Privacy Policy

Summary of Key Points

What personal information do we process? When you request a demo, use our contact form, book a calendar appointment, or subscribe to our newsletter, we process the business contact information you provide.

Do we process sensitive personal information? We do not process sensitive personal information.

Do we collect information from third parties? We do not collect data from third parties.

How do we process your information? We process your information to handle demo requests, meeting bookings, and contact inquiries, to provide and improve our Services, to communicate with you, for security purposes, and to comply with applicable law. With your consent, we may also process your data for other purposes, such as newsletter delivery.

With whom do we share personal information? We may share information with certain categories of third parties, including website hosting providers, email marketing tools, internal communication tools, and our scheduling provider.

How do we keep your information safe? We have organizational and technical processes in place to protect your personal information; however, no method of transmission or storage can be guaranteed 100% secure.

What are your rights? Depending on your location, applicable data protection laws may give you certain rights regarding your personal information.

1. What information do we collect?

Personal information you disclose to us. We collect personal information that you voluntarily provide when you request a demo, fill out our contact form, book an appointment through our calendar, subscribe to our newsletter, or otherwise contact us. This may include:

• Name
• Company name
• Job title / role
• Phone number
• Email address
• Country
• Business type (e.g. winery, wine merchant, marketplace, investment platform, logistics, hospitality)
• Details about your product interest and current challenge, if provided in the contact form
• When booking through our calendar: name, email address, and chosen time slot, processed via our scheduling provider (Calendly)

All personal information you provide to us must be true, complete, and accurate.

Information automatically collected. We automatically collect certain information when you visit our website, including IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, location, and information about how and when you use our Services.

2. How do we process your information?

We process your personal information to:

• handle and respond to your demo request, meeting booking, or contact inquiry,
• contact you about our products and services, in line with your marketing preferences,
• send you our newsletter, if you have subscribed to it,
• keep our Services secure and prevent misuse,
• identify usage trends and improve our website,
• determine the effectiveness of our marketing and sales activities.

3. What legal bases do we rely on?

We only process your personal information when we have a valid legal basis under the GDPR to do so:

• Consent — for example, for sending our newsletter. You may withdraw your consent at any time.
• Legitimate interests — for example, to respond to your demo request or booking, improve our website, or support our sales activities.
• Legal obligations — for example, to cooperate with regulatory authorities.
• Performance of a contract — once and to the extent that a contract exists between you or your company and us for the use of Vinfra's Services.

We are, in principle, the "controller" of the personal information described in this notice. Where we process data on behalf of our business customers as a "processor," a separate data processing agreement applies.

4. When and with whom do we share your personal information?

We may share your information with the following categories of third parties who provide services for us or on our behalf:

• Website hosting providers
• Data storage providers (Supabase)
• Email marketing and CRM tools (Klaviyo)
• Scheduling provider (Calendly)
• Communication tools (Slack, for internal notifications)
• Analytics services (Google Analytics, see Section 5)

We have contracts in place with our third-party providers to protect your personal data; these parties may only use your data as instructed by us.

We may also disclose your information:

• In connection with business transfers — for example, in relation to a merger, sale of company assets, or financing.
• With affiliates — including Vinesia SARL itself and any subsidiaries.

5. Do we use cookies and other tracking technologies?

We use cookies and similar tracking technologies to collect information when you interact with our Services, including for security, troubleshooting, remembering your language preference, and analytics. We do not currently maintain a separate cookie policy page; the cookies we use are as follows:

Google Analytics. We use Google Analytics to track and analyze use of our Services. To opt out of Google Analytics tracking, visit https://tools.google.com/dlpage/gaoptout. For more on Google's data practices, see Google's privacy policy.

Necessary cookies. These support core website functionality, such as remembering your language selection (EN/DE/FR), and cannot be disabled without affecting the website's function.

Scheduling. If you book an appointment through our embedded calendar, our provider Calendly's own privacy policy also applies.

Most browsers accept cookies by default; you can set your browser to remove or reject cookies, though this may affect certain features of our Services.

6. How long do we keep your information?

We keep your personal information only as long as necessary for the purposes described in this notice, unless a longer retention period is required by law. Data from a demo request, meeting booking, or contact inquiry that does not lead to a business relationship is kept for no longer than 24 months. If a business relationship is established, the retention periods agreed for that relationship, or required by law, apply instead.

7. How do we keep your information safe?

We have implemented appropriate technical and organizational security measures to protect the personal information we process. However, no transmission over the internet can be guaranteed 100% secure.

8. Do we collect information from minors?

We do not knowingly collect, solicit, or market to data from individuals under 18 years of age. As Vinfra serves business customers, this is not relevant to ordinary use of the Services in any event.

9. What are your privacy rights?

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights under applicable data protection law, including the right to access, correct, delete, and restrict processing of your personal information, and, where applicable, the right to data portability. You may exercise these rights by contacting us using the details in Section 11.

If you are in the EEA or UK and believe we are processing your personal information unlawfully, you also have the right to lodge a complaint with your local data protection authority.

Opting out of marketing communications: you can unsubscribe from our marketing communications at any time via the unsubscribe link in our emails, or by contacting us using the details below.

10. Do we make updates to this notice?

Yes, we will update this privacy notice as necessary to comply with applicable law. The updated version will be indicated by a revised "Last updated" date at the top of this notice.

11. How can you contact us about this notice?

Vinesia SARL (operating under the brand Vinfra) Rue Gabriel Lippmann 55 L-6947 Niederanven Luxembourg Email: hello@vinfra.io

If you reside in the EEA or Switzerland, we are the "controller" of your personal data. We have appointed Fabrice Mopin as our representative in the EEA and Switzerland. You may contact him directly regarding the processing of your data, by email to hello@vinfra.io or by post to:

Rue Gabriel Lippmann 55 L-6947 Niederanven Luxembourg