Processing of personal data

Information on the processing of personal data for the purposes of the performance of the contract

Ve Vino Vlak s.r.o., ID: 09874658 (Hereinafter referred to as "We" ) We pay great attention to the protection of personal data. In this document, you will find information about what personal data we process, especially about our customers and users of our website, whether we process data on the basis of consent or on the basis of another legal reason, for what purposes we use it, to whom we can pass it on and what you have in connection with processing your personal data rights.

1. Administrator identity and contact details

1.1. The controller of your personal data is the business company Vino Vlak s.r. Oh, with its registered office in Na pískách 1274/74, Dejvice, 160 00 Prague, ID NO: 09874658, registered in the commercial register of the municipal court in Prague, Section C, insert 343908 (hereinafter referred to as" Administrator “).

1.2. The administrator's contact details are as follows: address for delivery on Sands 1274/74, Dejvice, 160 00 Prague. E-mail address info@winetable.cz. Phone 00420 605 396 766.

1.3. The administrator has not appointed a personal data protection officer.

2. Legal reason for processing personal data

When you use our services, we collect various types of data, such as your username and password, your contacts, and other settings. We track which products you view on our website and from which device, which of our e-mail offers interested you, and we derive other data about you from this in order to show you tailored offers and to further improve our website in the future. If you shop with us or create an account, we also work with your first and last name, your orders and the information you set up in your account.

2.1. The legal reason for the processing of your personal data is the fact that this processing is necessary for the fulfillment of the contract between you and the controller or for the implementation of measures by the controller before concluding such a contract in the sense of Art. 6 par. 1 letter (B) regulation of the European Parliament and of the Council 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general regulation on the protection of personal data) (Hereinafter referred to as" Regulation “).

2.2. We process the following personal data:

  1. identification data, which in particular means first and last name, username and password, or identity card number if you are buying in installments, ID number and VAT number if you are an entrepreneur;
  2. contact details, which means personal details that enable us to contact you, in particular your email address, telephone number, delivery address, billing address and your contact on social networks;
  3. your settings, which means data in your account, especially saved addresses and profiles, newsletter settings, membership in loyalty programs, shopping lists, tracked products (so-called watchdogs), your evaluations of products and services and completed questionnaires;
  4. data about your orders, which are in particular data about the goods and services you ordered, the method of delivery and payment, including the payment account number and data about complaints;
  5. information about your behavior on the website, including when you view it through our mobile application, in particular the goods and services you view, the links you click on, the way you move around our website and scroll the screen, as well as information about the device from which you you browse our website, such as the IP address and the location derived from it, device identification, its technical parameters such as the operating system and its version, screen resolution, the browser used and its version, as well as data obtained from cookies and similar technologies for device identification;
  6. data about your behavior when reading the messages we send you, in particular the times of opening the messages, as well as data about the device on which you read the messages, such as the IP address and the location derived from it, device identification, its technical parameters such as the operating system and its version, resolution screens, used browser and its version;
  7. derived data, which means personal data derived from your settings, data about the goods and services you purchase from us, data about your behavior on the website and data about your behavior when reading emails we send you; in particular, this is data about your gender, age, financial situation, purchasing behavior and relationship to various goods and services;
  8. data related to the use of the call center or a visit to the store, which are in particular records of phone calls with the call center, identification of messages you send to us, incl. identifiers such as IP addresses and recordings from in-store camera systems.

3. Purpose of processing personal data

We process your personal data in different situations for different purposes. If you use our website, on which we also use cookies, we use your data mainly to monitor traffic and improve our services. If you register with us, we use your information to manage your accounts and provide related features. If you make a purchase from us, we use your information to process your order, protect our legal claims and fulfill our legal obligations. We also display and send you our customized offers with the help of your contacts and other data. With your consent, we transfer data to third parties to display offers on other websites and also to make some additional services available to you. We are authorized to process personal data either for the preparation or performance of a contract with you, compliance with legal obligations, our legitimate interests or your consent.

As part of our activity, we process personal data for various purposes and to varying extents either:

  1. without your consent based on the performance of the contract, our legitimate interest or due to the fulfillment of a legal obligation, or
  2. based on your consent.

What kind of processing we can carry out without your consent depends on the purpose of the respective processing and in what position you are in relation to us - whether you are just a visitor to our website or you register or make a purchase with us. We may also process your data if you are the recipient of goods or services ordered from us, if you communicate with us or if you visit our store.

3.1. The purpose of processing your personal data is to fulfill the contract between you and the controller or to take measures by the controller before concluding such a contract.

3.2. There is no automatic individual decision-making by the administrator in the sense of Art. 22 of the regulation.

4. Time to store personal data

    4.1. Your personal data will be processed by the controller for the duration of the effects of the rights and obligations from the relevant contract, and for the period necessary for the purposes of archiving according to the relevant generally binding legal regulations, but no longer than for the period determined by generally binding legal regulations.

    5. Other recipients of personal data

      5.1. Other recipients of your personal data will be persons forming a concern with the administrator, persons providing marketing services for the administrator, persons ensuring the operation of marketing platforms and persons providing technical or organizational activities for the administrator in accordance with the instructions of the administrator (processors of personal data).

