Privacy &
Protection

The controller that determines the purposes and means of processing your personal data is:

• FutureMind s. r. o.
• Registered office: Trieda KVP 1, 040 23 Košice – mestská časť Sídlisko KVP, Slovak Republic
• IČO: 55 475 728
• DIČ: 2121999946
• Contact for data protection matters: privacy@vulgarspirit.com

The controller has not appointed a data protection officer (DPO), as it is not required to do so by law. For all matters concerning the processing of personal data, you can contact us at privacy@vulgarspirit.com.

Depending on your relationship with us, we process in particular the following categories of personal data:

• Identification and contact data: first name, surname, e-mail, telephone number, delivery and billing address.
• Order and payment data: order content, order number, purchase history, and data needed to process payment (the payment itself is processed by the payment service provider).
• Account and profile data: login credentials, nickname, avatar, profile content, and linked QR sigils.
• Technical data: IP address, browser and device type, website usage data, and cookies.
• Communication: the content of messages you send us.

We process your personal data for the following purposes and on the following legal bases under Art. 6 GDPR:

• Handling the order and performing the purchase contract, including delivery and complaints — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Keeping accounts and fulfilling tax and other legal obligations — legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Maintaining the user account and providing digital functions (QR sigil, profile) — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Improving and securing the website and preventing fraud — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Sending marketing messages (newsletter) and using analytics cookies — legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We may disclose personal data to service providers who process it on our behalf as processors on the basis of a personal data processing agreement. These include in particular:

• Providers of hosting and the database for the web application (Vercel Inc., Supabase Inc.).
• Provider of e-mail services for sending transactional and marketing e-mails (Resend).
• Payment service provider for processing payments.
• Transport and delivery companies.
• Web analytics provider.

Personal data may also be provided to public authorities where required by law.

Some of our service providers are based outside the European Economic Area (notably in the USA). In such cases, the transfer is safeguarded by appropriate safeguards within the meaning of Art. 46 GDPR, in particular standard contractual clauses approved by the European Commission, or on the basis of an adequacy decision (for example, the EU–U.S. Data Privacy Framework).

We retain personal data only for the period necessary to achieve the purpose of the processing:

• Data related to the order and tax documents — for the period required by law (accounting documents generally 10 years).
• Account data — for the duration of the account, or until it is cancelled.
• Data processed on the basis of consent (marketing) — until consent is withdrawn.
• Technical and analytics data — for the period necessary for the given purpose, generally no more than 26 months.

As a data subject, you have the following rights in connection with the processing of your personal data:

• The right of access to your personal data and to a copy of it.
• The right to rectification of inaccurate data and completion of incomplete data.
• The right to erasure (the "right to be forgotten") under the conditions set out in Art. 17 GDPR.
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest.
• The right to withdraw consent at any time, without affecting the lawfulness of processing prior to its withdrawal.

You can exercise your rights by e-mail at privacy@vulgarspirit.com. We will respond to your request without undue delay, no later than within one month.

If you believe that the processing of your personal data has violated legal regulations, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, web:dataprotection.gov.sk.

Our website uses cookies and similar technologies. Detailed information can be found in the Cookie Policy document atvulgarspirit.com/cookies.

In processing your personal data, there is no automated individual decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

We may update these principles from time to time. The current version is always available on this page with the date of the last update indicated. If you have any questions, contact us at privacy@vulgarspirit.com.