Privacy & Cookie Policy

WHY THIS NOTICE

This page describes how the website is managed with regard to the processing of the personal data of users who consult it. This notice is provided pursuant to Article 13 of EU Regulation 2016/679, hereinafter the “Regulation”, to those who interact with the web services of FLORA TOSCANA società agricola cooperativa, accessible online from the address: http://www.floratoscana.it/. This notice applies only to the website of FLORA TOSCANA società agricola cooperativa and not to any other websites that the user may consult via links.

DATA CONTROLLER

The Data Controller is FLORA TOSCANA società agricola cooperativa, with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

DATA PROCESSING LOCATION

Processing operations connected to the web services of this website take place at the registered office of the Data Controller and are carried out exclusively by personnel specifically designated and authorised to process the data.

Where necessary, the data may also be processed by:

• personnel of the company responsible for maintaining the technological part of the website;
• personnel of the company providing the web space on which the website is hosted.

TYPES OF PROCESSED DATA

• a) Navigation Data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI — Uniform Resource Identifier — addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server — successful, error, etc. — and other parameters relating to the user’s operating system and IT environment.

These data are used solely to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, and are deleted immediately after processing.

The data could be used to ascertain liability in the event of hypothetical computer crimes against the website. The legal basis for this processing is the legitimate interest of the Data Controller in the technical management of the functionality and security of the website.

May 2026

Customer Privacy Notice

Art. 13 EU Regulation April 27, 2016 No. 679

“General Data Protection Regulation”

Flora Toscana Soc. Agr. Coop., as the data controller, hereby informs you that, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data (hereinafter “Regulation”), for the establishment and execution of ongoing contractual relationships, it is in possession of or may subsequently become aware of information relating to you.

1. Types of personal data processed

The following personal data may be processed: identification data, tax information, contact details, bank details, and other administrative or commercial data necessary for the purposes indicated below.

2. Purpose of processing

1. fulfillment of legal obligations and execution of the contract of which you are a party, accounting and administrative management, management of existing commercial relationships, and any disputes;
2. sending advertising material and commercial communications, via e-mail, regarding marketed products and services, invitations to events organized also in collaboration with trusted companies or professionals, and conducting surveys aimed at assessing customer satisfaction (so-called customer satisfaction).

3. Legal basis

The legal basis for processing under point 2.a) is the performance of a contract of which you are a party or the implementation of pre-contractual measures adopted at your request. Providing the requested information is necessary to fulfill legal and contractual obligations; therefore, any refusal to provide it will make it impossible for the data controller to execute the contract. The legal basis for processing under point 2.b) is the consent you provide. Providing personal data is optional. If you give consent, please note that you may exercise the right to withdraw it at any time with the same ease as it was initially granted.

4. Recipients of personal data

Your personal data will be processed by authorized personnel, properly trained, and operating under the authority and responsibility of the Data Controller. Personal data may also be processed by third parties providing instrumental services, including communication services, email, mail delivery, and other service providers related to the purposes mentioned above. Only data strictly necessary for the performance of these functions will be communicated to the aforementioned parties. An updated list of all recipients is available at the Data Controller’s headquarters and will be provided upon request by writing to the following email address: privacy@floratoscana.it

5. Data subject rights

You are also informed that you can exercise, at any time, the rights provided under CHAPTER III of the aforementioned Regulation regarding your personal data. In particular, you have the right to request from the Data Controller access to your data, their rectification or deletion, completion of incomplete data, restriction of processing; to receive your data in a structured, commonly used, and machine-readable format; to object in whole or in part to the use of data, as well as to exercise other rights recognized by applicable law. These rights can be exercised by writing to the following email address: privacy@floratoscana.it. Furthermore, pursuant to Art. 77 of EU Regulation 2016/679, you have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

6. Contact details of the Data Controller

Flora Toscana Soc. Agr. Coop., with registered office at Via di Montecarlo, 81 – Pescia (PT) privacy@floratoscana.it

May 2026

Member privacy notice

Flora Toscana Soc. Agr. Coop., in its capacity as Data Controller, hereby informs you that, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data, hereinafter the “Regulation”, for the establishment and performance of ongoing contractual relationships, it holds or may subsequently become aware of information relating to you.

1. Type of personal data

The following personal data may be processed: personal details, tax data, contact details, bank details and other administrative or commercial data necessary for the purposes set out below.