      5.2. The administrator does not intend to transfer your personal data to a third country (a country outside the EU) or an international organization.

      6. Data subject rights

        6.1. Under the conditions set out in the regulation, you have the right to request from the administrator access to your personal data, the right to correct or delete your personal data, or limit their processing, the right to object to the processing of your personal data, and the right to the portability of your personal data.

        6.2. If you believe that the processing of your personal data has violated or is violating the regulation, you have, among other things, the right to file a complaint with the supervisory authority.

        6.3. You are not obliged to provide personal data. The provision of your personal data is a necessary requirement for the conclusion and fulfillment of the contract, and without the provision of your personal data it is not possible to conclude the contract or fulfill it on the part of the administrator.

        INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR THE PURPOSES OF SENDING COMMERCIAL MESSAGES

        The company Netsektor s.r.o. processes your personal data for the purpose of sending commercial messages (marketing offers) based on the so-called legitimate interest. You can object to this processing of your personal data at any time, and commercial communications will then no longer be sent to you. More detailed information on the processing of your personal data, including more detailed information regarding legitimate interest, can be found below.

        7. Administrator identity and contact details

          7.1. The controller of your personal data is the business company Vino Vlak s.r. Oh, with its registered office in Na pískách 1274/74, Dejvice, 160 00 Prague, ID NO: 09874658, registered in the commercial register of the municipal court in Prague, Section C, insert 343908 (hereinafter referred to as" Administrator “).

          7.2. The administrator's contact details are as follows: address for delivery on Sands 1274/74, Dejvice, 160 00 Prague. E-mail address info@winetable.cz. Phone 00420 605 396 766.

          7.3. The controller did not appoint a data protection officer.

          7.4. This information obligation shall be fulfilled in relation to the personal data processed by the controller exclusively for the purpose of sending commercial communications. It does not apply to personal data processed for a different purpose and on a different legal basis, for these cases the information obligation of the administrator will be fulfilled separately.

          8. Legal basis for the processing of personal data

            8.1. The legal basis for the processing of your personal data is that such processing is necessary for the purposes of the legitimate interests of the controller or of a third party within the meaning of Article 2 (2). 6 par. 1 letter (F) regulation of the European Parliament and of the Council 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general regulation on the protection of personal data) (Hereinafter referred to as" Regulation “).

            9. Purpose of processing personal data

              9.1. The purpose of processing your personal data is to send business communications to your person by the controller within the meaning of Act No. 480/2004 Coll., on certain services of the information society and on amendments to certain acts (Act on certain services of the information society) as amended (hereinafter referred to as" Law on certain information society services “).

              9.2. The AIFM does not provide for automatic individual decision-making within the meaning of Article 4 (2). 22 of the regulation.

              10. Legitimate interests of the administrator

                10.1. You use the administrator service in order to receive offers of third-party products or services sent by the administrator by electronic mail-a commercial communication. In connection with the use of the services, you have provided the administrator with your personal data and have given your consent to the sending of business communications to you (as part of the terms and conditions of the service).

                10.2. When sending commercial communications, the administrator shall comply with generally binding legislation, in particular Section 7 of the law on certain information society services.

                10.3. Paragraph 47 of the recitals of the regulation states, inter alia, that "the processing of personal data for the purposes of direct marketing may be regarded as being carried out on grounds of legitimate interest."

                10.4. The administrator has carried out an assessment of whether your personal data can be processed for the purpose of sending commercial communications and has also carried out the necessary proportional test, comparing your protection interests with the interests of the controller. The administrator has come to the conclusion that with regard to your previous consent to sending commercial messages and with regard to the fact that the purpose of using the services on your part is to receive commercial messages and also with regard to the fact that you could and may at any time refuse further sending commercial messages to you, it does not appear that your interests or fundamental rights and freedoms requiring the protection of personal data voluntarily provided by you take precedence over the administrator's legitimate interests in sending commercial messages.

                10.5. In view of the above, and in view of the fact that you could reasonably expect the processing of your personal data for the purpose of sending business communications, that the legal basis for the processing of your personal data for the purpose of sending business communications to your person is the legitimate interest of the controller (art. 2.1).

                11. Time to store personal data

                  11.1. Your personal data will be processed by the controller for the duration of the legitimate interest of the controller, but at most until you object or your similar request to the processing of personal data for the purpose of sending business communications from you.

                  12. Other recipients of personal data

                    12.1. Other recipients of your personal data will be persons providing marketing services for administrators and persons operating marketing platforms.

                    12.2. The administrator does not intend to transmit your personal data to a third country (a non-EU country) or an international organization.

                    13. Data subject rights

                      13.1. Under the conditions set out in the regulation, you have the right to request from the controller access to your personal data, the right to correct or delete your personal data, or to restrict the processing of your personal data.

                      13.2. If you consider that the processing of your personal data has been breached or violated by the regulation, you have the right, among other things, to lodge a complaint with the supervisory authority.

                      13.3. You have the right at any time to object to the processing of your personal data for direct marketing purposes, including profiling, where profiling concerns this direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes. This does not affect the processing of your personal data based on another legal basis or for another purpose.