Information on the processing of personal data

Information on the processing of personal data of customers of B\V vinařství a.s.

B\V vinařství a.s., with registered office at Vítězná 718, 696 02 Ratíškovice, ID No.: 03255719, registered in the Commercial Register maintained by the Regional Court in Brno under file No. B 7112 (hereinafter referred to as the "Administrator"), is a wine seller and operator of an online wine shop at www.bvshop.cz.

The company B\V vinařství a.s. always takes great care of the satisfaction of its customers and fully respects their right to privacy. B\V vinařství a.s. therefore complies with the European Parliament Regulation and Council Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "GDPR") issues this Information on the processing of personal data, the purpose of which is to provide you with information on the processing of personal data of customers of B\V vinařství a.s.

Identification data of the Personal Data Controller
1. The administrator of your personal data is us, i.e. B\V vinařství a.s., with registered office at Vítězná 718, 696 02 Ratíškovice, ID No.: 03255719, registered in the Commercial Register maintained by the Regional Court in Brno under the registration number B 7112.

Scope of processing, purpose of processing and legal basis for processing
1. We process the personal data you have provided to us:

for the purpose of purchase and delivery of goods that you have ordered in the online shop operated on the website www.bvshop.cz. hereinafter referred to as the "online shop") or at the premises or ordered in another way;
and for the purpose of maintaining a user account in the online shop;
for the purpose of sending commercial communications (so-called newsletters) with information about news in our product range, promotions and discounts on certain goods;
in order to participate in our loyalty program;
when you visit our online shop.

In particular, we process the following personal data:

Identification datain particular: Name, surname, date of birth;
Contact details,in particular: residence and address for service, telephone number, email;
Information related to the purchase of goods,
Data related to membership in the loyalty program,in particular: information about the goods purchased;
Information about your activities in our online shop,, in particular, what goods you are viewing;

The actual scope of the personal data processed always varies depending on your position in relation to us, whether you have set up a user account in the online shop, what processing you have given us consent to, the current functionality of the online shop, etc. However, we only ever request and process personal data to the extent necessary to achieve the purposes for which we obtain it.

We process your personal data for the following purposes:
1. Processing of personal data for the performance of a contract - delivery of goods

If you have purchased goods from us or you are the person to whom the goods are to be delivered under a purchase contract concluded with our customer, we process your personal data necessary for the order to be properly prepared and delivered. We therefore need and process your personal data in order to conclude and properly execute the purchase contract.

(Processing of personal data pursuant to Article 6(1)(b) GDPR)

Processing of personal data for the purpose of fulfilling our legal obligations

V In some cases, we must process your personal data because we are required to do so by law. These include obligations required by the Accountancy Act and other tax legislation.

(Processing of personal data pursuant to Article 6(1)(c) GDPR)

Processing of personal data for our legitimate interests

We further process your personal data because of our legitimate interests, which are:

the protection of our rights under the concluded purchase contract, if there is a breach of the contract by you or if you assert claims against us in connection with the purchase contract;
sending commercial communications to customers within the meaning of Section 7(3) of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services).

(Processing of personal data pursuant to Article 6(1)(f) GDPR)

Processing of personal data on the basis of consent

If we do not have any of the above reasons for processing, we process personal data with your consent. The provision of such consent is entirely voluntary, however, in some cases it may be a prerequisite for the provision of a particular service. Consent to the processing of personal data can be revoked at any time,However, this no longer has any effect on previous processing.

Consent to the processing of personal data is required primarily in the following cases:

maintaining a user account: Purchases in the online shop or in the shop can be made without registration. However, registering a user account makes it easier for you to purchase, because after logging in, your personal data that we will need to process your order will be added automatically;
Sending commercial communications within the meaning of Section 7(2) of Act No. 480/2004 Coll., on certain information society services and on amendments to certain acts (Act on certain information society services): If you have subscribed to commercial communications (so-called newsletters), we will send you commercial communications about new products in our range and planned events and discounts to your email address;
use of cookies:
registration and participation in the loyalty program:If you wish to participate in a loyalty program whereby you can receive certain other benefits, it is necessary that you allow us to process your personal data for this purpose.

(Processing of personal data pursuant to Article 6(1)(a) GDPR)

In some cases, the same personal data may be processed for different reasons (e.g. we may need your email address to send you an order confirmation and to send you commercial communications).
The processing of your personal data is carried out by means of computer technology or, in the case of personal data in paper form, manually, in compliance with all security principles for the management and processing of personal data in accordance with the relevant legislation governing the protection of personal data. To this end, we have adopted the appropriate technical and organisational measures, which we regularly review and update.

Period of processing of personal data
1. Personal data are processed only for the necessary period of time, which is individual for each processing purpose. This may be the time necessary to achieve the purpose for which the personal data was obtained or the time period provided for by law. After the expiry of the period necessary for processing, the personal data shall be destroyed.
2. Where consent has been given for the processing of personal data for a specific purpose, the duration of the processing is determined by the duration of the consent, unless otherwise specified directly in the consent. You may withdraw your consent at any time and thus terminate the processing.

Sharing of personal data
1. We do not share your personal data with anyone without your consent, unless this is permitted by law or this Privacy Notice, or unless the need for sharing arises from the purchase contract.
2. We may also use the services of other processors to process your personal data, who will only process your personal data on our instructions and for the purposes set out above. These processors include providers of services necessary for our operation, in particular:

providers for accounting and tax administration;
ICT service providers;
providers of postal services.

Your personal data may also be transferred to third parties who have the legal authority to require the transfer of the personal data in question, based on a legal obligation or request.
Except as stated above, we do not trade, sell or exchange your personal data with anyone.
When providing your personal data to third parties, we always take the utmost care to ensure that your personal data is only disclosed to the extent necessary.

Your rights in relation to personal data
1. You havethe right to confirmation,whether or not your personal data is being processed and, if we are processing your personal data, you havethe right to accessto that personal data and to information to the extent provided for in Article 15 of the GDPR, in particular information about:

the purpose of the processing;
the category of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the intended period for which the personal data will be stored;
your rights in relation to the processing of personal data;
any available information about the source of the personal data, unless it has been obtained directly from you;
whether automated decision-making, including profiling, is taking place.

With regard to personal data, you have, among other things:

the right to rectification personal data pursuant to Article 16 GDPR if we process inaccurate personal data concerning you, or you have the right to have incomplete personal data completed;
the right to erasure of personal data("right to be forgotten") under Article 17 GDPR;
the right to restriction of processingof your personal data pursuant to Article 18 GDPR;
the right to data portabilityunder Article 20 GDPR;
the right to objectto object to the processing of your personal data pursuant to Article 21 GDPR;
the right to contact a supervisory authority,which is the Office for Personal Data Protection.

If we discover that a personal data breach has occurred or suspect that a breach has occurred, we will assess whether a breach has actually occurred, assess the severity (no risk, low risk, high risk) and, depending on the severity of the breach, inform you and the supervisory authority, which is the Office for Personal Data Protection.
If you wish to exercise any of the rights listed above, or if you become aware or believe that your personal data is being processed in a way that violates the protection of your privacy and personal life or is contrary to the law, please do not hesitate to contact us at any time.
If the processing of your personal data is based solely on consent, you have the right to withdraw this consent at any time.
If you discover or believe that your data protection rights have been violated, you may contact the supervisory authority, which is the Data Protection Authority, directly.