Privacy policy

Last updated: 28 August 2026.

This notice explains how personal data is processed when you visit the RisiPreziosi website, manage your cookie preferences, contact Podere Prati Breja or purchase Karbor from the RisiPreziosi offer on Amazon.it. The website is informational and editorial and does not display a purchasable Shopify catalogue. The Italian and English navigation displays no customer-account, cart or checkout links; the technical Shopify addresses /account and /cart may nevertheless remain accessible through a direct URL.

1. Data controller

The data controller is Aina Roberto e Federico Società Agricola S.S., trading under the RisiPreziosi brand at Podere Prati Breja.

Registered office: Cascina Prati Brea (S. Agabio) 24, 28100 Novara (NO), Italy.
VAT number: 02216970034
Tax identification number: 02216970034
Business Register of Monte Rosa Laghi Alto Piemonte · registration number: 02216970034
REA: NO-222612
Certified email (PEC): ainasocietaagricola@pec.it

Requests concerning personal data can be sent to the certified email address above.

2. Data processed

Browsing and security data

The platform and technical services may process IP address, request date and time, pages visited, browser and device type, technical identifiers, connection information, security logs, website interactions and the preferences expressed through the cookie panel. This information is used to display and protect the website, measure its operation and remember your choices.

Data you provide voluntarily

If you email, call or start a WhatsApp conversation, we may process your name, company and role, contact details, the content of your enquiry and any documents you choose to send. Please do not provide unnecessary data or special categories of personal data unless they are essential to your request.

Technical Shopify routes

Account sign-in links are disabled in the Shopify configuration and do not appear in the navigation; store credit and self-service returns and cancellations are also disabled. The account sign-in page and empty cart nevertheless remain reachable by typing a direct technical address. If you choose to use the /account route, RisiPreziosi processes your email address, account identifiers, preferences and technical information as data controller in order to provide the requested feature; Shopify generally processes these data as processor under its Data Processing Addendum. The screen also displays an optional, unticked news and offers choice. If you choose services offered directly by Shopify, such as Shop or Shop Pay, Shopify may process data for its own purposes as an independent controller under its Consumer Privacy Policy. RisiPreziosi does not use these routes to complete website sales and does not currently send newsletter campaigns.

Data not collected directly by the editorial website

The editorial pages do not contain contact forms or newsletter sign-ups and do not directly collect card data or payment credentials. No custom pixels or app pixels are currently configured in the Shopify administration; data relating to Amazon purchases is described in section 4.

3. Purposes and legal bases

Operating, protecting and measuring the website: our legitimate interest in providing a reliable and secure environment and, where applicable, compliance with legal obligations.
Answering informational or professional enquiries: steps taken at your request before entering into a contract when the enquiry concerns a possible commercial relationship; our legitimate interest in managing other enquiries voluntarily initiated by you.
Managing Amazon orders attributed to RisiPreziosi: performance of the sale contract, customer assistance and management of any return; accounting, tax and regulatory obligations; establishment, exercise or defence of legal claims.
Managing and recording cookie preferences: compliance with legal obligations.
Enabling optional personalisation, analytics or marketing technologies: your consent, which can be refused or withdrawn at any time.
Providing any technical account requested by the user: performance of the service requested by the individual under Article 6(1)(b) GDPR; Shopify generally acts as processor.
Recording any news and offers preference voluntarily expressed on the technical /account page: your consent. The option is unchecked, may be withdrawn at any time through the link in any future communication or by emailing ainasocietaagricola@pec.it, and no campaign is currently active.
Establishing, exercising or defending legal claims: our legitimate interest and, where applicable, compliance with legal obligations.

Providing data in a communication is optional, but we may be unable to reply without the information needed to understand and manage the request. Data needed to manage a sale must instead be processed to fulfil the order and applicable obligations. The website does not make automated decisions that produce legal or similarly significant effects for you.

4. Purchases on Amazon.it

The Buy Karbor on Amazon.it links lead to an external service. Product-page browsing and purchases take place on Amazon.it. In the offer checked on 27 August 2026, Karbor is sold by RisiPreziosi Aina Società Agricola and fulfilled by Amazon.

Amazon independently processes the data needed to provide its platform, manage payment and organise fulfilment under its terms and Privacy Notice. Depending on the type of order and fulfilment service used, Seller Central may make the following available to RisiPreziosi: the order identifier and details, product, quantity, amounts and status; any delivery information needed where fulfilment is handled by the seller; order-related communications; customer-service, cancellation, claim or return requests; and tax or billing data where required. RisiPreziosi does not receive your payment credentials.

Amazon and Aina Roberto e Federico Società Agricola S.S. act as independent controllers for the processing activities within their respective responsibility. RisiPreziosi uses the data made available solely to manage the sale, provide related customer service, administer returns or refunds, comply with accounting, tax and regulatory obligations, and protect its legal rights. It does not use the data for independent marketing or contact unrelated to the purchase.

Where an order is fulfilled by the seller, reports may include a telephone number solely for carrier-label requirements. Order-related communications take place through Amazon’s Buyer–Seller Messaging channels and platform-generated addresses, unless the individual has consented and applicable law is observed.

Merely clicking the link does not disclose to RisiPreziosi the data that you later enter on Amazon; data may become available to the seller only in connection with an order or a related enquiry.

5. Shopify, recipients and external services

The website is hosted by Shopify. For processing carried out on behalf of and under the instructions of RisiPreziosi, including hosting, security and technical operation, Shopify acts as a processor. For Enhanced Services connected with Shopify Network Intelligence, Shopify also collects and processes interaction data and instead acts as an independent controller.

