Administrator: Business name: Webstart Ltd. Company ID: 51981742 VAT ID: 2120849027 Registered office: Teplý Vrch 87, 980 23 Teplý Vrch Entry in the Commercial Register: Registered in the Commercial Register of the District Court Banská Bystrica, Section Sro, Insert No. 35220/S

Contact details: Tel.: +421 907 656 413 Email: [email protected]

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementing of certain laws.

1. Terms
   Data Subject: This document governs transparent information, notifications, and procedures for the exercise of the rights of natural persons as consumers, further for the assertion of the rights of natural persons in the position of business partners of the controller and natural persons as statutory bodies and employees of the business partner of the controller to whom personal data relates (hereinafter also referred to as “You” or “customer”); Business Partner: For the purposes of this document, a business partner is any independently earning individual or natural person in the position of a statutory body or employee of a legal entity or independently earning individual with whom the controller has entered into a legal relationship, leading to the processing of personal data, or with whom the controller is negotiating the entry into this legal relationship (also referred to as “Business Partner”). Personal Data: Personal data is any information relating to a living natural person, by which this person can be directly or indirectly identified, such as name and surname, permanent address, gender, age, date of birth, birth number, identification number, marital status, photographic record, video recording, audio recording, email address, telephone number, IP address, cookies, VAT ID, ID card number, driver’s license number, passport number, education, income from employment, cultural profile, etc. (hereinafter also referred to as “data” or “information”). Special Categories of Personal Data: This category includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, and data concerning health or sex life or sexual orientation of a natural person. Controller: The entity that determines the purpose and means of processing personal data, performs the processing, and is responsible for this processing. The controller of personal data is the operator of the online store www.lovepotionwine.eu, company Webstart Ltd, ID Number: 51981742, with registered office: Teplý Vrch 87, 980 23 Teplý Vrch. (hereinafter also referred to as “controller” or “we”); Processor: The entity that, based on the law or authorization from the controller, processes personal data for the controller, based on a contract for the processing of personal data (hereinafter also referred to as “partner” or “processor”); Website: The websites available at www.lovepotionwine.eu; Purpose of Processing Personal Data: The reason why personal data is processed. Such a reason may include, for example, contract fulfillment, user account management, handling of requests and complaints, sending commercial notifications (newsletters), or displaying advertisements based on customer interest; Cookies: Short text files stored by your web or mobile browser. Most cookie files contain a unique identifier, the so-called cookie ID. This is a string of characters assigned by websites and servers to this browser, which stored the cookie file. This allows websites and servers to distinguish and identify individual browsers. Cookie files are used to improve the functionality of websites, evaluate their visits, and better target marketing activities. If you browse our websites, we assume that you agree to the use of these files.
2. What personal data is processed?
   We and our contractual processors process the following personal data or categories of personal data based on the relevant legal title and purpose of processing
   Electronic contact data: e.g., phone number, email address;
   Other electronic data: IP address, cookies, authentication certificates, identifiers on social networks, device localization data used by the customer, etc.;
   Other personal data related to the contractual relationship: bank account number, order history;
   Additional personal data: typical data provided by the customer in the order form or other documents and in communication with us, including subsequent updates.
   What is the origin of personal data? We process data that you provide to us, for example, when ordering our products, registering a user account, communicating with us, or subscribing to newsletters. Typically, this includes:
3. Why are personal data processed? Your personal data may be processed for the following purposes:
   • Contractual relationship fulfillment, invoicing
     • Purpose: Based on the contract with us, you are entitled to the ordered goods. In turn, we are entitled to receive the agreed price. To fulfill our part of the commitment and verify the fulfillment of your part, we need to process your identification and address data, contact data, and other personal data related to the contractual relationship (e.g., account number).
     • Legal basis: Processing personal data for the purpose of fulfilling the contractual relationship is justified by the contractual relationship between you and us. Providing personal data in this case is a contractual requirement, without which it is not possible to conclude a contract.
     • Storage period: The data storage period is determined by the duration of the customer’s contractual relationship with us.
   • Customer account management
     • Purpose: Customers can register on our websites and manage their personal settings. For this purpose, we need to process your email address, and you may also provide your name, surname, and phone number. These data are then used for easier ordering of our products.
     • Legal basis: Processing personal data for the purpose of managing customer accounts is justified by your consent. Providing personal data in this case is voluntary, but without it, registration is not possible. You can revoke your consent at any time.
     • Storage period: The data storage period is determined by the duration of your consent. Not logging into the customer account for 3 years will be considered consent withdrawal.
