Personal data protection
What personal data is processed and for what purpose?
1. Registration
Civic association Víno z Modra, with registered office at Štúrova 79, 900 01 Modra, ID number: 42417341, Registration number at the Ministry of the Interior VVS/1-900/90-45582 (hereinafter referred to as „Operator“) can process information obtained by filling out the registration form, and thus name, surname, e-mail, address of permanent residence and telephone number alternatively, other data necessary for the fulfillment of the order in accordance with the General Terms and Conditions (hereinafter referred to as „GTC). Other data related to the history of orders placed (especially the number and type of services ordered) are processed in the case of placing an order.
2. Conclusion of the Agreement, its fulfillment and complaint
In the event that the Customer decides to continue concluding the Agreement (whether with or without registration), the Operator will only process the data necessary to conclude this Agreement, i.e. first name, last name, e-mail, telephone number and data related to the given order. In order for the services to be delivered on the basis of the concluded Agreement, their delivery is also carried out on its basis, according to the Customer's choice, or the option offered within the given service.
In order to fulfill the Agreement, it is also possible that the Customer makes a claim. In that case, the purpose of personal data processing is still the fulfillment of the original Agreement. The Operator does not process any sensitive personal data of the Customer.
3. Newsletter
The Customer can also express his consent to the sending of commercial notifications, and thus marketing communication by setting up his user account, or by subscribing as an unregistered Customer. In this case, the Customer's e-mail is processed. If the Customer has already purchased Wine from Modry™ on the website, the Operator is entitled to send the customer a business notification even without his prior consent. However, this sending can be objected to at any time (unsubscribe), if you deactivate it in the settings of your account on the Vino z Modra website.
4. Accounting, archiving and other obligations in accordance with generally binding legal regulations
In the event of the conclusion of the Agreement, the Operator is obliged to store this data in accordance with the relevant legal regulations. This mainly concerns the Customer's identification data (name, surname, address of permanent residence/delivery address) and order data (type of service and purchase price). These data are stored in accordance with the Accounting Act and the Act on Archives and Registries. The operator also has obligations to process customers' personal data, for example, from the Income Tax Act, the Value Added Tax Act or the Consumer Protection Act. The operator is also obliged to provide its cooperation consisting in the processing of personal data, if it is requested by a state authority, which is directly authorized by law.
5. Customer support service (Help Desk)
In order to provide support and assistance to Customers, it is possible to contact the Operator. In this case, communication can also take place through the Customer's user account, and the Operator therefore processes only the data that the Customer provided to him during registration or the conclusion of the Agreement (with which the Customer expresses consent).
6. Making claims
In the event that the Operator is entitled to enforce its claims arising from the Agreement, or any other eligible legal title, it may provide the Customer's personal data to fulfill this purpose mainly to legal representatives, courts, or public administration bodies. The list of provided personal data must always be only to the extent necessary to protect the rights of the Operator.
7. Cookies
Cookies are also processed when you visit the Vino z Modry™ website. More about cookies in a separate section.
8. Interest in participating in the event
Sellers can also express their consent to the sending of commercial announcements, and thus marketing communication by sending a form showing interest in the participation of the seller/marketeer in the events of the Transferor.
9. Making camera and photo recordings of events
The operator processes personal data in the scope of photographs, video recordings and audio-visual recordings of participants in a public event organized by the operator for the purposes
publication of a photo, video or audio-visual recording of the person concerned as a participant in a public event in electronic form on the website of the operator www.vinozmodry.sk as well as on his accounts on the social networks Facebook, Instagram and YouTube with the aim of promoting the public event, the operator and his activities;
publication of a photo of the person concerned in printed form in the operator's printed marketing materials with the aim of promoting the public event, the operator and its activities;
proof that the public event in question took place.
What are the rights of the Customer when processing personal data?
It should be noted that the exact conditions for the exercise of individual rights are regulated in Chapter III of the Regulation, while in a specific situation not all rights may be applicable.
In the case of exercising any right, the Operator may first request additional information for the purpose of confirming the identity of the person who exercised this right.
Right of access to data
The customer has the right to obtain access to information about his personal data that the Operator processes about him. If the Customer has any questions regarding the processing (for example, about the purpose, about the categories of data that are processed, about the procedures used in profiling and the consequences of such profiling, about the storage period, about the specific rights of the Customer, etc.), he can contact the Operator at any time at the below contact details. The Operator may provide the Customer with additional information about the technologies used and the use of its results via the Internet or in another appropriate way.
Right to rectification
The Customer has the right to request that the Operator correct the data he recorded incorrectly about him without undue delay. The customer also has the right to supplement incomplete personal data, including by providing a supplementary statement.
Right to erasure
The Customer has the right to ask the Operator for permanent deletion of his personal data. This right can be exercised by the Customer, for example, if he believes that personal data are no longer necessary for the purpose for which they were obtained or if consent to processing has been revoked.
The right to limit processing operations
The Customer has the right to request that the Operator limit processing operations with personal data, for example, if the Operator no longer needs personal data, but the Customer needs them for legal purposes.
The right to portability of personal data
The Customer has the right to obtain his personal data in a structured, commonly used and machine-readable format and to request that the Operator transfer this data to another Operator. It should be noted that the Customer has the right to transfer personal data from one Operator to another only if it is technically possible.
