Privacy

Who is responsible

David Fagioli, trading as Carovella, Castellanza, Italy, is the controller of your personal data under the EU General Data Protection Regulation (GDPR). To reach us about your data, write to david@carovella.com.

What we collect

• –Sample requests: company, your name, role, work email, state, type of business, estimated volume, your notes, and your confirmation about a trial order.
• –Rep applications: name, email, where you are based, territory, the distributors you call on, the lines you carry, your background and, if you give it, your LinkedIn profile.
• –Order requests from the Harvest 2026 page: company, name, work email, the tins you want, your notes and the code on your sample, if there is one.
• –Technical data: like every website, our host receives your IP address and browser details with each request. We use the IP address only to stop repeated or automated submissions, and the country it comes from to know where a request was sent from.

We don't ask for phone numbers, and we never ask for payment details on this site.

Why we use it

• –To answer your request: send samples, the price list or a quote, and arrange an order. This is a step you ask for before a possible contract (GDPR art. 6(1)(b)).
• –To review rep applications and get back to you, for the same reason.
• –To keep in touch about our oil with the businesses we work with or have talked to, to protect the site from abuse, and to count visits. These are our legitimate interests (art. 6(1)(f)), and you can object at any time.
• –To keep invoices and business records when an order is placed, as Italian law requires (art. 6(1)(c)).

We don't sell or rent your data, and we don't use it for targeted advertising.

Who handles it for us

A few service providers process the data on our behalf, under contract and only to run our business: Vercel, which hosts this site; Supabase, which hosts our customer database; and our email provider. Some of them process data in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

Your details may also go to the forwarder, mill or sales rep involved in your order, only as far as the order needs.

How long we keep it

• –Requests and applications that don't lead to business: up to 24 months after our last contact.
• –Customer records: for as long as we work together, and invoices and accounting records for 10 years, as Italian law requires.
• –IP addresses used against spam: a few minutes, in memory only.

Cookies and statistics

This site sets no cookies and shows no cookie banner, because it doesn't need one. We count visits with Vercel Web Analytics, which works without cookies and only shows us totals, such as how many people read a page. It doesn't tell us who you are.

Your rights

You can ask us to see the data we hold about you, correct it, delete it, limit how we use it, or send it to you in a common format. You can object to any use based on our legitimate interests, including being contacted about our oil. To do so, write to david@carovella.com. We answer within one month.

If you think we have handled your data wrongly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live or work.

Children

This site is for businesses. It is not meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change how we use your data, we update this page and the date at the top. Questions? Carovella is a small business: a person reads every message.