Legal · GDPR
Privacy Policy
This notice explains how VINTAGISM S.R.L. collects and uses personal data when you visit vintagism.eu, request a quote, place a B2B order or get in touch with us, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
Last updated: 25/09/2026
At a glance
We use your data to handle your account, quotes, orders, invoicing and customer care. Analytics and advertising tools (Google, Meta) only use cookies with your consent. We never sell your data. You can exercise your rights at any time by writing to marketing@vintagism.eu.
1. Data controller
VINTAGISM S.R.L.
Registered office: Via Cristoforo Marino 18, 80142 Napoli (NA), Italy
Operational headquarters & warehouse: Via Antonio Pacinotti 2, 81020 San Nicola La Strada (CE), Italy
VAT no.: IT09984361213
E-mail: marketing@vintagism.eu · Phone: +39 379 237 4915
Our website and services are reserved to professionals and businesses (B2B). Where the customer is a company, we process the personal data of its representatives and contact persons (e.g. name, business e-mail and phone number).
2. Data we collect
- Identification & business data: name, surname, company name, VAT/EORI number, tax code, billing and shipping addresses, e-mail, phone number.
- Account data: username and password (stored in encrypted form) if you create an account.
- Order data: products requested, quotes, order history, invoices, shipping and return information.
- Payment data: payments are processed by our payment providers (card, PayPal, Klarna, bank transfer). We do not store full card numbers; we only receive the payment outcome and transaction references.
- Communications: messages you send us via contact form, e-mail, phone or WhatsApp.
- Browsing data: IP address, device and browser information, pages visited, collected through server logs and, with your consent, through cookies and similar technologies (see our Cookie Policy).
We do not intentionally collect special categories of data (Art. 9 GDPR). Please do not send us such data.
3. Purposes, legal bases & retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Creating and managing your customer account | Performance of a contract / pre-contractual measures (Art. 6.1.b) | Until you close the account |
| Handling quote requests, orders, payments, shipping and returns | Performance of a contract (Art. 6.1.b) | Duration of the contractual relationship, then 10 years |
| Invoicing, accounting and tax obligations | Legal obligation (Art. 6.1.c) | 10 years (Art. 2220 Italian Civil Code) |
| Answering requests sent via contact form, e-mail, phone or WhatsApp | Pre-contractual measures / legitimate interest (Art. 6.1.b-f) | Up to 12 months after the last contact, unless an order follows |
| E-mails about products similar to those already purchased (to existing customers) | Legitimate interest (Art. 6.1.f and Art. 130(4) Italian Privacy Code) | Until you object; you can opt out at any time |
| Newsletter and promotional communications (non-customers) | Consent (Art. 6.1.a) | Until consent is withdrawn |
| Website statistics (Google Analytics) | Consent (Art. 6.1.a) | See Cookie Policy |
| Advertising and remarketing (Google Ads, Meta Pixel) | Consent (Art. 6.1.a) | See Cookie Policy |
| IT security, fraud prevention, defence of legal claims | Legitimate interest (Art. 6.1.f) | For the time strictly needed; up to the statute of limitations for claims |
When the retention period ends, data are deleted or irreversibly anonymised.
4. Is providing data mandatory?
Data marked as required at checkout or registration (including a valid VAT/EORI number) are necessary to process B2B orders and issue invoices: without them we cannot accept your order. Consent to marketing and to non-essential cookies is optional and refusing it has no consequence on your purchases.
5. Who receives your data
Your data are processed by our authorised staff and may be shared, only as needed, with:
- hosting, website maintenance and IT service providers;
- payment providers (e.g. card payment processor, PayPal (Europe) S.à r.l. et Cie, S.C.A., Klarna Bank AB) — PayPal and Klarna act as independent controllers;
- couriers and logistics companies for shipping;
- accountants, tax advisers and legal counsel;
- Google Ireland Ltd (Google Analytics, Google Ads, Tag Manager) and Meta Platforms Ireland Ltd (Meta Pixel), only with your consent;
- WhatsApp Ireland Ltd, if you choose to contact us via WhatsApp;
- public authorities, where required by law.
Providers acting on our behalf are appointed as data processors under Art. 28 GDPR. The updated list is available on request. For our Facebook and Instagram pages, Meta and VINTAGISM act as joint controllers for page statistics (Page Insights Controller Addendum).
6. Transfers outside the EU
Some providers (e.g. Google and Meta) may process data in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework adequacy decision, for certified companies, or on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
7. Your rights
Under Articles 15–22 GDPR you can, at any time:
- access your data and obtain a copy;
- have inaccurate data corrected;
- have your data erased or their processing restricted;
- receive your data in a portable format;
- object to processing based on legitimate interest, and at any time to direct marketing;
- withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.
Write to marketing@vintagism.eu: we will reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the authority of your EU country.
8. Security
We adopt appropriate technical and organisational measures to protect your data: encrypted HTTPS connection, access restricted to authorised personnel, encrypted password storage and regular software updates.
9. Other information
Automated decisions — We do not make decisions based solely on automated processing, including profiling, that produce legal effects on you.
Minors — Our services are reserved to businesses and are not intended for persons under 18.
Changes — We may update this policy. The current version is always published on this page with its update date.
Questions about your data?
Contact us for any request about privacy or to exercise your rights. We reply within one month.