Cookie Policy
Extended notice on cookies and other tracking technologies
| Website | boscolivo.com |
| Controller | Azienda Agricola Boscolivo |
| Last updated | 29 August 2026 |
| Version | 1.0 |
1. Scope of this notice
This Cookie Policy explains the use of cookies and similar technologies on https://boscolivo.com (the “Site”). It supplements the Site Privacy Policy and should be read together with it.
The register below combines what the CookieAdmin preference panel declared on 29 August 2026 with standard cookies that may be activated by the WordPress/WooCommerce features present on the Site. Some identifiers are created only when a visitor uses the cart, signs in, views external content, or selects a particular payment method.
2. Data controller
Azienda Agricola Boscolivo — Via Dante Alighieri, 11, 98036 Graniti (ME), Italy — VAT no. IT03678990833 — email: info@boscolivo.com.
For information about cookies or to exercise applicable data protection rights, please email info@boscolivo.com.
3. What cookies and similar technologies are
Cookies are small text files that a website stores on or reads from a visitor’s device. Session cookies are deleted when the browser closes or the session ends; persistent cookies remain for a defined period.
First-party cookies are managed through the domain being visited, while third-party cookies are managed by another organisation. Pixels, web beacons, scripts, local-storage identifiers and embedded content may perform similar functions and are addressed in this Policy whenever they involve storage, access or tracking.
4. Classification criteria and legal bases
4.1 Technical or strictly necessary cookies
These are used solely to transmit communications or provide a function requested by the visitor, such as retaining a cart, operating checkout, maintaining an authenticated session, preventing fraud or remembering privacy choices. Consent is not required under Article 122(1) of the Italian Privacy Code. Any resulting personal-data processing relies, as applicable, on performance of a contract, compliance with a legal obligation, or the legitimate interest in keeping the Site secure and operational.
4.2 Analytics, functional and advertising cookies
Where they are not strictly necessary, these technologies are activated only after freely given, specific, informed and withdrawable consent under Article 122 of the Italian Privacy Code and Article 6(1)(a) GDPR. Refusal does not prevent visitors from browsing or purchasing, but it may disable optional features or external content.
- Functional: enable optional external services or personalisation.
- Analytics: measure traffic origin, navigation and Site usage.
- Advertising: measure campaigns or enable personalised content and advertising.
5. Consent management
On the first visit, the CookieAdmin banner allows visitors to reject all non-essential cookies, accept all cookies, or customise categories. Necessary cookies remain active. No non-essential cookie or tool should be activated before the visitor makes a choice.
Preferences can be changed at any time using the permanent “Re-consent”/“Review cookie choices” control available on the Site. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The Site is configured to recognise the Global Privacy Control (GPC) signal. If a visitor expressly chooses to override that signal in the preference panel, the selected preferences apply. The technical cookie cookieadmin_consent records the choice for 365 days; the banner may be shown again after a material change, deletion of the cookie, or as otherwise required by applicable rules.
6. Cookie register — strictly necessary
Cookies described as conditional are created only when the corresponding feature is used. The * symbol represents a variable part of a cookie name.
| Cookie / technology | Provider | Purpose and trigger | Duration |
| cookieadmin_consent | Boscolivo / CookieAdmin | Records consent choices and enables later changes. | 365 days |
| woocommerce_cart_hash | WooCommerce | Detects changes to cart contents; conditional on cart use. | Session |
| woocommerce_items_in_cart | WooCommerce | Remembers that the cart contains items; conditional on cart use. | Session |
| wp_woocommerce_session_* | WooCommerce | Links the visitor to cart data retained on the server. | 2 days |
| woocommerce_recently_viewed | WooCommerce | Supports the optional recently viewed products feature. | Session |
| store_notice[notice_id] | WooCommerce | Remembers dismissal of a store notice, if one is shown. | Session |
| wordpress_logged_in_* | WordPress | Maintains an authenticated account session; only after sign-in. | Session or “Remember me” period |
| wordpress_sec_* | WordPress | Protects and authenticates a signed-in visitor’s session. | Session |
7. Cookie register — analytics
The CookieAdmin panel classifies the following first-party identifiers as “Analytical Cookies”. WooCommerce Order Attribution uses them to associate visit-origin information with an order, if one is placed. WooCommerce states that they are not used for remarketing or cross-session tracking. On this Site they must be activated only after analytics consent.
