Personal Data Protection

Basic provisions

 

The operator (controller) of your personal data, according to Article 4 Point 7 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR), is the operator

Barbara Minčíková - VINOPOLITAN

Address:                                             Mraziarenská 16464/6, 821 08 Bratislava – mestská časť Ružinov

Address of the operation:            Námestie SNP 6, 811 06 Bratislava – Old Town

Registration:                                     District court Bratislava,

                                                            Trade Register Number: 110-231907

Company registration number:         47 657 235

 

Establishment contact info:

Telephone number:               +421 949 213 441 , +421 905 384 151

Address of the operation:   Námestie SNP 6, 811 06 Bratislava – Old Town

E-mail:                                     info@vinopolitan.sk

 

What is personal data? Personal data means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to a commonly used identifier such as a name, surname, identification number, location data, or online identifier, or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

What is the processing of personal data? The processing of personal data means any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, regardless of the methods used for processing.

The Controller (Administrator) is not obliged to appoint/identify a Data Protection Officer. Sources and categories of personal data: The Controller processes personal data (provided directly by you) that you have provided to them or personal data obtained based on fulfilling your order. Your identification and contact information and data necessary for the fulfillment of the contract. Legal basis and purpose of processing:

The legal basis for processing is:

• The performance of a contract between you and the Controller according to Article 6(1)(b) of the GDPR.
• The legitimate interest of the Controller in providing direct marketing according to Article 6(1)(f) of the GDPR.
• Your consent to the processing of personal data for the purpose of providing direct marketing according to Article 6(1)(a) of the GDPR.

The purpose of processing personal data is:

• Processing your order and fulfilling rights and obligations arising from the contractual relationship between you and the Controller. When placing an order, personal data necessary for successful order processing is required (name, address, contact), in accordance with Article 6(1)(b) of the Regulation (including subsequent payment processing, delivery of goods or services, handling of complaints, etc.). The processing of customer's personal data is carried out without the customer's consent, as the legal basis for processing their personal data for the purpose of fulfilling the contract is the specific distance contract concluded between the customer and the Controller. Providing personal data is a necessary requirement for the conclusion and performance of the contract; without providing personal data, it is not possible to conclude the contract or fulfil its terms on the part of the Controller.

  • Sending marketing offers and conducting other marketing activities. The operator does not engage in automated individual decision-making within the meaning of Article 22 of the GDPR.

  Retention period: The operator retains personal data for:

  • For the period necessary to fulfill the rights and obligations arising from the contractual relationship between you and the Controller and to assert claims arising from these contractual relationships.
  • Until the consent for the processing of personal data for marketing purposes is revoked.
  • After the expiration of the retention period for personal data as stipulated by Act No. 395/2002 Coll., the Archives and Registries Act, and the amendment of certain laws, the Controller will delete the personal data.

Recipients of personal data Who is a recipient? A recipient is anyone to whom personal data is disclosed, regardless of whether they are a third party. An authority exercising public authority and processing personal data based on a specific legal provision is not considered a recipient.

• They are individuals involved in the delivery of goods, services, and payment processing based on the contract.
• The operator does not provide, disclose, or make personal data available to third countries.

The operator declares that they have implemented appropriate personnel, technical, and organizational measures to ensure the protection of personal data. The operator has implemented technical measures to secure data repositories and storage of personal data in written form. The operator declares that only authorized persons designated by them have access to personal data.

• Your rights: Under the conditions specified in the GDPR, you have:
• The right to access your personal data under Article 15 of the GDPR.
• The right to rectify your personal data under Article 16 of the GDPR.
• The right to restrict processing.
• The right to erasure under Article 17 of the GDPR.
• The right to object under Article 21 of the GDPR.
• The right to data portability under Article 20 of the GDPR.
• The right to withdraw consent (electronically or by postal mail).
• The right to lodge a complaint with the supervisory authority for data protection if you believe that your rights regarding the protection of personal data have been violated.

Furthermore, you have the right to lodge a complaint with the supervisory authority for data protection if you believe that your rights regarding the protection of personal data have been violated.

How can you exercise your rights?