   • Communication with customers, satisfaction assessment, publication of reviews, handling suggestions, complaints, and claims
     • Purpose: We use your data to manage your queries, handle suggestions, complaints with our customer support. We may also contact you to fill out a satisfaction questionnaire. We use your data to inform you about the order status and remind you of the unpaid agreed price if you do not complete your order. If you do not complete your order, we may send you an email reminder that you have not completed this order. We believe this is a useful service, as it allows you to continue your started order without having to search again for the selected product offerings. Furthermore, we process your data in cases of asserting your rights to defective performance and in the exercise of your rights in connection with the processing of your personal data.
     • Legal basis: Processing personal data for the purpose of communicating with customers, satisfaction assessment, handling suggestions, complaints, and claims is justified by our legitimate interest in the ability to communicate with customers. Providing personal data in this case is not a legal or contractual requirement. You are not obliged to provide us with your personal data for this purpose. If you decide to publish a review, you do so voluntarily, and we process your data based on your consent. You can revoke your consent at any time.
     • Storage period: The data storage period is determined by the duration of the customer’s contractual relationship with us and subsequently for 4 years after its termination. In the case of a review or product recommendation, the storage period is determined by the duration of your consent.
   • Sending commercial announcements and offering our goods
     • Purpose: We regularly send news about our products via email to our customers and those who have expressed their consent. You can quickly and easily unsubscribe from these commercial announcements via the unsubscribe link included in each announcement. You can also manage your preferences for receiving commercial announcements through the settings accessible through each newsletter (unsubscribe). If you are our customer (for example, if you have placed an order with us), we may use your email address provided to send you commercial announcements about similar products if you do not object. In other cases, we ask for your consent to send commercial announcements about our products, promotions, and advertising campaigns. Information you provide to us, as well as information obtained otherwise in connection with our products, such as website usage data, order history, or information about your participation in events and contests, may be used to personalize our commercial announcements. We will always ask for your consent to send commercial announcements whenever it involves obtaining consent required by applicable regulations.
     • Legal basis: Processing personal data for the purpose of sending commercial announcements and offering our goods is justified by your consent. Providing personal data based on your consent is voluntary, and without it, we cannot send you commercial announcements. You can revoke your consent at any time. Providing personal data in this case is not a legal or contractual requirement. You are not obliged to provide us with your personal data for this purpose.
     • Storage period: The data storage period is determined by the duration of your consent. We will consider the revocation of consent or the termination of the legitimate interest if you do not open our commercial announcements for 3 years.
   • Direct marketing and creating personalized content and advertising
     • Purpose: Technologies for creating personalized content and advertising allow us to display advertisements on partner websites to visitors who have already shown interest in our websites or services. We strive to display only ads that genuinely interest you and not ads unrelated to your person and interests. Based on the history of your orders, interests, and behavior on websites, you may be shown personalized content and offers on our websites and on third-party websites and applications (including social networks). This is mainly enabled by cookies. You can read about managing your preferences regarding cookie processing in the cookies section.
     • Legal basis: Processing personal data for the purpose of direct marketing and creating personalized content and advertising is justified by your consent, or our legitimate interest in direct marketing. Providing personal data based on your consent is voluntary, and without it, we cannot create personalized content and advertising for you. You can revoke your consent at any time. You can express your disagreement with the processing of personal data based on a legitimate interest in the manner specified in the section on cookies.
     • Storage period: The data storage period is determined by the duration of your consent or by the duration of the legitimate interest, but no longer than 4 years from the termination of the customer’s contractual relationship with us.
   • Protection of our rights and property, prevention of misuse of services
     • Purpose: We use your data to protect our rights and property, especially when asserting our claims in connection with defective performance. We also use your data to prevent misuse of our services, including our websites. We may use your data to determine whether a particular person is subject to measures aimed at preventing unfair behavior and ensuring the security of services. Based on the data you provide to us or data obtained otherwise, we may contact you in connection with the exercise of your rights in connection with the processing of your personal data.
     • Legal basis: Processing personal data for the purpose of protecting our rights and property and preventing misuse of services is justified by our legitimate interest in protecting our rights and property and preventing misuse of services. Providing personal data in this case is not a legal or contractual requirement. You are not obliged to provide us with your personal data for this purpose.
     • Storage period: The data storage period is determined by the duration of the customer’s contractual relationship with us and subsequently for 4 years after its termination.
   • Improvement of our services and products
     • Purpose: We use data on your behavior on our websites to improve our services and products, especially in terms of their user-friendliness. We strive to offer our customers the best possible shopping experience, and we believe that analyzing your behavior on our websites is essential for this purpose. We may use your data to analyze the efficiency of our advertising campaigns. We also use your data to perform internal analyzes.
