Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is WineBiz Network, owned and operated by Roland Hahn, based in Austria. For any privacy-related inquiries, please contact us at info@winebiz.net.

2. Data We Collect

• Account information (name, email address, company name, country)
• Profile data (role as importer or winery, portfolio details)
• Usage data (pages visited, features used, timestamps)
• Communication data (messages sent through the platform)
• Payment data (processed securely via Stripe – we do not store card details)

3. Purpose of Processing

• Providing and maintaining the WineBiz Network platform
• Matching wineries with importers through Wine Tenders
• Processing payments for tender entry fees
• Sending transactional emails (account confirmation, tender updates)
• Improving our services through anonymized usage analytics

4. Legal Basis

We process your data based on: (a) contractual necessity – to provide our platform services; (b) legitimate interest – to improve our services and prevent fraud; (c) consent – for marketing communications, which you can withdraw at any time.

5. Data Sharing

We do not sell your personal data. We share data only with: (a) service providers (Supabase for database hosting, Vercel for web hosting, Stripe for payments, Brevo/Resend for emails) – all EU-compliant; (b) other platform users only as necessary for tender matching (e.g., winery submissions are shared with the relevant importer).

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymized usage data may be retained for analytics purposes. Payment records are retained as required by Austrian tax law.

7. Your Rights (GDPR)

• Right of access – request a copy of your personal data
• Right to rectification – correct inaccurate data
• Right to erasure – request deletion of your data
• Right to data portability – receive your data in a structured format
• Right to object – object to processing based on legitimate interest
• Right to withdraw consent – for marketing communications at any time

8. Cookies

We use essential cookies required for platform functionality (authentication, session management). We do not use advertising or tracking cookies. Analytics are performed using anonymized, cookie-free methods where possible.

9. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure database hosting in the EU (Frankfurt), row-level security policies, and regular security reviews.

10. Contact

For privacy inquiries, data access requests, or complaints, contact us at info@winebiz.net. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).