Privacy Policy

PRIVACY POLICY

[document in force from 20 October 2026]

This is a machine translation of the Polish original. In case of any discrepancy, the Polish version prevails.

We wrote this document with you in mind - the confidentiality of your personal data and the protection of your privacy are of great importance to us. In this document you will find detailed information about the type and scope of our processing of your personal data.

1. What does the abbreviation GDPR mean?

GDPR stands for the EU regulation on the protection of personal data, namely: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

We will use this abbreviation in the rest of this information.

2. What is the purpose of the GDPR?

The basic purpose of the GDPR is to protect the fundamental rights and freedoms of natural persons in connection with the processing of their personal data. We also provide you with all the information below because the GDPR obliges us to do so.

3. What is your personal data?

Personal data means any information relating to an identified or identifiable natural person ("data subject").

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

So all of the above information is your personal data.

4. Who is the controller of your personal data?

The controller of your personal data is us, DESTINO Patryk Wierzchoń, Suchary 40A, 89-100 Suchary, Poland, tax ID (NIP): 5542871314.

You can contact us:

  1. by post at the correspondence address: DESTINO Patryk Wierzchoń, Suchary 40A, 89-100 Suchary, Poland,
  2. by e-mail at: contact@vinowacje.eu.

5. In what situations will we process your personal data?

We process your personal data in connection with:

  • you contacting the Controller on your own initiative by e-mail or by post

When you contact us by e-mail or by post, we obtain personal data directly from you, in the form of the personal data you include in the messages you send us.

In this case your personal data is processed on the basis of your consent and for the purpose of the Controller's legitimate interest in analysing your enquiry or the matter you reported and in replying to you (Article 6(1)(a) and (f) GDPR).

We process your personal data until you withdraw your consent or object, but no longer than until the matter you contacted us about has been resolved.

  • you viewing and using our website at vinowacje.eu and our use of cookies

By using cookies on our website (as described in detail below), we process your personal data for preference, statistical, marketing and other purposes, depending on which cookies you have consented to (Article 6(1)(a) GDPR).

The data is stored until you withdraw your consent, which you may do at any time; this does not affect the lawfulness of processing based on consent before its withdrawal.

  • you visiting our social media profiles

The Controller maintains profiles on the following social media:

  • Facebook - https://www.facebook.com/p/Vinowacje-100077293886899/

Maintaining a social media profile involves obtaining your personal data when you subscribe to our fan pages or channels on social media (clicking "Like", "Follow", "Subscribe" etc.), when you publish a comment under any of the posts on the fan page or channel, and when you send a message through the social network.

In connection with the activities described above, we may process your personal data in particular to the following extent:

  • user identifier (may contain your first and last name);
  • your identification data and other information to the extent you have published it on your own profile on the given social network;
  • profile picture (in some cases it lets us know what you look like);
  • other photos (which may also show your image) that you voluntarily post under our posts;
  • the content of comments and of conversations held with you through the given social network;
  • statistical data on visits to our social media profiles or channels.

Accordingly, we process your personal data for the following purposes:

  • running a social media profile or channel, on the terms and rules set by the operators of those social networks, and using it to inform about our activities, services and the events we organise, to share knowledge, to build and maintain a community and to communicate through the available features of the social networks (comments, chat, messages, including event sign-ups), which is our legitimate interest (Article 6(1)(f) GDPR);
  • analysing the performance and popularity of our social media profiles and how they are used, which is our legitimate interest (Article 6(1)(f) GDPR).

In addition, we would like to give you detailed information on how placing personal data on Facebook works and what it entails.

When the Facebook Insights feature is used, we and Meta Platforms Ireland Limited are joint controllers of the data processed for the purposes of the statistics.

The arrangement between the joint controllers, setting out the responsibilities for processing personal data, can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.

Meta Platforms Ireland Limited has assumed primary responsibility under the GDPR for processing the data for the statistics and for fulfilling all applicable obligations under the GDPR.

Activity on websites or in apps may be tracked regardless of whether you are logged in to or registered with the social network. We emphasise that we have no influence on the online activity tracking used by the social network, which means that we cannot, for example, switch it off.

Detailed information on activity tracking can be found in the privacy policies of the social network operators.

We have limited influence on the statistics we receive from the operators. If you are a logged-in / registered user of a social network, check your privacy settings to make sure they match your preferences.

The data is stored until your user profile on the social network is deleted, or until our legitimate interest has been fulfilled, or until you object to the processing of your personal data, whichever comes first.

  • you contacting us through our social media profiles

When you contact us through our social media profiles, we obtain personal data directly from you, in the form of the personal data you include in the messages you send us.

In this case your personal data is processed on the basis of your consent and for the purpose of the Controller's legitimate interest in analysing your enquiry or the matter you reported and in replying to you (Article 6(1)(a) and (f) GDPR).

Information contained in private messages sent to us through social networks will be stored until your user profile on the social network is deleted, or until our legitimate interest has been fulfilled, or until you object to the processing of your personal data, whichever comes first.

Information we hold in the form of comments you have shared will remain available on our profile or channel until you delete it.

