Privacy Policy

Data controller

Controller: Sebastian Idda

Privacy contact: info@italianwinedata.com

Data processed

Simply browsing the site may involve processing technical data necessary for service operation and security, such as IP address, request date and time, browser information and technical logs generated by the infrastructure.

The site currently does not provide user accounts, newsletters or integrated contact forms. If these features are introduced, this notice will be updated before they are activated.

Purposes and legal basis

Technical data is processed to provide the site, maintain security and stability, prevent abuse and resolve technical issues. Processing is limited to what is necessary for service operation and for legitimate interests related to security and technical management, where applicable.

Technical providers

The site uses technical providers that may process technical data within the services they provide and according to their respective roles, contracts and applicable configurations.

Vercel

application hosting, content delivery, deployment and Web Analytics

Supabase

database, APIs, technical storage and the project's minimised analytics-event archive

This list will be updated if providers involving processing relevant to this notice are introduced or removed.

Analytics and usage data

The site uses Vercel Web Analytics to measure traffic and visited pages in aggregate form. Vercel states that Web Analytics does not use third-party cookies and does not associate collected data with IP addresses or persistent personal identifiers.

Italian Wine Data also records selected functional events in Supabase, such as opening an appellation, comparing appellations or wine types, using calculators, opening a product specification and clicking external services. The project's analytics archive does not store names, email addresses, accounts, IP addresses, persistent identifiers, device fingerprints or free text entered in searches.

Events are used only for aggregate statistics, service improvement and analysis of interest in content and features. They are not used to build individual profiles or for behavioural advertising.

Retention

The site does not maintain a dedicated user archive for browsing data. Functional events recorded directly by the project in Supabase are retained for up to 13 months and are automatically deleted when that period expires. Technical logs and aggregate data managed by infrastructure providers follow their respective configurations, contractual terms and retention policies.

Data-subject rights

Where provided by the GDPR, data subjects may request access, rectification, erasure, restriction of processing or objection, exercise other rights available under applicable law, and lodge a complaint with the competent supervisory authority.