Dear Customer,

In full compliance with EU Regulation no. 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data, we inform you that the personal data you provide to Wippio S.r.l. will be processed in accordance with the regulations of the GDPR and the rights and obligations arising therefrom.

In particular, we inform you that:

a) PURPOSE OF PERSONAL DATA PROCESSING – The personal data processing is mainly aimed at fulfilling the obligations of law or contract regarding the sale of products marketed by Wippio S.r.l. These fulfilments include: acceptance and taking over of orders, production of goods purchased, invoicing and shipping of orders received, all the fulfilments imposed by specific laws in civil, fiscal and accounting matters. The data may also be processed for sending newsletters and information material on products and initiatives of Wippio S.r.l., with express consent of the customer.

b) PERSONAL DATA SUBJECT TO PROCESSING – Personal data processing are common data (name, surname, date and place of birth, C.F. or VAT, phone number, residence and email), sizes and geolocation in case of use. Wippio will not process data revealing racial or ethnic origin, data revealing political opinions, data revealing religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, data concerning a natural person’s sex life or sexual orientation, judicial data.

c) LEGAL BASIS FOR THE PROCESSING – The provision of the data referred to in point b) is mandatory in order to establish or continue the business relationship. The data subject may grant or revoke at any time the authorization to process data for the purpose of sending newsletters and information material.

d) CONSEQUENCES OF REFUSAL TO PROVIDE PERSONAL DATA – The provision of common personal data is necessary for the purpose of concluding sales contracts and the business relationship; the refusal by the user to provide the common data prevents the conclusion of the sales contract.

e) MODALITIES OF PERSONAL DATA PROCESSING – The personal data processing is carried out with or without the aid of electronic instruments. It consists of the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The personal data processing is carried out by the data controller and by any person acting under his authority.

f) DISCLOSURE OF DATA – Personal data may be disclosed by persons in charge expressly authorized by the data controller: internal staff or external contractors such as accountants or legal advisors for the purposes referred to in point a); business partners who will produce the goods purchased and ship them. Personal data are not subject to disclosure except for the purposes indicated. Such data may be exhibited at the request of the authorities authorized by law.

g) TRANSFER OF DATA TO A THIRD COUNTRY – Personal data may be transferred to countries of the European Union or to third countries (outside the European Union) for the purpose referred to in point a). We will inform the data subject about any possible adequacy decision of the EU Commission.

h) DATA STORAGE – Data shall be kept for the period necessary to carry out the activity and in any case no longer than eleven years.

i) DATA CONTROLLER – The data controller is Wippio S.r.l. with registered office in Via Umberto I n. 43 – Fagagna (UD) – Italy.

j) RIGHTS OF THE DATA SUBJECT – The data subject has the right:

  • to receive confirmation of the existence of personal data concerning him/her, even if not yet recorded, and their origin;
  • to request from the data controller access, rectification, erasure, restriction and opposition to the processing of data except in cases where the processing is mandatory under national and community laws, regulations and rules;
  • to receive from the data controller the data in a commonly used and readable structured format from an automatic device for transmission to another controller;
  • to withdraw authorization to the data processing, without prejudice to the lawfulness of processing based on consent obtained before the withdrawal;
  • to lodge a complaint with Autorità Garante per la Protezione dei dati personali or similar authority.

These rights can be exercised by written notice to be sent to the data controller by registered letter with return receipt or by email to