Personal data collected by the social network, i.e. the history of posts, activity and messages sent, is stored on the terms set out in the terms of use of that social network.

Statistical data on visitors to our social media profiles will be processed for as long as that data is available on the given social network in accordance with its terms of use.

Remember that, apart from us, the operator of the social network you use to visit our profile is also a controller of your personal data. Please also read the terms of use and the privacy policy of the social network you use to visit our profile.

  • you sending us requests to exercise your rights under the GDPR relating to the processing of personal data

You have certain rights in connection with the Controller's processing of your personal data (you will find information about them further on in this Privacy Policy), so you can write to us about exercising those rights.

In this case we obtain your personal data directly from you, in the form of the personal data you include in the messages you send us.

If the request is sent not directly by you but by an attorney or a legal representative, we additionally process the data of that attorney or representative, i.e. their identification data, contact data and data on the type of authorisation.

We process the personal data of applicants for the following purposes:

  • to communicate and correspond about the request to exercise rights under the GDPR (Article 6(1)(c) GDPR), as the processing of personal data is necessary for compliance with a legal obligation to which the Controller is subject under Article 12(1)-(3) GDPR;
  • to archive the correspondence about handling the request to exercise rights under the GDPR, for evidential purposes and to demonstrate that we responded to the request in time, which is our legitimate interest (Article 6(1)(f) GDPR).

Please note that providing personal data is necessary to handle your request.

We process your personal data until the matter you contacted us about has been resolved.

6. Cookies

Cookies are small text files that contain information about a user's activity on a website and store it on the device from which the user accesses the website.

Strictly necessary cookies do NOT legally require the user's prior consent. They are installed on your device automatically when you visit our website or make certain choices on it. They are necessary for the website to work properly, including for performing certain tasks such as providing the services you ordered through the website. These cookies are not deleted when you finish browsing the site, but they have a limited validity period.

Depending on your settings on our website, in addition to the technically necessary cookies we may use cookies for statistical, analytical or advertising purposes.

Under applicable law we may store cookies on your device if this is necessary for the website to work (these cookies are described above as necessary). For all other types of cookies (in particular analytical or advertising ones) we need your consent.

If you give your consent during your first visit to our website or later, through the cookie settings panel available at the bottom of our website, "Change your consent", we will also use the other cookies you have consented to.

You can change your cookie settings at any time using the cookie settings panel available at the bottom of the website by clicking the "Change your consent" button.

7. Transfer of personal data outside the European Economic Area

Because the Controller uses Google Analytics and Stripe Payments and maintains social media profiles, personal data may be transferred by Google, the payment provider or the operator of the social network outside the European Economic Area, in particular to the USA.

In this case Google, the payment provider or the social network operator is obliged to apply appropriate safeguards, in particular the EU standard contractual clauses. The user may then request a copy of those appropriate safeguards from Google, the payment provider or the social network operator.

If you are interested, more information on how Google, the payment provider and the social network operators process your personal data can be found in their privacy policies:

  1. Google: https://policies.google.com/privacy
  2. Facebook: https://www.facebook.com/privacy/policy/
  3. Stripe Payments: https://stripe.com/en-pl/privacy

8. Who are the recipients of your personal data when we process it?

Under the GDPR, the word "recipient" means a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. Below we therefore tell you to which entities we will disclose the personal data you provide to us.

The recipients of your data will be:

  1. our authorised employees and associates, to the extent needed to handle your matter properly;
  2. entities processing personal data on our behalf to fulfil the purposes for which the data is collected. In particular, these will be entities providing IT solutions and IT services, entities providing technical, legal or financial support, or handling payments. All these entities must have access to the data to perform their duties properly. They will have access to your personal data only to the extent necessary to perform their tasks.

9. What rights do you have in connection with the processing of your personal data?

In connection with our processing of your personal data you have the following rights:

  • the right of access to your personal data, including obtaining a copy of it;
  • the right to request rectification of your personal data;
  • the right to request erasure of your personal data;
  • the right to request restriction of the processing of your personal data;
  • the right to withdraw consent (at any time) to the processing of personal data you gave us voluntarily - withdrawing consent does not, however, affect the lawfulness of the processing we carried out on the basis of your consent before you withdrew it. Consent may be withdrawn by sending a request to the e-mail address: contact@vinowacje.eu;
  • where the processing of your personal data is based on our legitimate interest, the right to object at any time to the processing of personal data on grounds relating to your particular situation;
  • the right to data portability, i.e. the right to receive your personal data from us in a structured, commonly used and machine-readable format. You may transmit that data to another controller or ask us to transmit your data to another controller. We will do so, however, only where technically feasible. This right applies only to the extent that we process your data on the basis of your consent or a contract with you.

10. Where can you lodge a complaint if you believe your rights have been infringed?

If you believe that our processing of personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych; details on how to lodge a complaint can be found here: https://uodo.gov.pl/pl/83/155).

You can always contact us first at the e-mail address contact@vinowacje.eu so that we can explain our point of view and help clear up any doubts.

11. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling.

12. Changes to the privacy policy

This Privacy Policy may be updated if the laws affecting the processing of your personal data change, and also if we change how we process personal data.