Last updated: August 28, 2026
This Privacy Policy describes how the website vincentcitrus.com processes the personal data of users who visit and interact with it. This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).
The Data Controller is Vincenzo Mazzaferro (operating as “Vincent Citrus”).
Contact email: vmazz0871@gmail.com
The Personal Data collected by this website, independently or through third parties, includes data voluntarily provided by the user through the order form: Full Name/Company Name, Email Address, Telephone Number, Shipping Country, and any data entered in the “Order Details” field (including VAT number and billing information).
User Data is collected for the following purposes:
- Order handling: processing the request, providing quotations and arranging international shipment of products.
- Communication: responding to messages, information requests or support requests.
- Legal obligations: complying with obligations imposed by law, regulations, EU legislation or an order from an Authority (e.g. invoicing and accounting records).
The Controller processes Personal Data relating to the User where one of the following conditions applies:
- Processing is necessary for the performance of a contract with the User and/or in order to take steps at the User’s request prior to entering into a contract (e.g. a request for an order quotation).
- Processing is necessary for compliance with a legal obligation to which the Controller is subject.
Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases other parties involved in the organisation of the website may have access to the Data (e.g. couriers for shipping or technical service providers such as Firebase/Google Cloud for hosting and database infrastructure), appointed as Data Processors where required.
Personal Data is processed and stored for the time required for the purposes for which it was collected. Data related to order fulfilment and invoicing will be retained for the periods required by applicable tax laws (typically 10 years). At the end of the retention period, Personal Data will be deleted.
Our website uses direct links to the external PayPal platform for secure payment management. No financial data or credit card number passes through or is stored on our servers. Payment data processing is subject to the privacy policies of PayPal (Europe) S.à r.l.
Users may exercise certain rights regarding the Data processed by the Controller. In particular, the User has the right to: withdraw consent at any time; object to processing; access their Data; verify and request rectification; obtain restriction of processing or deletion of Data; receive their Data or have it transferred to another controller (data portability). To exercise these rights, the User may send a request to the Controller’s email address indicated in this document.