Privacy policy

The operator of the online shop villavinoraca.sk is Villa Vino Rača a.s. (hereinafter referred to as the "Seller").

We use the data needed to enter into and fulfil your order. For example, we need contact details to confirm the order and a delivery address if we ship it to you. We also process information on accounting documents because the law requires it. You choose separately whether to receive newsletters or allow optional analytics or marketing cookies.

We process personal data under Regulation (EU) 2016/679 (GDPR) and applicable Slovak law. For each purpose described in this policy, we need only the data relevant to that purpose.

The Seller processes the Buyer's ordinary personal data.

The Buyer's personal data is retained in the Seller's information system for a period of 10 years.

The Buyer has the right and the option to update personal data online on the website of the online shop, in the customer section, after logging in, or by other means (by email or in writing).

Our shop runs on Shopify. When you order, we share the data needed by the payment provider for your chosen payment method and the carrier if your order is delivered. We handle accounting in-house. If you pay with PayPal, PayPal receives the data it needs to process the payment. We use Shopify Messaging to send newsletters. The section on analytics and marketing tools explains our use of Google, Microsoft and Meta services.

The Buyer's personal data is not disclosed publicly.

We email you news and offers with your consent. Signing up is optional. You can withdraw your consent at any time using the unsubscribe link in a marketing email or by writing to sekretariat@villavinoraca.sk. Once you unsubscribe, we will stop sending marketing emails to that address. You will still receive messages needed to fulfil your order.

Cookies and tracking technologies

In order to ensure the proper functioning of the online shop, analyse its traffic and provide relevant marketing content, the Seller uses cookies and other tracking technologies. Cookies are small data files that are stored on the Buyer's device when visiting the online shop.

Categories of cookies

The Seller uses the following categories of cookies:

1. Necessary cookies — These cookies are required for the basic functioning of the online shop (e.g. shopping cart, login, security). Without these cookies the online shop could not function correctly. These cookies are stored at all times and do not require consent.

2. Analytics cookies help us see which pages you visit, how you use them and where problems occur. Measurement may involve information about pages, devices, clicks and online identifiers. This information can be personal data. We need your consent to use optional analytics cookies.

3. Marketing cookies — These cookies are used to display relevant advertising to the Buyer based on the Buyer's interests. They make it possible to measure the effectiveness of advertising campaigns. These cookies are stored only with the Buyer's consent.

Third-party tools

The Seller uses the following third-party tools on its online shop:

1. We use Google Analytics 4 to measure visits to our shop and how people use it. The service may process information about pages visited, devices and online identifiers. We have enabled Google Signals. If you are signed in to Google and allow personalised ads, Google may use information from your account to enrich our aggregate reports. Analytics is linked to Google Ads with ads personalisation enabled. We have also enabled a feature that can match customer information, such as an email address, with Google data using a one-way hash. Google’s privacy policy explains its use of personal data.

2. Microsoft Clarity uses session recordings and heatmaps to show us where visitors click, how they scroll and where they encounter difficulties using the shop. The service may also process device information and online identifiers. We use Clarity’s Balanced masking setting. Microsoft’s privacy statement explains how it uses personal data.

3. Meta Pixel (Facebook Pixel) — a marketing tool by Meta Platforms Ireland Limited. Used to measure the effectiveness of advertising campaigns on the Facebook and Instagram platforms and to display relevant advertising. It processes data about visitor activity on the online shop. Category: marketing cookies. More information: https://www.facebook.com/privacy/policy

Consent to cookies

On the first visit to the online shop, the Buyer is shown a banner requesting consent for the use of analytical and marketing cookies. The Buyer may:

- Accept all cookies — both analytical and marketing cookies will be activated.

- Reject cookies — only necessary cookies required for the operation of the shop will be active.

- Manage preferences — the Buyer may select which categories of cookies to allow.

The Buyer may change or withdraw consent at any time via the cookie settings available on the online shop's website.

The Buyer may delete all cookies stored on the Buyer's device and configure the web browser to prevent their storage. In such a case, on a repeated visit to the online shop the Buyer will probably need to manually adjust some settings, and some services or features of the online shop may not function.

Transfer of data to third countries

In connection with the third-party tools and marketing activities listed above, personal data may be transferred to the United States of America (Google LLC, Microsoft Corporation, Meta Platforms Inc.). These transfers take place on the basis of standard contractual clauses approved by the European Commission and/or the EU-U.S. Data Privacy Framework, which ensure an adequate level of personal data protection.

Rights of the Buyer

The Buyer has the right to obtain from the Seller confirmation as to what personal data of the Buyer is being processed in the Seller's e-shop. The Buyer has the right of access to such data and to information about the purpose of processing, categories of data processed, recipients of the personal data, how long the personal data is retained, and whether automated individual decision-making including profiling is carried out.

We normally handle requests to exercise GDPR rights free of charge. The first copy of the personal data being processed is free. For further copies requested by the individual, we may charge a reasonable fee based on administrative costs. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act where the GDPR permits this. We must demonstrate the reasons for doing so. Repeating a request does not automatically incur a fee.

The Buyer may request that the Seller correct or complete any incomplete personal data relating to the Buyer. The Buyer may request the erasure of personal data or the restriction of processing of such data. The Buyer may also object to the processing of personal data.

If you ask us to erase your data, we will assess which data we can delete. We must keep certain records by law and may need others to establish, exercise or defend legal claims. If we refuse all or part of your request, we will explain why and tell you how to lodge a complaint.

The Buyer has the right to request that the Seller restrict the processing of the Buyer's personal data if the Buyer contests the accuracy of the personal data, for a period enabling the Seller to verify the accuracy of the personal data.

The Buyer has the right to receive the personal data relating to the Buyer, which the Buyer has provided to the Seller, in a structured, commonly used and machine-readable format. The Buyer has the right to transmit this personal data to another controller, where technically feasible.

The Buyer has the right to object if the Buyer's personal data is processed for the purposes of direct marketing. Likewise, the Buyer may object if the personal data is processed for the purposes of the Seller's legitimate interest.

If the Buyer suspects that personal data is being processed unlawfully, the Buyer may file a motion with the Office for Personal Data Protection of the Slovak Republic to initiate proceedings on personal data protection.

The information above on personal data protection also applies to pre-contractual relations (i.e. registration in the e-shop for the purposes of a future purchase, or, for example, requests for enquiries, price quotations or information about the Seller's goods and services).