     • Legal basis: Processing personal data for the purpose of improving our services and products is justified by our legitimate interest in improving our services and products. Providing personal data in this case is not a legal or contractual requirement. You are not obliged to provide us with your personal data for this purpose. We use pseudonymized or anonymized data for analytical purposes.
     • Storage period: The data storage period is determined by the duration of the customer’s contractual relationship with us and subsequently for 4 years after its termination.
   • Compliance with legal obligations
     • Purpose: We process your data to fulfill our legal obligations. In particular, we process your data to fulfill our tax obligations, including issuing and archiving invoices, keeping tax documents, and fulfilling our other legal obligations.
     • Legal basis: Processing personal data for the purpose of fulfilling legal obligations is justified by our legal obligation. Providing personal data in this case is a statutory requirement. You are obliged to provide us with your personal data for this purpose.
     • Storage period: The data storage period is determined by the duration of the customer’s contractual relationship with us and subsequently for 10 years after its termination.
       Electronic contact data;
       Other personal data related to the contractual relationship. And further data obtained automatically as you browse our websites.
       Other electronic data:
       Cookies;
       The website you recently visited;
       IP address;
       Access date and time;
       Search queries;
       HTTP and HTTPS response codes;
       Transferred data groups;
       Browser and computer operating system data. We also obtain personal data of business partners through business cards (paper and electronic), websites of business partners, electronic communication means (e.g., email and telephone conversations), conversations on social and professional networks, oral negotiations, draft contracts, or other business documents, or recommendations from third parties.
   • Who has access to personal data? Your personal data is primarily accessible to our employees who need this data to provide you with our services. In addition to our employees, we must disclose your personal data to partners who enable our operations and help us provide you with higher quality, more accurate, and overall more personalized content and services. We carefully select partners to whom we entrust your personal data. We only collaborate with those capable of ensuring the technical and organizational security of personal data to prevent unauthorized or accidental access to your data or any other misuse. All these partners are authorized to process your data solely based on a personal data processing agreement, in which they commit to confidentiality. The provided data must not be used for any purposes other than those for which we have made them accessible.
   • The following categories of our partners (recipients) may have access to your personal data:
   • Partners who handle the transportation of our goods.
   • Partners to whom we provide data for the purpose of analyzing the visits to our websites, your behavior on the websites, and business conversions.
   • Partners who manage the technical operation of a specific service and operators of technologies we use for our services.
   • Providers of accounting and tax advisory services.
   • Providers of information and communication services and hosting, including cloud storage.
   • Providers of security and integrity for our services and websites.
   • Providers of analytical services.
   • Providers of assistance services for customer support and satisfaction assessment.
   • Payment gateway providers (credit card providers).
   • Social network operators.
   • Providers of legal services, lawyers.
   • Providers of printing and postal services, including email distribution.
   • Partners collaborating with us in loyalty programs, organizing conferences, seminars, and other events.
   • Public authorities.
   • We disclose personal data in case of law enforcement, as required by law, or if necessary for the prevention, detection, and prosecution of crimes and fraud, or if we are otherwise legally obligated to do so.
   • This may involve law enforcement agencies (Police Force of the Slovak Republic, public prosecutor’s office, and courts) or financial authorities.
   • The transfer of personal data to these recipients does not occur regularly but only randomly, especially if required by law.
   • Are personal data transferred outside the EU? We do not transfer your personal data for processing to third countries (outside the European Economic Area, which includes states outside the European Union – Iceland, Liechtenstein, and Norway).
   • How are personal data processed? Personal data is processed both manually and automatically. We keep proper records of all processing activities in accordance with relevant legal regulations.
   • What are the rights of data subjects? In exercising your rights, contact us through our contact details provided at the beginning of these principles. We reserve the right to reasonably verify the identity of the applicant for these rights. If requests are repetitive and evidently unfounded or excessive, we may charge a reasonable fee or refuse to comply with the requests.
   • Right to access personal data If you want to know whether we process your personal data, you have the right to obtain information from us about whether your personal data is being processed and, if so, you also have the right to access your personal data. In the case of a repeated request, we are entitled to charge a reasonable fee for the copy of the provided personal data based on our administrative costs.
   • Right to rectification of inaccurate and completion of incomplete personal data If you believe that we process inaccurate or untrue data about you, you have the right to request their rectification. You also have the right to complete incomplete data. We will rectify or complete without undue delay, always taking into account our technical possibilities.
   • Right to erasure If your personal data is no longer needed for the purposes for which it was collected or otherwise processed, or if you find that it has been processed unlawfully, you have the right to request its erasure.
