Privacy Policy and Cookie Policy

Allied Vintners International (hereinafter: "AVI", "we" or "us") values the protection of your personal data. In this combined privacy and cookie policy, we explain what data we collect when you visit our website https://alliedvintners.com (hereinafter: "the website") or place an order with us, why we do so, how long we keep it, and what rights you have. This policy has been drafted in accordance with the General Data Protection Regulation (GDPR).

The controller responsible for the processing of your personal data is:

For any questions about this policy, or to exercise your rights, you can reach us at the email address above. We do not have a separately appointed data protection officer; requests are handled by our general point of contact.

3.1 Data you provide to us directly

When you place an order in our webshop, fill in a contact form, or sign up for communications from AVI, we collect, among other things:

• First and last name
• Email address and, where applicable, phone number
• Delivery and/or billing address
• Payment details, processed through our payment service provider (we do not ourselves store full card numbers)
• Order history and correspondence with our customer service

3.2 Data we collect through cookies and similar technologies

We also automatically collect certain data through cookies, scripts, and web beacons, such as your browsing behaviour on the website, device and browser information, and, where you have consented, data for statistical and marketing purposes. See Section 9 for a full explanation of cookies.

We never sell your personal data to third parties. To deliver our services, we do share certain data with carefully selected partners, including:

• Payment service providers, to process your payment securely
• Carriers and logistics partners, to deliver your order
• IT and hosting providers, who provide technical support for the website and our systems
• Providers of statistics, marketing and social media services (see Section 9), to the extent you have consented to this
• Our accountant and legal advisors, where necessary
• Government authorities, where we are legally required to do so

These parties may only use your data for the purposes for which we engaged them.

Some of the partners we work with, such as Facebook, are established outside the European Economic Area (EEA). Where your data is transferred to a country outside the EEA, we ensure this happens on the basis of a safeguard recognised under the GDPR, such as the European Commission's Standard Contractual Clauses. You may request a copy of the relevant safeguards from us using the contact details in Section 14.

• Order and invoicing data: for the statutory bookkeeping retention period of 7 years after the end of the financial year.
• Customer account and order history: for as long as you remain a customer with us, and thereafter for the statutory limitation period applicable to any disputes.
• Newsletter and marketing data: until you unsubscribe or withdraw your consent.
• Cookies: as set out in the overview in Section 9.5, generally between a session and a maximum of 2 years.

We never retain personal data for longer than necessary for the purposes for which it was collected.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access, such as encrypted connections (SSL/TLS), role-based access restrictions to our systems, and regular security updates. Should a data breach nonetheless occur that poses a risk to your rights and freedoms, we will report it in accordance with the GDPR to the competent supervisory authority and, where required, to you.

9.1 What are cookies

A cookie is a small, simple file that is sent along with pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit.

9.2 What are scripts

A script is a piece of program code that is used to make our website function properly and interactively. This code is executed on our server or on your device.

9.3 What is a web beacon

A web beacon (or pixel tag) is a small, invisible piece of text or image on a website that is used to monitor traffic on a website. To do this, various data about you is stored using web beacons.

9.4 What categories of cookies we use

Technical or functional cookies. These ensure that certain parts of the website work properly and that your preferences remain known, for example so that items remain in your shopping cart until you have paid. These cookies are strictly necessary, so the legal basis for them is our legitimate interest (Art. 6(1)(f) GDPR), and we may place them without your consent.

Statistics cookies. These give us insight into the use of our website so that we can optimise the website experience. The legal basis for these cookies is your consent (Art. 6(1)(a) GDPR).

Marketing and tracking cookies. These are used to build user profiles, show relevant advertising, or track you on our website or across several websites for similar marketing purposes. These also require your prior consent (Art. 6(1)(a) GDPR).

Social media. On our website, we have included content from Facebook to promote or share web pages on social networks. This content is embedded with code derived from Facebook and places cookies, which might store and process certain information for personalised advertising. Please read Facebook's privacy statement to see what it does with your data. Facebook is located in the United States; see Section 6 on transfers outside the EEA.

9.5 Overview of cookies placed

When you visit our website for the first time, we show you a pop-up with an explanation about cookies. As soon as you click "Save preferences", you consent to our use of the categories of cookies and plug-ins you selected in the pop-up. We ask you to renew your consent at least every 12 months.

10.1 Manage your consent settings

You can view, change, or withdraw your consent settings at any time via the "Cookie settings" link, which is permanently available in the footer of our website.

You can use your internet browser to automatically or manually delete cookies, or to specify that certain cookies may not be placed. For more information on these options, please refer to the Help section of your browser. Our website may not work properly if all cookies are disabled. If you delete cookies from your browser, they will be placed again, subject to your consent, when you visit our website again.

You have the following rights with respect to your personal data:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained.
• Right of access: you have the right to access the personal data we hold about you.
• Right to rectification: you have the right to have your personal data supplemented, corrected, deleted, or blocked.
• If you have given us your consent to process your data, you have the right to withdraw that consent and to have your personal data deleted, to the extent we no longer need it on another legal basis such as a statutory retention obligation.
• Right to data portability: you have the right to request all your personal data from us and to transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We will comply with this unless there are justified grounds for the processing.

To exercise these rights, please contact us using the contact details in Section 14. If you have a complaint about how we handle your data, we would like to hear from you directly, but you also always have the right to lodge a complaint with the supervisory authority.

We may amend this privacy and cookie policy from time to time, for example to comply with changes in legislation or services added to the website. We recommend that you consult this policy regularly. The date of the last change is stated at the top of this document.

For questions and/or comments about this privacy and cookie policy, please contact us via: