Privacy Policy of vespermxd.org
This Website collects some Personal Data from its Users.
This document can be printed using the print command in any browser.
Data Controller
Please complete controller details in MEGAPOS GDPR → Settings.
Types of Data collected
Among the Personal Data collected by this Website, independently or through third parties, there may be:
Tracking Tool; Usage data; Data communicated while using the service; billing and shipping data; order details; payment information; account credentials; profile data; first name; last name; email; message content.
Full details on each type of Data are provided in the dedicated sections of this privacy policy or by information texts displayed before Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible to provide the Service. Where some Data is indicated as optional, Users are free not to communicate it without consequences for the Service.
The use of Cookies or other Tracking Tools is described in this document and in the Cookie Policy.
Users are responsible for any Personal Data of third parties obtained, published or shared through this Website.
Mode and place of processing of Data
Methods of processing
The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computers and/or IT tools, following organizational procedures related to the purposes indicated. In addition to the Controller, Data may be accessible to parties involved in the operation of this Website or external parties (hosting, payments, technical services) appointed, if necessary, as Processors. An updated list of Processors may be requested from the Controller.
Place
Data is processed at the Controller’s operating offices and in any other places where the parties involved in the processing are located. Data may be transferred to a country other than that in which the User is located.
Retention time
Unless otherwise stated, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained longer due to legal obligations or based on consent.
Purposes of processing
User Data is collected to allow the Controller to provide the Service, comply with legal obligations, respond to enforcement requests, protect rights and interests, detect malicious or fraudulent activity, and for the following purposes:
Provision of the Service; Compliance with legal obligations; Protection of the Data Controller’s rights; Platform and hosting services; Sale of goods and services online; Analytics; Displaying content from external platforms; Collection of privacy preferences; Contacting the User.
Selected processing activities
The following sections reflect choices configured in MEGAPOS GDPR (Privacy wizard). Please verify they match actual processing.
Online sales
This Website may process data needed to manage orders, invoicing, delivery, payments and after-sales support (e.g. identity details, address, order details). Payment and logistics providers process data under their own notices.
User accounts
Creating an account involves processing credentials and profile data needed to provide the service and the private area.
Contact forms
Data submitted via forms (e.g. name, email, message) is used to reply to requests. Providing data is optional but necessary to handle the request.
User-generated content
If the Website allows reviews, comments or other content, the data therein may be visible to other users according to the service settings.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services (list updated from the MEGAPOS GDPR Scanner and classifications):
Platform and hosting services
WordPress (WordPress.org / site hosting)
WordPress enables developing, running and managing this Website, including user authentication and the basic CMS features.
Personal Data processed: Usage data; Tracking Tool; Account data (if registered)
Place of processing: At the Data Controller’s hosting / WordPress infrastructure
Sale of goods and services online
WooCommerce (Automattic Inc. / WooCommerce)
WooCommerce enables selling products/services online and managing the cart, orders and checkout.
Personal Data processed: Order name and contact details; Usage data; Tracking Tool; shipping/billing address
Place of processing: At the Data Controller’s hosting / WooCommerce
Analytics
Google Analytics (Google Ireland Limited / Google LLC)
Google Analytics enables monitoring and analysing traffic data and User behaviour.
Personal Data processed: Usage data; Tracking Tool
Place of processing: Ireland / United States – according to the Google privacy policy
Displaying content from external platforms
Google Fonts (Google Ireland Limited / Google LLC)
Google Fonts enables embedding font styles hosted on Google platforms within the Website pages.
Personal Data processed: Usage data; various types of Data according to the service privacy policy
Place of processing: Ireland / United States – according to the Google privacy policy
Collection of privacy preferences
MEGAPOS GDPR (MEGAPOS)
Enables collecting and saving the Users’ preferences regarding the use of Cookies and other Tracking Tools on this Website, and recording the proof of consent.
Personal Data processed: Consent preferences; technical consent identifier; any technical hashes
Place of processing: At the Data Controller / Website hosting
Cookie Policy
This Website uses Tracking Tools. Users can learn more in the Cookie Policy.
Legal basis of processing
The Controller processes Personal Data relating to the User if one of the following applies:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Controller is subject;
- processing is related to a task carried out in the public interest or in the exercise of official authority;
- processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.
Users may always ask the Controller to clarify the specific legal basis of each processing.
The rights of Users (GDPR)
Within the limits of the law, Users may: withdraw consent; object to processing; access their Data; verify and seek rectification; restrict processing; obtain erasure; receive their Data or have it transferred to another controller (portability); lodge a complaint with a supervisory authority or take legal action.
Where Data is processed for direct marketing, Users may object at any time, free of charge and without providing any reason.
How to exercise these rights
Requests may be directed to the Controller using the contact details in this document. Requests are free of charge; the Controller will respond as soon as possible and within legal time limits.
Additional information for Users in Switzerland
This section applies to Users in Switzerland. Within applicable law, Users may exercise rights of access, objection/restriction/erasure, portability and rectification by contacting the Controller.
Additional information about processing
Legal action
The User’s Personal Data may be used by the Controller in court or in the stages leading to possible legal action arising from improper use of this Website or related Services.
System logs and maintenance
For operation and maintenance, this Website and any third-party services may collect system logs which may contain Personal Data (such as IP address).
Changes to this privacy policy
The Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Users are advised to check this page often, referring to the date of the last modification. If changes affect processing based on consent, the Controller shall collect consent again where required.
Definitions and legal references
Personal Data: any information that identifies or makes identifiable a natural person.
Usage Data: information collected automatically through this Website (e.g. IP addresses, technical logs, browsing data).
User: the individual using this Website.
Data Subject: the natural person to whom the Personal Data refers.
Data Processor: the natural or legal person who processes Personal Data on behalf of the Controller.
Data Controller: the natural or legal person who determines the purposes and means of processing Personal Data.
This Website: the means by which the Personal Data of the User is collected and processed.
Cookie / Tracking Tool: technologies that enable tracking of Users, for example by collecting or storing information on the User’s device.
Unless otherwise specified, this privacy policy concerns only this Website.
Last updated: 19 October 2026