{"id":604,"date":"2024-10-16T11:15:45","date_gmt":"2024-10-16T11:15:45","guid":{"rendered":"https:\/\/grape-empire.com\/?page_id=604"},"modified":"2026-08-13T14:42:48","modified_gmt":"2026-08-13T12:42:48","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/grape-empire.com\/ro\/privacy-policy\/","title":{"rendered":"Politica de confiden\u021bialitate"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRIVACY POLICY<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Last updated: 12 August 2026<\/b><\/p>

1. Introduction<\/b><\/span><\/h2>

At Grape Empire, we take the protection of your personal data seriously.<\/p>

This Privacy Policy explains how Horv\u00e1th Bal\u00e1zs, Sole Proprietor<\/b><\/span>, operating the Grape Empire<\/b><\/span> online store at grape-empire.com<\/b><\/span>, collects, uses, stores and protects your personal data.<\/p>

Personal data is processed in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016\/679 (GDPR)<\/b><\/span>.<\/p>

Data Controller<\/b><\/span><\/h3>

Business name:<\/b> Horv\u00e1th Bal\u00e1zs, Sole Proprietor
Trading name:<\/b><\/span> Grape Empire
Registered address:<\/b><\/span> 7000 S\u00e1rbog\u00e1rd, Tin\u00f3dy utca 156., Hungary
Email:<\/b><\/span> info@grape-empire.com
Website:<\/b><\/span> grape-empire.com<\/p>

2. Personal Data We Process<\/b><\/span><\/h1>

We process only the personal data necessary to operate our online store, fulfil and deliver orders, communicate with customers, comply with our legal obligations and improve our services.<\/p>

Depending on how you use our website, we may process the following categories of personal data.<\/p>

2.1 Customer and Order Data<\/b><\/span><\/h2>

When you place an order, we may collect:<\/p>

  • your name;<\/li>
  • billing address;<\/li>
  • shipping address;<\/li>
  • email address;<\/li>
  • telephone number required for delivery;<\/li>
  • country;<\/li>
  • details of the products ordered;<\/li>
  • order number and order history;<\/li>
  • order value and payment status; and<\/li>
  • information necessary for invoicing and delivery.<\/li><\/ul>

    We process this information in order to:<\/p>

    • process and fulfil your order;<\/li>
    • arrange delivery;<\/li>

    • process the payment method selected by you, including online card payment through Stripe or Cash on Delivery where available;<\/p><\/li>

    • communicate with you regarding your order;<\/p><\/li>

    • handle returns, complaints and customer service requests; and<\/li>
    • comply with accounting, tax and other legal obligations.<\/li><\/ul>

      The legal basis for processing is primarily the performance of a contract<\/b><\/span> or taking steps at your request before entering into a contract under Article 6(1)(b) GDPR.<\/p>

      Where we are required by law to retain or process information, the legal basis is compliance with a legal obligation<\/b><\/span> under Article 6(1)(c) GDPR.<\/p>

      2.2 Communication Data<\/b><\/span><\/h2>

      When you contact us through our website or by email, we may process:<\/p>

      • your name;<\/li>
      • email address;<\/li>
      • country;<\/li>
      • order number, if provided;<\/li>
      • the content of your message; and<\/li>
      • any other information you voluntarily provide.<\/li><\/ul>

        We process this information to answer enquiries, provide customer support, resolve problems and, where necessary, establish, exercise or defend legal claims.<\/p>

        Depending on the nature of your enquiry, the legal basis may be the performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing customer service and operating our business.<\/p>

        2.3 Technical and Website Usage Data<\/b><\/span><\/h2>

        When you visit our website, certain technical information may be generated automatically, including:<\/p>

        • IP address;<\/li>
        • browser type and version;<\/li>
        • device type;<\/li>
        • operating system;<\/li>
        • pages visited;<\/li>
        • date and time of visits;<\/li>
        • referring website;<\/li>
        • navigation and interaction data; and<\/li>
        • cookie or similar technology identifiers.<\/li><\/ul>

          Technical information necessary for the secure and reliable operation of the website may be processed on the basis of our legitimate interests<\/b><\/span>.<\/p>

          Analytics, advertising and other non-essential tracking technologies are used only where permitted by applicable law and, where required, after obtaining your consent<\/b><\/span>.<\/p>

          For more information, please see our Cookie Policy<\/b><\/span>.<\/p>

          3. How We Collect Personal Data<\/b><\/span><\/h1>

          We may collect personal data directly from you when you:<\/p>

          • place an order;<\/li>
          • create or use a customer account;<\/li>
          • complete a contact form;<\/li>
          • contact us by email;<\/li>
          • request customer support; or<\/li>
          • otherwise voluntarily provide information to us.<\/li><\/ul>

