Privacy Policy

I. Basic provisions

1. The controller of personal data according to § 5 letter o) Act no. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as the " Act ") is Valsesia, sro IČO 36 626 031 with registered office at Stromová 463/10, 962 33 Budča (hereinafter: the " operator ").

2. The contact details of the operator are

address: Stromová 463/10, 962 33 Budča, Slovak Republic

email: info@tokajdelights.eu

phone: +421 903 513 007

3. Personal data means all information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be directly or indirectly identified, in particular by reference to a certain identifier, for example name, identification number, location data, network identifier or by reference to one or more special elements of physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

4. The operator has not appointed a responsible person for the protection of personal data.

II. Sources and categories of processed personal data

1. The operator processes personal data that you have provided to him/her or personal data that the operator has obtained based on the fulfillment of your order.

2. The operator processes your identification and contact data and data necessary for the performance of the contract.

III. Legal reason and purpose of personal data processing

1. The legal reason for processing personal data is

performance of the contract between you and the operator according to § 13 par. 1 letter b) of the Act,
legitimate interest of the operator in the provision of direct marketing (especially for sending business announcements and newsletters) according to § 13 par. 1 letter f) of the Act,
Your consent to processing for the purposes of providing direct marketing (especially for sending commercial announcements and newsletters) according to § 13 par. 1 letter a) of the Act

2. The purpose of personal data processing is

fulfillment of your order and performance of rights and obligations arising from the contractual relationship between you and the operator; when placing an order, personal data are required, which are necessary for the successful processing of the order (name and address, contact), the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or fulfill it on the part of the operator,
sending commercial announcements and performing other marketing activities.

3. The operator makes an automatic individual decision in accordance with § 28 of the Act. You have given your express consent to such processing.

IV. Personal data retention period

1. The operator stores personal data

for the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the operator and the application of claims from these contractual relationships (for a period of 5 years from the termination of the contractual relationship).
for as long as the consent to the processing of personal data for marketing purposes is revoked, the longest

2. After the period of storage of personal data has expired, the operator will delete personal data.

V. Recipients of personal data (subcontractors of the operator)

1. Recipients of personal data are persons

Participating in the delivery of goods / services / execution of payments based on the contract,
providing services for running an e-shop (Shoptet) and other services in connection with running an e-shop,
ensuring marketing services.

2. The operator does not intend to transfer personal data to a third country (a country outside the EU) or an international organization.

VI. Your rights

1. Under the conditions set out in the Act, you have

the right to access your personal data according to § 21 of the Act,
the right to correct personal data according to § 22 of the Act, or restriction of processing according to § 24 of the Act,
the right to erasure of personal data according to § 23 of the Act,
the right to object to processing according to § 27 of the Act,
the right to data portability according to § 26 of the Act,
the right to withdraw consent to processing in writing or electronically to the address or email address of the operator listed in art. III of these conditions.

2. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

VII. Terms of security of personal data

1. The operator declares that he has taken all appropriate technical and organizational measures to secure personal data.

2. The operator has adopted technical measures to secure data storage and storage of personal data in paper form, in particular...

3. The operator declares that only persons authorized by him have access to personal data.

VIII. Final provisions

1. By submitting an order from the online order form, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.

2. You agree to these terms and conditions by ticking the consent through the internet form. By checking consent, you confirm that you are familiar with the terms of personal data protection and that you accept them in their entirety.

3. The operator is authorized to change these conditions. It will publish the new version of the personal data protection conditions on its website.

These terms and conditions take effect on January 1, 2024

Principles of working with your data

We are the company Valsesia, s.r.o. We operate an e-shop on the website www.tokajdelights.eu . We process some personal data for the provision of our services - the sale of goods and the operation of our websites.

The processing of personal data is mainly governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and the free movement of such data and on the repeal of Directive 95/46/EC (General Regulation on the Protection personal data) ("GDPR")

I. Processing of personal data

Processing of personal data in the case of using the contact form

If you request our products and services, we will work with the contact details you provide us, in particular through the inquiry form. They are: Name, address, e-mail and telephone contact

For what reason?

We will contact you through them to ensure the fulfillment of your order and to agree on further measures regarding the ordered goods.

Based on what legal reason?

This is processing on the basis of Article 6 para. 1 letter b) GDPR – contract negotiation, or carrying out pre-contractual arrangements at your request.

How long will we process personal data?

If we do not establish further cooperation, we will process your data for a maximum of 10 years from our last communication.

a) Processing of personal data in case of purchase

If you buy from us, we will work with the data you fill in. This mainly concerns invoicing data: name, surname, address, e-mail and telephone contact

For what reason?

We need to process personal data in order to fulfill our contract - to deliver our goods to you. Through your contact data, we will also communicate with you about the status of your order, possibly regarding complaints or your questions.

We will continue to process personal data to fulfill our obligations arising from the law (especially for accounting and tax purposes, or to process claims and others).

On what legal basis do we process personal data?

This is processing on the basis of Article 6 para. 1 letter b) GDPR – fulfillment of the contract and Article 6 par. 1 letter c) GDPR - fulfillment of our legal obligation.

How long will we process personal data?

During the performance of our service and subsequently 5 years from the last provision of such service or delivery of goods.

b) Newsletters (business news)

If you are a shopping customer and you did not opt us out at the time of purchase, we will use your email address to send you our news.

Based on what legal reason?

It allows us to § 7 par. 3 of Act No. 480/2004 Coll. about some information society services, unless you have prohibited us from doing so at the time of purchase.

How long will we process personal data?

5 years from the last purchase. You can cancel your subscription at any time by e-mail or contact us by e-mail: info rochester-napoje.sk

II. Who has access to the data?

Your data will remain with us. However, some companies or other persons who have access to data work for us because they help us run our e-shop. They are:

operator of the Shoptet e-shop platform (the company Shoptet a.s., with registered office at Dvořeckého 628/8, Břevnov, 169 00, Prague 6, ID 289 35 675, company registered at the Municipal Court in Prague, section B, file 25 395)
companies participating in the shipment of goods: GLS, DPD, QDL,
companies participating in the forwarding of payments (UniCreditBank, FIO banka, ComGate)
e-mail service provider (Web Yegon)

We process personal data only within the European Union.

III. What else should you know?

In our company, we have a designated person responsible for the protection of personal data.

Our company does not make decisions based on automated processing or profiling.

If you have any questions regarding your personal data, please contact us at info@tokajdelights.eu or call +421 903 513007

IV. Your rights in connection with the processing of personal data

The GDPR regulation gives you, among other things, the right to contact us and request information that we process your personal data, to request access to this data from us and have it updated or corrected, or to request a restriction of processing, you can request a copy of the processed personal data, request from us in certain situations deletion of personal data and in certain cases you have the right to their portability. An objection can be raised against processing on the basis of legitimate interest.

If you think that we are not handling the data correctly, you can file a complaint with the Office for the Protection of Personal Data , or take your claims to court.

These conditions are effective from January 1, 2024