Processing and Privacy Policy

I. General Provisions

1. Operator pursuant to Art. 4 point 7 of the European Parliament and of the Council (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR") is Valsesia, sro 36626031 established tree 463/10. 962 33 Budča (the "operator").

2. Contact the operator are:

• Address: Stromová 463/10, 962 33 Budča
• email: info@vino-obchod.sk
• Telephone: +421903531007

1. Personal data is any information relating to an identified or identifiable natural person; identifiable natural person is an individual who can be directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, locational data network identifier or by one or more specific factors, physiological, genetic, mental, economic, cultural or social .

2. Authorizing the operator did not name for privacy. 

II. Sources and categories of processed personal data:

1. The operator processes personal data that you provide him or personal information that the operator was awarded based on the fulfillment of your order.

2. The operator handles your identity and contact information and data necessary for performance of the contract.

III. Legitimate reason and purpose of the processing of personal data:

1. Legal grounds for processing personal data is:

• performance of a contract between you and the provider under Art. 6 paragraph. 1 point. b) GDPR.
• Operator legitimate interest in providing direct marketing (for sending commercial messages and newsletters) pursuant to Art. 6 paragraph. 1 point. f) GDPR.
• Your consent to the processing for the purpose of providing direct marketing (for sending commercial messages and newsletters) pursuant to Art. 6 paragraph. 1 point. a) GDPR in conjunction with § 7 para. 2 of Law no. 480/2004 Coll., On certain information society services in the event that there was an order for goods or services.

1. The purpose of processing personal data is:

• of your order and the exercise of the rights and obligations of the contractual relationship between you and the provider; when ordering the required personal data that are necessary for the successful execution of the order (name and address, contact) Provision of personal data is a necessary requirement for the conclusion and execution of the contract, without providing personal data is not possible to conclude a contract or to fulfill it by the operator.

1. By the operator does not come / comes automatically individually decide in accordance with Art. 22 GDPR. With such processing you have given their explicit consent.

IV. The data retention period

1. The operator keeps personal data:

• the time required to perform the rights and obligations arising from the contractual relationship between you and the Operator and the redress of these contractual relationships (for 15 years from the termination of the contractual relationship).
• for while it is revoked consent to the processing of personal data for marketing purposes, not exceeding 10 years if personal data are processed on the basis of consent.

1. After a period of retention of personal data operator personal information deleted.

V. Beneficiaries of personal data (Operator subcontractors)

1. Recipients of personal data shall be persons:

• involved in the supply of goods / services / implementation of payments under the contract
• ensuring service operation of e-shop and other services in connection with the operation of the e-shop
• ensuring marketing services

1. The operator does not intend to provide personal data to a third country (non-EU) or international organization. Recipients of personal data in third countries are providers of cloud services.

VI. Your rights

1. Under the terms of GDPR you:

• the right to access their personal data according to art. 15 GDPR.
• the right to rectify personal data pursuant to Art. 16 GDPR, appropriate restriction processing under Art. 18 GDPR.
• the right to erasure of personal data under Art. 17 GDPR.
• the right to object to the processing according to Art. 21 and GDPR
• prenesiteľnosť right to information under Art. 20 GDPR.
• the right to withdraw consent to the processing of writing or electronically to the address or e-mail administrator in Article. III thereof.

1. You also have the right to file a complaint with the Office for Personal Data Protection in the event that you think was violated your right to privacy.

VII. Conditions Security Policy

1. The operator declares that it has adopted all technical and organizational measures to secure personal data.

2. Operator to take technical measures to ensure data storage and storage of personal data in writing.

3. The operator declares that personal data are accessible only to persons authorized by them.

VIII. Final provisions

1. By checking the box before submitting your order from the online order form, you confirm that you have read and accepted the Privacy and Privacy Policy in its entirety.

2. By checking the box before submitting your order from the online order form, you confirm that you have read and understood the terms and conditions of the terms and conditions and agree to them in their entirety.

3. The operator is entitled to change these conditions. The new version of the terms of protection of personal data published on its website and at the same time will send a new version of these terms to your e-mail address you provide administrator.

These conditions come into force on 19.1.2020