Privacy notice
How we use the personal data of the people who visit this website, create an account and buy online (articles 13 and 14 of EU Regulation 2016/679, GDPR).
1. Who is responsible for your data
The data controller is:
- BARDINI CIOCCOLATERIE DI BALDUZZI GRAZIANO E C. SAS
- Via Vittime di Rio Boffalora, 19, 29121 PIACENZA (PC)
- VAT number IT00331910331
- Company register (REA) PC 98970
- Email info@bardini.it
- Certified email (PEC) info@pec.bardini.it
- Phone +39 0523 484308
For any question about your data and to exercise your rights, write to the email address above.
2. Which data we use, why and for how long
| Purpose | Data | Legal basis | How long we keep them |
|---|---|---|---|
| Your account on the website | First and last name, email, mobile phone, password (stored encrypted, we cannot read it) | Steps you ask for before a contract and the contract itself (art. 6.1.b) | Until you ask us to delete your account |
| Orders, payment, delivery and customer care | Contact details, delivery and billing addresses, products bought, payment outcome. Card data are entered on the payment provider's systems: we never see or store them | Performance of the sales contract (art. 6.1.b) | 10 years from the order, as for the accounting records |
| Invoices and tax records | Name or company name, tax code, VAT number, address, e-invoicing code (SDI) or certified email | Legal obligation (art. 6.1.c) | 10 years (art. 2220 of the Italian Civil Code) |
| Bardini Loyalty Card (only if you ask for it) | Personal and contact details, card number, points and overall amount spent | Your request (art. 6.1.b) | Up to 3 years from the last contact, or until you cancel the card |
| Marketing: promotions and news by email, SMS or WhatsApp (only if you say yes) | Contact details | Your consent (art. 6.1.a), optional and never pre-ticked | Until you withdraw your consent, and no more than 3 years from the last contact |
| Profiling: offers based on what you bought (only if you say yes) | Contact details and purchases | Your consent (art. 6.1.a), optional and never pre-ticked | Until you withdraw your consent, and no more than 3 years from the last contact |
| Answering what you ask us (contact form, email, phone, WhatsApp) | Contact details and the content of your message | Steps you ask for before a contract (art. 6.1.b) | For the time needed to handle your request |
| Job applications sent from the "Jobs" page | Contact details, curriculum vitae and what you write in the application | Steps you ask for before a contract (art. 6.1.b) | 12 months from when we receive the application |
| Security of the website and prevention of abuse | IP address, technical logs, anti-robot check (Google reCAPTCHA) on the forms | Our legitimate interest in keeping the website safe (art. 6.1.f) | For the time strictly needed for the checks |
| Statistics on visits (Google Analytics) | Browsing data collected through cookies | Your consent, given from the cookie banner (art. 6.1.a) | As described in the cookie policy |
Without your consent to the cookie banner, Google Analytics is not loaded at all. Details are in the cookie policy.
The full notice of the Loyalty Card, the same one you sign in our shops, is available here.
3. Do you have to give us your data?
The data of the account, of the order and of the invoice are needed to sell to you: without them we cannot register you or deliver your order.
The Loyalty Card, marketing and profiling are optional: if you say no, you can still buy as usual.
4. Who receives your data
Your data are handled by our staff, each for their own tasks, and by the suppliers that work for us as data processors:
- Odoo S.A. (Belgium), which provides the software and the hosting of this website and of our management system;
- the payment providers you choose at checkout: Wire Transfer, PayPal;
- the couriers that deliver your order;
- the providers of our email, messaging and backup services;
- Google Ireland Ltd, for the anti-robot check and, only with your consent, for the statistics;
- our accountant and the consultants bound by professional secrecy.
Invoices are sent to the Italian Revenue Agency through the e-invoicing system (SDI), as the law requires. We do not sell your data and we do not pass them on to third parties for their own marketing.
The list of our data processors is available on request.
5. Transfers outside the European Union
Some suppliers (for example Google, PayPal, Stripe, Meta for WhatsApp) may process data in the United States: in that case the transfer relies on the adequacy decision of the European Commission (EU-US Data Privacy Framework) or on the standard contractual clauses.
6. Your rights
At any time you can ask us to:
- know which data we hold about you and receive a copy (access);
- correct or complete them (rectification);
- delete them (erasure), except for what we must keep by law;
- restrict their use, or object to a use based on our legitimate interest;
- receive the data you gave us in a common electronic format (portability);
- withdraw a consent you gave: what was done before stays lawful.
You can do most of this yourself from your account: correct your details, see and change your consents and ask us to delete your data. Every promotional email also has a link to unsubscribe.
Otherwise write to us at the address in point 1: we answer within one month.
If you think we are using your data unlawfully you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
7. Automated decisions and minors
We do not take decisions about you by automated means only.
The online shop is for people aged 18 or over: we do not knowingly collect data of minors.
8. Changes to this notice
If we change how we use your data we update this page.
Last update: 10/14/2026