INFORMATION ON THE PROCESSING OF PERSONAL DATA – e-shop customers

I. INTRODUCTION

This document is drawn up in accordance with Regulation (EU) (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter also referred to as the “GDPR”) sets out detailed information on the processing of personal data of customers (hereinafter referred to as “data subjects”), the Vinařství Fučík online shop, operated by Vinařství Fučík, s.r.o., Company registration number: 01568060, Purkyňova 2, 110 00 Prague 1 (hereinafter also referred to as the “Winery”) as the data controller of this personal data.

This document provides clear, comprehensive and accurate information on the scope of the personal data processed that the data subject shares with the Winery. The Winery declares that it has implemented technical and organisational measures to protect the personal data of data subjects. The Winery has also taken all necessary measures to minimise the risk of unauthorised or accidental access to data subjects’ personal data, or of its alteration, destruction or loss, as well as unauthorised transfer or unauthorised processing.

If you have any further questions regarding the processing of data subjects’ personal data, please contact the data protection officer via the following email address: fucik@vinarstvi-fucik.cz, or by post to Purkyňova 2, 110 00 Prague 1 (for the attention of Vinařství Fučík, s.r.o.).

POINT I.

 Data Controller

I. As the controller of data subjects’ personal data, the winery determines the purpose and means of processing such personal data.

POINT II.

Purpose of the processing of personal data

I. The data controller processes personal data for the following purposes:

  1. the conclusion and performance of a contract of sale for goods, including their delivery;
  2. The processing of your personal data in connection with the withdrawal from the contract is necessary to fulfil the obligation to refund the purchase price paid for the goods to which the withdrawal from the sales contract relates;
  3. the protection of its legitimate interests (Article 6(1)(f) of the GDPR), which are described in more detail below;
  4. compliance with statutory obligations relating to accounting and tax liabilities.

II. The winery may use automated processing of personal data for the purposes of personalising communications, sending relevant marketing messages, reminding customers of unfinished orders, and analysing customer activity. As part of these processes, profiling may take place, consisting in particular of the analysis of data relating to purchasing behaviour, website activity, shopping basket contents, order history or responses to marketing communications. This profiling is not used for automated decision-making that would have legal or similarly significant consequences for the data subject within the meaning of Article 22 of the GDPR. Analytical and marketing tools (e.g. Google Analytics, advertising systems) may use profiling to improve services, but they are not used for automated decision-making regarding customers.

POINT III.

Legitimate interests of the Winery

I. The Winery also processes data subjects’ personal data for the purpose of safeguarding its legitimate interests. The Winery’s legitimate interest consists, in particular, of the direct marketing of its own products and services. If a contractual relationship exists or has existed in the past between the Winery and a data subject, the data subject may reasonably expect their personal data to be processed for the purpose of sending commercial communications relating to similar products and services. In order to personalise commercial communications, the Winery may analyse, in particular, previous purchases, customer activity, the time elapsed since the last order, or an unfinished purchase process, so that it can send more relevant offers, reminders and information relating to the products and services on offer. These processes may involve profiling; however, this does not have any legal or similarly significant consequences for the data subject within the meaning of Article 22 of the GDPR.

II. The data subject has the right to object at any time to the processing of personal data for the purposes of direct marketing, including profiling related to direct marketing. Should an objection be raised, the Winery will no longer process personal data for these purposes.

POINT IV.

 Collection of personal data

I. The Winery obtains the personal data of data subjects directly from its customers.

II. The winery does not obtain personal data of data subjects from third parties. If a data subject placing an order provides the personal data of a third party, that data subject is responsible for ensuring that the third parties have given their consent to the disclosure of their personal data.

POINT V.

 Categories of personal data processed

I. To ensure the proper conduct of the legal relationship between the Winery and the data subject, the Winery processes the following categories of personal data:

  1. basic identification details – first name, surname, address, delivery address;
  2. contact details – telephone number and email address;
  3. bank details – account number, reference number.

ITEM VI.

Legal basis for the processing of personal data

I. The lawfulness of the processing of personal data is determined on the basis of Article 6(1) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract, for compliance with a legal obligation, for the protection of the Winery’s legitimate interests, or if the processing is based on consent given by the data subject. The provision of personal data by the data subject is voluntary; however, to the extent necessary for the conclusion and performance of a sales contract, it constitutes a contractual requirement. Without the provision of this personal data, it is not possible to conclude a sales contract or to ensure the delivery of the goods ordered.  The provision of personal data for the purpose of sending marketing communications is voluntary, and data subjects may withdraw their consent at any time or opt out of receiving marketing communications.

II. The lawfulness of processing necessary to comply with a legal obligation to which the controller is subject is based, for example, on Act No. 563/1991 Coll., on Accounting, pursuant to which invoicing data is processed and stored, furthermore, on Act No. 586/1992 Coll., on Income Tax, and Act No. 235/2004 Coll., on Value Added Tax.

