No products in the cart.
Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR), we inform users about the processing of personal data collected through the website triiina.com.
1. Data controller. Winx SRL a socio unico, Via Arnaria 9a, 39040 Castelrotto (Frazione Roncadizza) – BZ, Italy, e-mail info@winx.bz, telephone +39 338 640 3101.
2. Data processed, purposes and legal basis.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Operation and security of the website (log files) | IP address, date and time, pages requested, browser | legitimate interest, Art. 6(1)(f) | for a short period, according to the hosting provider’s settings |
| Orders and performance of the contract | name, billing and delivery addresses, e-mail, telephone, order data | contract, Art. 6(1)(b) | until the order is completed |
| Tax and accounting obligations | billing and order data | legal obligation, Art. 6(1)(c) | 10 years |
| Payments | payment data processed by the service provider; the controller does not store full card data | contract, Art. 6(1)(b) | according to the provider |
| Production and shipping | name, delivery address, e-mail and telephone if required by the carrier | contract, Art. 6(1)(b) | until delivery and for support |
| Enquiries via contact form and e-mail, spam protection | data entered in the message; IP address and device data (reCAPTCHA) | contract or legitimate interest, Art. 6(1)(b) and (f) | for as long as needed to reply |
| Withdrawal function | name, e-mail, order number, goods concerned, date and time | contract and legal obligation, Art. 6(1)(b) and (c) | 10 years |
| Customer account (if created) | login data and order history | contract, Art. 6(1)(b) | until the account is deleted |
| Consent management (cookie banner) | consent choices, date and time | legal obligation and legitimate interest, Art. 6(1)(c) and (f) | up to 12 months |
| Website usage statistics (with consent only) | usage data, online identifiers | consent, Art. 6(1)(a) | according to the provider |
3. Cookies and similar technologies. The website uses technical cookies that are necessary for its operation, for example for the cart and the shopping session (WooCommerce), for the selected language (TranslatePress), for storing cookie choices (Complianz) and, on the contact page, for protecting the form (Google reCAPTCHA). These do not require consent. Statistics or marketing tools are used only with consent given through the cookie banner, which the user can change or withdraw at any time. The website fonts are hosted on our own server and are not loaded from third-party servers.
4. Recipients of the data. Data may be disclosed to: the hosting provider SiteGround; postal and carrier services used for shipping; Printify (only for phone cases: production and shipping), its print partners and carriers; payment service providers (WooPayments, Stripe, Apple Pay, Google Pay, PayPal) and banks; Google (reCAPTCHA); Automattic (WooCommerce, WooPayments); tax and legal advisers; Winx SRL as technical provider of the website. Providers that process data on our behalf are appointed as processors under Art. 28 GDPR.
5. Transfers outside the EU. Some providers and production partners are based or operate outside the European Union, for example in the United States. Transfers take place on the basis of an adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
6. Nature of the provision of data. Providing the data for an order is necessary to conclude and perform the contract; without it the order cannot be processed. There is no automated decision-making, including profiling.
7. Rights of the data subject. Users may at any time request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR), and withdraw consent with effect for the future. Requests should be sent to info@winx.bz. Users may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it).
8. Security. Data is transmitted between the browser and the website using TLS encryption.
9. Changes. This policy may be updated. Last updated: October 2026.
