1. Data Controller
Vinařství PRAMENY s.r.o., ID No.: 21455724, with registered office at Polešovice 571, 687 37, Czech Republic (hereinafter "Controller") is the controller of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR).
2. Categories of Personal Data Processed
The Controller processes the following categories of personal data:
- Identification data: first name, last name
- Contact data: email address (when subscribing to newsletter)
- Business data: ID No., Tax ID, business name, company registered office
- Order data: purchase history, preferences, communication
3. Purposes of Personal Data Processing
We process personal data for the following purposes:
- Fulfillment of contractual obligations – processing orders, delivery of goods, invoicing
- Customer communication – responses to inquiries, product information
- Marketing activities – sending newsletters, information about news (only with consent)
- Accounting and tax obligations – bookkeeping, tax documents
- Legal obligations – document archiving, complaint resolution
4. Legal Basis for Processing
Processing of personal data is based on:
- Contract performance (Art. 6(1)(b) GDPR) – for processing orders and delivery of goods
- Legitimate interest (Art. 6(1)(f) GDPR) – for communication and marketing
- Consent (Art. 6(1)(a) GDPR) – for sending newsletters and marketing communications
- Legal obligation (Art. 6(1)(c) GDPR) – for accounting and tax obligations
5. Duration of Personal Data Processing
We process personal data for:
- Contractual relationships: for the duration of the contract and subsequently 3 years for resolving potential disputes
- Accounting documents: 5 years from the end of the accounting period
- Marketing purposes: until consent is withdrawn or 3 years from last contact
- Newsletter: until consent is withdrawn
6. Transfer of Personal Data
We do not transfer personal data to third parties, except:
- Carriers – only address for delivery of goods
- Accounting services – for bookkeeping and tax obligations
- IT services – for technical support of websites and email services
- Authorities – only based on legal obligation
7. Your Rights
In connection with the processing of personal data, you have the following rights:
- Right to information – about the processing of your personal data
- Right of access – to your personal data
- Right to rectification – of inaccurate or incomplete data
- Right to erasure – of personal data under certain conditions
- Right to restriction of processing – under certain conditions
- Right to data portability – of data in a structured format
- Right to object – to processing based on legitimate interest
- Right to withdraw consent – at any time for marketing purposes
8. Security of Personal Data
When processing personal data, we take appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
These measures include:
- Encryption of sensitive data
- Regular backups
- Limited access to data only by authorized persons
- Regular updates of security systems
9. Cookies and Tracking
On our website, we use cookies for:
- Technical cookies – necessary for website functionality
- Analytical cookies – for measuring traffic and improving the website
- Marketing cookies – only with user consent
You can manage cookies in your browser settings.
10. Contact and Complaints
For any inquiries regarding personal data processing, please contact us:
You have the right to file a complaint with the Office for Personal Data Protection (www.uoou.cz).
11. Changes to Privacy Policy
This privacy policy may be updated from time to time. We will inform you of significant changes through our website or by email.
We recommend regularly checking this policy to stay informed about how we protect your personal data.