III. The data controller may process information relating to the verification of compliance with the minimum age for purchasing alcoholic beverages

ITEM VII.

Disclosure of personal data to third parties

I. The winery is obliged and authorised to transfer the personal data of data subjects to third parties (recipients, e.g. processors) in order to fulfil its legal obligations, to perform contracts, and on the basis of its legitimate interests.

II. The winery is obliged to provide the personal data of data subjects to state administrative authorities, the tax authorities, the courts, law enforcement agencies and the Czech Police.

III. The winery transfers the personal data of data subjects to other processors:

  1.  the company bfinance.cz accounting, s.r.o., Company Registration Number 28918991,  Prague-Štěrboholy – Štěrboholy, K učilišti 40/20, Prague City District, postcode 10200, which provides accounting services for the purpose of fulfilling statutory obligations under Act No. 563/1991 Coll., on accounting.
  2. ČSAD Hodonín a.s., with its registered office at Brněnská 3883/48, 695 01 Hodonín, Company Registration Number: 60747536, VAT No.: CZ28202376, which provides courier services for the purpose of fulfilling the contract with the customer – the proper delivery of goods.
  3. Hana Jech, MSc, Company registration number: 22450386, with its registered office at Purkyňova 2, Prague 1, which provides marketing services for the purpose of communicating with customers who have given their consent
  4. Webscale s.r.o., company registration number 10899618, with its registered office at Boudníkova 2538/13, Libeň, 180 00 Prague 8, which provides marketing services for the purpose of communicating with customers who have given their consent.
  5. Global Payments s. r. o., Company registration number: 04235452, with its registered office at Olšiny 626/80, 100 00 Prague 10, which provides banking services for the purpose of securing customers’ payments.
  6. companies Shoptet, a.s., with its registered office at Dvořeckého 628/8, Prague 6, Company Registration Number: 28935675, which provides e-shop solutions and hosting services for the purpose of operating an online shop.

ITEM VIII.

Transfer of personal data to a third country or an international organisation

Personal data may be transferred to third countries when certain analytics, marketing or cloud services are used. In such cases, the data controller ensures an adequate level of personal data protection in accordance with the GDPR.

POINT IX.

Time limits on the retention of personal data

I. The Winery will process and store personal data for at least the duration of the contract, or for the period necessary to fulfil the Winery’s archiving obligations, but for no longer than 10 years from the date of its termination. Personal data processed on the basis of a legitimate interest (direct marketing) will be processed for a period of 3 years from the date of the last purchase of goods, or until the customer unsubscribes from receiving marketing communications.

POINT X.

The rights of data subjects relating to the processing of their personal data and the exercise of those rights

I. The Winery hereby informs data subjects that the controller of their personal data is Vinařství Fučík, s.r.o., Company Registration Number: 01568060, Purkyňova 74/2, Nové Město, 110 00 Prague 1, registered with the Municipal Court in Prague, Section C, File No. 207807.

II. The winery declares that all information which it is required to provide to data subjects pursuant to Article 13(1)(c) to (f) and Article 13(2)(a) of the GDPR is set out in this document.

The data subject is entitled to exercise their rights by sending an email to the address fucik@vinarstvi-fucik.cz. Data subjects may also exercise their rights by sending a letter to Purkyňova 74/2, Nové Město, 110 00 Prague 1 (for the attention of Vinařství Fučík, s.r.o.). In order to protect the personal data of data subjects, the data protection officer will not provide information to applicants if they have any doubts as to their identity. To resolve any such doubts, it is possible to contact the data protection officer in person by prior arrangement. 

III. The Winery shall provide all information, notifications, statements and corrections to personal data free of charge in the event of any changes. In the event of a repeat request, the Winery is entitled to charge an administrative fee to cover the costs of processing the request. The Winery is prepared to provide data subjects with a copy of the personal data being processed upon their request. In the event of a repeat request, it is entitled to charge a reasonable fee to cover the administrative costs associated with producing the copy. In the event of any abuse of the right under this paragraph, the Winery is entitled to refuse access to the data.

IV. The Winery shall provide the information referred to in paragraph III of this section in written or electronic form, provided there is no doubt as to the applicant’s identity. In particular, the Winery will have no doubts as to the applicant’s identity if the request is sent via an email address and the applicant’s signature is in the form of an electronic signature. In the event of any doubt, the Winery (in the interests of personal data protection) reserves the right to provide the requested information to the applicant in person, following verification of their identity and by prior arrangement. The Winery reserves the right not to provide information verbally or over the telephone.

V. The Winery is obliged to provide this information to the data subject within one month of receiving their request. In justified cases, the Winery may extend this period by a reasonable amount, but by no more than a further two months.

