Privacy Policy

Effective from 13 August 2026

The protection of personal data is important to Vinospol, spol. s r.o. This Privacy Policy explains how we process personal data when you visit vinospol.eu, contact our company or communicate with us in connection with a business relationship, why we process such data, who may receive it and what rights you have in relation to the processing of your personal data.

We process personal data primarily in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”), Czech Act No. 110/2019 Coll., on Personal Data Processing, and other applicable legislation.

1. Who is the data controller?

The controller of your personal data is:

Vinospol, spol. s r.o.
Ke Mlýnu 1357
696 04 Svatobořice-Mistřín
Czech Republic

Company ID No.: 269 42 607
VAT ID No.: CZ26942607

The company is registered in the Commercial Register maintained by the Regional Court in Brno, Section C, File 47238.

Email: vinospol@vinospol.eu
Telephone: +420 725 755 450

Hereinafter referred to as “Vinospol”, “we”, “us” or the “Controller”.

2. Who does this Privacy Policy apply to?

This Privacy Policy applies in particular to:

• visitors to vinospol.eu,
• persons who contact us using the contact form, email or telephone,
• persons interested in our products or services,
• customers, suppliers and other business partners who are natural persons,
• employees or other contact persons acting on behalf of customers, suppliers or other legal entities with whom we communicate.

The GDPR protects personal data relating to natural persons. Information relating solely to a legal entity is not in itself personal data, although it may constitute personal data where it identifies or makes identifiable a particular natural person.

3. What personal data may we process?

Depending on how you use our website or communicate with us, we may process the following categories of personal data.

Identification and contact details

• first name and surname,
• company name,
• company registration number where it relates to an identifiable sole trader,
• email address,
• telephone number,
• job title or relationship to the organisation you represent.

Information contained in communications

• subject of your enquiry,
• content of your message or request,
• information contained in email or telephone communications,
• information required to prepare a quotation, order or business cooperation.

Technical information relating to use of the website

To the extent necessary, the following information may be processed when the website is used:

• IP address,
• date and time of access,
• pages visited,
• browser and device information,
• technical logs necessary for the operation, security and diagnostics of the website,
• cookie or similar technology identifiers where such technologies are used.

The scope of data processed through cookies depends on your consent preferences. Further details are provided in our Cookie Policy.

4. Why do we process personal data and what is the legal basis?

4.1 Responding to enquiries, requests and other communications

If you contact us through our contact form, by email or by telephone, we process the information you provide in order to respond to your request and communicate with you.

The legal basis is:

• Article 6(1)(b) GDPR, where the communication relates to steps taken at your request prior to entering into a contract with you as a natural person or sole trader; or
• Article 6(1)(f) GDPR – our legitimate interests in responding to business and other enquiries and communicating with persons acting on behalf of customers, suppliers or other business partners.

We therefore do not require consent to the processing of personal data solely for the purpose of handling an ordinary contact request.

4.2 Establishing and managing business relationships

Where a business relationship is established, personal data may be processed for purposes including:

• preparation of quotations,
• processing of orders,
• deliveries and logistics,
• customer and technical support,
• invoicing and administration,
• communications relating to the business relationship.

The legal basis may be performance of a contract or steps prior to entering into a contract under Article 6(1)(b) GDPR, our legitimate interests under Article 6(1)(f) GDPR, particularly in relation to contact persons of corporate business partners, and compliance with legal obligations under Article 6(1)(c) GDPR.

4.3 Compliance with legal obligations

We are required to retain or otherwise process certain information in order to comply with accounting, tax and other legal obligations.

The legal basis for such processing is Article 6(1)(c) GDPR.

4.4 Establishment, exercise and defence of legal claims

We may retain personal data to an appropriate extent in order to protect our rights, deal with complaints and disputes or establish, exercise or defend legal claims.

The legal basis is Article 6(1)(f) GDPR – our legitimate interest in protecting the rights of our company.

4.5 Operation and security of the website

Technical data necessary for the operation, protection and security of the website may be processed for purposes including:

• ensuring the functionality and security of the website,
• preventing misuse and cyberattacks,
• diagnosing technical problems,
• protecting our systems and rights.

The legal basis is Article 6(1)(f) GDPR – our legitimate interest in operating a secure and reliable website.

4.6 Cookies, analytics and third-party content

Technical cookies that are strictly necessary for the operation of the website may be used without your consent to the extent permitted by applicable law.