1. Right to access data You have the right to know whether we process your personal data. If we do, you can request access to them. Upon your request, we will provide you with a confirmation containing information about the processing of your personal data. You can submit your request electronically to the email address: info@vinopolitan.sk or by mail to the postal address: Mraziarenská 16464/6, 821 08 Bratislava – Ružinov, or to the operational address: Nám. SNP 6, 811 06 Bratislava – Staré mesto.
2. Right to rectification: You have the right to ensure that your personal data processed by us is accurate, complete, and up to date. If your personal data is incorrect or outdated, you can request correction or supplementation from us. You can do so by electronic means to the email address: info@vinopolitan.sk or by mail to the postal address: Mraziarenská 16464/6, 821 08 Bratislava – Ružinov, or to the operational address: Nám. SNP 6, 811 06 Bratislava – Staré mesto.
3. Right to erasure

                      i.            Under certain circumstances, you have the right to have your personal data erased. You can request the erasure of your data from us at any time. We will erase your personal data if:

                    ii.             

                   iii.                Your personal data is no longer necessary for the purposes for which it was collected or processed.

                   iv.                You withdraw your consent on which the processing is based, and there is no other legal ground for the processing.

                     v.                You object to the processing of your personal data, and there are no overriding legitimate grounds for the processing.

                   vi.                Your personal data has been unlawfully processed.

                 vii.                Your personal data must be erased to comply with a legal obligation.

 

Please note that there may be certain exceptions or limitations to this right based on applicable laws.

1. Right to restriction of processing You can request us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not further process it. The restriction of processing of your data may occur if:

               viii.            You inform us that your personal data is inaccurate, and we need to verify its accuracy.

                   ix.            We are processing your personal data unlawfully, but you do not want it to be erased and instead request that we restrict the processing.

                     x.            We no longer need your data, but you need it to establish, exercise, or defend your legal claims.

                   xi.            You object to the processing of your personal data, and we are verifying whether our legitimate interests override your reasons for objection.

Please note that the restricted processing of your data means that we will not use or process it for any other purposes unless you give your consent or it is necessary for the establishment, exercise, or defense of legal claims or for the protection of the rights of another individual or legal entity.

1. Right to data portability You have the right to request that we provide you with your personal data in electronic format (such as an XML or CSV file) that allows you to easily transfer the data to another company. You can also request that we transfer your personal data directly to a chosen company on your behalf. We will comply with your request if you have provided us with your personal data directly and have given us your consent for its processing.
2. Right to object You have the right to object to the processing of your personal data. If we process your personal data in the following cases:

                 xii.            due to our legitimate interest,

                xiii.            for the purpose of creating a customer profile,

                xiv.            you can object to their processing if you have personal reasons for doing so.

How can you exercise these rights? You can approach us with your request using one of the following methods: by electronic means to the email address: info@vinopolitan.sk or by mail to the postal address: Mraziarenská 16464/6, 821 08 Bratislava – Ružinov, or to the operational address: Nám. SNP 6, 811 06 Bratislava – Staré mesto.

If you believe that your rights regarding the protection of personal data have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, at the following address:

Hraničná 12
820 07 Bratislava 27
Slovenská republika
 
IČO: 36064220
DIČ: 2021685985
 
Phone number:
+421 /2 3231 3214
 
E-mail: statny.dozor@pdp.gov.sk

Operational hours:
Monday-Tuesday: 8:00 - 15:00
Friday: 8:00 - 14:00

 

The controller, in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) and with Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts:

The processing of orders, issuance of tax documents, and handling of complaints in the online store www.vinopolitan.sk is carried out by Barbara Minčíková - VINOPOLITAN, located at Mraziarenská 16464/6, 821 08 Bratislava – Ružinov, Identification Number (IČO): 47 657 235.

The seller hereby notifies the buyer that the processing of personal data is permitted under Article 6(1)(b) of the General Data Protection Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. In accordance with Article 6(1)(b) of the General Data Protection Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, the seller, acting as the data controller, will process the personal data of the buyer in the process of concluding a purchase agreement without the buyer's consent as the data subject. This is because the processing of the buyer's personal data will be carried out by the seller in pre-contractual relations with the buyer, and the processing of the buyer's personal data is necessary for the performance of the purchase agreement in which the buyer acts as one of the contracting parties.

1. Marketing activities include:

2.1 Sending newsletter messages to the email address of customers who have subscribed to the mailing list on the website of the online store www.vinopolitan.sk. The scope of information processed includes: (title, first name, last name, email address).

2.2 Participation in advertising campaigns (events) conducted on the website of Barbara Minčíková - VÍNOPOLITAN or through flyers. The scope of information processed includes: (title, first name, last name, postal address, email address, phone number, signature).

