Welcome
to Our Site

AYDAWINES LTD Privacy Policy

 

Our contact details 

Name: AYDAWINES LTD, Ayda Seker Kalelioglu

Address: AYDAWINES LTD, 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB

Phone Number: +447776483929

E-mail: info@aydawines.co.uk

Last updated: ../../….

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.  

 

The type of personal information we collect 

We receive, collect and store any information you enter on our website or provide us in any other way. We currently collect and process the following information:

 

• Personal identifiers (for example, name and surname)

• Contact details (phone, e-mail and address)

• Account information

• Shopping and contract information (for example, Order number, Details on the purchased items, Payment method information, Delivery and billing addresses, Delivery and payment status [e.g. “completed” or “dispatched”], Return status [e.g. “successfully completed”], Information on service providers involved in executing the contract [for order purchasing perhaps shipment numbers of parcel services]

• Payment details (e.g. Preferred payment method, IBAN and BIC or account number and sort code, Credit card details, Creditworthiness data, bank details, payment history)

• Online identifiers (IP address and cookie identifiers)

• Website usage information (including software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page) 

• Customer service information (Questions, comments, feedback, product reviews, recommendations, complaints shared with us through our ‘Contact us’ form, Messages and communication relating to purchases [e.g. notice of revocation, complaints and messages to customer service]),

We use the information that you have given us in order to 

1. provide and operate the Services;

2. provide our Users with ongoing customer assistance and technical support;

3. create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we or our business partners may use to provide and improve our respective services; 

4. comply with any applicable laws and regulations.

 

If you are a consumer, the lawful basis for which we rely on to collect and process your data is typically consent and performance of our obligations to you as a seller of products. If you are not a consumer, we rely on legitimate interest as the lawful basis on which we collect and use your personal data in relation to enhancing your user experience of our website. Our legitimate interests are usually to provide you with details of our business and products.

 

How we get the personal information and why we have it

• Most of the personal information we process is provided to us directly by you for one of the following reasons: 

Order processing in the online shop and customer account

When you conduct a transaction or set an account on our website, as part of the process, we collect personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated in this Privacy Policy only.

We process the data of our customers as part of the ordering process in our online shop to enable them to select and order the selected products and services, as well as their payment and delivery or execution.

The processed data includes personal identifiers, contact details, shopping and contract information, payment details and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of operating an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

The processing takes place on the basis of Art. 6 Para. 1 lit. b (implementation of order processes) and c (legally required archiving) UK GDPR. The information marked as required is required for the establishment and fulfillment of the contract. We disclose the data to third parties only within the scope of delivery, payment or within the scope of legal permits and obligations to legal advisers and authorities. The data will only be processed in third countries if this is necessary to fulfill the contract (e.g. at the customer's request for delivery or payment).

Users can optionally create a user account, in particular by being able to view their orders. As part of the registration, the required mandatory information is communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention being necessary for commercial or tax reasons in accordance with Article 6 (1) (c) UK GDPR. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is the user's responsibility to back up their data before the end of the contract in the event of termination.

As part of the registration and renewed registrations as well as the use of our online services, we store the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the user's protection against misuse and other unauthorized use. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) UK GDPR.

Deletion takes place after statutory warranty and comparable obligations have expired, the necessity of storing the data is checked every three years; in the case of legal archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation).

​

External payment service providers

As part of the fulfilment of contracts on the basis of Article 6 Paragraph 1 lit. b. UK GDPR, we use external payment service providers, via whose platforms the users and we can carry out payment transactions (e.g., each with a link to the data protection declaration, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html). 

The data processed by the payment service provider includes personal identifiers and contact details such as name and address, payment details such as bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, only information with confirmation or negative information about the payment. Under certain circumstances, the payment service provider may transmit the data to credit agencies. The purpose of this transmission is to check identity and creditworthiness. We refer to the terms and conditions and data protection notices of the payment service providers.

The payment transactions conducted on our online shop are subject to the terms and conditions and the data protection notices of the payment service provider, which can be accessed within the abovementioned websites or transaction applications. We also refer to this for the purpose of further information and the assertion of revocation, information and other data subject rights.