   • Right to restriction of processing of personal data If you are not interested in the complete erasure but only in the temporary restriction of the processing of your personal data, you can request the restriction of the processing of your personal data from us.
   • Right to data portability If you want us to transfer your personal data to a third party, you can exercise your right to data portability. If the exercise of this right could lead to damage to the relevant rights and freedoms of third parties, we will not be able to comply with your request.
   • Right to object You have the right to object at any time to the processing of personal data processed for the purposes of performing a task carried out in the public interest or in the exercise of official authority or for the purposes of our legitimate interests. If it cannot be demonstrated that there are serious legitimate grounds for processing that outweigh your interests or rights and freedoms, we will terminate the processing based on your objection without undue delay.
   • Right to withdraw consent at any time If the processing of your data is based on your consent, you have the right to withdraw this consent at any time.
   • Right to information about automated decision-making, including profiling You are not the subject of any decision based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.
   • Right to lodge a complaint with the Office for Personal Data Protection You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, located at Hraničná 4826/12, 820 07 Bratislava, tel.: +421 2 32 31 32 14, email: [email protected].
   • How are cookie files processed? Cookie files are used by most websites and servers to provide a variety of basic internet services. If you shop online, cookies serve, for example, to remember items you previously added to your shopping cart. Cookie files also allow websites to store your preferences (e.g., language or login information) and use them during your subsequent visits. Cookies can also collect statistical data about user activity, such as the number of unique visitors to the site in a month, which is valuable for the operator as it allows providing higher quality and more user-friendly services.
   • Cookie files can be categorized based on validity into:
   • Temporary cookies (session cookies), which remain stored in your browser only until you close your browser,
   • Persistent cookies, which remain stored in your browser for a longer period until their expiration or until you manually remove them (the storage period of cookie files in your browser depends on the settings of the cookie itself and your browser settings).
   • Cookie files can be categorized based on functions into:
   • Essential cookies, which are necessary for the functionality of our websites,
   • Preference cookies, which allow our websites to remember information that changes the behavior or appearance of the website (e.g., preferred language or region). These cookies are not necessary for the functionality of our websites but enhance their functionality and practicality.
   • Analytical cookies, which help us analyze your experience on our websites (User Experience) and understand how you use our websites,
   • Remarketing cookies, which we use for proper targeting and personalization of content and advertising and for the analysis and measurement of the performance of individual sales channels.
   • We also use third-party cookies, based on which tracking is performed on multiple websites. This allows us to provide you with personalized content and advertising on third-party websites and other sales channels.
   • Our websites use retargeting technologies, allowing us to categorize website users into user groups. Based on the specific user group, we can display personalized advertisements on other websites or in applications related to our products.
   • We use the following programs of our marketing partners:
   • Google
   • Heureka
   • Glami
   • Where can you learn more about the processing of personal data and privacy on the internet? You can change your browser settings to delete cookies or prevent them from being stored on your computer or mobile device without your explicit consent. Information about cookie settings can be found in the relevant section of your browser’s help. You can learn how it works on the most commonly used browsers here:
   • Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorerdelete-manage-cookies
   • Google Chrome: https://support.google.com/chrome/answer/95647?hl=cs
   • Safari: http://support.apple.com/kb/PH5042
   • Opera: http://www.opera.com/cs/privacy
   • Adobe (flash cookies): http://www.adobe.com/cz/privacy/policies/flash-player.html
   • You can also visit http://www.youronlinechoices.com/cz/ (Slovak), www.allaboutcookies.org (English), or www.aboutads.info/choices (English), where you can learn about the options for blanket refusal of certain targeted advertising activities offered by some third parties we cooperate with.
   • You can also read about cookies on Wikipedia: https://cs.wikipedia.org/wiki/HTTP_cookie (Slovak).
   • Are data about children also processed? Our websites are not intended for children under the age of 15. Therefore, we do not intentionally collect their personal data. If we accidentally obtain personal data about children under 15, we will take steps to delete this data as soon as possible, except in cases where we are legally obligated to keep it.
   • Conclusion Legal regulations, as well as our business strategies and related methods of processing your personal data, may change. If we decide to update these principles, we will place the changes on our websites and inform you about them. In cases where significant changes to these principles are expected or when the law requires it, we will inform you in advance. We ask you to carefully read these principles and regularly check them when communicating with us or using our websites.
   • Legal Regulations: This document complies with applicable legal regulations, especially:
   • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and Act No. 18/2018 Coll., on the protection of personal data.
     
     In Teply Vrch, on 08.11.2023