Contact us on Whatsapp: +393793127570

Free shipping in Europe on all orders over €149

Search

Need Help?

Message us on WA +393793127570

Social

Privacy Policy

Effective from October 8, 2025

This Application collects some Personal Data from its Users.

Data Controller

BMROCK SRLS – AgroHammers brand
Registered office: Via Arimanno 20, 25127 Brescia (BS), Italy – VAT No. 0700610985
E-mail address of the Controller: info@agrohammers.com

Types of Data Collected

Among the types of Personal Data collected, either independently or through third parties, there are:

  • Identification and contact data: name, surname, email, billing and shipping address, telephone (if provided), company name, VAT number, and tax code (optional).
  • Account data: credentials (hashed), preferences, order history.
  • Payment data: processed securely through WooPayments (Automattic) and PayPal. AgroHammers does not store complete card details.
  • Usage and cookie data: IP address (possibly anonymized), online identifiers, device/browser data, visited pages, and actions performed, collected via Google Tag Manager, Google Analytics, Google Ads, reCAPTCHA, and CookieYes.
  • Marketing data: name, surname, and email for newsletter or promotional messages via Brevo (formerly Sendinblue).
  • Assistance communications: voluntary messages sent via email or WhatsApp Business.

Complete details on each type of data collected are provided in the relevant sections or through specific information texts displayed before the collection itself.

Unless otherwise specified, all requested data are necessary to provide the requested services (orders, billing, shipping). Failure to provide such data may make it impossible to provide the service.
The use of Cookies or other tracking tools serves to provide the requested Service and for the additional purposes described in this Policy and in the Cookie Policy.

The User assumes responsibility for third-party Personal Data obtained, published, or shared through this Application.

Methods and Place of Processing

Processing Methods

The Controller adopts appropriate technical and organizational measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Data are processed using electronic and telematic tools with organizational methods strictly related to the stated purposes.
In addition to the Controller, in some cases, other parties involved in the organization (administrative, sales, marketing, IT staff, etc.) or external partners (technical service providers, carriers, hosting providers, IT companies, payment gateways, or communication agencies) may have access to the Data. These may be appointed, if necessary, as Data Processors.
The updated list of Data Processors can be requested from the Controller at any time.

Place

Data are processed at the Controller’s operating offices and at the locations of the parties involved in the processing.
Any transfers outside the EU (e.g., United Kingdom, Switzerland) are carried out in compliance with Chapter V of the GDPR, such as through Standard Contractual Clauses (SCC) or adequacy decisions.

Legal Basis for Processing

The Controller processes Personal Data if at least one of the following legal bases applies:

  • Contract performance / pre-contractual measures (Art. 6.1.b): managing cart, orders, payments, shipping, returns, customer accounts.
  • Legal obligation (Art. 6.1.c): electronic invoicing, tax and accounting obligations, responding to lawful authority requests.
  • Legitimate interest (Art. 6.1.f): website security, prevention of fraud/abuse, operational management (e.g., Tag Manager without independent tracking), responding to spontaneous support inquiries, aggregated statistical analysis with minimal impact on data subjects.
  • Consent (Art. 6.1.a): analytics and marketing cookies, Google Ads, newsletter/DEM via Brevo, marketing profiling, Google reCAPTCHA when not strictly necessary for security.

Users may always request clarification from the Controller on the specific legal basis for each processing.

Data Retention

  • Orders/invoices: up to 10 years (legal obligations).
  • Customer accounts: until deletion request or closure of the account (unless retention is required by law).
  • Marketing/newsletter data: until withdrawal of consent or unsubscribe.
  • Technical and browsing logs: up to 12 months (unless needed for security purposes).
    After these periods, Personal Data will be deleted or anonymized.

Purposes of Processing and Legal Bases (Summary)

  1. E-commerce management (cart, checkout, shipping, returns, support)
    Data: contact info, address, tax/VAT data, order details.
    Legal basis: contract; legal obligation for invoicing.
  2. Payments (via third-party processors)
    Data: transaction identifiers, payment outcomes; no card data stored.
    Legal basis: contract; legal obligation (anti-fraud obligations of payment processors).
  3. Customer account / reserved area
    Data: identification, contact info, credentials, order history.
    Legal basis: contract; legitimate interest (account management).
  4. Customer support (email or WhatsApp Business)
    Data: messages, contact info.
    Legal basis: legitimate interest to respond; contract if linked to an order.
  5. Analytics and website improvement
    Data: IP (possibly anonymized), events, device/browser data.
    Legal basis: consent (non-essential analytical cookies).
  6. Marketing, newsletter, and profiling
    Data: name, surname, email, interaction data.
    Legal basis: consent (may withdraw at any time).
  7. Security and abuse prevention (including reCAPTCHA where non-technical)
    Data: risk indicators, behavioral patterns.
    Legal basis: legitimate interest or consent, depending on configuration.

Third-Party Services Used (with Privacy Policy Links)

These providers may process data outside the EU (e.g., UK, CH) in compliance with GDPR Chapter V and Standard Contractual Clauses (SCC).

User Rights

Users may exercise their rights under Articles 15–22 of the GDPR: access, rectification, erasure, restriction, portability, objection (especially to marketing/profiling), and withdrawal of consent at any time.
Requests can be sent to: info@agrohammers.com.
Users may also file a complaint with the Italian Data Protection Authority: https://www.garanteprivacy.it/

Cookies and Consent Management

The website uses necessary cookies for basic functionality.
Analytics and marketing cookies are activated only upon consent through CookieYes, which can be modified anytime via “Manage Cookie Consent.”
For details on cookie categories, purposes, and durations, please refer to the Cookie Policy.

Minors

The Site and services are not intended for individuals under 18 years old, and no intentional data collection occurs for minors.

Changes to this Privacy Policy

The Controller reserves the right to modify this Policy at any time.
Substantial changes will be communicated via this website. Please check this page periodically (effective date at the top).