VinoVinoPL
Privacy Notice (Orders)

PRIVACY NOTICE

Order placement

 Before placing an order on the website VINO&VINO («Site») we invite you to review the terms of personal data processing.

Purpose of processing, legal basis and scope of processed personal data

Purpose of processingScope of processed personal data
Order placement and payment processingIndividual data: order information, first and last name, phone number, IP address, email
Data of a legal entity representative: first and last name, phone number, IP address, email
Delivery of goodsIndividual data: first and last name, phone number, address, passport details for age and identity verification
Data of a legal entity representative: first and last name, phone number

 

The lawfulness of such processing is based on point (b) of Article 6(1) of EU Regulation 2016/679 («GDPR») — processing is necessary for the performance of a contract (Terms of Use), to which the data subject is a party.

 

We care about the security of your data. Below you will find information on how we process and transfer it.

 

Who is the controller?BPR EKOGROUP Spółka z ograniczoną odpowiedzialnością
Address: Aleja Prymasa Tysiąclecia 83A loc. U-10, Warsaw 01-242, Poland
Email: info@vino-vino.pl
What do we do with personal data?Collect, systematize, store, modify, use, anonymize, transfer (if necessary) and delete.
Source of dataDirectly from you via the order form and from partners providing delivery.
Data retention period3 years from the date of order placement.
Who do we transfer data to?
  • Payment services: VIVA PAYMENTS (EU), Dream Payments Sp. z o.o. (EU)
  • Delivery services: Wolt, Uber, Glovo, Pyszne.pl
Automated decision-makingNot carried out.

Your rights and the procedure for exercising them

You have the right to:

  1. Access — request a copy of your data and details of processing.

  2. Rectification — request correction of inaccurate or incomplete data.

  3. Erasure — if there are no legal grounds for storage.

  4. Restriction — for example, if the data are inaccurate or the processing is unlawful.

  5. Objection — if you object to processing based on legitimate interest.

  6. Portability — receive and transfer data to another controller.

  7. Complaint — file with the supervisory authority in case of a GDPR breach.

     

How to exercise your rights

Send a request by email. Response time — up to 1 month. If necessary — extended up to 2 months with notification.

 

For more details — see the Personal Data Processing Policy on the VINO&VINO website.