1. Introductory Provisions
1.1 Personal Data Administrator
An Individual Entrepreneur Identification Number: 316359980 registered in the LEPL National Agency of Public Registry having its registered office at Georgia, Rustavi, Shartava Avenue, N19, (XX m/d N5) (hereinafter as the "Provider") as the owner and operator of WhiskyHunter.net (hereinafter as the "Service") shall process your personal data (hereinafter as "you" or the "User").
2. Type of Data Processed
2.1. Personal Data Provided By You
The Provider processes personal data and contact details provided by you during your registration within the Service and in relation to your User account. Also your User account settings, saved products and any content you input within the Service (ratings, comments, etc.) are processed as your personal data.
2.2. Personal Data of Third Persons Provided by You
2.3. Personal Data Processed Automatically
When you are using the Service, the Provider may collect certain information such as IP address, date and time of the visit to this website, information about your Internet browser, operation system or language settings. The Provider may also process information about your conduct on this website, such as links opened or goods displayed. The details of your conduct on this website are anonymized for the maximum protection of your privacy and therefore the Provider cannot match them with a particular person.
3. Reasons to Process Your Personal Data
Your personal data is processed for the following reasons:
(a) User account: for the purpose of using the Service all Users are required to be registered. Thanks to the personal data entered in your User account, you will be able to use all the functions of the Service, for example input your contributions, comments, evaluate goods etc. You can change the entered details at any time.
(b) Customer care: if you address the Provider with a question / issue, the Provider has to process your personal data in order to answer / resolve it. The data may be transferred to third parties in certain cases.
(c) Marketing: e-mail commercial communication is sent to you upon your consent. You can easily unsubscribe from our newsletters by adjusting your User account settings or contacting the Provider.
(d) Assertion of rights and legal claims and inspection by public authorities: The Provider can also process your personal data in order to assert its rights and legal claims (e.g. in the event that the Provider has an overdue invoice in your name). The Provider may also process your data for inspections by public authorities and other serious reasons.
4. Legal Grounds for Processing of Personal Data
4.1. Conclusion and Performance of Agreement
When you create your User account within the Service, the Provider processes your personal data and the content you input based on the performance of a contract with you (without your consent), so that the Provider can maintain your User account and provide you with functionalities related to the Service. The contract on which our processing is based comes into being when you establish your User account.
4.2. Legitimate Interest
The Provider also uses your personal data to provide you the relevant content, which may be of interest to you. On the grounds of legitimate interest, the Provider processes particular personal data, which are processed automatically, and cookies (for more information please see our Cookies Privacy).
The Provider may also send you emails on the same legal grounds.
In case the Provider processes your personal data on these legal grounds, you are entitled to raise an objection to such processing by contacting the Provider.
For the purposes of email marketing (commercial communication), the Provider processes your personal data upon your consent. By registering you subscribe to marketing newsletters and notifications sent by WhiskyHunter.net. In any case, you are entitled to reject such marketing communication simply by contacting the Provider. If you reject your consent and you are a registered User, the Provider can send you a commercial newsletter even without your consent.
If you grant your consent to the personal data processing, you are entitled to withdraw it at any time by contacting the Provider.
5. Transfer of Personal Data to Third Parties
Your personal data is transferred to third parties in the following cases:
(a) Payment Cards: The Provider does not possess the details of payment cards used by you. The details of your payment cards are only available to the payment platform.
(b) Commercial Communication: in case the Provider sends you a commercial communication (e.g. via email), it may use a third party to distribute the messages. Such third party is bound by the obligation of confidentiality and is not allowed to use your personal data for any other purpose.
(c) Public Authorities: in the event that the Provider enforces its rights, your personal data may be transferred to a third party (e.g. an Attorney-at-Law). If the Provider is obliged to transfer your personal data by virtue of law or upon a request by a public authority, it has to comply.
6. What Is the Period for Processing Your Personal Data?
The Provider shall process your personal data for the entire duration of the contractual relationship, i.e. existence of your User account.
In case your personal data processing is based on consent, your personal data shall be, in general, processed for 7 years or until such consent is withdrawn.
In case you subscribe to commercial communication, your personal data shall be processed for 7 years or until you express your disapproval of such communication. You can easily express your disapproval by adjusting your User account settings or contacting the Provider.
Please note that the personal data necessary for the due rendering of the Service or for the fulfillment of all our duties, ensuing either from the contract between us or from generally binding legal regulations have to be processed regardless of whether you granted your consent for the period set out in the relevant legal regulations and in compliance therewith (e.g. tax documents must be processed for at least 10 years).
The data obtained through your User account or in a similar way are processed for the period of using the Service and then usually for 5 years after cancellation of your User account. Basic identification data and the information why your User account was cancelled or information which is a part of operational advance deposits are usually stored for the relevant period.
7. What Are Your Rights Related to Personal Data Protection?
In relation to your personal data, you have in particular the right to withdraw your consent to the processing of your personal data at any time, the right to correct or supplement your personal data, the right to request restriction of processing, the right to raise an objection to or a complaint of the processing of your personal data, the right to access your personal data, the right to request the transfer of your personal data, the right to be informed of a breach of security of your personal data and, under certain conditions, the right to the deletion of certain personal data we process about you ("the right to be forgotten").
7.1. Changes and Amendments
You control your personal data mainly through your User account. Here you can delete or change the basic information about yourself, etc.
You can also contact the Provider in this matter.
In case you believe that your personal data has been processed incorrectly, you can contact the Provider. However, it will be faster and more efficient for you to correct the personal data by yourself in your User account.
7.3. Access (Portability)
You can ask the Provider to send you an overview of your personal data.
You also have the right to access the following information concerning your personal data:
(a) what are the purposes of processing your personal information,
(b) what are the categories of the affected personal data,
(c) who is the recipient of your personal data, besides you,
(d) what is the planned period of storage of your personal data,
(e) whether you have the right to claim the correction or deletion, restriction of personal data processing or to raise an objection to such processing,
(f) information on the source of the personal data in case we did not obtain them from you.
You may also claim the deletion of your personal data (this shall not apply to data in documents that are subject to the obligation of archiving under the law (e.g. invoices or credit notes). In case the Provider needs your personal data to determine, execute or defend its legal claims, your request may be rejected (e.g. if we have an overdue invoice in your name or if the complaint procedure is in progress).
Please note that the essential details of your payment card are not stored by the Provider; they are stored at the payment gateway. Therefore, the Provider is not able to delete such data; you have to address the payment gateway which mediated the payment.
You are entitled to the deletion of data in the following cases:
(a) the personal data is not needed for the purposes for which it was being processed,
(b) you have withdrawn your consent under which the data was processed and there is no further legal grounds for being processed,
(c) you have objected to the processing of personal data and you believe that after assessing your objection, it will become clear that your interest in the particular situation prevails over others,
(d) the personal data has been processed unlawfully,
(e) the deletion obligation is stipulated by a special legal regulation,
(f) the personal data concerns a person under 16 years old.
7.5. How to exercise your right to deletion?
Please contact the Provider.
7.6. Raising an Objection
Certain personal data is processed on the grounds of our legitimate interest (as described above). In case you have concrete reasons, you are entitled to raise an objection to the processing of this personal data. The objection can be raised by contacting the Provider.
7.7. Restriction of Processing
In case (a) you deny the accuracy of your personal data, (b) your personal data is processed unlawfully, (c) the Provider does not need your personal data for processing purposes, but it is needed to determine, execute or defend your legal claims, or (d) you raised an objection under the preceding paragraph, you shall be entitled to us restricting the processing of your personal data.
In such cases, we may process your personal data only upon your consent (except for the storage or backup of the personal data concerned).
7.8. Lodging a Complaint
If you believe that your personal data has been processed unlawfully, you are entitled to lodge a complaint at the Office for Personal Data Protection. However, we will appreciate it if you address the Provider first and it can try to resolve your concerns.
7.9. How to contact the Provider?
You can always easily contact the Provider through form Personal Data Administrator.
Last Updated: 4 November 2021