PRIVACY POLICY (EU Regulation 2016/679 – GDPR)

Data controller

The data controller is EMMEBI di Baratta Michelangelo, with registered office in Via Lucarelli 36, 70128 Bari, BA, VAT number 08992890726, email address: vinexusdistribuzione@gmail.com, telephone number: +39 347 396 6532.

Purpose of processing

The personal data collected is processed for the following purposes:

Performance of the sales contract for products purchased through the website;
Administrative, accounting, and tax management of transactions;
Sending informative or promotional communications, only with the user's express consent;
After-sales assistance and complaint management;
Compliance with legal and regulatory obligations;
Internal statistical analysis and improvement of the services offered;
IT security and prevention of unauthorized access.

Legal basis for processing

Processing is lawful because:

it is necessary for the performance of a contract or pre-contractual measures (Article 6, paragraph 1, letter b, GDPR);
it is necessary to fulfill legal obligations (letter c);
it is based on the data subject's express consent for marketing purposes (letter a);
it is the data controller's legitimate interest in ensuring the security and improvement of the website (letter f).

Types of data processed

Personal data (name, surname, address, telephone number, email address);
Payment and billing information;
Browsing and cookie data (IP address, access logs, preferences);
Purchase data (products purchased, date, amount).

Treatment methods

Processing is carried out using electronic and manual means, in compliance with the principles of lawfulness, fairness, and transparency.

Adequate security measures are adopted to prevent loss, alteration, or unauthorized access to data.

Data communication

The data may be disclosed to:

Couriers and shipping agents for product delivery;
Accounting and tax consultants;
IT and hosting service providers;
Competent authorities within the limits of the law.

All third parties process the data as Data Processors appointed by the Data Controller.

Data retention

Personal data is retained:

for the duration necessary to process the order and up to 10 years for accounting and tax purposes;
until consent for marketing purposes is revoked.

Rights of the interested party

At any time, you may exercise the rights provided for in Articles 15–22 of the GDPR:

access, rectification, erasure ("right to be forgotten");
restriction or objection to processing;
data portability;
withdrawal of consent;
complaint to the Italian Data Protection Authority (www.garanteprivacy.it).

Requests should be sent to vinexusdistribuzione@gmail.com.

Transfer of data abroad

Data is not transferred outside the European Union.

Where necessary, the Data Controller will ensure compliance with the GDPR (Articles 44 et seq.).

Updates

This policy may be modified or updated. Changes will be posted on the Website with the update date.

Last updated: November 11, 2025