Privacy policy

We are committed to protecting the privacy of all those who use this website and we treat the personal information our customers provide to us as highly confidential.

This information about personal data processing is provided in accordance with Article 13 of EU Regulation 2016/679 (the "GDPR"), by Grand Cru Kft., owner of the www.magashegy-pinceszet.hu domain with registered office at Kisapáti, Kisapáti-hegy, Kápolna Krt. 326., tax code HU14019441 (hereinafter referred to as "Magashegy"), in its capacity as Data Controller, to explain the purposes and procedures whereby Magashegy collects and processes your personal data, which categories of data are processed, what rights you have as a data subject and how theses rights can be exercised.

The information provided relates exclusively to this website ("Site"), therefore Magashegy does not assume any responsibility for any other websites that may be accessed via hypertext links on the Site.

Using this Site indicates your acceptance of this policy and you are therefore advised to read it before providing any personal information of any kind.

1. Data controller

Grand Cru Kft. 8284 Kisapáti, Kisapáti-hegy, Kápolna Krt. 326. Hungary, is the data controller of personal data collected through the platform.

Data Protection Officer (DPO): helen.magashegy@gmail.com

2. Categories of personal data

Magashegy processes your personal data obtained during the formation of the contract and in the course of the contractual relationship ("Data").

For example, the Data Controller will collect the following types of personal data:

Personal data, such as name and surname, place and date of birth, home address;
Contact data, such as shipping address, telephone number and e-mail address;
Bank details (e.g. IBAN), if provided for potential refunds;
Browsing data, such as IP address, time of access to the site and/or login to the platform, any referrer, server access methods, numeric code indicating the response status given by the server (successful, error, etc.);
Data relating to purchases, such as the average purchase value, the type of product purchased, the frequency of purchases, the total amount purchased over time and the total number of orders placed.

The Data Controller shall not acquire data of a sensitive nature through the Site, nor data belonging to the special categories referred to in Article 9 of the GDPR or data relating to criminal convictions or offences.

Your Data will be processed by Magashegy exclusively for the purposes and within the limits stated below.

3. Purposes and legal basis of the Processing

Magashegy will use your Data for the following purposes:

a) to fulfil the contract

The Data referred to in paragraph 2, nos. 1-4, will be processed by Magashegy in order to allow you to register on the Site and to benefit from the services specifically related thereto. For example, your Data will be processed to handle purchase orders, for technical maintenance and support, as well as to improve the quality of the services offered. The Data will therefore be processed for the purpose of fulfilling the contract in place with the Data Controller.

You must provide your data in order for us to create and manage a contractual relationship with you; if you fail to do so, we will not be able to fulfil the contract and provide you with the service requested.

Scalapay SRL
In order to be able to offer you Scalapay SRL payment options, we will pass to Scalapay certain aspects of your personal information, such as contact and order details, in order for Scalapay to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Scalapay can find be found at www.scalapay.com. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Scalapay's privacy policy (www.scalapay.com/en/privacy)

b) for marketing purposes

Direct sales. Subject to your specific consent, Magashegy may process your Data in order to send you promotional material or marketing communications or for market research purposes. These communications may be sent through the use of automated systems (e.g. e-mail, SMS, push notifications).

For such processing purpose, the Data referred to in paragraph 2, nos. 1 and 2 will be used.

Consent granted may be revoked at any time, this also applies to any automated contact methods, by writing to helen.magashegy@gmail.com.

Newsletter. The Data referred to in paragraph 2, no. 2, provided when signing up for the newsletter, will be used by Magashegy for the sole purpose of providing the requested newsletter service. The Data will therefore be processed for the provision of the service you have requested from the Data Controller. You may at any time unsubscribe from the newsletter by following the instructions provided from time to time in any communication sent for the purposes referred to in this point.

Soft spam. The Data referred to in paragraph 2, no. 2, obtained during the sale of Magashegy's products via the platform, may be used for sending marketing communications relating to products similar to those purchased. Such processing does not require your express consent pursuant to Article 130 of Legislative Decree no. of 30 June 2003. 196. You may, however, object to such processing at any time by following the instructions provided from time to time in any communication sent for the purposes referred to in this point.

c) for profiling purposes

Magashegy may process your Data in order to understand your purchasing habits and preferences in relation to the products and services offered via the platform in order to offer you products and services in line with your profile.