2. Purposes of processing

1. Personal data will be processed for the management of the application for admission, for all rights, obligations and activities arising from the status of member, and for commercial and economic purposes deriving from the use of the membership card.

Where a member loan relationship is also established, the data provided by you or acquired will also be processed in order to manage all operations relating to the opening and execution of the contractually agreed transactions concerning the registered member loan account held with the Cooperative. In the event of cheque negotiation, your data will be processed in order to allow the collection of such instruments.

1. Only with your prior consent may personal data also be processed for the sending of information and promotional material through our newsletter service.

3. Legal basis

The legal basis for the processing referred to in point 2.a) is the performance of a contract to which you are a party or the performance of pre-contractual measures taken at your request. The provision of the requested information is necessary in order to fulfil legal and contractual obligations; therefore, any refusal to provide it will make it impossible for us to perform the contract.

The legal basis for the processing referred to in point 2.b) is, instead, the consent given by you. The provision of personal data is optional. Where you give consent, please note that you have the right to withdraw it at any time and with the same ease with which it was previously given.

4. Retentions periods

For the processing referred to in point 2.a), the data will be retained for the period of time necessary to pursue the purposes indicated above and, in any case, no longer than the periods required by specific legal obligations.

For the processing referred to in point 2.b), the data will be retained for 24 months.

5. Recipients of personal data

The personal data provided by you will be processed by authorised personnel, duly instructed and operating under the authority and responsibility of the Data Controller.

Personal data may also be processed by third parties providing ancillary services, including communication services, email services, correspondence delivery services and other service providers connected with the purposes mentioned above.

Only the data strictly necessary for the performance of the relevant functions will be disclosed to the above-mentioned parties.

The updated list of all recipients is available at the registered office of the Data Controller and will be provided upon request by the data subject by writing to the following email address: privacy@floratoscana.it

6. Rights of the data subject

We also inform you that, in relation to the same data, you may exercise at any time the rights provided for by Chapter III of the aforementioned Regulation.

In particular, you have the right to request from the Data Controller access to the data concerning you, their rectification or erasure, the completion of incomplete data, the restriction of processing; to receive the data in a structured, commonly used and machine-readable format; to object, in whole or in part, to the use of the data; and to exercise the other rights granted to you by the applicable legislation.

These rights may be exercised by writing to the following email address: privacy@floratoscana.it.

Pursuant to Article 77 of EU Regulation 2016/679, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

7. Data controller

Flora Toscana Soc. Agr. Coop., with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

Email address: privacy@floratoscana.it

May 2026

Newsletter Privacy Notice

The undersigned FLORA TOSCANA società agricola cooperativa, in its capacity as Data Controller, hereby informs you that, also pursuant to Article 13 of EU Regulation No. 679 of 27 April 2016, the “General Data Protection Regulation” hereinafter the “Regulation”, the personal data provided by you, hereinafter referred to as the “data subject”, will be processed as follows.

1. Purposes of processing

Personal data will be processed for the sending of information and promotional material through our newsletter service.

2. Legal basis and provision of data

The legal basis for the processing is the consent provided by you, and the provision of personal data is optional.

Where you give your consent to receive information and promotional material through the newsletter service, please note that you have the right to withdraw such consent at any time and with the same ease with which it was previously given.

3. Retention periods

The data will be retained until consent is withdrawn and, in any case, for no longer than 24 months from the date on which consent was obtained.

4. Recipients of personal data

The personal data provided by you will be processed by authorised personnel, duly instructed and operating under the authority and responsibility of the Data Controller.

Personal data may also be processed by third parties providing ancillary services, including communication services, email services, correspondence delivery services, technical services for the management of the Website and IT service providers.

Only the data strictly necessary for the performance of the relevant functions will be disclosed to the above-mentioned parties.

The updated list of all recipients is available at the registered office of the Data Controller and will be provided upon request by the data subject by writing to the following email address: privacy@floratoscana.it

5. Rights of the data subject

We also inform you that, in relation to the same data, you may exercise at any time the rights provided for by Chapter III of the Regulation.

In particular, you have the right to request from the Data Controller access to the data concerning you, their rectification or erasure, the completion of incomplete data, the restriction of processing; to receive the data in a structured, commonly used and machine-readable format; to withdraw any consent given in relation to the processing of your data and to object, in whole or in part, to the use of the data; and to exercise the other rights granted to you by the applicable legislation.

