Privacy Policy

1. General provisions

The controller of personal data is the Vinoteca online shop. This policy applies to all data the Controller receives when the site is used: when registering, signing in, resetting a password, asking the sommelier, leaving a review, subscribing and browsing pages. Consent to processing is given by a separate action in the forms of the site. Questions about data processing should be sent to info@vinoteca.jimagie.com.

2. Principles of processing

Data is processed lawfully and fairly, only for specified purposes and to the minimum extent necessary. It is kept accurate and up to date, and is not stored longer than the purpose requires. When the purpose is achieved or consent is withdrawn, processing stops and the data is deleted or anonymised.

3. What data, why and on what basis

Account

Data: name, e-mail, phone (optional), password stored as an irreversible hash. Purpose: creating and running an account, sign-in, publishing reviews in the user's name. Basis: consent.

Password reset

Data: e-mail. Purpose: sending a link to reset the password. Basis: consent.

Sommelier question

Data: name, phone, text of the enquiry, page it was sent from. Purpose: answering the enquiry. Basis: consent; the date and version of the consent are saved with the enquiry.

Review

Data: name, rating, review text. Purpose: publishing a review of a product. Basis: consent.

News subscription

Data: e-mail, language and page of the subscription. Purpose: sending news. Basis: consent, which can be withdrawn by writing to the controller.

Technical data

Data: browser and device type, IP address, date and time of requests, page addresses. Purpose: operation and security of the site, protection against automated submissions. Basis: the controller's legitimate interest in keeping the site running.

Consent is given by ticking the box in a form before it is sent (text of the consent). Without the tick the form cannot be submitted.

4. Cookies and local storage

The site uses cookies and the browser's local storage. Third-party services (for example, maps, video, analytics) are connected only after the user consents in the notice on the site. Before consent, no requests are made to third-party servers. As of the date of this version, no third-party services are connected to the site. When a service is connected, it receives the user's IP address and browser information, and the list of services is added to the policy.

Session (PHPSESSID)

A technical identifier for sign-in, basket, favourites and comparison. Kept until the browser is closed. The site does not work without it.

Catalogue view (vino_view)

Remembers the chosen view of the wine list. Kept for 12 months.

Local storage

Age 18+ confirmation and the choice made in the cookie notice are kept in the browser until the user clears the site data. A marker for returning to a review after sign-in lasts until the tab is closed.

The choice can be changed at any time using the "Consent settings" link at the bottom of the page. Cookies can be deleted or blocked in the browser settings; some features of the site will then stop working.

5. Recipients of data

Data is not sold or passed to third parties for their own purposes. Providers without which the site cannot run (hosting provider, e-mail service) may have access to data only to the extent needed for their service and under confidentiality. Data is stored on servers located in Germany. Disclosure at the request of competent authorities is possible only where the law provides for it.

6. Retention

Account: until it is deleted on request. Sommelier enquiries: 12 months, then deleted automatically. Subscription and reviews: until consent is withdrawn or deletion is requested. The record of consent is kept together with the data it relates to. Technical logs: no longer than needed for the security of the site.

7. Rights

A person whose data is processed has the right to obtain confirmation of the processing and information about it, to obtain a copy of their data, to require correction, blocking or deletion, to object to the processing, to withdraw consent at any time, and to lodge a complaint with the authority responsible for the protection of personal data or with a court. It is enough to write to info@vinoteca.jimagie.com. A request is handled within the time the law sets.

8. Data protection

The site runs over HTTPS, access to data is limited to authorised staff, passwords are stored only as irreversible hashes, and forms are protected against automated submissions and limited in request rate.

9. Age

The site is intended for people over 18, because it presents alcoholic drinks. Data of people under 18 is not collected knowingly; if such data comes to light, it is deleted.

10. Changes

The current version is always published on this page. Last updated: October 22, 2026.