Information

Privacy policy

This policy explains how the personal data of anyone using VinileRaro is processed, under Regulation (EU) 2016/679 («GDPR»). The service lets vinyl sellers build 3D showcases of their boxes and embed them as a widget on their own site; buyers can browse the records and send an order to the seller.

1. Data controller

The data controller is VinileRaro, registered at Viale Sorrento 61, 60019 Senigallia (AN), VAT no. 02109690244.

For any request concerning your data you can write to info@vinileraro.com or call +39 3349808131.

2. What data we collect

Registered sellers' data. When you sign up we collect first name, surname, email address, password (stored only in encrypted form), address, postcode, town, province and country. You may also choose to give your shop name, your website address and the page where you embed the widget. To run your sales we also collect your shipping settings and the details of the payment methods you choose to accept (PayPal email, PostePay number or IBAN).

Buyers' data. No account is needed to place an order: at the time of purchase we collect first name, surname, email address, delivery address and, if you provide them, phone number and delivery notes. This data is saved with the order and passed to the seller.

Browsing data. During your visit technical data (such as the IP address and device information) may be collected through the third-party cookies described in section 5.

3. Purposes and legal bases

  • Seller account registration and management, building the showcases and generating the widget: performance of the contract (art. 6.1.b GDPR).
  • Receiving the order and forwarding it to the seller, sending the confirmation email to the buyer and the notification to the seller: performance of a service you requested (art. 6.1.b GDPR).
  • Accounting, tax and statutory obligations: legal obligation (art. 6.1.c GDPR).
  • Site security and cart operation: legitimate interest (art. 6.1.f GDPR).
  • Google AdSense advertising cookies: consent given by the data subject through the relevant banner (art. 6.1.a GDPR).

4. How payments work

This site does not collect payments and does not process card data. Payment always takes place directly between buyer and seller using the chosen method (PayPal, PostePay, bank transfer or collection in person). If you choose PayPal you are redirected to the PayPal site, which handles the payment to the seller on its own.

So that the order can be completed we pass your purchase and delivery details to the seller: from that moment the seller acts as an independent controller for the payment, shipping and support relating to that order.

5. Cookies and Google AdSense

The site uses technical cookies needed to run it (for example to handle the session and the cart). Subject to your consent we also use Google AdSense, Google's advertising service, which may set cookies to show personalised ads as well.

Consent for advertising cookies is managed through the banner provided by Google: you can accept, refuse or change your choices at any time. You can manage your ad preferences on the Google Ads Settings page, and see how Google handles data in the Google Privacy Policy.

6. Who we share data with

Data is shared only for the purposes set out above, with:

  • the seller receiving the order, limited to the data needed to complete payment and delivery;
  • Google, as the provider of the Google AdSense advertising service and of the mail service (SMTP) used to send transactional emails;
  • the site's hosting provider and the advisers who assist us with accounting, tax and legal obligations;
  • the competent authorities, where required by law.

Data is not disseminated and is not passed to third parties for their own purposes.

7. Transfers of data outside the European Union

Some providers (such as Google) may process data outside the European Economic Area too. In those cases the transfer complies with the GDPR, on the basis of adequacy decisions of the European Commission or of Standard Contractual Clauses.

8. How long we keep data

We keep the seller's account data for as long as the account stays active. Order data is kept for the period required by tax and statutory obligations. Data collected through cookies is kept for the period stated by the respective providers. Once those periods pass, data is deleted or anonymised.

9. Your rights

At any time you may exercise the rights set out in articles 15 to 22 of the GDPR: access your data, ask for it to be corrected or erased, restrict or object to processing, withdraw the consent you gave, and obtain data portability. To do so you can contact the controller using the details in section 1.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

10. Changes to this policy

We may update this policy to reflect changes in the law or in the services offered. The version published on this page is always the one in force.

Last updated: 21 July 2026