These rights may be exercised by writing to the following email address: privacy@floratoscana.it.

Pursuant to Article 77 of the Regulation, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

6. Data Controller

FLORA TOSCANA società agricola cooperativa, with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

Email address: privacy@floratoscana.it

May 2026

Work with usa Privacy Notice

FLORA TOSCANA società agricola cooperativa, in its capacity as Data Controller, hereinafter also simply the “Controller”, hereby informs you that, pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data, hereinafter the “Regulation”, the data provided by you will be processed as follows.

1.  Type of personal data processed and purposes of processing

The data provided by you by completing the form, as well as data collected by our personnel from public sources, for example via LinkedIn, will be processed.

Such data may be summarised in the following categories:

1. common personal data, such as personal details and contact details, image, data relating to educational qualifications, work experience and professional skills, information relating to your skills identified during the tests in which you decide to take part, department of interest, possession of certifications, for example a licence for the use of plant protection products or HACCP certification;

2. special categories of personal data, so-called sensitive data, strictly necessary for the application of regulations granting benefits, payments and/or rights of various kinds, for example any membership of protected categories. Please note that, with the exception of such information, no other special categories of personal data should be provided, namely data capable of revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organisations of a religious, philosophical, political or trade-union nature, as well as personal data capable of revealing health status and sex life.

The personal data provided will be processed in order to allow you to submit your application and take part in the selection procedure carried out by our company. Your data may be used to assess your application in relation to the open position for which you have applied, or also for other positions, including future positions, for which your professional profile may be suitable.

2. Legal basis, provision and retention of data

The processing of the data referred to above under letter a) is based on the performance of pre-contractual measures taken at your request, as well as on the pursuit of the legitimate interest of the Data Controller in collecting information from public sources in order to assess your application more effectively.

The provision of such data is necessary in order to take part in any selection procedure.

The processing of the data referred to above under letter b) is necessary in order to fulfil the obligations and exercise the specific rights of the Data Controller or of the data subject in the field of employment law, social security and social protection. Failure to provide such data will make it impossible for the Controller to recognise any benefits and/or rights provided for by the applicable legislation.

The data provided by you will be retained for 24 months.

3. Recipients of personal data

The personal data provided by you will be processed by authorised personnel, duly instructed and operating under the authority and responsibility of the Controller.

Personal data may also be processed by third parties providing ancillary services, including communication services, email services, correspondence delivery services, technical services for the management of the Website and IT service providers.

Only the data strictly necessary for the performance of the relevant functions will be disclosed to the above-mentioned parties.

The updated list of all recipients is available at the registered office of the Data Controller and will be provided upon request by the data subject by writing to the following email address: privacy@floratoscana.it.

4. Rights of the data subject

We also inform you that, in relation to the same data, you may exercise at any time the rights provided for by Chapter III of the aforementioned Regulation.

In particular, you have the right to request from the Controller access to the data concerning you, their rectification or erasure, the completion of incomplete data, the restriction of processing; to receive the data in a structured, commonly used and machine-readable format; to object, in whole or in part, to the use of the data; and to exercise the other rights granted to you by the applicable legislation.

These rights may be exercised by writing to the following email address: privacy@floratoscana.it.

Pursuant to Article 77 of EU Regulation 2016/679, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

5. Data controller

FLORA TOSCANA società agricola cooperativa, with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

Email address: privacy@floratoscana.it

May 2026

Supplier Privacy Notice

Flora Toscana Soc. Agr. Coop., in its capacity as Data Controller, hereby informs you that, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data, hereinafter the “Regulation”, for the establishment and performance of ongoing contractual relationships, it holds or may subsequently become aware of information relating to you.

1. Type of personal data processed

The following personal data may be processed: personal details, tax data, contact details, bank details and other administrative or commercial data necessary for the purposes set out below.

2. Purposes of processing

The data will be processed for the following purposes: fulfilment of legal obligations and performance of the contract to which you are a party, fulfilment of obligations towards the State tax authorities, accounting and administrative management, management of existing commercial relationships and management of disputes.

3. Legal basis

The legal basis for the processing is the performance of the contract and the need to fulfil the obligations laid down by the legislation in force.

4. Provision of data

The provision of the requested information is mandatory in order to fulfil legal and contractual obligations; therefore, any refusal to provide it will make it impossible for us to perform the contract or to properly carry out all the activities required for the purposes indicated in point 2.

