This document contains important information for Users regarding their data collected and processed during their use of the website https://warsawwineexperience.com/ including the functionalities available on the Website.
Users’ Personal Data
The personal data of natural persons using the Website (hereinafter referred to as the “Users”) are processed by the Controller in accordance with the law, following appropriate procedures, and in a manner ensuring their security.
Personal Data Controller
The controller of personal data is KB Wino spółka z ograniczoną odpowiedzialnością w organizacji, with its registered office in Warsaw, at Marszalkowska 107, 01-110 Warsaw, not entered in the register of entrepreneurs of the National Court Register, not having KRS or NIP numbers, incorporated on 11 January 2024 by notarial deed REP.A No. 258/2024 before notary Marcin Łaski of the Notarial Office in Warsaw, with a share capital of PLN 5,000 (hereinafter referred to as the “Controller”).
What Data Do We Process?
If a User contacts us via electronic mail (e-mail), the Controller uses the e-mail address from which the message was sent in order to provide a response and, where applicable, take the actions requested by the User.
In the case of the Newsletter service, for the purpose of providing the service, the Controller uses the e-mail address provided by the User when subscribing to receive the Newsletter.
If a User publishes a comment under content available on the Website, the Controller processes the e-mail address and signature provided by the User when posting the comment, which may contain personal data in the form of a first name, surname, and nickname.
In addition, the IP address of a User using the Website is automatically recorded.
Legal Basis and Purpose of Processing Users’ Personal Data
The legal basis for the processing of Users’ personal data in connection with the provision of the Newsletter service is that such processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party in the form of direct marketing (Article 6(1)(f) GDPR). Providing an e-mail address is voluntary; however, it is necessary in order to use the Newsletter service.
In the case of Users’ personal data provided when placing an order in the Online Store, the purpose of processing is the preparation and performance of the magazine sales contract, as well as the rights and obligations of the Controller arising therefrom (Article 6(1)(b) GDPR). The User’s data will be processed no longer than until the expiry of claims related to the contract.
The personal data of persons publishing comments under materials available on the Website are processed for the purpose of ensuring the security and proper functioning of the Website, which constitutes the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR. The User’s data will be processed no longer than for the period necessary to achieve the above purpose.
In all other respects, the Controller uses personal data solely for the purpose of ensuring proper customer service and the provision of services on the Website, including handling complaints and communicating with Users.
Processing of Users’ Personal Data
Users’ personal data are collected and processed by the Controller in accordance with the provisions of the Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), as well as the Act of 18 July 2002 on the Provision of Services by Electronic Means (hereinafter referred to as the “GDPR”).
For the purpose of providing services through the Website, the Controller uses external entities providing Website support services on its behalf. For these reasons and for technical reasons, the Controller may entrust the processing of personal data, within the meaning of Article 28 GDPR, to another entity by way of an agreement or another legal instrument, without changing the purpose of processing the User’s personal data specified in this document. Furthermore, all persons processing Users’ personal data for the purposes of the Website hold appropriate authorizations issued by the Controller in accordance with Article 29 GDPR.
The Controller may disclose to cooperating entities data in the form of general statistical summaries that do not allow the identification of individual Users.
Personal data processed for the purpose of providing the Newsletter service may be processed by the Controller until the User objects to their processing for that purpose, unsubscribes from the Newsletter service, or the Controller determines that the User’s data have become outdated.
Users’ personal data processed within the Website are not subject to profiling, except for the use of cookies for the purpose of tailoring advertisements displayed on the Website to Users. More information regarding the use of cookies within the Website can be found in the Cookies Policy (below).
Right of Access to Personal Data, Rectification and Erasure
The User has the right to access their personal data processed by the Controller and to rectify them.
If the User wishes to change the personal data provided by them, they should contact the Controller by sending an e-mail to np@fermentmag.pl.
A User whose personal data are processed by the Controller may contact the Controller directly with a request to gain access to their data, rectify them, erase them, restrict their processing, object to their processing, as well as exercise the right to data portability. For this purpose, the User should contact the Controller by sending an e-mail to np@fermentmag.pl.
The User also has the right to lodge a complaint with the supervisory authority competent in matters of personal data protection if they believe that the processing of their personal data violates generally applicable legal provisions in this respect, in particular the provisions of the GDPR or the Act of 10 May 2018 on the Protection of Personal Data.
Security of Personal Data
The Controller applies appropriate technical and organizational measures to ensure the security of Users’ personal data, including measures protecting them against access by third parties.
However, it should be remembered that no method of data transmission over the Internet and no method of electronic or physical data storage is completely secure.
Cookies Policy
The Controller places cookies on the User’s terminal device (e.g. computer, smartphone, tablet) and gains access to them. The Controller automatically collects information contained in cookies. Cookies are IT data, in particular text files, stored on the User’s terminal device for the purpose of using the Website. They contain, among other things, the name of the website from which they originate, the period for which they are stored on the User’s terminal device, and the name of the cookie. Data stored in cookies do not make it possible to identify the User.
The Website may contain redirects to websites of third parties. These entities have their own privacy and cookie policies.
Purposes for Which Cookies Are Used
Cookies are used on the Website for the following purposes:
– enabling the use of certain services available on the Website, in particular those authenticating the User during login and when adding comments;
– adapting the content of the Website displayed to the User to their individual preferences;
– collecting data concerning the location from which the User accesses the Website, i.e. language and time zone;
– statistical purposes – determining how Users use the Website, which makes it possible to improve its structure and content;
– maintaining the session of a logged-in User, thanks to which a User who has not logged out, when revisiting the Website from the same web browser and the same terminal device, does not have to log in to the Website again;
Web browsers generally allow cookies to be stored on the User’s terminal device by default. The User may at any time change cookie settings in the settings of the web browser they use, in particular they may block the automatic handling of cookies.
Restrictions on the use of cookies may affect certain functionalities of the Website.
Social Media Plugins
Certain content on the Website uses so-called social media plugins: Facebook and Twitter (social networking services), through which content published on the Website may be shared. When using social media plugins, the social networking services operating them may collect User data.
Social media plugins integrated with the Website enable social networking services to obtain information about the IP address from which the User visits the Website, regardless of whether the User is logged into or registered with a given social networking service.
Data collected by social media plugins may only be exchanged between the web browser used by the User and the operator of the social networking service.
The Website contains a “Share” button enabling the User to publish content from the Website on their profile within the following social networking services:
Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook’s Privacy Policy is available at: https://www.facebook.com/policy.php;
Twitter, operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107. Twitter’s Privacy Policy is available at: http://twitter.com/privacy;
Changes to the Privacy Policy
Any changes to the Privacy Policy will be communicated to Users by means of an appropriate notice on the Website. The version of the Privacy Policy available on the Website is the currently binding version.
Version effective as of 27 March 2024.