1. Controller
ONLINE MEDIA di Armin Kousminscki, sole proprietorship, Via dei Conciapelli 22/A, 39100 Bolzano (BZ), Italy; email info@ziowhisky.it; certified email kousminscki.armin@pec.it; phone +39 338 223 4089; VAT number 03199310214; tax code and Companies Register number KSMRMN93L25A952E; REA BZ-240361.
Privacy requests can be sent to the contacts above.
2. Data, purposes and legal bases
- Browsing and security: technical data, logs, device and network data needed to provide and protect the site; performance of the service and legitimate interest in security.
- Cart, order, payment, shipping and pickup: identification data, contact details, addresses, products, amounts, payment status, the age declaration and any tax data required; if you use the optional customer account, also your login data and order history; pre-contractual measures, performance of the contract and legal obligations.
- Support and complaints: contact details, the content of the request and order data; performance of the contract and legitimate interest in responding.
- Tax and accounting obligations: order data and the required documentation; legal obligation.
- Optional newsletter sign-up: email address and the record of the consent given through the sign-up form, for any future sending of the newsletter; consent, which you can withdraw at any time by writing to info@ziowhisky.it.
We do not currently send newsletters. Personalised advertising, Meta Pixel, Google Analytics and Microsoft Clarity are not active. Any future activation will require a legal basis, updated information and, where necessary, prior consent.
3. Recipients and providers
Data is shared only as far as necessary with: Shopify for platform, hosting, security, cart and checkout; the payment provider selected and shown at checkout; the GLS Sell&Send shipping platform, connected to the shop through the app by Qapla' S.p.A. SB, and the carrier GLS for shipments we entrust to it; Microsoft, through Microsoft 365, for email, including payment reminders and confirmations for bank transfer orders; GitHub, whose platform runs the automations that prepare these messages from the order data; Fatture in Cloud (TeamSystem), the software we use to issue electronic invoices; the accountant; authorities and parties to whom disclosure is required by law. The shipping platform automatically retrieves open orders from the shop and may therefore also retrieve store pickup orders; for store pickup we do not entrust any shipment to the carrier.
For shop management tasks we also use two AI assistants connected to our Shopify account: Claude by Anthropic and ChatGPT by OpenAI. These services receive shop data, which may include order and customer data, only when we use them for a specific task.
Shopify also processes some data as an independent controller, in particular for security and fraud prevention, for the platform's network features and for Shop Pay if you choose this method; details are in Shopify's privacy policy. If you contact us via WhatsApp, the conversation is also processed by WhatsApp (Meta) under its own terms. The Google map on the shop page only loads if you activate it; at that point Google receives technical data such as your IP address.
Some providers may process data outside the European Economic Area under the mechanisms provided by the GDPR and their applicable terms. If we change providers, we update this notice.
4. Retention
Data is kept for as long as necessary for the purpose, for managing the relationship and for defending rights, and for the periods required by tax, accounting and commercial rules. Support requests are kept for as long as they are needed to handle the case, unless further obligations or needs apply.
5. Cookies and consent
Strictly necessary cookies support security, browsing, cart, checkout and privacy preferences. Non-necessary technologies must not be activated before the required choice is made. You can review your choice via «Manage cookie preferences».
6. Rights
Where provided by law you can request access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting processing carried out beforehand. Write to info@ziowhisky.it or to the certified email address above. You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
7. Whether providing data is mandatory
Data marked as required is needed to conclude or manage the order or to comply with legal obligations. Failure to provide it may prevent the requested service. We do not ask for identity documents for the age declaration.