Privacy Policy
Privacy Policy
Last updated: 1 September 2026
This Privacy Policy explains how Nuova Gia’ S.r.l. collects, uses and protects personal data in connection with A Grain of Sardinia, in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (“GDPR”).
1. Data Controller
The Data Controller is:
Nuova Gia’ S.r.l.
09056 Isili (SU), Italy
VAT No. IT01656310917
Email: nuovagiasrl@yahoo.com
2. Personal data we may process
Depending on how you interact with A Grain of Sardinia, we may process information including:
- name and surname;
- email address;
- billing and transaction information;
- information provided for personalization of the digital certificate;
- order details and assigned Grain Number;
- communications sent to us;
- technical information necessary for the operation and security of the service.
We only process personal data that is reasonably necessary for the purposes described in this Privacy Policy.
3. How we collect personal data
Personal data may be collected when you:
- purchase A Grain of Sardinia;
- provide information for certificate personalization;
- contact us;
- interact with our website or checkout;
- use services provided through our e-commerce and payment partners.
Orders are currently processed through Payhip, and payments may be processed through the payment providers made available at checkout.
4. Purposes and legal bases for processing
We process personal data where necessary to:
Perform the contract — to process your order, assign your unique Grain Number, create and deliver your personalized digital certificate and provide customer support.
Comply with legal obligations — including accounting, tax, consumer protection and other applicable legal requirements.
Pursue legitimate interests — including protecting the security and integrity of the service, preventing fraud and managing or defending legal claims, where those interests are not overridden by your rights.
Consent — where consent is required by law, for example for certain marketing communications or non-essential tracking technologies.
5. Grain Number and digital certificate
Each purchase may be associated with a unique Grain Number.
We may retain the information necessary to maintain the relationship between an order, its Grain Number and the corresponding digital certificate.
The Grain Number is part of the internal A Grain of Sardinia registration system and does not represent ownership of land or any other physical property.
6. Payment information
Payments are processed through third-party payment service providers available through Payhip.
Nuova Gia’ S.r.l. does not ordinarily receive or store complete payment card details where those details are processed directly by the relevant payment provider.
Payment providers process personal data according to their own privacy policies and legal obligations.
7. Service providers and recipients
Personal data may be shared, where necessary, with service providers involved in operating A Grain of Sardinia, including:
- e-commerce and digital delivery providers;
- payment processors;
- hosting and technical service providers;
- email and communication providers;
- accounting, tax and professional advisers;
- public authorities where disclosure is required by law.
These parties receive personal data only where necessary for the relevant purpose and subject to applicable data protection requirements.
8. International data transfers
Some service providers may process personal data outside the European Economic Area.
Where required by the GDPR, appropriate safeguards will be used for international transfers, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
9. Data retention
Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, accounting and tax obligations.
Order and transaction information may therefore be retained for the period required by applicable law.
Information necessary to maintain the integrity of the Grain Number registration system may also be retained for as long as reasonably necessary for operation of the service, subject to applicable law and the rights of data subjects.
10. Your rights
Subject to the conditions established by applicable law, you may have the right to:
- access your personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- receive certain personal data in a portable format;
- withdraw consent where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact us at:
nuovagiasrl@yahoo.com
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.
11. Marketing communications
We will send marketing communications by email only where permitted by applicable law.
Where consent is required, marketing communications will be sent only after obtaining the appropriate consent.
You may unsubscribe from marketing communications at any time using the unsubscribe option provided or by contacting us.
Transactional communications relating to an order, Grain Number or digital certificate are not marketing communications and may be sent where necessary to perform the contract.
12. Cookies and similar technologies
Our website and the services used to operate it may use cookies or similar technologies.
Cookies that are strictly necessary for the operation of the website or checkout may be used where permitted by law.
Where consent is legally required for analytics, advertising or other non-essential technologies, those technologies should be activated only after the appropriate consent has been obtained.
Further information may be provided through a dedicated Cookie Policy or cookie consent mechanism where applicable.
13. Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.
However, no internet-based service can guarantee absolute security.
14. Children
A Grain of Sardinia is not specifically directed at children.
Where applicable law requires parental or guardian consent for the processing of a child’s personal data, such data should not be submitted without the required authorization.
15. Changes to this Privacy Policy
We may update this Privacy Policy where necessary to reflect changes in our activities, services, technology or applicable law.
The current version will be made available through the A Grain of Sardinia website.
16. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact:
Nuova Gia’ S.r.l.
09056 Isili (SU), Italy
VAT No. IT01656310917
Email: nuovagiasrl@yahoo:com