The Enhanced Services may include analytics, personalisation and advertising based also on your interactions with this website, other merchants using Shopify and Shopify services. Information may be shared with Shopify, group companies, service providers and partners, including in other countries, subject to the privacy choices available to you.

For details, please read the Shopify Consumer Privacy Policy, visit the Shopify privacy portal and consult the Data Processing Addendum.

Where necessary, personal data may be disclosed to persons authorised by the controller, professional advisers, authorities and the technical providers actually used.

Email and telephone providers process the data needed to deliver the communication you choose. Opening WhatsApp, Facebook or Instagram takes you to external services that operate under their own terms and notices; using these channels is voluntary. You can read the WhatsApp Privacy Policy for the European Region and the Meta Privacy Policy.

6. Cookies and similar technologies

The website uses cookies and similar technologies needed for operation, security, localisation and storage of privacy preferences. Under the current configuration, a new visit may directly set the following necessary cookies:

Name	Provider and purpose	Observed duration
`_shopify_essential`	Shopify · essential operation, security and platform integrity	1 year
`localization`	Shopify · stores the visitor’s localisation	1 year
`cart_currency`	Shopify · stores the cart’s technical currency	2 weeks

Other Shopify cookies may be set if you open technical functions such as the account or cart, make certain choices, or consent to optional categories. Shopify publishes its current list of names, purposes and durations in the Shopify Cookie Policy.

The permanent preferences link reopens the panel. Choosing Reject all leaves only the required category enabled, while personalisation, marketing and analytics remain disabled; choosing Accept all enables the optional categories. No custom pixels or app pixels are currently configured.

Under the current settings for Italy, the banner presents Accept all, Reject all and category choices. Your choice is communicated to Shopify; where consent has not been given or is withdrawn, device data must not be used for optional Network Intelligence purposes, while technical processing needed for operation and security may continue.

You can change or withdraw your choices at any time through the Cookie preferences link in the footer. Withdrawal does not affect the lawfulness of processing carried out before it.

If custom analytics tools, advertising pixels, newsletters, embedded content or other apps are added in the future, this notice, the inventory and the consent mechanism must be updated before they are enabled.

7. International transfers

Shopify International Limited, based in Ireland, provides the platform. When Shopify transfers outside the European Economic Area or Switzerland data processed on behalf of RisiPreziosi, it relies, as applicable, on adequacy decisions, Binding Corporate Rules, Standard Contractual Clauses or other GDPR safeguards described in its Data Processing Addendum. Other providers acting on behalf of RisiPreziosi may also make international transfers only under one of the mechanisms set out in Articles 45 and 46 GDPR. Information about the applicable safeguards and how to obtain a copy may be requested using the controller’s contact details.

When users choose to continue to Amazon, WhatsApp, Meta or another external service, that provider processes data as an independent controller: any international transfers are governed by its own privacy notice and are not made on behalf of RisiPreziosi.

8. Retention

Simple informational enquiries that do not lead to a professional or contractual relationship are deleted when no longer needed and, in any event, within 12 months after the last communication relating to the enquiry.
Conversations concerning a potential professional supply arrangement or collaboration are deleted when no longer needed and, in any event, within 24 months after the last communication relating to the proposal, unless a contractual relationship begins or legal obligations or a concrete need to establish, exercise or defend legal claims require longer retention.
Data needed to manage an order or contractual relationship is kept for the duration of the relationship and subsequently within the limitation periods applicable to the protection of legal rights.
Invoices, accounting records and administrative or tax documents subject to mandatory retention are normally kept for ten years after the last entry and for longer where required by an audit, dispute or other applicable provision.
Customer-service and return communications are kept until the request is resolved and thereafter only where needed to comply with an obligation or protect a legal right. Amazon applies the periods stated in its own notices to data it processes independently.
Any delivery data made available for seller-fulfilled orders is not transferred to separate contact lists or used for marketing and is deleted when no longer needed to fulfil the order, subject to legal obligations.
Account data is retained for as long as the account remains active and, after closure, only for the time needed to handle requests, prevent abuse, protect legal rights and comply with legal obligations, in accordance with the applicable limitation periods. Data used for marketing communications is retained until consent is withdrawn or the user objects; evidence of consent and its withdrawal is retained for as long as necessary to demonstrate compliance with legal obligations. When acting as processor, Shopify retains data according to RisiPreziosi’s instructions and the applicable agreements; retention for processing performed by Shopify as an independent controller is governed by Shopify’s own notices.
Cookies have the durations stated in section 6 and in the Shopify Cookie Policy; privacy preferences are normally recorded for one year, while remaining changeable at any time.
Shopify and other independent controllers determine their own retention periods under their respective notices. Data needed for a dispute may be kept until the matter is resolved and the applicable limitation periods have expired.

Contact details received for informational or professional purposes are not kept for longer in order to reuse them for marketing.

9. Your rights

Where provided by law, you may request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent without affecting processing carried out before withdrawal. You also have the right to lodge a complaint with the Italian Data Protection Authority or, where applicable, your local supervisory authority.

Requests to RisiPreziosi can be sent exclusively to the certified email address ainasocietaagricola@pec.it. For data Shopify processes independently, you may also use the Shopify privacy portal; for Amazon, WhatsApp and Meta, the channels in their respective notices apply.

10. Contact and updates

For questions about this notice, write exclusively to the certified email address ainasocietaagricola@pec.it. This notice may be updated if the website, the services used or the law changes; the latest revision date will always appear at the beginning.