Privacy Policy of vespermxd.org

This Website collects some Personal Data from its Users.

This document can be printed using the print command in any browser.

Data Controller

Please complete controller details in MEGAPOS GDPR → Settings.

Types of Data collected

Among the Personal Data collected by this Website, independently or through third parties, there may be:

Tracking Tool; Usage data; Data communicated while using the service; billing and shipping data; order details; payment information; account credentials; profile data; first name; last name; email; message content.

Full details on each type of Data are provided in the dedicated sections of this privacy policy or by information texts displayed before Data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.

Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible to provide the Service. Where some Data is indicated as optional, Users are free not to communicate it without consequences for the Service.

The use of Cookies or other Tracking Tools is described in this document and in the Cookie Policy.

Users are responsible for any Personal Data of third parties obtained, published or shared through this Website.

Mode and place of processing of Data

Methods of processing

The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computers and/or IT tools, following organizational procedures related to the purposes indicated. In addition to the Controller, Data may be accessible to parties involved in the operation of this Website or external parties (hosting, payments, technical services) appointed, if necessary, as Processors. An updated list of Processors may be requested from the Controller.

Place

Data is processed at the Controller’s operating offices and in any other places where the parties involved in the processing are located. Data may be transferred to a country other than that in which the User is located.

Retention time

Unless otherwise stated, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained longer due to legal obligations or based on consent.

Purposes of processing

User Data is collected to allow the Controller to provide the Service, comply with legal obligations, respond to enforcement requests, protect rights and interests, detect malicious or fraudulent activity, and for the following purposes:

Provision of the Service; Compliance with legal obligations; Protection of the Data Controller’s rights; Platform and hosting services; Sale of goods and services online; Analytics; Displaying content from external platforms; Collection of privacy preferences; Contacting the User.

Selected processing activities

The following sections reflect choices configured in MEGAPOS GDPR (Privacy wizard). Please verify they match actual processing.

Online sales

This Website may process data needed to manage orders, invoicing, delivery, payments and after-sales support (e.g. identity details, address, order details). Payment and logistics providers process data under their own notices.

User accounts

Creating an account involves processing credentials and profile data needed to provide the service and the private area.

Contact forms

Data submitted via forms (e.g. name, email, message) is used to reply to requests. Providing data is optional but necessary to handle the request.

User-generated content

If the Website allows reviews, comments or other content, the data therein may be visible to other users according to the service settings.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services (list updated from the MEGAPOS GDPR Scanner and classifications):

Platform and hosting services

WordPress (WordPress.org / site hosting)

WordPress enables developing, running and managing this Website, including user authentication and the basic CMS features.

Personal Data processed: Usage data; Tracking Tool; Account data (if registered)

Place of processing: At the Data Controller’s hosting / WordPress infrastructure

Sale of goods and services online

WooCommerce (Automattic Inc. / WooCommerce)

WooCommerce enables selling products/services online and managing the cart, orders and checkout.

Personal Data processed: Order name and contact details; Usage data; Tracking Tool; shipping/billing address

Place of processing: At the Data Controller’s hosting / WooCommerce

Analytics

Google Analytics (Google Ireland Limited / Google LLC)

Google Analytics enables monitoring and analysing traffic data and User behaviour.

Personal Data processed: Usage data; Tracking Tool

Place of processing: Ireland / United States – according to the Google privacy policy

Displaying content from external platforms

Google Fonts (Google Ireland Limited / Google LLC)

Google Fonts enables embedding font styles hosted on Google platforms within the Website pages.

Personal Data processed: Usage data; various types of Data according to the service privacy policy

Place of processing: Ireland / United States – according to the Google privacy policy

Collection of privacy preferences

MEGAPOS GDPR (MEGAPOS)

Enables collecting and saving the Users’ preferences regarding the use of Cookies and other Tracking Tools on this Website, and recording the proof of consent.

Personal Data processed: Consent preferences; technical consent identifier; any technical hashes

Place of processing: At the Data Controller / Website hosting

Cookie Policy

This Website uses Tracking Tools. Users can learn more in the Cookie Policy.

Legal basis of processing

The Controller processes Personal Data relating to the User if one of the following applies:

  • the User has given consent for one or more specific purposes;
  • processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
  • processing is necessary for compliance with a legal obligation to which the Controller is subject;
  • processing is related to a task carried out in the public interest or in the exercise of official authority;
  • processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

Users may always ask the Controller to clarify the specific legal basis of each processing.

The rights of Users (GDPR)

Within the limits of the law, Users may: withdraw consent; object to processing; access their Data; verify and seek rectification; restrict processing; obtain erasure; receive their Data or have it transferred to another controller (portability); lodge a complaint with a supervisory authority or take legal action.

Where Data is processed for direct marketing, Users may object at any time, free of charge and without providing any reason.

How to exercise these rights

Requests may be directed to the Controller using the contact details in this document. Requests are free of charge; the Controller will respond as soon as possible and within legal time limits.

Additional information for Users in Switzerland

This section applies to Users in Switzerland. Within applicable law, Users may exercise rights of access, objection/restriction/erasure, portability and rectification by contacting the Controller.

Additional information about processing

Legal action

The User’s Personal Data may be used by the Controller in court or in the stages leading to possible legal action arising from improper use of this Website or related Services.

System logs and maintenance

For operation and maintenance, this Website and any third-party services may collect system logs which may contain Personal Data (such as IP address).

Changes to this privacy policy

The Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Users are advised to check this page often, referring to the date of the last modification. If changes affect processing based on consent, the Controller shall collect consent again where required.

Definitions and legal references

Personal Data: any information that identifies or makes identifiable a natural person.

Usage Data: information collected automatically through this Website (e.g. IP addresses, technical logs, browsing data).

User: the individual using this Website.

Data Subject: the natural person to whom the Personal Data refers.

Data Processor: the natural or legal person who processes Personal Data on behalf of the Controller.

Data Controller: the natural or legal person who determines the purposes and means of processing Personal Data.

This Website: the means by which the Personal Data of the User is collected and processed.

Cookie / Tracking Tool: technologies that enable tracking of Users, for example by collecting or storing information on the User’s device.

Unless otherwise specified, this privacy policy concerns only this Website.

Last updated: 19 October 2026