| Cookie | Provider | Purpose | Duration |
| sbjs_migrations | WooCommerce | Technical data for migrations between attribution feature versions. | Session |
| sbjs_current_add | WooCommerce | Timestamp, referring URL and entry page for the current visit. | Session |
| sbjs_first_add | WooCommerce | Timestamp, referring URL and entry page for the first visit. | Session |
| sbjs_current | WooCommerce | Traffic-origin information for the current visit. | Session |
| sbjs_first | WooCommerce | Traffic-origin information for the first visit. | Session |
| sbjs_udata | WooCommerce | User-agent, browser and device-type information. | Session |
| sbjs_session | WooCommerce | Number of session page views and the current page path. | 30 minutes |
8. Functional, advertising and other identifiers
At the time of review, the CMP did not list any cookies under “Functional Cookies” or “Advertisement Cookies”. The presence of a category in the panel does not mean that cookies in that category are active. Before new integrations are enabled, the register must state their name, provider, purpose, duration and category.
The identifier mcforms-233424382-sessionId was nevertheless observed in association with Mailchimp components, without a category or description in the CMP. It must be classified and documented before activation; as a precaution, it should remain blocked until functional/marketing consent is given.
9. External services and observed technologies
Loading an external service may disclose the visitor’s IP address, page URL, device data, date and time, identifiers and interactions to that provider. Where the service is not necessary, it must remain blocked until consent and be replaced by a placeholder that lets the visitor activate it.
| Provider | Service | Data / technology | Category |
| CookieAdmin | Consent management | Technical cookie used to record and change preferences. | Necessary |
| WooCommerce | Shop, cart and order attribution | Cart/session cookies and, with consent, sbjs visit-origin cookies. | Necessary / analytics |
| Mailchimp / Intuit | Newsletter and connected-site snippet | Form, scripts, pixels and session identifiers; optional open/click measurements. | Functional / marketing |
| Maps and Fonts | The embedded map and remote fonts may disclose IP and technical data; Google may use its own identifiers. | Functional | |
| Meta / Instagram | Social-media link | A plain link does not set cookies on the Site; later interaction takes place on Instagram. | External |
| WooPayments / Stripe | Payments and fraud prevention | Necessary cookies and technical signals may be set at checkout if this method is selected. | Necessary for payment |
| Klarna | Payments and fraud prevention | Necessary cookies and technical signals may be set at checkout if this method is selected. | Necessary for payment |
10. International transfers
Some providers may process data outside the European Economic Area. Transfers must rely on an adequacy decision, Standard Contractual Clauses or another mechanism under Articles 44–49 GDPR, together with supplementary measures where required. Visitors may contact the Controller for information about applicable safeguards.
11. Browser controls
Visitors may delete or block cookies through browser settings. Blocking necessary cookies may prevent accounts, carts, checkout, payments or privacy preferences from working. Deleting cookies already stored does not always withdraw consent at provider level, so visitors should also use the “Review cookie choices” panel.
- Google Chrome: Settings → Privacy and security → Cookies and site data.
- Apple Safari: Settings/Preferences → Privacy → Manage Website Data.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Microsoft Edge: Settings → Cookies and site permissions.
12. Data subject rights
Where cookies or similar technologies involve personal-data processing, visitors may exercise the rights of access, rectification, erasure, restriction, portability and objection where provided by the GDPR, and may withdraw consent at any time. Requests may be sent to info@boscolivo.com. Visitors may also lodge a complaint with the Italian Data Protection Authority.
13. Updates
The Controller may update this Cookie Policy following legal, technical or service changes. The current version will be published on the Site with its revision date. If purposes, categories or third parties change materially, consent will be requested again where required.
14. Sources and provider notices
Authority: Italian DPA Guidelines on cookies and other tracking tools
Law: Regulation (EU) 2016/679 on EUR-Lex
WooCommerce: Store cookies
WooCommerce: Order attribution cookies
Mailchimp: Cookie Statement
Google: Use of cookies and similar technologies
Stripe: Cookie Policy
Klarna: International Cookie Policy
