Information on the processing of personal data

I. Controller and data subject, source of personal data

Rodinné vinařství Jedlička, Bořetice a.s., Masarykova 439/9, 602 00 Brno, Company ID: 27746658 (hereinafter referred to as the “Seller”) processes personal data of customers and persons interested in its services (hereinafter collectively referred to as “customers”).

The Seller provides this information in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.

The Seller acts as the data controller, and the customer is the data subject. Personal data are primarily obtained from customers, and where necessary also from publicly available sources (public registers, commercial register, trade register, insolvency register, etc.).

II. Categories of personal data processed

The Seller processes:

• Identification and contact data (name, surname, ID number, address, bank account, email, phone)
• Data related to services and communication (phone, email, chat, SMS)
• Transaction and payment data

III. Purpose and legal basis for processing

Personal data are processed for:

• conclusion and performance of a contract
• compliance with legal obligations
• protection of legitimate interests (e.g. enforcement of claims, business communication)

IV. Provision of personal data and consequences

Providing personal data is a legal requirement and necessary for contract performance.

Failure to provide data makes it impossible to identify the customer and fulfil contractual and legal obligations.

Customers may opt out of marketing communications via:
vinoboretice@vinoboretice.cz

V. Recipients of personal data

Personal data may be provided to:

• public authorities
• third parties (e.g. accounting services, IT providers)

Data are only shared for the stated purposes or with the customer’s consent.

VI. Customer rights

Customers have the right to:

• access their data
• rectification or erasure
• restriction of processing
• object to processing

Customers may also lodge a complaint with a supervisory authority.

VII. Data retention

Personal data are retained for the duration of the contractual relationship and thereafter in accordance with legal obligations or legitimate interests.

Bořetice, 1 March 2023