GDPR - Your Data Protection Rights

Last Updated: January 1, 2025

1. Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives individuals in the European Union control over their personal data. At luckvines.com, we are committed to protecting your privacy and ensuring full compliance with GDPR.

This page explains your rights under GDPR and how you can exercise them.

2. Data Controller Information

The data controller responsible for processing your personal data is:

luckvines.com
151 Victoria Street
Fermoy, Co. Cork
Ireland

Contact Email: support@luckvines.com

3. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

3.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes:

  • What personal data we process
  • Why we process it
  • Who we share it with
  • How long we keep it
  • Where it came from

We will provide this information free of charge within 30 days of your request.

3.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. If you believe any information we hold about you is incorrect, you can request that we update it.

We will correct inaccurate data within 30 days and notify any third parties with whom we shared the data.

3.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data was processed unlawfully
  • Deletion is required to comply with a legal obligation

Please note that we may need to retain certain data for legal or legitimate business purposes.

3.4 Right to Restriction of Processing

You have the right to limit how we use your personal data in certain situations:

  • You contest the accuracy of the data
  • Processing is unlawful but you prefer restriction over deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing and verification is pending

When processing is restricted, we can store the data but not use it without your consent.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.

This right applies when:

  • Processing is based on your consent or contract
  • Processing is carried out by automated means

3.6 Right to Object

You have the right to object to processing of your personal data in certain circumstances:

  • Processing based on legitimate interests or public interest
  • Direct marketing (including profiling)
  • Processing for research or statistical purposes

When you object to direct marketing, we will stop processing your data for that purpose immediately.

3.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

We do not currently use automated decision-making systems that significantly affect users. If this changes, we will update this page and notify affected users.

3.8 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

You can withdraw consent by:

  • Adjusting your account settings
  • Clicking unsubscribe links in emails
  • Contacting us at support@luckvines.com

3.9 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

In Ireland, the supervisory authority is:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Phone: +353 (0)761 104 800
Email: info@dataprotection.ie
Website: www.dataprotection.ie

4. How to Exercise Your Rights

To exercise any of your GDPR rights, contact us via:

Information We Need

To process your request efficiently, please provide:

  • Your full name
  • Email address associated with your account
  • Specific right you wish to exercise
  • Any relevant details about your request
  • Proof of identity (if required for security)

Response Time

We will respond to your request within 30 days. In complex cases, we may extend this period by up to 60 additional days, but we will inform you of any delay and the reasons for it.

Verification

To protect your privacy, we may need to verify your identity before processing certain requests. We will request only the minimum information necessary for verification.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

5.1 Consent

We process data based on your explicit consent for:

  • Marketing communications
  • Optional features and services
  • Non-essential cookies

5.2 Contract

We process data necessary to provide our services under our Terms of Use:

  • Account creation and management
  • Game functionality
  • Payment processing
  • Customer support

5.3 Legitimate Interests

We process data based on legitimate business interests:

  • Fraud prevention and security
  • Service improvement and analytics
  • Network and information security
  • Internal administration

5.4 Legal Obligation

We process data to comply with legal requirements:

  • Tax and accounting obligations
  • Regulatory compliance
  • Law enforcement requests

6. Data We Collect

We collect and process the following categories of personal data:

6.1 Identity Data

  • Username
  • Email address
  • Age verification information

6.2 Contact Data

  • Email address
  • Communication preferences

6.3 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Cookie data

6.4 Usage Data

  • Pages visited
  • Time spent on site
  • Game progress and statistics
  • Feature usage

6.5 Transaction Data

  • Purchase history
  • Payment method (processed by third parties)

7. Data Sharing

We share your personal data only in the following circumstances:

Service Providers

We share data with trusted third-party service providers who help us operate our business:

  • Hosting and infrastructure providers
  • Payment processors
  • Analytics services
  • Customer support tools

All service providers are bound by data processing agreements and must comply with GDPR.

Legal Requirements

We may disclose data when required by law or to:

  • Comply with legal obligations
  • Respond to lawful requests from authorities
  • Protect our rights and property
  • Prevent fraud or security threats

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions for countries with equivalent protection
  • Privacy Shield certification (where applicable)

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in our Privacy Policy:

  • Account data: Duration of account plus 90 days after closure
  • Transaction records: 7 years for tax and accounting purposes
  • Usage data: Up to 2 years for analytics
  • Marketing data: Until you withdraw consent or 3 years of inactivity

After retention periods expire, we securely delete or anonymize your data.

10. Cookie Management

You can manage cookies through:

Our Cookie Consent Tool

Use our cookie banner to accept or reject non-essential cookies. You can change your preferences at any time.

Browser Settings

Most browsers allow you to:

  • View and delete cookies
  • Block third-party cookies
  • Block all cookies (may affect functionality)
  • Clear cookies when closing browser

Opt-Out Tools

You can opt out of certain tracking through:

11. Children's Data

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If we learn that we have collected data from a child, we will delete it immediately.

If you believe a child has provided us with personal data, contact us at support@luckvines.com

12. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (SSL/TLS)
  • Encryption of sensitive data at rest
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection
  • Incident response procedures

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours.

13. Updates to This Page

We may update this GDPR information page to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or prominent notice on our website.

14. Contact Us

For questions about GDPR or to exercise your rights, contact us:

Email: support@luckvines.com
Subject: GDPR Enquiry
Address: 151 Victoria Street, Fermoy, Co. Cork, Ireland

15. Additional Resources

For more information about GDPR and data protection: