1. Data Controller
The Data Controller is:
Società Agricola BioXFarm S.r.l.s.
Registered office: Contrada Ciuranà, 88812 Crucoli (KR), Italia
VAT number: 03832410793
REA number: KR – 186392
E-mail: info@bioxfarm.com
Phone: +39 0962 34 034
For more information on the processing of personal data, please see the Site’s Privacy Policy.
2. What are cookies?
Cookies are small text files that websites can store on the User’s device while browsing.
Cookies may be used, for example, to enable the Site to function correctly, keep a session active, remember cart contents, store preferences expressed by the User, protect the Site from fraudulent access, or collect information about how pages are used.
In addition to cookies, the Site may use similar technologies, such as pixels, tags, scripts, online identifiers and interaction-measurement systems.
3. Types of cookies used
The Site may use the following categories of cookies and tracking tools:
3.1 Technical and strictly necessary cookies
These are necessary for the Site to function correctly and to provide the services requested by the User.
They may be used to:
- ensure the security of the Site;
- protect forms from spam, bots and fraudulent use;
- manage the cart and checkout;
- process orders;
- keep the User’s session active;
- allow access to the personal account area;
- remember cookie preferences;
- correctly manage payments.
These cookies do not require the User’s prior consent, as they are strictly necessary for the Site to function or to provide a service expressly requested.
3.2 Analytics cookies
These are used to understand how Users interact with the Site, measuring visits, page views, traffic sources, page performance and other statistical information.
When such tools cannot be considered strictly necessary or equivalent to technical cookies, they are activated only after the User’s consent.
3.3 Advertising and profiling cookies
These are used to measure the effectiveness of advertising campaigns, record conversions, limit ad repetition and, where applicable, show advertising consistent with the User’s interests.
These cookies and tracking tools are activated only after the User’s consent.
4. Cookies and services used by the Site
4.1 BioXFarm technical cookies
The Site may use first-party cookies to:
- store cart contents;
- manage checkout;
- keep the account session active;
- allow access via a temporary OTP code;
- ensure the security of the personal account area;
- store cookie preferences;
- prevent unauthorised access and fraudulent use.
Session cookies are normally deleted when the browser is closed or the session expires. The personal account session can last up to a maximum of 24 hours.
The cookie-consent preference may be stored for a maximum period of 6 months, unless deleted earlier by the User or in the event of substantial changes to the services used.
4.2 Cloudflare
Provider: Cloudflare, Inc.
The Site uses Cloudflare services to:
- optimise and distribute traffic;
- improve the Site’s speed, reliability and security;
- protect the Site from cyberattacks;
- counter spam, bots and fraudulent access;
- protect forms via Cloudflare Turnstile;
- collect aggregated statistics via Cloudflare Web Analytics.
While using these services, technical data such as the following may be processed:
- IP address;
- date and time of the request;
- usage data;
- device information;
- operating system;
- browser type and version;
- language;
- session data;
- pages visited;
- technical and security events;
- information needed to distinguish human from automated traffic;
- approximate geographic area derived from the IP address.
Cloudflare may use strictly necessary cookies, including, where configured:
__cf_bm, used to detect and counter automated traffic, expiring after roughly 30 minutes of inactivity;cf_clearance, used to store the successful outcome of security checks for the period configured by the service;- further technical identifiers that may be necessary for traffic balancing, security and abuse prevention.
Cloudflare Turnstile is used to protect the Site’s forms from spam and bots. The service may analyse technical signals related to the browser, device and session solely to verify whether the interaction comes from a person or an automated system.
Cloudflare Web Analytics is a privacy-oriented statistical analysis service. According to the provider, the service does not use the data collected to identify or personally profile visitors.
More information:
4.3 Google Analytics 4
Provider: Google Ireland Limited
Subject to the User’s consent, the Site may use Google Analytics 4 to collect statistical information about use of the Site.
The service may collect or process:
- IP address;
- online identifiers;
- pages visited;
- traffic sources;
- duration and number of sessions;
- page interactions;
- navigation events;
- device information;
- operating system;
- browser type;
- language;
- approximate geographic area;
- data relating to purchases and conversions.
Google Analytics may use cookies such as:
_ga, used to distinguish Users;_ga_<ID>, used to store and count sessions.
The duration of these cookies can be up to 2 years, unless deleted earlier, settings are changed, or the service is configured differently.
Google Analytics is activated only after the User has consented to the analytics cookie category.
More information:
4.4 Google Ads
Provider: Google Ireland Limited
Subject to the User’s consent, the Site may use Google Ads to:
- measure conversions generated by advertising campaigns;
- assess the effectiveness of advertisements;
- attribute orders or other actions to advertising campaigns;
- create audience segments;
- carry out remarketing activities;
- show advertisements relevant to the User’s interests, when this function is enabled.
Google Ads may collect or process:
- online identifiers;
- IP address;
- usage data;
- pages visited;
- clicks and interactions;
- device and browser information;
- traffic sources;
- conversion data;
- order information, such as value and transaction identifier, without acquiring complete payment data.
The service may use cookies or identifiers such as:
_gcl_au;_gcl_aw;- cookies belonging to Google and DoubleClick domains, when necessary for enabled advertising functions.
The duration can range from a single session up to 13 months in the European Economic Area and the United Kingdom, depending on the cookie and the specific configuration.
Google Ads is activated only after the User has consented to the advertising and profiling cookie category.
The User can also change their advertising preferences via Google Ads Settings.
Further information is available on the Google advertising cookies information page.
4.5 Stripe
Provider: Stripe Payments Europe, Limited and other applicable Stripe group companies
The Site uses Stripe to process electronic payments and prevent fraud and unlawful use.
When the User accesses checkout or chooses to make a payment, Stripe may process:
- identification and contact data;
- IP address;
- device and browser information;
- transaction data;
- amount, currency and payment status;
- technical data required for authentication;
- signals used for fraud prevention;
- card and payment method data, processed directly by Stripe.
BioXFarm does not receive the full card number used for payment.
Stripe may use strictly necessary cookies to process payment, ensure transaction security and prevent fraud, including, depending on the configuration:
__stripe_mid;__stripe_sid;- other technical and anti-fraud identifiers used by the service.
The duration of these cookies can range from a single session up to the period necessary for security and fraud-prevention purposes.
Stripe’s strictly necessary cookies may be activated when the User accesses checkout or requests the payment service.
More information:
5. Summary of categories
| Service | Category | Purpose | Activation |
|---|---|---|---|
| BioXFarm cookies | Necessary | Session, account, cart, checkout and preferences | Always active |
| Cloudflare CDN and security | Necessary | Performance, security and protection from attacks | Always active |
| Cloudflare Bot Management and Turnstile | Necessary | Protection from spam, bots and fraud | Always active |
| Cloudflare Web Analytics | Statistics without personal profiling | Aggregated measurement of traffic and performance | According to configuration applied |
| Google Analytics 4 | Analytics | Statistics on Site usage | Only after consent |
| Google Ads | Marketing and profiling | Conversions, campaigns and remarketing | Only after consent |
| Stripe | Necessary | Payments and fraud prevention | During checkout |
The precise list of cookies actually present, with provider, purpose and duration, can be found in the “Cookie settings” panel, which forms an integral part of this Cookie Policy.
6. Managing preferences
The User may accept, reject or customise the use of non-necessary cookies through the banner shown on first access to the Site.
Technical and strictly necessary cookies cannot be disabled via the banner, as they are essential for the Site to function and remain secure.
Google Analytics and Google Ads remain disabled until the User gives the relevant consent.
Cookie settings
The User may change or withdraw their preferences at any time using the “Cookie settings” button or link available on the Site.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Management via the browser
The User can also configure their browser to block or delete cookies. Disabling technical cookies could impair some Site functions, such as account access, the cart or checkout.
Instructions for the main browsers are available at the following addresses:
If a different browser is used, please refer to its official documentation.
8. Data transfer
Some providers referred to in this Cookie Policy may process data outside the European Economic Area.
Any international transfers are carried out on the basis of the tools provided by applicable law, such as adequacy decisions, the EU-US Data Privacy Framework, where applicable, or standard contractual clauses approved by the European Commission.
Further information is available in the individual providers’ notices and in the Site’s Privacy Policy.
9. Changes to the Cookie Policy
The Controller may update this Cookie Policy to bring it into line with regulatory, technical or service-related changes.
In the event of substantial changes to the purposes or providers, Users may be asked to express their preferences again.
10. Contact
For information on the use of cookies and other tracking tools, you can contact:
Società Agricola BioXFarm S.r.l.s.
Contrada Ciuranà, 88812 Crucoli (KR), Italia
E-mail: info@bioxfarm.com
Phone: +39 0962 34 034