Purpose and data controller

Grande Passione di JC Viens, based at Via Mario Morgantini 2/A, 37128 Verona, Italy, is a WSET Approved Programme Provider (APP no. 3119) and delivers its courses at Atelier del Vino.

Grande Passione is the data controller for the personal information it processes when organising and administering its WSET courses.

This notice supplements our [Store Privacy Policy](/en/policies/privacy-policy), which explains how we process information through our website, online shop and related services.

For questions about your personal information or to exercise your rights, contact:

JC Viens
contact@grandepassione.com

Information we collect

Depending on your enrolment and the services you use, we may process:

• Your name, contact details, date of birth and other information required for WSET registration.
• Your WSET candidate number, qualification and exam registrations.
• Attendance, exam results and information about your progress.
• Orders, payment records, invoicing and delivery details for study materials.
• Correspondence about support requests, complaints, enquiries about results and appeals.
• Information supporting requests for reasonable adjustments or special consideration, which may include health information.

We receive information directly from you, from someone arranging or paying for your enrolment, and from WSET where necessary to administer your qualification.

We ask only for information relevant to these purposes.

Why we use your information

We use personal information to:

• Process your enrolment and deliver your course.
• Send study materials and course communications.
• Register you for exams and communicate results.
• Handle support requests, complaints and appeals.
• Maintain necessary administrative and accounting records.
• Protect exam integrity and establish, exercise or defend legal claims.

Depending on the purpose, processing is based on performance of our contract with you, compliance with legal obligations, or legitimate interests such as administering courses securely and protecting exam integrity. Where we rely on legitimate interests, we consider your rights and interests.

Health information and other sensitive information

Requests for reasonable adjustments or special consideration may require information about your health or disability.

Please contact us before sending medical documents so that we can explain what is needed and how to provide it.

Where we rely on your explicit consent to process this information and share it with WSET, we will request that consent separately.

You may withdraw your consent at any time. Withdrawal does not affect processing already carried out lawfully, but it may prevent us or WSET from assessing or implementing the requested support.

Sharing information with WSET

We share information with WSET where necessary to register candidates, administer exams, issue results and qualifications, and handle support requests, complaints or suspected irregularities.

This may include identification and contact details, date of birth, candidate number, exam information and relevant supporting documents.

WSET acts as an independent data controller for its own processing. You can consult WSET’s Privacy Policy or contact its data protection team at dpc@wsetglobal.com.

If information required for registration or examination is not provided, we may be unable to register you or arrange your exam. Providing health information is optional, but relevant evidence may be necessary to assess a request for support.

Storage and access

Student records are stored in access-controlled Dropbox folders. Orders and related information may also be processed through the systems described in our Store Privacy Policy.

Access is limited to those who need the information for the relevant purpose. Health information and other sensitive supporting documents are kept separately with restricted access.

We use appropriate organisational and technical measures to protect personal information against unauthorised access, loss or misuse.

How long we keep information

We do not retain student information indefinitely.

Retention depends on the type of record and the reason it is needed:

• Contracts, orders and related records: up to ten years where necessary for contractual, accounting or legal purposes, as explained in our Store Privacy Policy.
• Course, exam and support records: for as long as needed to administer your learning and qualification, handle reviews or appeals, and complete relevant checks. These records are reviewed annually.
• Health information and sensitive supporting documents: reviewed when the relevant request, exam process and any appeal are complete, and deleted when no longer needed unless a specific legal reason requires further retention.
• Tax and accounting records: retained for the periods required by applicable law.

Where longer retention is necessary, we will identify the reason. Information no longer needed will be deleted or anonymised.

WSET applies its own retention periods to information it holds. Those periods do not automatically determine how long Grande Passione keeps its own records.

Service providers and international transfers

We use service providers, including Dropbox and the providers described in our Store Privacy Policy, to support storage, communications and administration.

Information may be processed outside the European Economic Area, including by WSET in the United Kingdom. Where required, transfers are subject to an applicable adequacy decision or other appropriate safeguards.

You may contact us for information about the safeguards relevant to your data.

Newsletter communications

Enrolment on a WSET course does not automatically subscribe you to our newsletter.

Marketing communications are managed separately, on the applicable consent basis. You may unsubscribe without affecting your course or exam registration.

Your rights

Subject to the conditions and exceptions under applicable law, you may request:

• Access to your personal information.
• Correction of inaccurate or incomplete information.
• Deletion of information.
• Restriction of processing.
• Data portability.
• An objection to processing based on legitimate interests.
• Withdrawal of consent where processing relies on consent.

Send requests to contact@grandepassione.com. We normally respond within one month. If a permitted extension is necessary, we will explain why.

You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali. You do not need to complete our course complaints procedure first.

For information held independently by WSET, contact dpc@wsetglobal.com.

Responsibility and review

Policy owner: JC Viens, Grande Passione — WSET APP no. 3119
Version: 1.0 — September 2026

This notice is reviewed annually and whenever relevant processing activities, requirements or procedures change.