Privacy policy

Privacy Policy

1. Controller pursuant to Art. 4 No. 7 GDPR
Vinti Vintage
Andrea Pham
Wigandstraße 44, 04229 Leipzig (Germany)  
vinit_vintage@web.de

2. Collection and storage of Personal Data as well as type and purpose of use

a) When visiting the website
When you visit our website, information is automatically sent to our website’s server by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected and stored until automated deletion:

  • IP address of the requesting device (anonymized if possible),

  • Date and time of access,

  • Name and URL of the accessed file,

  • Website from which access is made (referrer URL),

  • Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The processing of this data is carried out in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests, in particular to ensure the smooth operation of the website and to improve our services.

b) When Registering a customer account
When registering a customer account, we process the following data:

  • Name,

  • Address,

  • Email address,

  • Phone number,

  • Password.

The processing of this data is carried out in accordance with Art. 6 (1) lit. b GDPR to fulfill a contract or to take pre-contractual measures.

c) When placing an order
When placing an order, we additionally collect the following data:

  • Payment information,

  • Order history,

  • Shipping information.

The processing of this data is carried out in accordance with Art. 6 (1) lit. b GDPR to fulfill the contract and to deliver the ordered goods.

3. Disclosure of Data to Third Parties
Your personal data will only be disclosed to third parties if:

  • it is necessary for contract fulfillment (e.g., to payment service providers or shipping companies),

  • you have given your explicit consent (Art. 6 (1) lit. a GDPR),

  • there is a legal obligation (Art. 6 (1) lit. c GDPR),

  • it is necessary to protect our legitimate interests, provided that your interests do not override ours (Art. 6 (1) lit. f GDPR).

4. Payment Providers

To process payments, we share your data with payment service providers. The processing of this data is based on Art. 6 (1) lit. b GDPR. The following data may be transmitted to payment service providers, depending on the selected payment method:

  • Name and contact details,

  • Payment information (e.g., credit card number, PayPal details, bank details),

  • Transaction data (e.g., amount, date, payment status),

  • IP address and device-related information (if required for fraud prevention).

The payment service providers process this data for the purpose of payment execution and fraud prevention. Your data will only be shared to the extent necessary for the transaction. Further information on data processing by our payment service providers can be found in their respective privacy policies.

5. Cookies and Tracking Technologies
Our website uses cookies to make our services more user-friendly, effective, and secure. The following types of cookies are used:

  • Necessary Cookies: Required for the operation of the website (Art. 6 (1) lit. f GDPR).

  • Analytics and Statistics Cookies: Help us analyze user behavior (Art. 6 (1) lit. a GDPR).

  • Marketing Cookies: Used for personalized advertising (Art. 6 (1) lit. a GDPR).

You can adjust your cookie settings at any time.

6. Your Rights as a Data Subject
Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object to processing (Art. 21 GDPR)

To exercise your rights, you can contact us at any time.

7. Data Retention and Deletion
We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Once these retention periods expire, the data will be deleted.

8. Data Transfer to Third Countries
If personal data is transferred to a country outside the EU, this will only occur if the EU Commission has confirmed an adequate level of data protection or appropriate safeguards exist (e.g., EU standard contractual clauses).

9. Updates to this Privacy Policy
This privacy policy is reviewed regularly and may be amended. The latest version is always available on our website.

Last Updated: [22.02.2025]

 

Contact                                                                                                                                           Vinti Vintage
Andrea Pham
Wigandstraße 44, 04229 Leipzig (Germany)  
vinit_vintage@web.de