Privacy policy regarding the processing of personal data of the website www.wineshopit.ch

In accordance with the Federal Data Protection Act (DPA), we provide the necessary information regarding the processing of personal data collected during your experience on our website www.wineshopit.ch

  1. CATEGORIES OF PERSONAL DATA PROCESSED | DEFINITIONS

The personal data provided - or otherwise acquired in accordance with the laws and contractual provisions in force - relating, connected and/ or instrumental to the evaluation of your experience on our site, will be treated in accordance with the privacy policy and the confidentiality obligations applicable to you.

Personal data: all information relating to an identified or identifiable person.

In particular, we will process the following personal data: navigation data (for more information on the data collected with cookies, read the Cookie Policy); data provided directly by the data subject (for example, for access to the reserved area and for sending requests through the form "Contact us": e-mail address).

Please note that the computer systems responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This data category includes the IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and the computer environment of the user.

Data subjects: natural or legal persons whose data are processed (hereinafter "you").

Processing means any operation relating to personal data, irrespective of the means and procedures adopted, in particular the collection, storage, use, review, communication, storage or destruction of data.

Communication: that is, making personal data accessible, for example by allowing access, transmission or publication.

2. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

The entity that determines the purposes and means of this processing of personal data WINESHOPIT SAGL, a company under Swiss law based in via Dufour 1 - 6900 Lugano - CHE-282.172.430 (hereinafter also referred to as "Data Controller" or "Company" or "us").

The Data Controller can be contacted at info@wineshopit.ch

3. PURPOSE OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD   

3.1 METHODS OF DATA PROCESSING

The processing will be carried out in automated and/ or manual form, with methods and tools aimed at ensuring maximum security and confidentiality, by subjects of this specially trained. The personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.

4. RECIPIENTS OF PERSONAL DATA

Personal data will be communicated, based also on the purposes provided in specific areas, to subjects who will process the data as autonomous data controllers, o Data Processors and processed by natural persons acting under the authority of the Data Controller and Data Processors on the basis of specific instructions provided for purposes and methods of processing, for specific purposes according to the area of reference. In particular, we may share the collected personal data with the following categories of recipients: a) entities that provide services related to the operation of this website, the computer system of Wineshopit.ch and telecommunications networks (e.g. hosting provider, webmaster); b) support and consulting companies (e.g. , trustees, web & digital marketing agencies); c) competent authorities for compliance with legal obligations and/or the provisions of public bodies, on request.

5. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

The site is based in Germany (hosting) and, therefore, the personal data processed will be transmitted outside the Swiss Confederation. In addition, the Data Controller specifies that, in accordance with the information provided by the DPA and the Federal Data Protection and Transparency Commissioner, Germany is a third country with adequate safeguards for the transfer of personal data. The list of suitable countries can be checked at the following link:

https://www.fedlex.admin.ch/eli/cc/2022/568/it#annex_1

6. RIGHTS OF THE DATA SUBJECT

Under the DPA, you are granted the following rights (non-exhaustive list):

obtain the rectification of inaccurate or outdated personal data;

be informed in writing/free of charge if the personal data concerning you are processed;

prevent the communication of any sensitive personal data to third parties;

obtain the portability of personal data or request that it be transferred to third parties;

withdraw any consent given;

request the restriction or blocking of data processing, the prevention of the communication of data to third parties or the rectification or destruction of personal data;

require the prohibition of a specific processing of personal data and a specific communication of personal data to third parties or the deletion or destruction of certain personal data;

if neither the correctness nor the inaccuracy of the personal data can be proved, request the addition of a note to indicate the dispute;

require that the rectification, destruction, blocking, especially communication to third parties, in addition to the note on the dispute or judgment be communicated to third parties or published;

have the processing of personal data declared unlawful.

Reserved any other administrative and judicial recourse, if the user believes that the processing of data concerning him violates the provisions of the LPD, has the right to lodge a complaint with the competent Supervisory Authority (Federal Data Protection and Transparency Officer). In addition, as regards the purpose of "Newsletter subscription", the interested party can unsubscribe from the service using the automatic channel provided (unsubscribe link present in the e-mail footer).

7. ADDITIONAL INFORMATION | CHANGES | UPDATES

We do not sell the personal data we process. The Data Controller reserves the right to review, update, add or remove any part of this privacy policy at its discretion at any time. In case of changes, the update date will be indicated.

Last updated: 27 March 2024