2.3 A visitor to the online store can subscribe to the newsletter by directly entering their email address into the field "Subscribe to the newsletter..." provided on the website www.vinopolitan.sk. Alternatively, as a buyer, they can give their consent by checking the corresponding checkbox before submitting the order, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR) 2016/679 concerning the protection of personal data and the free movement of such data. By doing so, the buyer allows the seller to process and store their personal data, particularly those mentioned above and/or those necessary for the activities of the seller related to sending information about new products, discounts, and promotions on the offered goods. The personal data will be processed across all the seller's information systems related to sending information about new products, discounts, and promotions on the offered goods. The buyer grants the seller this consent for a specific period until the purpose of processing the buyer's personal data is fulfilled. Upon fulfilling the purpose of processing, the seller will promptly ensure the deletion of the buyer's personal data. The buyer has the right to revoke their consent at any time in writing. Revoking consent for receiving newsletter communications can also be done electronically by unsubscribing from the mailing list. The automatic unsubscribe option is located at the bottom of the newsletter message that you receive at the email address you provided. The consent will expire within 1 month from the delivery of the consent revocation to the seller by the buyer.

The operator declares that: a) The processed personal data of the data subjects will only be used for the aforementioned purposes within its business activities. b) Not subscribing to newsletter messages does not pose a risk of contract refusal.

The personal data provided to the operator through the registration form or direct order must be accurate, and in case of any changes, you are obliged to promptly inform the operator about such changes.

The protection of your personal data is governed by the provisions of the Personal Data Protection Act, and your rights are regulated by the General Data Protection Regulation (EU) 2016/679, such as the right to request, based on a written request:

Right of access

• You have the right to receive a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written form unless you request otherwise. If you have requested this information electronically, it will be provided to you electronically, if technically feasible.

Right to rectification

• We take reasonable measures to ensure the accuracy, completeness, and timeliness of the information we have about you. If you believe that the data we have is inaccurate, incomplete, or outdated, please do not hesitate to request us to correct, update, or supplement this information.

Right to erasure

• Under certain circumstances, you have the right to request the erasure of your personal data from us, for example, when the personal data we have collected about you is no longer necessary for the original purpose of processing or if you withdraw your consent to the processing. However, your right needs to be assessed in light of all relevant circumstances. For example, we may have certain legal and regulatory obligations that mean we will not be able to comply with your request.

Right to restriction of processing

• Under certain circumstances, you are entitled to request that we stop using your personal data. This includes cases where you believe that the personal data we have about you may be inaccurate or when you believe that we no longer need to use your personal data.

Right to data portability

• Under certain circumstances, you have the right to request that we transfer the personal data you have provided to us to another third party of your choice. However, the right to data portability only applies to personal data that we have obtained from you based on your consent or as part of a contract in which you are one of the contracting parties.

Right to object

• You have the right to object to the processing of data that is based on our legitimate interests (for example, we process personal data for network and infrastructure security purposes). If we do not have compelling legitimate grounds for the processing and you raise an objection, we will not further process your personal data.

Rights related to automated decision-making

• You have the right to refuse automated decision-making, including profiling, which would have a legal or similarly significant effect on you. The company typically does not use automated decision-making or profiling in the context of employment.

Right to withdraw consent

• In most cases, we do not process your personal data based on your consent. However, there may be specific cases where we ask for your consent. In those instances, you have the right to withdraw your consent for further use of your personal data. (e.g., Photograph)

Right to lodge a complaint

• If you wish to lodge a complaint regarding the processing of your personal data, including the exercise of the above-mentioned rights, you can contact us at the following link: 0905384151 or by sending an email to info@vinopolitan.sk, or by submitting a written request to the operator's registered office at Mraziarenska 6, 82108 Bratislava.

If you are not satisfied with our response or believe that your personal data is being processed unfairly or unlawfully, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic. You can contact them at the following address: https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; telephone number: +421 /2/ 3231 3214; Email: statny.dozor@pdp.gov.sk.

Heureka satisfaction questionnaires

We assess your satisfaction with your purchase through email questionnaires as part of the Verified Customers program, in which our e-shop participates. These questionnaires are sent to you every time you make a purchase from us unless you refuse to receive electronic mail for direct marketing purposes in accordance with § § 62 of Act No. 351/2011 Coll. on Electronic Communications, as amended by subsequent regulations. The processing of personal data for the purpose of sending questionnaires within the Verified Customers program is based on our legitimate interest, which is to assess your satisfaction with your purchase from us. We utilize a processing intermediary, the operator of the Heureka.sk portal, for the purpose of sending questionnaires, evaluating your feedback, and analyzing our market position. For these purposes, we may provide information about the purchased goods and your email address to the intermediary. Your personal data is not disclosed to any third party for their own purposes when sending email questionnaires. You can express an objection to receiving email questionnaires within the Verified Customers program at any time by refusing further questionnaires using the link provided in the email with the questionnaire. In the event of your objection, we will no longer send you any further questionnaires.