Turn your phone vertically for the best web experience.

Information on the protection and processing of personal data

The business company Jan Baláž, ID No.: 45628661, with its registered office at Dolní Dunajovice, Pod Vápenkou 617, Postal Code 691 85, as the controller of the personal data (hereinafter referred to as the "Controller") provided to it by the data subject, undertakes to process such confidential personal data in accordance with the law, in particular within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.

Thecontroller declares that the personal data provided are confidential, obtained on the basis of a concluded contract or expressed consent to the processing of personal data. The data provided will be used for the performance of the contract or for the fulfilment of a legal obligation under the applicable legislation. All personal data is provided voluntarily with the consent of the data subject, in particular name, surname, e-mail, telephone number. The Controller reserves the right to use non-personal data provided by the data subject based on the use of online tools such as the Controller's website and other third party applications used by the Controller for business purposes, this includes in particular information relating to hardware, software, location and IP address.

The personal data provided will not be disclosed or provided to third parties. Possible recipients of personal data, other than employees of the controller, may be public authorities, information systems maintenance providers, providers of processing software, services and applications. The data controller shall act in such a way that the data subject does not suffer any harm to his or her rights and, at the same time, protects the data subject's personal data against unauthorised interference.

The data subject grants the controller consent to the processing of personal data for the duration of the contract or until the data subject objects to the processing of personal data. The right to withdraw consent to the processing of personal data at any time does not apply if the personal data are processed for the performance of a contract and not on the basis of the consent given.

The data subject acknowledges that the personal data provided to the controller are provided voluntarily. The consent given to the controller is valid until the data subject withdraws the consent.

The data subject has the right under Article 13(2)(b) of the Regulation to access his or her personal data, to rectification, erasure, restriction of processing, portability and the right to object. If the data subject is in any way dissatisfied with the processing of his or her personal data by the controller, he or she may lodge a complaint directly with the controller or contact the Data Protection Authority. More information about the data subject's rights is available on the website of the Data Protection Authority.

WHO IS THE DATA CONTROLLER?

The administrator of personal data is the business company Jan Baláž, ID No.: 45628661, with its registered office at Dolní Dunajovice, Pod Vápenkou 617, Postal Code 691 85. The administrator can be contacted by e-mail at lucie@vinarstvibalaz.cz or by phone at +420 725 043 567.

WHAT PERSONAL DATA DO WE PROCESS?

We process personal data that you provide to us yourself, i.e., data that you fill in the booking or other form or that you provide to us by e-mail, telephone or other device. This includes, in particular, your name, surname, date of birth, ID or passport number, place of residence, email, telephone number.

We process personal data that you provide to us based on your use of our website. This includes in particular IP address, registration data, browser type, time zone, products viewed, length of visit and other software and hardware data.

We process personal data that is publicly available from registers, records, registries, etc.

WHY DO WE PROCESS PERSONAL DATA?

We process personal data for the purpose of fulfilling a contract and order, providing a service, product, information, for data analysis, testing, statistical purposes such as measuring the effectiveness of advertising, etc. and on the basis of a legal reason or legitimate interest (sending sales and marketing communications, newsletters). The personal data we process for marketing purposes is provided directly by the data subject on the basis of the consent given.

WHO DO WE PROVIDE PERSONAL DATA TO?

We only provide personal data to third parties within the Group, i.e., personal data will be provided to persons who help us fulfil our contractual obligations (external collaborators and suppliers, providers of payment services, postal and delivery services, website administrators, etc.). We do not provide personal data to third countries.

HOW DO WE SECURE PERSONAL DATA?

The controller has taken all appropriate organisational and technical measures to maximise the protection of personal data of the data subject and to minimise unauthorised access to such data, both for personal data stored in electronic form and for personal data stored in paper form.

HOW LONG DO WE PROCESS PERSONAL DATA?

We process personal data only for the time necessary to exercise the rights and obligations arising from contractual obligations and to comply with a legal obligation. We only retain personal data provided on the basis of your consent until the consent is withdrawn, but no longer than 5 years. The personal data will be kept for a maximum period of time specified by law. After the expiry of the archiving period, the personal data will be destroyed.

WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF PERSONAL DATA?

A Right of access - the data subject has the right to obtain information from the controller as to whether the controller is processing his or her personal data and, if so, what the data are and how they are processed

B Right to rectification - the controller shall, without undue delay, rectify inaccurate personal data concerning the data subject at the request of the data subject, and the data subject has the right to have incomplete personal data completed at any time

C Right to erasure - the obligation of the controller to erase personal data that it processes about the data subject if certain conditions are met and the data subject so requests

D Right to restriction of processing - the data subject has the right to have the controller restrict the processing of his or her personal data in certain cases

E Right to object - to processing, which is based on the legitimate interests of the controller, of a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, the data subject has the right to object at any time

F Right to data portability - gives the data subject the possibility to obtain the personal data he or she has provided to the controller in a standard, machine-readable format, whereby he or she may subsequently transmit the data to another controller or, if technically feasible, request that the controllers transmit the data between themselves

G Right to withdraw consent - this right does not apply if the personal data are processed for the performance of a contract and not on the basis of the consent given

The Privacy Policy is valid and effective from 25. 5. 2018.