal Inc.

The information collected is specified in PayPal's privacy policy.

Place of processing: –Privacy Policy


Google Maps component

Google Maps is a mapping service operated by Google Ireland Limited.

Information requested: Cookies and usage information.

Place of processing: Ireland – Privacy Policy


Visitor Profiling

The information provided by the visitor could be used by the data controller to create a visitor profile, to monitor the visitor's preferences and behavior.

These operations can be used thanks to automatic tools that monitor the visitor's activities in order to trace a profile of the visitor.

To refuse profiling, the visitor can contact the Data Controller directly to assert their rights.


Online selling

The information provided by the visitor is used to personalize the purchase procedure, payment via electronic methods and shipments.


Visitor Rights

Visitors have certain rights that they can exercise regarding the use of their information.

The visitor's rights are:

- Request a complaint about the use of your information.

- Request the transfer of your information;

- Request limited use of information processing;

- Revoke consent;

- Request a change to the information indicated.

- Refuse the processing of information;

- Request deletion of information;

- Request access to your information;


Right of opposition

Visitors can object to the processing in reference to the use of the information for public interest or in the exercise of public powers of the owner.

Visitors can also object to the processing of information for marketing purposes.

Exercise visitor rights

In order to assert their rights, the visitor can directly contact the Data Controller of the information managed on this website.


Sales information

E-commerce business

In order to complete the sale, purchase process and shipping and delivery process, the owner of the Website may make use of the visitor's personal information.

In order to complete the purchase, site visitors will have to proceed with payment, which may be managed by third-party payment gateways. Some of the information necessary for payment may include, but is not limited to: credit cards, account number, expiry date, CVC, and others.


Learn more about the treatment


Use of information in court

If the Data Controller is sued, the visitor will be entitled to use the visitor's information and information on the use the visitor has made of the services.

Should the Data Controller receive a request from public institutions or public authorities (Police, Carabinieri), he will be entitled to forward all the information requested by them.


Log files

In order to improve the services offered, perform problem resolution and analyze the use made of the same services, this website may perform sequential and chronological recording of the operations carried out by a visitor, an administrator either manually or automated, as they are executed. These recordings can be stored and possibly accessed during the information analysis phase, also called event log.


Right of site visitors (Visitors)

Visitors have the right to delete, transfer, suspend and correct their Personal information, and visitors have the right to have an understandable and intelligible copy of their personal information. The owner of the site must have adequate tools to carry out such requests. All requests must be sent to the Data Controller and/or the DPO.



For any questions regarding this Privacy Policy, please contact us at


Information from the latest revision: 02/02/2024