Your GDPR Rights
Last Updated: 1 January 2025
Introduction
The General Data Protection Regulation (GDPR) is a European Union law that protects your personal data and privacy. At luckvines.com, we are fully committed to upholding your rights under GDPR and ensuring your personal information is handled with the highest standards of care and security.
This page explains your rights under GDPR and how you can exercise them.
Data Controller
The data controller responsible for your personal information is:
luckvines.com
38 Riverside Avenue
Galway, Ireland
Contact Email: support@luckvines.com
Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
1. Right to Be Informed
You have the right to clear, transparent information about how we collect, use, and share your personal data. This information is provided in our Privacy Policy and on this page.
We will inform you about:
- What personal data we collect
- Why we collect it
- How we use it
- Who we share it with
- How long we keep it
- Your rights regarding your data
2. Right of Access
You have the right to access your personal data and receive a copy of the information we hold about you. This is commonly known as a "subject access request."
When you make an access request, we will provide:
- Confirmation that we are processing your personal data
- A copy of your personal data
- Information about how we use your data
- Details of who we share your data with
- How long we will keep your data
- Information about your rights
How to request access: Email us at support@luckvines.com with "Subject Access Request" in the subject line. We will respond within one month.
3. Right to Rectification
You have the right to have inaccurate or incomplete personal data corrected. If you believe any information we hold about you is incorrect or outdated, you can request that we update it.
We will correct your data within one month of your request and notify any third parties with whom we have shared your data (unless this is impossible or requires disproportionate effort).
How to request rectification: Email us at support@luckvines.com with details of the information you want corrected.
4. Right to Erasure (Right to Be Forgotten)
You have the right to request that we delete your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw your consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
- The data must be erased to comply with a legal obligation
Please note that we may not be able to delete your data if we need to keep it for legal reasons, such as compliance with legal obligations or establishing, exercising, or defending legal claims.
How to request erasure: Email us at support@luckvines.com with "Data Erasure Request" in the subject line.
5. Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain situations:
- You contest the accuracy of the data (restriction applies while we verify accuracy)
- Processing is unlawful but you don't want the data erased
- We no longer need the data but you need it for legal claims
- You have objected to processing (restriction applies while we verify our legitimate grounds)
When processing is restricted, we can still store your data but cannot use it without your consent, except for legal claims or protecting others' rights.
How to request restriction: Email us at support@luckvines.com explaining why you want to restrict processing.
6. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
This right applies when:
- Processing is based on your consent or contract
- Processing is carried out by automated means
We will provide your data in a format such as CSV or JSON that can be easily transferred to another service.
How to request data portability: Email us at support@luckvines.com with "Data Portability Request" in the subject line.
7. Right to Object
You have the right to object to processing of your personal data in certain circumstances:
- Processing based on legitimate interests or public interest
- Direct marketing (including profiling)
- Processing for scientific, historical research, or statistical purposes
If you object to direct marketing, we will stop processing your data for that purpose immediately.
For other objections, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or we need the data for legal claims.
How to object: Email us at support@luckvines.com stating your objection and the reasons for it.
8. Rights Related to Automated Decision-Making and Profiling
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you.
We do not currently use automated decision-making or profiling. If this changes, we will update our policies and inform you of your rights in this area.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the following methods:
Send your request to: support@luckvines.com
Include the following information in your request:
- Your full name
- Your email address
- The specific right you wish to exercise
- Any relevant details about your request
- Proof of identity (if required for security purposes)
Postal Mail
You can also send written requests to:
luckvines.com
GDPR Data Protection
38 Riverside Avenue
Galway, Ireland
Response Timeframes
We will respond to your requests within one month of receipt. In complex cases or if we receive multiple requests from you, we may extend this period by two additional months. We will inform you of any such extension within one month of receiving your request.
All requests are handled free of charge unless:
- The request is manifestly unfounded or excessive
- You request multiple copies of the same information
In such cases, we may charge a reasonable fee or refuse to act on the request.
Identity Verification
To protect your privacy and security, we may need to verify your identity before responding to your request. We may ask you to provide:
- Additional identifying information
- Proof of identity documents
- Answers to security questions
This helps ensure that personal data is not disclosed to unauthorised individuals.
Withdrawing Consent
Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.
To withdraw consent, email us at support@luckvines.com with "Withdraw Consent" in the subject line, specifying which consent you wish to withdraw.
Managing Cookie Preferences
You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block cookies from specific websites
- Block all cookies
- Delete all cookies when you close your browser
Please note that blocking or deleting cookies may affect your ability to use certain features of our website.
Data Protection Officer
If you have questions specifically about data protection or wish to contact our Data Protection Officer, please email: support@luckvines.com
Mark your email "Attention: Data Protection Officer" to ensure it reaches the appropriate person.
Right to Lodge a Complaint
If you are not satisfied with how we have handled your personal data or responded to your requests, you have the right to lodge a complaint with the supervisory authority.
Irish Data Protection Commission
In Ireland, the supervisory authority is the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Phone: +353 57 868 4800 or +353 (0)761 104 800
Email: info@dataprotection.ie
Website: www.dataprotection.ie
Making a Complaint
You can make a complaint to the Data Protection Commission if you believe:
- Your personal data has been misused or mishandled
- Your rights under GDPR have been violated
- We have not responded appropriately to your requests
Before lodging a formal complaint, we encourage you to contact us directly so we can attempt to resolve your concerns.
International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data. These safeguards include:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions recognising countries with equivalent data protection
- Binding Corporate Rules for transfers within corporate groups
You can request more information about the safeguards we use for international transfers by contacting us.
Data Breach Notification
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
Our notification will include:
- The nature of the breach
- The likely consequences
- The measures we have taken or propose to take
- Contact details for further information
Children's Data
Our services are not intended for individuals under 18 years of age. We do not knowingly collect or process personal data from children.
If we become aware that we have collected data from a child under 18, we will take immediate steps to delete that information. If you believe we have collected data from a child, please contact us immediately.
Updates to This Information
We may update this GDPR rights information from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated information on our website and updating the "Last Updated" date.
Additional Resources
For more information about GDPR and your data protection rights, visit:
Contact Us
If you have any questions about your GDPR rights or our data protection practices, please contact us:
Primary Email: support@luckvines.com
Alternative Email: info@luckvines.com
Postal Address:
luckvines.com
38 Riverside Avenue
Galway, Ireland
Our Commitment
At luckvines.com, we are committed to:
- Protecting your personal data with appropriate security measures
- Being transparent about how we use your data
- Respecting your rights under GDPR
- Responding promptly to your requests and concerns
- Continuously improving our data protection practices
Your trust is important to us, and we take our data protection responsibilities seriously.