            Certain technical information may also be collected automatically when you use our website through cookies and similar technologies.<\/p>

            We may also receive information from service providers involved in operating and securing our online store and delivering orders.<\/p>

            4. Payment Processing<\/b><\/span><\/h1>

            The payment methods available through Grape Empire depend on the Customer\u2019s delivery country.<\/p>

            For orders delivered to Romania, Croatia, Slovakia and Slovenia, Customers may pay by online card payment through Stripe or by Cash on Delivery (COD).<\/p>

            For orders delivered to Austria and the Czech Republic, payment is available by online card payment through Stripe. Cash on Delivery is not available for these destinations.<\/p>

            Online Card Payments \u2013 Stripe<\/b><\/span><\/blockquote>

            Online card payments are processed using Stripe.<\/p>

            When you choose to pay online by card, personal data necessary to process and secure the payment may be transmitted to and processed by Stripe. Depending on the transaction and payment method, this may include:<\/p>

            • your name;<\/li>
            • email address and telephone number;<\/li>
            • billing and shipping address;<\/li>
            • payment and transaction information;<\/li>
            • purchase amount and currency;<\/li>
            • information relating to the payment method;<\/li>
            • IP address, device and technical information; and<\/li>
            • information required for payment authentication, fraud prevention and security.<\/li><\/ul>

              Grape Empire does not itself store your full payment card number, card security code (CVC\/CVV) or other complete card credentials processed by Stripe.<\/p>

              Stripe may process personal data for the purposes of processing and authenticating payments, preventing fraud, complying with financial and regulatory obligations and providing its payment services. Depending on the relevant processing activity, Stripe may act as a data processor on behalf of Grape Empire and\/or as an independent data controller in accordance with its own legal obligations and privacy terms.<\/p>

              The legal basis for processing personal data necessary to complete your purchase is primarily the performance of the purchase contract under Article 6(1)(b) GDPR. Stripe may rely on additional legal bases for processing carried out for its own purposes, as described in Stripe\u2019s privacy documentation.<\/p>

              Further information about Stripe\u2019s processing of personal data is available in Stripe\u2019s Privacy Policy.<\/p>

              Cash on Delivery<\/b><\/span><\/blockquote>

              Where Cash on Delivery is available and selected, information necessary for the collection and administration of the payment may be shared with GLS.<\/p>

              The legal basis for this processing is the performance of the purchase contract under Article 6(1)(b) GDPR.<\/p>

              5. Delivery by GLS<\/b><\/span><\/h1>

              Orders placed through Grape Empire are delivered by GLS<\/b><\/span>.<\/p>

              To arrange and complete delivery, we may provide GLS with personal information necessary for shipment, including:<\/p>

              • your name;<\/li>
              • delivery address;<\/li>
              • country;<\/li>
              • telephone number;<\/li>
              • email address;<\/li>
              • shipment and order reference information; and<\/li>

              • information necessary for the collection and administration of Cash on Delivery payments, where Cash on Delivery has been selected and is available for the destination country.<\/p><\/li><\/ul>

                GLS processes this information for purposes related to the transport, delivery and administration of your shipment.<\/p>

                The legal basis for sharing the information necessary for delivery is the performance of the contract<\/b><\/span> between you and Grape Empire.<\/p>

                GLS may also process certain information in accordance with its own legal obligations and applicable privacy terms.<\/p>

                6. Cookies and Similar Technologies<\/b><\/span><\/h1>

                Grape Empire uses cookies and similar technologies to operate the website, remember preferences and, where consent has been provided, analyse website usage and support advertising activities.<\/p>

                Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.<\/p>

                Analytics, advertising and other non-essential cookies or tracking technologies are activated only where the required consent has been obtained.<\/p>

                You can manage or withdraw your cookie preferences through the cookie settings available on our website.<\/p>

                For more information, please see our Cookie Policy<\/b><\/span>.<\/p>

                7. Marketing and Analytics<\/b><\/span><\/h1>

                Where required by law, we process personal data for electronic marketing, analytics or personalised advertising only after obtaining the necessary consent.<\/p>

                Depending on the services enabled on our website, these activities may include measuring website usage, evaluating advertising performance and displaying relevant advertisements.<\/p>

                You may withdraw your consent at any time through the available cookie settings or, in the case of marketing emails, through the unsubscribe mechanism provided in the communication.<\/p>

                Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.<\/p>

                Messages necessary for fulfilling an order, providing customer service or meeting legal obligations are not considered marketing communications.<\/p>