VI. Should there be a change to personal data (for example, a change in marital status, surname, bank account number, permanent address or telephone number), the data subject is entitled to request that this change to their personal data be taken into account. In connection with this right, the data subject is obliged to notify the Winery of any such change to their personal data. Data subjects may report this change by sending a letter to the Winery’s address, by email, or in person at the Winery’s address. The data subject is obliged to provide evidence of the change to their personal data if requested to do so. The Winery shall rectify the personal data without undue delay, but no later than within one month of receiving notification of the change to personal data. A similar procedure shall apply in the event of the correction of inaccurately stated data.

VII. The Winery hereby informs data subjects of their right to lodge complaints or raise concerns with the supervisory authority if they believe that the processing of their personal data infringes the GDPR. Data subjects have the right to lodge a complaint with the supervisory authority in the Member State of their habitual residence, or in the Member State where the alleged infringement of their rights in relation to personal data occurred. The supervisory authority in the Czech Republic is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7.

VIII. In certain specified circumstances, the data subject is entitled to request that the Winery erase their personal data. Such a situation may arise, for example, where the data being processed is no longer necessary for the purposes specified herein, or where consent to the processing of personal data has been withdrawn (and there is no other legal basis on which the personal data may be processed).

IX. The right to the erasure of personal data referred to in paragraph VIII of this section does not apply to the circumstances set out in Article XI, paragraph II of this document, nor to cases where the Winery is fulfilling its legal obligations, for the purposes of establishing, exercising or defending its legal claims. Should the Winery exercise its right to refuse a data subject’s request for the erasure of their personal data in accordance with this paragraph, it is obliged, within one month, to notify the data subject of this decision, to provide proper grounds for its decision, and at the same time to inform the data subject of their rights.

X. The winery processes data subjects’ personal data only to the extent strictly necessary. Should a data subject have any doubts as to the necessity of processing their personal data in this way, they are entitled to request that their personal data be processed only to the extent strictly necessary. In this regard, the data subject is entitled to request that the scope of the personal data processed be restricted.

XI. Where the data subject’s personal data is processed on the basis of consent given by the data subject, the data subject is entitled to withdraw that consent at any time, free of charge, by sending a notice to the Winery’s address or, where applicable, to the contact email address of the data protection officer (fucik@vinarstvi-fucik.cz). However, in the case of an electronic application, it must be clear beyond doubt that the sender of the email is indeed the data subject.

XII. The data subject has the right to object at any time to the processing of their personal data carried out on the basis of the controller’s legitimate interest. If the data subject objects to processing for direct marketing purposes, their personal data will no longer be processed for those purposes.

XIII. The data subject is entitled to request the portability of their personal data which they have provided to or made available to the Winery. The data subject may request that this data be handed over to them in person for the purpose of transfer, or that it be transferred directly to a controller of their choice. This personal data will be provided in a machine-readable format (e.g. XML). The transfer of personal data will take place in a manner that minimises any potential security risks during transmission (e.g. using encryption).

ITEM XI.

COOKIES

What are cookies?

Cookies are small text files that websites store on a visitor’s device. They are used primarily to ensure the website functions correctly, to remember the user’s settings, to analyse website traffic, and to personalise content or adverts.

Cookies can be:

  • technical – essential for the website to function,
  • analytical – enabling the analysis of website traffic and usage,
  • marketing – used to personalise advertising messages and for remarketing.

What cookies do we use?

Technical cookies

These cookies are essential for the website and online shop to function properly. For example, they enable:

  • logging into your user account,
  • adding items to the shopping basket,
  • website security,
  • correct display of web pages.

Technical cookies do not require the user’s consent.

Analytical cookies

We use analytical cookies to gather statistical information about how the website is used, which helps us to improve its content, functionality and user experience.

We mainly use Google Analytics for these purposes.

We only use analytical cookies on the basis of the consent you have given.

Marketing cookies

Marketing cookies are used to display relevant advertising messages, for remarketing, and to measure the effectiveness of advertising campaigns.

The following services may be used for these purposes:

  • Google Ads,
  • Meta Platforms (Facebook and Instagram),
  • Sklik / Seznam.cz.

Marketing cookies are used only with your consent.

Consent to the use of cookies

When a user visits the website for the first time, a cookie banner appears, allowing them to:

  • accept all cookies,
  • to refuse non-essential cookies,
  • adjust your personal settings.

Consent to the use of analytical and marketing cookies is voluntary and may be withdrawn or amended at any time via the cookie settings on the website.

Disclosure of data to third parties

Some cookies may be processed by third parties, in particular providers of analytics and advertising services. The use of these services may involve the transfer of data outside the European Union; in such cases, the data controller takes care to ensure an adequate level of personal data protection in accordance with the GDPR.

This information on the processing of personal data comes into effect on 1 May 2026

Vinařství Fučík s.r.o.