Privacy Policy

Last updated: March 2026

This privacy policy describes how Nexia S.r.l. (hereinafter "Vinoly", "we" or "our"), with registered office in Italy, VAT No. 10204250962, collects, uses and protects the personal information of users of the vinoly.it website.

1. Data Controller

The controller of personal data is Nexia S.r.l., who can be contacted at the email address info@vinoly.it.

2. Data Collected

We collect the following categories of personal data:

Identification data: first name, last name, email address, telephone number
Shipping data: complete postal address
Payment data: credit card details are processed directly by Stripe and are never stored on our servers
Browsing data: IP address, browser type, pages visited, session duration
Order-related data: purchase history, preferences, wishlist

3. Purposes of Processing

Your data is processed for the following purposes:

Fulfilling orders and managing shipments
Managing your account and providing customer support
Sending communications related to orders
Sending newsletters and promotional communications (subject to consent)
Improving our services and personalising the experience
Fulfilling legal and tax obligations

4. Legal Basis

The processing of data is based on:

Performance of the contract: to process orders and provide the requested services
Consent: for sending marketing communications
Legal obligation: to comply with tax and regulatory obligations
Legitimate interest: to improve our services and prevent fraud

5. Data Sharing

Your data may be shared with:

Stripe: for secure payment processing
Couriers: for the delivery of orders
IT service providers: for hosting and maintenance of the site

We never sell your personal data to third parties.

6. Data Retention

Personal data is retained for as long as necessary for the purposes for which it was collected, and in any case no longer than 10 years after the termination of the contractual relationship, unless otherwise required by law.

7. Your Rights

Under the GDPR (EU Regulation 2016/679), you have the right to:

Access your personal data
Request its rectification or erasure
Restrict or object to processing
Request data portability
Withdraw consent at any time
Lodge a complaint with the Data Protection Authority

To exercise your rights, contact us at the address info@vinoly.it.

8. Security

We adopt appropriate technical and organisational measures to protect your data, including SSL encryption, restricted data access and regular backups.

9. Changes

We reserve the right to amend this policy. Any changes will be published on this page together with the update date.