For this purpose, Magashegy may process the Data referred to in paragraph 2, nos. 1-2 and 5.

Such Data will be processed by Magashegy based on its legitimate interest in optimising its purchasing procedures, offering products and services that are more suitable and useful for the specific needs of its customers. The legitimate interests of Magashegy have been duly balanced with your interests and expectations in the data protection impact assessment, wherein certain technical and legal measures have been laid out in order to minimise the impact of the profiling carried out by Magashegy on your personal privacy.

We would like to remind you that, in accordance with Article 21 of the GDPR, you may object at any time to such processing, on grounds relating to your particular situation, by writing to helen.magashegy@gmail.com

d) for disclosure of your data to third parties for marketing purposes

Our customer data is an important part of our company assets and therefore will not be sold to third parties.

4. Data retention period and processing duration

Your Personal Data will primarily be stored on servers located within the European Union.

Your Data will be stored for the entire duration of your contractual relationship with Magashegy. After the contractual relationship ends, the Data will be kept for a period of 10 years exclusively for the purpose of protecting the rights of the Data Controller and for the fulfilment of legal obligations.

With reference to the processing for marketing purposes referred to in paragraph 2, letter b), please note that the Data will be processed for the entire duration of the contract unless you withdraw your consent or exercise your right to object to its processing.

With regard to data processed for profiling purposes, please note that the Data will be processed for a maximum period of 12 months or for a different period as provided for by law or by order of the Supervisory Authority, unless you exercise your right to object to its processing. After this period or in the event of an objection, the data will be held if necessary to serve other purposes or will be permanently deleted.

5. Legal defence

Your data may be used to defend Magashegy in legal proceedings or in the preliminary phases of such proceedings.

6. Credit card data

Your credit card data will not be processed by Magashegy as such data is processed and/or stored directly by the banking system. Magashegy uses professional payment services provided by Braintree, a company in the PayPal, Inc. group, guaranteeing the customer maximum protection and confidentiality.

7. Cookies

Magashegy uses cookie technology to make browsing easier and more intuitive. For further information please see our Cookie Policy

8. Users rights

In accordance with current legislation, you have the following rights:

Notification obligation regarding rectification or erasure of personal data or restriction of processing (Article 19 GDPR)
The right to data portability, i.e. to request and obtain personal data concerning you in a structured format (Article 20 GDPR)
The right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you (Article 21 GDPR)
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR)
The right to receive prompt notification in the event of a personal data breach of the data subject's data (Article 34 GDPR)
To request and obtain information about the existence of your data in the possession of Magashegy and access to such data;
For data processed by automated systems, the right to request a transfer to another data controller;
The right to request and obtain the amendment and/or rectification of your personal data if you believe it to be incomplete or inaccurate;
The right to request and obtain the deletion of your personal data and/or the restriction of its processing if it is not required - or is no longer required - for the above purposes, i.e. once the retention period referred to in the paragraph above has expired.

Such requests may be sent to the Data Controller by writing to helen.magashegy@gmail.com or by sending a registered letter with acknowledgement of receipt to Grand Cru Kft., 8284 Kisapáti, Kisapáti-hegy, hrsz.1256/4, Hungary.

We would also like to remind you that, in accordance with current legislation, you may file a complaint regarding the processing of your personal data with the Data Protection Authority.

9. Amendments

Magashegy reserves the right to modify or simply update the content of this Privacy Policy, in whole or in part. Magashegy will inform you of any such amendments as soon as they are made.

10. Data transfer to non-EU countries

Magashegy agrees that user data will not be transferred outside of the European Union (EU).

WHAT ARE COOKIES AND WHAT ARE THEY USED FOR

Cookies are small text files that sites visited by users send to their devices (usually to their browsers), where they are stored and then retransmitted to the same sites the next time they visit.

Third-party cookies are placed by a website other than the one the user is visiting.

This is because a site may contain elements (images, maps, sounds, specific links to other websites, etc.) that are located on servers other than that of the site visited.

Cookies are used for a range of different purposes: authentication, session monitoring, storage of information on specific settings of a user accessing the server, saving preferences, etc.

Cookies can be subdivided into different macro-categories based on the purpose for which they are used and/or the party responsible for placing them on users' devices. They can be divided into:

TECHNICAL COOKIES

Technical cookies are used solely for the purpose of "transmitting information over an electronic communications network, or to the extent strictly necessary for the provider of an online service explicitly requested by the visitor or user to provide such a service" (see Article 122, paragraph 1, of the Italian Privacy Code). They are not used for any other purpose and are normally placed by the owner or manager of the website. They can be further divided into navigation or session cookies, which allow the normal navigation and use of the website (for example, to make a purchase or to log in to restricted areas);

ANALYTICS COOKIES

Analytics cookies are like technical cookies where they are used directly by the site owner to collect aggregated data on the number of users and how they visit the site;

FUNCTIONALITY COOKIES

Functionality cookies allow users to use the website in line with a series of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided to users.
No prior consent is required from users to place these cookies.

PROFILING COOKIES

Profiling cookies are designed to create user profiles and are used to send promotional messages in line with the preferences expressed by the user while online. Given the particularly invasive nature of such tools in users' private lives, European and Italian legislation provides that users must be adequately informed of their use and provide express consent. Article 122 of the Italian Privacy Code states that "the storage of information on the device of a contracting party or user or access to information already stored is only permitted if the contracting party or user has given his or her consent after having been informed clearly as set out in Article 13, paragraph 3, of the "Italian Privacy Code".

SESSION COOKIES AND PERSISTENT COOKIES

Session cookies contain information that is used in the current browser session. These cookies are automatically deleted when you close the browser. Nothing is stored on your computer after you finish using the site (ASP.NET_SessionId e language). Persistent Cookies are used to store information that is used in between visits to the website, or used for technical purposes and to improve website navigation. This information allows sites to recognise that you are a returning user or visitor and to adapt accordingly. The duration of persistent cookies is determined by the website and can vary from a few minutes to several years.

FIRST PART AND THIRD-PARTY COOKIES

Cookies may be placed on the user's device either by the owner of the website the user is visiting ('First Party Cookies') or by third parties ('Third Party Cookies'). The data collected by First Party Cookies is stored by the owner of the site that the user has visited, while data collected by Third Party Cookies is held by that third party. You can also find information on how behavioural advertising works and more information about cookies as well as steps you can take to protect your online privacy at www.youronlinechoices.com.

USE OF COOKIES BY Magashegy

Magashegy uses cookies to make its users' browsing and shopping experience easy and efficient.
The cookies placed by Magashegy allow:

Users' login preferences to be saved so that they are not asked to enter their email and password each time they visit the website;
Users' shopping carts to be saved until they log in;
Users' language preferences to be saved;
Information relating to the products preferred by individual users to be analysed and saved in order to make the content of the site's pages more relevant when browsing

In terms of the macro-categories of cookies referred to above, xtraWine uses/places:

Technical cookies (from Magashegy)
Third-party cookies placed by:
- Google Analytics
- Facebook
- Twitter
- Google+
- Zopim
- Tradetracker
- Criteo

REFUSAL/WITHDRAWAL OF CONSENT

To refuse/withdraw consent to the use of any third party profiling cookies you can:

Access the third party links above;
Visit www.youronlinechoices.com

To withdraw your consent to the use of any Magashegy cookies please refer to the instructions below on how to delete cookies in the browser you are using.

DISABLING COOKIES

NB: if you disable cookies, you will no longer be able to use some of the functions required to browse or make purchases on Magashegy, such as saving the products added to your basket.

CHROME

Run Chrome browser
Click the Chrome menu on the browser toolbar next to the url input window
Select Settings
Click on Show Advanced Settings
In the "Privacy" section click on "Content Settings"
In the "Cookies" section you can change the following cookie settings:
- Enable data to be saved locally
- Only change local data until you close your browser
- Prevent sites from placing cookies
- Block third-party cookies and site data
- Set exceptions for specific websites
- Delete one or all of your cookies

For more information please see the relevant pag

MOZILLA FIREFOX

Run Mozilla Firefox browser
Click the firefox menu on the browser toolbar next to the url input window
Select Options
Select the Privacy tab
Click on Show Advanced Settings
In the "Privacy" section click on "Content Settings"
In the "Tracking" section you can change the following cookie settings:
- Ask sites not to track
- Tell sites that you are happy to be tracked
- Provide no preference for personal data tracking
In the "History" section, you can:
- Enable 'Use custom settings' to choose to accept third-party cookies (always, from the most visited sites or never) and to store them for a specified period (until they expire, when Firefox closes or to ask each time)
- Delete individual stored cookies