GDPR Information

ScanWine is committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), United Kingdom, and Switzerland. This page summarizes how we handle personal data under GDPR.

ScanWine acts as the data controller for personal data collected through scanwine.io and related services. For questions about data processing, contact privacy@scanwine.io.

We process personal data on the following bases, as applicable:

• Consent — for optional analytics cookies and marketing communications where required
• Contract — to provide services you request or subscribe to
• Legitimate interests — to improve our platform, prevent abuse, and ensure security, balanced against your rights
• Legal obligation — where required by applicable law

If you are in the EEA, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Request data portability where applicable
• Withdraw consent at any time for consent-based processing
• Lodge a complaint with your local supervisory authority

To exercise these rights, email privacy@scanwine.io. We will respond within the timeframe required by GDPR.

ScanWine e-label pages are designed with privacy in mind. Analytics on e-label pages avoid advertising cookies and do not collect personally identifying information. Aggregated visit statistics may include general device and browser characteristics and approximate geographic region derived from infrastructure headers.

If personal data is transferred outside the EEA, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms approved under GDPR.

We retain personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.

We use third-party processors for hosting, analytics, and communication services. These processors are bound by data processing agreements and may only process data on our documented instructions.

We may update this GDPR information to reflect changes in our practices or legal requirements. Material changes will be reflected on this page with an updated date.