Privacy Policy

The operator of the VINIGHT online store at www.vinight.sk, Company ID (IČO): 57863458, with its registered place of business at Riadok 415/47, Drahovce, 92241, Slovakia, processes personal data provided by the Buyer for the purpose of fulfilling and subsequently confirming the terms and conditions, processing electronic orders, arranging delivery, processing payments, and ensuring necessary communication between the contracting parties for the period required by applicable legislation.

General Provisions

1. The controller of personal data pursuant to Section 5 letter o) of Act No. 18/2018 Coll. on Personal Data Protection, as amended (hereinafter referred to as the "Act"), is VINIGHT, Company ID (IČO): 57863458, with its registered place of business at Riadok 415/47, Drahovce, 92241, Slovakia (hereinafter referred to as the "Controller").

2. The Controller's contact details are:
E-mail: vinight@vinight.sk
Tel.: xxx

3. Personal data means all information identifying a natural or legal person.

Sources of Personal Data Processed

1. The Controller processes personal data provided by the Buyer with their consent and personal data obtained by the Controller in connection with the performance of the Purchase Agreement and the processing of an electronic order in the www.vinight.sk online store.

2. The Controller processes only the identification and contact details of the Buyer necessary for the performance of the Purchase Agreement.

3. The Controller processes personal data for the purposes of delivery, payment processing and necessary communication between the contracting parties for the period required by applicable legislation. Personal data will not be made public and will not be transferred to other countries.

Purpose of Personal Data Processing

The Controller processes the Buyer's personal data for the following purposes:

1. For registration on the website www.vinight.sk pursuant to Section 13(1)(a) of Act No. 18/2018 Coll. on Personal Data Protection.

2. For processing the Buyer's electronic order (name, address, e-mail address, telephone number).

3. For the purpose of fulfilling the rights and obligations arising from the contractual relationship between the Buyer and the Controller.

4. The provision of personal data is a necessary requirement for the performance of the Purchase Agreement. Without providing personal data, it is not possible to conclude the Agreement.

Personal Data Retention Period

1. The Controller retains personal data for the period necessary to exercise the rights and fulfil the obligations arising from the contractual relationship between the Buyer and the Controller and for a period of 10 years following the termination of the contractual relationship.

Act No. 431/2002 Coll. on Accounting stipulates that accounting documents must be retained for 10 years following the year to which they relate.

2. Upon expiry of the personal data retention period, the Controller is obliged to delete the data.

Buyer's Rights

Under the conditions stipulated by the Act, the Buyer has the right:

1. To access their personal data.

2. To rectify their personal data.

3. To have their personal data erased.

4. To object to the processing of their personal data.

5. To data portability.

6. To withdraw consent to the processing of personal data in writing or electronically by contacting: vinight@vinight.sk.

Personal Data Security

1. The Controller declares that it has adopted all appropriate technical and organisational measures necessary to ensure the security of the Buyer's personal data.

2. The Controller has implemented technical measures to secure personal data storage, in particular password-protected access to computers, the use of antivirus software and regular computer maintenance.

Final Provisions

1. By submitting an electronic order through the website, the Buyer confirms that they have been informed of this Privacy Policy and accept it in its entirety.

2. The Buyer agrees to these terms by ticking the relevant checkbox during the ordering process.

3. The Controller is entitled to amend this Privacy Policy at any time. The Controller is obliged to publish the new version on its website.

This Privacy Policy enters into force on 20 September 2026.