Contact

When contacting us (e.g. via contact us form, e-mail, telephone or via social media), the information provided by the user is processed in order to process the contact request and its processing in accordance with Article 6 (1) (b) UK GDPR. User information can be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.

We delete the requests if they are no longer necessary. We review necessity every two years; Furthermore, the statutory archiving obligations apply.

We may also contact you to notify you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages, and postal mail.

 

We also receive personal information indirectly, from the following sources in the following scenarios:

Hosting

We collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. 

 

Use of cookies and other analytic tools

 

"Cookies" are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the content of a shopping cart in an online shop or a login status can be saved. "Permanent" or "persistent" refers to cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. "Third-party cookies" are cookies that are offered by providers other than the person responsible for operating the online offer (otherwise, if they are only their cookies, we speak of "first-party cookies").

 

We can use temporary and permanent cookies and explain this in our data protection declaration.

 

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

 

A general objection to the use of cookies for online marketing purposes can be raised for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by switching them off in the browser settings. Please note that in this case not all functions of this online offer can be used.

 

Google Analytics and Google AdWords

 

We use Google Analytics to collect data which is a web analytics service provided by Google, Inc. With your consent, Google Analytics will process and collect your personal data through use of cookies and IP address to give us valuable information how visitors found and explored our site, and how we can enhance their experience. It provides us with information about the behaviour of our visitors (e.g. how long they stayed on the site, the average number of pages viewed) and also tells us how many visitors we have had. We need this data to understand how you interact with our website so we can improve its design and functionality. 

 

https://policies.google.com/privacy?hl=en

 

In addition we use a Google AdWords account, here you can gain more information on how Google advertising services use cookies and other similar technologies for advertisement purposes. https://policies.google.com/technologies/ads

 

As we use the abovementioned products, Google will transfer your data outside of United Kingdom in compliance with the UK adequacy regulations. To learn more about Google's data transfer policies, click here.

You can learn more here on how Google uses information we share with them and how you can control this information. https://policies.google.com/technologies/partner-sites

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are as follows and the following applies also in cases where the legal basis is not mentioned in the data protection declaration: 

- Your consent [Art. 6 (1) lit. a.] You are able to remove your consent at any time. You can do this by contacting [contact details]

- We have a contractual obligation, inluding answering inquiries [Article 6(1)(b) UK GDPR]

- We have a legal obligation [Article 6(1)(c) UK GDPR]

- We have a legitimate interest [Article 6(1)(f) UK GDPR]

 

The list of cookies we use on our website

 

Cookie Name

Purpose

Duration

Cookie Type

XSRF-TOKEN

Used for security reasons

Session

Essential

hs

Used for security reasons

Session

Essential

svSession

Used in connection with user login

12 months

Essential

SSR-caching

Used to indicate the system from which the site was rendered

1 minute

Essential

_wixCIDX

Used for system monitoring/debugging

3 months

Essential

_wix_browser_sess

Used for system monitoring/debugging

session

Essential

consent-policy

Used for cookie banner parameters

12 months

Essential

smSession

Used to identify logged in site members

Session

Essential

TS*

Used for security and anti-fraud reasons

Session

Essential

bSession

Used for system effectiveness measurement

30 minutes

Essential

fedops.logger.X

Used for stability/effectiveness measurement

12 months

Essential

wixLanguage

Used on multilingual websites to save user language preference

12 months

Functional

 

How we store your personal information 

Your information is securely stored. 

Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.  

 

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

 

We keep [type of personal information] for [time period]. We will then dispose your information by [explain how you will delete their data].

 

The data processed by us will be deleted or their processing restricted in accordance with Art. 17 and 18 UK GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

 

Your data protection rights

Under data protection law, you have rights including:

Right of withdrawal -  You have the right to revoke your consent in accordance with Article 7 (3) UK GDPR with effect for the future.

Your right of access - You have the right to ask us for copies of your personal information. 

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances, in particular against processing for direct advertising purposes.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [insert email address, phone number and or postal address] if you wish to make a request. 

 

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [Insert your organisation’s contact details for data protection queries].

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:            

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk