Policyon
privacy.

1. Data controller

The data controller is Poljšakova Brajda, Šmarje 28a, 5295 Branik, Slovenia. Contact: poljsakova.brajda@gmail.com, phone: Tomaž 031 308 710, Darko 041 275 267.

(For formal procedures, please add the operator's registration and tax numbers.)

2. Data we process

Contact form and email

The name, email address and message content you provide through the form or by email.

Bookings and orders

First and last name, contact phone number, email, number of guests, any special requests (such as allergies), and a delivery address for wine orders.

Technical data when visiting the website

IP address, browser type, access time and pages visited — only to the extent necessary for website operation and security.

3. Purposes and legal bases for processing

• Responding to enquiries and handling bookings — taking steps before entering into a contract or performing a contract (Article 6(1)(b) GDPR).
• Complying with legal obligations (tax and accounting legislation) — Article 6(1)(c) GDPR.
• Website security and operation — legitimate interests (Article 6(1)(f) GDPR).
• Direct marketing (occasional news about vintages, events and tastings) — only with explicit consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

4. Retention periods

We retain enquiry data for up to 24 months after the last contact. Data that must be retained by law (such as invoices) is kept for the legally required periods, normally 10 years. Data processed on the basis of consent is retained until consent is withdrawn.

5. Recipients and data transfers

We do not sell personal data. Contracted processors who support our operations (website hosting, delivery providers and accounting services) may access it only under a written data processing agreement and for the purposes set out in this policy.

For transfers outside the European Economic Area (such as website hosting), we ensure the transfer relies on the European Commission's Standard Contractual Clauses or other appropriate safeguards.

6. Your rights

As a data subject, you have the following rights under the GDPR:

• access to your data,
• rectification of inaccurate data,
• erasure (the “right to be forgotten”),
• restriction of processing,
• data portability,
• objection to processing based on legitimate interests or for marketing purposes,
• withdrawal of consent when processing is based on consent.

Send your request to poljsakova.brajda@gmail.com. We will respond within one month.

7. Right to complain

If you believe we process your data contrary to applicable rules, you may complain to the supervisory authority:
Information Commissioner of Slovenia, Dunajska cesta 22, 1000 Ljubljana,www.ip-rs.si.

8. Security

We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access and disclosure (encrypted HTTPS transfers, restricted access and regular updates).

9. Cookies

Details about cookies and tracking technologies are described in the separate Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its last updated date.