Non-essential cookies, analytics or marketing technologies and third-party services for which consent is legally required are used only after you have given your prior consent.

Where personal data is subsequently processed through such technologies, the legal basis is generally Article 6(1)(a) GDPR – your consent.

You may change or withdraw your consent at any time using the cookie settings available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Detailed information about individual technologies, their providers, purposes and duration is available in our Cookie Policy.

5. How long do we retain personal data?

We retain personal data only for as long as necessary for the purpose for which it is processed.

In particular:

• information relating to ordinary enquiries and requests is retained for the time necessary to respond and subsequently for an appropriate period to document the communication and protect our rights;
• where the communication results in a business relationship, the data may be retained for the duration of that relationship and subsequently for the period necessary to protect legal claims;
• information that must be retained under accounting, tax or other legislation is retained for the period prescribed by applicable law;
• technical operational and security logs are retained only for as long as necessary to ensure the functionality and security of the systems, or for longer where necessary to investigate a specific security incident;
• data processed on the basis of consent is processed until the consent is withdrawn, but no longer than necessary for the relevant purpose;
• cookies are retained for the periods specified in the current Cookie Policy.

Once the applicable retention period has expired, we delete or anonymise the personal data unless continued retention is required by law or necessary for the establishment, exercise or defence of legal claims.

6. Who may receive your personal data?

Where necessary, personal data may be disclosed to:

• web hosting and technical infrastructure providers,
• providers of IT support, website administration and cybersecurity services,
• providers of email and communication services,
• providers of accounting, tax, legal and other professional services,
• suppliers involved in processing a particular order or service where necessary,
• providers of third-party website services where you have enabled their use through your consent preferences,
• public authorities where disclosure is required by applicable law.

Where another party processes personal data on our behalf as a processor, we ensure that the processing is contractually and organisationally governed in accordance with the GDPR.

7. Google Maps and other third-party services

Our website may use Google Maps to display our location and provide navigation information.

Where loading Google Maps requires consent, Google content may be loaded only after you have enabled the relevant category of third-party content or cookies.

When Google Maps is loaded, technical information such as your IP address and information about your device and browser may be transmitted to Google. Google’s subsequent processing of such information is governed by Google’s applicable privacy terms and policies.

8. Transfers of personal data outside the European Economic Area

Certain providers of technical or online services may process personal data outside the European Economic Area.

Where such a transfer takes place, we ensure that it is based on an appropriate mechanism under Chapter V of the GDPR, for example an adequacy decision adopted by the European Commission, participation by the recipient in a valid EU–US Data Privacy Framework where its requirements are met, or the European Commission’s Standard Contractual Clauses together with any additional safeguards required in the particular circumstances.

9. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• obtain confirmation as to whether we process your personal data and obtain access to it;
• request correction of inaccurate data or completion of incomplete data;
• request erasure of personal data where the conditions under the GDPR are met;
• request restriction of processing;
• receive personal data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller where the conditions for data portability are met;
• withdraw your consent at any time where processing is based on consent;
• object to processing based on legitimate interests;
• lodge a complaint with a competent supervisory authority.

You may exercise your rights by contacting us at vinospol@vinospol.eu.

Before responding to a request, we may take reasonable steps to verify your identity in order to prevent unauthorised disclosure of personal data.

10. Right to object

Where we process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Once you object, your personal data will no longer be processed for direct marketing purposes.

11. Is providing personal data mandatory?

Providing personal data through the website is generally voluntary.

Information marked as mandatory in the contact form is required so that we can identify and respond to your request. If you do not provide such information, we may be unable to handle your request through the contact form.

When entering into or performing a contract, certain personal data may be necessary in order to enter into or perform the contract or comply with legal obligations.

12. Automated decision-making

We do not use personal data processed under this Privacy Policy for decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

13. Security of personal data

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, alteration, disclosure, loss, destruction or other misuse.

Access to personal data is restricted to persons who require such access to perform their employment or contractual duties.

14. Complaints to the supervisory authority

If you believe that we process your personal data in breach of applicable data protection legislation, you have the right to lodge a complaint with:

The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

However, we encourage you to contact us first at vinospol@vinospol.eu so that we have an opportunity to address your concern directly.

15. Changes to this Privacy Policy

We may update this Privacy Policy where necessary, in particular if our personal data processing activities, technologies used or applicable legal requirements change.

The current version will always be available at vinospol.eu, together with its effective date.