Privacy policy of the winzter-online.co.uk portal

This policy describes how the winzter-online.co.uk information portal collects, uses and protects visitors' personal data. Transparency matters to us: what information we collect, for what purpose, and how you can exercise your rights. This document concerns winzter-online.co.uk only – not the services offered by the Winzter platform, which we merely describe.

Data controller

The data controller is the publisher of the winzter-online.co.uk information portal. For any privacy query, you can write to support@winzter-online.co.uk. We usually respond within 30 days of receiving your message.

What data winzter-online.co.uk collects

We require no registration and no login details. The information we collect while you browse falls into two main categories.

Technical data collected automatically:

• IP address (anonymised where possible);
• browser type and version, operating system and screen resolution;
• pages visited, session duration and navigation path;
• traffic source (search engine, direct link, advertising campaign).

Data collected through cookies and similar technologies:

• anonymous identifiers assigned by analytics tools (for example, Google Analytics);
• consent preferences expressed through the cookie banner.

We do not collect any sensitive data, financial information or identity documents.

Purposes of processing

The information collected serves three clearly defined purposes:

1. Improving the browsing experience – we analyse aggregated visitor behaviour to optimise the site structure, the content and load times.
2. Statistical analysis – aggregate data helps us understand which sections attract the most interest.
3. Marketing activity – profiling files, activated only with your explicit consent, allow us to present content matched to your interests.

No data is sold to third parties. Processing complies with the data-minimisation principle set out in the UK GDPR.

Lawful basis for processing

Each processing activity rests on a lawful basis under the UK GDPR. Analytics and marketing cookies are processed on the basis of your consent, which you can withdraw at any time. The site's technical operation and security rest on our legitimate interests in providing a reliable service. When you write to us, processing your request relies on the performance of the relationship you have entered into by contacting us.

Sharing with third parties

For the purposes described, we use external providers that may process data on our behalf. The main ones are:

• Google Analytics – collects anonymous navigation data for statistical purposes. Google's servers may be located outside the United Kingdom; transfers take place under the safeguards approved for international data transfers.
• Advertising partners – advertising platforms that may place profiling files only after obtaining your consent.
• Hosting – the technical provider that hosts the site and keeps connection logs for security purposes.

Retention period

We keep navigation data for a maximum of 26 months from collection, in line with the default settings of the main analytics tools. Analytics and marketing cookies have a variable duration, set out in the cookie policy. Connection logs are kept for around 90 days. If you write to us by email, we keep the correspondence for as long as needed to handle your request, and no longer than 12 months after it is closed. Once the periods expire, data is deleted or irreversibly anonymised.

Your rights under UK GDPR

The UK GDPR and the Data Protection Act 2018 grant you a set of rights you can exercise at any time:

• Access – you have the right to know whether we process data about you and to obtain a copy.
• Rectification – you can request the correction of inaccurate or incomplete data.
• Erasure – you can request the deletion of your data when there is no longer a lawful basis for processing.
• Restriction – you can obtain a temporary suspension of processing in certain situations.
• Portability – you have the right to receive the data you provided to us in a structured, commonly used format.
• Objection – you can object to processing based on legitimate interests, including profiling for direct marketing.

You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

How to exercise your rights

For any request regarding your personal data, write to support@winzter-online.co.uk, stating your name and a clear description of your request. We undertake to respond within 30 days. If you believe the processing of your data breaches the UK GDPR, you can lodge a complaint with the Information Commissioner's Office (ICO) – ico.org.uk.

Protection of minors

The winzter-online.co.uk site is not intended for anyone under 18. We do not knowingly collect data from minors. If a parent or legal guardian believes a minor has provided data through our site, they can contact us at support@winzter-online.co.uk to have it deleted promptly.

Changes to the privacy policy

We reserve the right to update this policy to reflect legal, technological or practical developments. Any significant change will be flagged with a notice on the site or by updating the date at the end of the document.