Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended.
1. Data Controller
The Data Controller is Zuffi Infissi S.r.l., operating under the brand Vibe Drum, with registered office at Via Montanara 117/A, 40026 Imola (BO), Italy, VAT and Tax Code 02342451206.
You can contact us regarding privacy matters at: info@vibedrum.com
2. Categories of Personal Data Processed
We process the following data:
- Browsing data: IP address, browser type, operating system, pages visited, access date and time, referrer.
- Data provided voluntarily: first and last name, email address, phone number, shipping/billing address, and any information contained in messages sent via contact forms or email (e.g. specifications for custom drums).
- Data from cookies and tracking technologies (see Cookie section).
- Data necessary for contract performance (custom orders, invoicing, shipping).
We do not intentionally process special categories of data (sensitive data) or data relating to minors.
3. Purposes of Processing and Legal Bases
Your personal data is processed for the following purposes:
PurposeLegal Basis (Art. 6 GDPR)Responding to information requests, quotes, and communicationsPre-contractual measures / contract (lit. b)Managing orders, invoicing, payments, and shippingContract (lit. b) + legal obligation (lit. c)Traffic analysis, statistics, and website improvementLegitimate interest (lit. f) Profiling, behavioral marketing, and statistics via third-party cookies Data subject's consent (lit. a) – granted via the cookie banner Compliance with tax, accounting, and legal obligationsLegal obligation (lit. c) Sending commercial communications/newsletters (only if requested)
Consent (lit. a) – withdrawable at any time
4. Processing Methods and Security
Data is processed using IT and telematic tools with logics strictly related to the stated purposes. We adopt appropriate technical and organizational measures to ensure data security and prevent unauthorized access, alteration, or disclosure.
5. Recipients of Data
Data may be disclosed to:
- Authorized internal personnel of Vibe Drum
- Service providers (web hosting, site developer, couriers, accountant, email provider)
- Analytics and cookie platforms (e.g. Google) – only with prior consent where required
- Public authorities for legal obligations
These parties act, where necessary, as Data Processors pursuant to Art. 28 GDPR.
6. Transfers Outside the EU
Some services (e.g. Google Analytics, Google Fonts, or hosting providers) may involve transferring data to countries outside the EU (e.g. United States). In such cases, transfers are carried out on the basis of adequate safeguards under the GDPR, namely on the basis of adequacy decisions adopted by the European Commission (such as the EU-U.S. Data Privacy Framework) or, alternatively, subject to the Standard Contractual Clauses (SCC) approved by the European Commission.
7. Data Retention Periods
Pre-contractual request data: time necessary to handle the request + any follow-up.
Contractual and tax data: 10 years from the end of the relationship (legal obligations).
Marketing data: until consent is withdrawn.
Browsing and log data: limited period (generally 12–24 months).
Cookies: duration indicated in the Cookie Policy.
8. Your Rights (Arts. 15-22 GDPR)
As a Data Subject, you have the right to:
- Access your personal data
- Request rectification or updating
- Request erasure (“right to be forgotten”)
- Restrict processing
- Obtain data portability
- Object to processing (including profiling)
- Withdraw consent at any time
To exercise your rights, write to info@vibedrum.com or send a written request to the registered office.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Cookies and Tracking Technologies
We use cookies and tracking tools to improve navigation, analyze traffic, and provide personalized content.
You can change your preferences at any time via the cookie banner on the site or your browser settings.
10. Changes to this Policy
We reserve the right to modify this Privacy Policy at any time. Updated versions will be published on this page with the revision date. We encourage you to review it periodically.
