Privacy Policy

1. Data Controller

The data controller is Wine Bank 24. For any requests regarding your personal data, contact us at: privacy@winebank24.com

2. Data Collected

We collect the following personal data:

• Registration data: name, email address, encrypted password
• KYC data: first name, last name, date of birth, country of residence
• Transaction data: history of purchases and transfers of digital certificates
• Payment data: handled securely by Stripe (we do not store card data)
• Navigation data: access logs, IP address (for security purposes)

3. Purpose of Processing

• Provision of the marketplace service for collectors
• Account management and authentication
• Processing purchase and transfer transactions
• Service communications (transaction notifications, updates)
• Legal and fiscal compliance
• Platform security and fraud prevention

4. Legal Basis

• Contract performance (Art. 6.1.b GDPR): to provide the requested service
• Legal obligation (Art. 6.1.c GDPR): for tax and regulatory compliance
• Legitimate interest (Art. 6.1.f GDPR): for security and fraud prevention
• Consent (Art. 6.1.a GDPR): for promotional communications (optional)

5. Data Retention

Account data is retained for the duration of the contractual relationship and for 10 years thereafter, in compliance with Italian tax obligations. Navigation data is retained for a maximum of 12 months.

6. Data Sharing

Your data is not sold to third parties. It is shared exclusively with:

• Stripe Inc.: payment processor
• Supabase Inc.: database provider
• Vercel Inc.: hosting provider
• Certified wineries: limited to data necessary for physical delivery of goods

7. Your Rights

Under GDPR you have the right to: access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent at any time.

Contact privacy@winebank24.com to exercise your rights.

8. Cookies

The platform uses only technical cookies necessary for the service (authentication, security). We do not use third-party profiling or advertising cookies.