                8. Sharing Personal Data<\/b><\/span><\/h1>

                We do not sell your personal data<\/b><\/span>.<\/span><\/p>

                We may share personal data only where necessary and lawful, including with:<\/p>

                • GLS, for shipping, delivery and, where applicable, Cash on Delivery administration;<\/li>
                • Stripe, for online payment processing, payment authentication, fraud prevention and related payment services;<\/b><\/span><\/li>
                • website hosting providers;<\/li>
                • IT and website security service providers;<\/li>
                • email and communication service providers;<\/li>
                • accounting and professional advisers;<\/li>
                • analytics or advertising providers where the required consent has been obtained; and<\/li>
                • competent public authorities where disclosure is required by law.<\/li><\/ul>

                  Only information necessary for the relevant purpose is shared.<\/p>

                  Where required by applicable data protection law, we use appropriate contractual and organisational safeguards with service providers processing personal data on our behalf.<\/p>

                  9. International Transfers of Personal Data<\/b><\/span><\/h1>

                  Some service providers used in connection with our website may process personal data outside the European Economic Area (EEA).<\/p>

                  Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection law.<\/p>

                  Depending on the recipient and destination, safeguards may include:<\/p>

                  • an adequacy decision adopted by the European Commission;<\/li>
                  • the European Commission\u2019s Standard Contractual Clauses;<\/li>
                  • the EU\u2013US Data Privacy Framework, where applicable; or<\/li>
                  • another lawful transfer mechanism permitted under the GDPR.<\/li><\/ul>

                    Our online payment provider, Stripe, operates internationally and may process or transfer personal data in connection with providing its services. Where personal data originating from the European Economic Area is transferred outside the EEA, Stripe uses applicable transfer mechanisms and safeguards in accordance with data protection law, which may include the EU\u2013US Data Privacy Framework and the European Commission\u2019s Standard Contractual Clauses.<\/p>

                    10. Data Security<\/b><\/span><\/h1>

                    We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.<\/p>

                    Our website uses encrypted HTTPS connections, together with appropriate website security, access-control and backup measures.<\/p>

                    Access to personal data is restricted to persons and service providers who require access for legitimate business purposes.<\/p>

                    While we take reasonable measures to protect personal data, no method of electronic storage or transmission can guarantee absolute security.<\/p>

                    11. Data Retention<\/b><\/span><\/h1>

                    We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, accounting and tax obligations.<\/p>

                    The applicable retention period depends on the type of information and the purpose for which it is processed.<\/p>

                    Order, invoicing and accounting information is retained for the period required under applicable Hungarian law.<\/p>

                    Customer service correspondence may be retained for as long as reasonably necessary to resolve the enquiry, manage the customer relationship and protect our legitimate legal interests.<\/p>

                    Where processing is based solely on consent, we will cease the relevant processing after consent is withdrawn unless another lawful basis requires or permits continued retention.<\/p>

                    Information that has been irreversibly anonymised and can no longer identify an individual may be retained and used for statistical purposes.<\/p>

                    12. Your Rights Under the GDPR<\/b><\/span><\/h1>

                    Subject to the conditions and limitations set out in the GDPR, you may have the right to:<\/p>

                    • request access<\/b><\/span> to your personal data;<\/li>
                    • request correction<\/b><\/span> of inaccurate or incomplete personal data;<\/li>
                    • request erasure<\/b><\/span> of your personal data;<\/li>
                    • request restriction<\/b><\/span> of processing;<\/li>
                    • object<\/b><\/span> to processing based on legitimate interests;<\/li>
                    • object to direct marketing<\/b><\/span> at any time;<\/span><\/li>
                    • request data portability<\/b><\/span> where applicable;<\/li>
                    • withdraw consent<\/b><\/span> at any time where processing is based on consent; and<\/li>
                    • lodge a <\/span>complaint with a competent supervisory authority<\/b><\/span>.<\/span><\/li><\/ul>

                      These rights are not absolute and may be subject to limitations or exceptions under applicable law.<\/p>

                      To exercise any of your data protection rights, you can use the Data Protection Request Form below or contact us at info@grape-empire.com.<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                      \n\t\t\t\t
                      \n\t\t\t\t\t

                      Data Protection Request<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
                      \n\t\t\t\t
                      \n\t\t\t\t\t\t\t\t\t

                      Use this form to request access to, correction, erasure or restriction of your personal data.<\/i><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

                      \n\t\t\t\t
                      \n\t\t\t\t\t\t\t
                      \n\t\t\t\n\t\t\t\n\t\t\t\n\n\t\t\t\n\t\t\t
                      \n\t\t\t\t\t\t\t\t
                      \n\t\t\t\t\t\t\t\t\t\t\t\t