5. Retention periods

The data will be retained for the period of time necessary to pursue the purposes indicated above and, in any case, no longer than the periods required by specific legal obligations.

6. Recipients of personal data

The data will be processed by authorised personnel, duly instructed and operating under the authority and responsibility of the Data Controller.

Some of the information may be disclosed to the parties indicated below:

• public bodies, such as the Italian Revenue Agency, tax offices, etc.;
• law firms or consultancy firms to which the Company has granted a specific mandate;
• companies providing assistance and maintenance services for IT systems or suppliers of digital archiving systems;
• other parties or companies carrying out activities ancillary to the purposes indicated above.

The detailed list of such parties is available at the registered office of the Data Controller and will be provided upon your request by contacting the Data Controller or by writing to the following email address: privacy@floratoscana.it

7. Rights of the data subject

We also inform you that, in relation to the same data, you may exercise at any time the rights provided for by Chapter III of the Regulation.

In particular, you have the right to request from the Data Controller access to the data concerning you, their rectification or erasure, the completion of incomplete data, the restriction of processing; to receive the data in a structured, commonly used and machine-readable format; to object, in whole or in part, to the use of the data; and to exercise the other rights granted to you by the applicable legislation.

These rights may be exercised by writing by post to the contact details indicated below or by email to the following address: privacy@floratoscana.it.

Pursuant to Article 77 of the Regulation, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

8. Contact details of the Data Controller

Flora Toscana Soc. Agr. Coop., with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

privacy@floratoscana.it

May 2026

Contact Privacy Notice

The undersigned FLORA TOSCANA società agricola cooperativa, in its capacity as Data Controller, hereby informs you that, also pursuant to Article 13 of EU Regulation No. 679 of 27 April 2016, the “General Data Protection Regulation”, hereinafter the “Regulation”, the personal data provided by you, hereinafter referred to as the “data subject”, will be processed as follows.

1. Purposes of processing

Personal data will be processed for the following purposes:

a) to provide the information requested;

b) to send advertising material and commercial communications by email relating to marketed products and services, invitations to events organised also in collaboration with companies or professionals we trust, and to carry out surveys aimed at assessing the level of customer satisfaction.

2. Legal basis and provision of data

The legal basis for the processing referred to in point 1.a) is the performance of a contract to which you are a party or the performance of pre-contractual measures taken at your request. The provision of personal data is necessary in order to obtain the information requested.

Failure to provide such data will make it impossible for our personnel to respond to your requests.

For the processing referred to in point 1.b), the legal basis is the consent given by you. The provision of personal data is optional. Where you give consent, please note that you have the right to withdraw it at any time and with the same ease with which it was previously given.

3. Retention periods

For the processing referred to in point 1.a), the data will be retained until the request has been fulfilled.

For the processing referred to in point 1.b), the data will be retained for 24 months.

4. Recipients of personal data

The personal data provided by you will be processed by authorised personnel, duly instructed and operating under the authority and responsibility of the Data Controller.

Personal data may also be processed by third parties providing ancillary services, including communication services, email services, correspondence delivery services, technical services for the management of the Website, IT service providers or, depending on the requests, suggestions or complaints received, service providers connected with the nature of the complaint or suggestion.

Only the data strictly necessary for the performance of the relevant functions will be disclosed to the above-mentioned parties.

The updated list of all recipients is available at the registered office of the Data Controller and will be provided upon request by the data subject by writing to the following email address: privacy@floratoscana.it

5. Rights of the data subject

We also inform you that, in relation to the same data, you may exercise at any time the rights provided for by Chapter III of the Regulation.

In particular, you have the right to request from the Data Controller access to the data concerning you, their rectification or erasure, the completion of incomplete data, the restriction of processing; to receive the data in a structured, commonly used and machine-readable format; to withdraw any consent given in relation to the processing of your data and to object, in whole or in part, to the use of the data; and to exercise the other rights granted to you by the applicable legislation.

These rights may be exercised by writing to the following email address: privacy@floratoscana.it.

Pursuant to Article 77 of the Regulation, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.

6. Data Controller

FLORA TOSCANA società agricola cooperativa, with registered office at Via di Montecarlo, 81 – Pescia (PT), Italy.

Email address: privacy@floratoscana.it

May 2026