The right to file a complaint with the supervisory authority
In the event that the Customer intends to file a complaint regarding the processing of his personal data by the Operator, the Customer may contact the Operator at any time or directly file a formal complaint with the Personal Data Protection Office of the Slovak Republic, with registered office: Hraničná 4826/12, 820 07 Bratislava. Further information is available at the Internet address: www.dataprotection.gov.sk
What is the legal basis for processing?
The Operator may start processing information about the Customer when using some of the listed functionalities of the Víno z Modry™ website only if the Customer expresses his consent. The legal basis for the processing of the Customer's personal data for the use of the above-mentioned functionalities is therefore the freely given consent of the Customer. This applies to registering an account on the Wine from Modra website (not concluding a Contract), sending business announcements, the loyalty system and the customer support service.
When using the Víno z Modry™ website, the Customer concludes a contract with the Operator, on the basis of which the ordered services are delivered to the Customer for a fee. When processing an order by the Operator, the legal basis for processing the Customer's personal data is the mutual contractual relationship established by the Agreement and not the consent granted by the Customer.
If the given legal basis is in a special law, for example, as is the case with the processing of personal data when processing personal data for the purposes established by law, consent cannot also be revoked, as it was not granted and the processing is carried out on the legal basis of the relevant legal regulation.
How can the Customer withdraw consent?
The Customer has the right to withdraw this consent at any time during the duration of the consent (and thus the existence of the Customer's user account on the Víno z Modry™ website, or in another case in which personal data is processed on the basis of consent), by using the relevant system functionality directly in the interface accessible to the Customer or in writing to the address of the Operator.
Consent to the sending of commercial announcements (Newsletter) can be revoked at any time, while the withdrawal of this consent does not affect the possibility of further use of the user account and the creation of orders on the website Wine from Modry™.
In case of withdrawal of consent, the Customer's personal data will not be further processed. However, the withdrawal of consent does not affect the legality of the processing of personal data based on consent before its withdrawal. Therefore, if the Operator processes personal data based on the conclusion of a contract with the Customer, consent to the processing of this data cannot be revoked, as it has not been granted and this data is processed as necessary for the performance of the concluded contract.
Does the processing of personal data lead to automated decision-making or profiling?
As part of ensuring an efficient and reliable online system, minimizing the occurrence of misconduct caused by the human factor, software generating proof of payment for the order made can be used to issue electronic invoices. This software works automatically and in case of misconduct, the Operator can be asked to review the document issued in this way through his contact details listed below.
According to the Regulation, profiling is not used when processing personal data on the website Wine from Modry™.
Who will personal data be provided to?
The Operator strictly protects the Customer's personal data. The Operator does not use the Customer's personal data for purposes other than the above. While ensuring the achievement of these purposes, the Operator may provide the Customer's personal data only to a verified supplier of technologies used by the Operator, but only to the extent necessary to fulfill his contractual obligations in relation to the Customer and under the condition of ensuring the protection of personal data. This is mainly a provider of payment services, accounting, logistics and a provider of IT support for the functioning of the Víno z Modry™ website.
In the event that the goods ordered by the Customer are located with the Operator's contractual partner, the Operator will provide the personal data necessary for the delivery of the ordered goods to the Customer's contractual partner to the extent necessary (especially name, surname, address, e-mail and telephone number). The contractual partner can then further provide this data to the carrier, who will ensure the delivery of the order, if he does not deliver the order in his own direction.
List of contractual partners to whom the Customer's personal data is provided for the purpose of fulfilling the contract concluded with the Operator:
suppliers of transport and other services
suppliers of goods sold through the website Wine from Modry™
payment service providers
event Ticket Ordering Service Providers
How does the Operator handle the Customer's personal data?
Since the protection and care of the Customer's personal data is important for the Operator, the Operator has taken and continuously ensures appropriate security measures to protect the Customer's personal data from destruction, loss, unauthorized provision or other unauthorized operation. This mainly concerns the use of encryption technologies, logging, the adoption of pseudonymization or anonymization of data (if their implementation is possible), as well as ensuring the permanent confidentiality, integrity and resilience of processing systems and regular testing, assessment and evaluation of the effectiveness of technical and organizational measures to ensure the security of Customer data.
Personal data of the Customer The Operator does not in any case directly or through third parties transfer outside the territory of the European Union and the European Economic Area.
What is the processing time of personal data?
The Customer's personal data is processed by the Operator only during the validity of this consent (2 years, or until revoked) and in the case of the existence of a contractual relationship only for the time required by relevant generally binding legal regulations (especially the Accounting Act and the Archives and Registries Act), most often for a maximum period of 10 years.
If in order to achieve the purpose of processing, the storage of data belonging to a specific natural person is not necessary (e.g. storage of aggregated statistical information instead of individual personal data), the Operator does not further store this data and deletes or anonymizes it after the purpose has been fulfilled.
The Operator may process the Customer's personal data longer than stated above, only if it is necessary due to the fulfillment of the Operator's obligations arising from legal regulations or if it results from the decisions of public authorities.
Contact details of the Operator
In case of any questions regarding the processing of personal data by the operator and in case of exercising any right of the Customer, it is possible to contact the operator at Štúrova 79, 900 01 Modra.