Privacy Policy

This Privacy Policy explains how iVino, operated by Carlo Lolli Ceroni, IČO 08642168, with registered office at Pražská 3, 301 00 Plzeň, Czech Republic (“iVino”, “we”, “us”), collects, uses and protects personal data through the iVino website, platform and related services.

iVino is a software platform designed for hospitality venues. The platform combines digital menus, reservation management, customer relationship tools and customer communications.

For privacy-related questions or requests, you can contact us at vineriasymposio@gmail.com.

1. Who this Privacy Policy applies to

This Privacy Policy applies to:

• hospitality businesses and their staff using or evaluating iVino;
• customers making reservations through an iVino-powered booking system;
• users interacting with digital menus, ratings or other iVino features;
• visitors to the iVino website;
• individuals receiving transactional communications through services integrated with iVino, including email and WhatsApp.

Depending on the specific service, iVino may process personal data either on its own behalf or on behalf of a hospitality venue using the platform.

2. Personal data we may collect

We may collect information that you provide directly to us or to a venue using iVino.

This may include your name, surname, email address, telephone number, reservation date and time, number of guests, reservation notes or special requests, venue visit and reservation history, account information, language preferences, ratings, product or wine preferences, feedback, and communications related to reservations or customer service.

When businesses use iVino, we may also collect business contact details, staff account information and information necessary to administer the business relationship.

We may additionally collect limited technical information such as device type, browser, IP address, timestamps, referral information and information required to maintain the security and operation of the platform.

3. Digital menu and customer preferences

When a user interacts with an iVino digital menu, the platform may record information such as ratings, preferences, saved items or other interactions.

This information can be used to improve the customer experience, provide more relevant recommendations, understand customer preferences and help participating venues improve their service.

Where marketing communications or personalized promotions require consent, they will only be used when the appropriate consent has been obtained.

4. Reservations

When you make a reservation through an iVino-powered reservation system, we may process information necessary to create and manage the booking.

This may include your name, contact details, reservation date and time, number of guests, notes, booking status and communication history.

This information may be shared with the venue where the reservation is made because the venue needs it to manage your booking and provide its services.

iVino may retain a technical and customer relationship record associated with the reservation where necessary to operate the platform, maintain booking history, prevent errors or duplicate customer records and provide future services requested by the user.

5. Email and WhatsApp communications

iVino allows participating venues to send transactional communications related to reservations and customer service.

These may include reservation confirmations, booking changes, reminders, cancellations and other operational information.

For email communications, iVino may use third-party transactional email providers.

For WhatsApp communications, iVino uses the WhatsApp Business Platform provided by Meta. When WhatsApp is used, information necessary to deliver the message, such as the recipient's telephone number and message template information, may be transmitted to Meta.

We may also receive technical delivery information such as whether a message was sent, delivered, read or failed.

Transactional reservation communications are separate from marketing communications. We will not use a customer's telephone number for promotional WhatsApp messages unless there is an appropriate legal basis or consent to do so.

Meta and WhatsApp may process information according to their own privacy policies and terms.

6. Why we process personal data

We process personal data where necessary to provide and operate iVino services, manage reservations, provide digital menu functionality, communicate with customers, maintain customer accounts, improve the platform, prevent fraud or misuse, provide customer support and comply with legal obligations.

Depending on the circumstances, our legal basis under applicable data protection law may include performance of a contract, legitimate interests, compliance with a legal obligation or consent.

Where processing is based on consent, you may withdraw that consent at any time.

7. Relationship between iVino and participating venues

Hospitality venues using iVino remain responsible for their own relationship with their customers and for their use of personal data.

For certain services, iVino processes personal data on behalf of the participating venue in order to provide the platform.

Where a user creates a direct iVino account, provides preferences directly to iVino or otherwise establishes a direct relationship with the iVino platform, iVino may process that information as an independent data controller for the purposes described in this Privacy Policy.

A participating venue does not automatically receive access to information about a customer's relationship with other venues using iVino.

8. Service providers

We use carefully selected technology providers to operate iVino.

These may include infrastructure, hosting, database, authentication, email and communications providers such as Supabase, Vercel, Resend and Meta / WhatsApp.

These providers may process personal data only to the extent necessary to provide their respective services, subject to their contractual and legal obligations.

We do not sell personal data to advertisers or other third parties.

9. International data transfers

Some technology providers used by iVino may process information outside the European Economic Area.

Where required, we use appropriate legal safeguards for international transfers of personal data, such as adequacy decisions, Standard Contractual Clauses or other mechanisms permitted under applicable data protection law.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on the type of information, the relationship with the relevant venue or customer, contractual requirements, legitimate business needs and applicable legal obligations.

Reservation and communication records may be retained for a reasonable period to maintain booking history, customer service records, security and operational integrity.

Where a user requests deletion and there is no legal or legitimate reason requiring continued retention, the relevant personal data will be deleted or anonymized.

11. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

Access to venue and customer information is restricted according to user roles and permissions.

No online system can guarantee absolute security, but we continuously work to maintain appropriate safeguards for the information processed through iVino.

12. Your privacy rights

If applicable under the GDPR or other data protection laws, you may have the right to request access to your personal data, correction of inaccurate information, deletion of your data, restriction of processing, data portability, objection to certain processing and withdrawal of consent.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

13. Data deletion requests

You may request deletion of personal data associated with iVino by contacting:

Please include enough information for us to identify the relevant account, reservation or customer record.

We may need to verify your identity before completing a deletion request.

Where information must be retained for legal, security or contractual reasons, we will explain this where applicable.

This procedure also applies to personal data processed through integrations with Meta and WhatsApp.

14. Cookies and website technologies

The iVino website may use essential cookies or similar technologies required for security, authentication and basic website functionality.

If we introduce analytics, advertising or other non-essential tracking technologies, this Privacy Policy and our cookie management mechanisms will be updated where required.

15. Children

iVino is intended for hospitality businesses and their customers and is not designed as a service directed specifically at children.

We do not knowingly collect personal data from children where such processing would not be permitted by applicable law.

16. Changes to this Privacy Policy

We may update this Privacy Policy as iVino develops or as legal and technical requirements change.

The latest version will always be available on this page, together with the date of the most recent update.

17. Contact us

For questions about this Privacy Policy or the processing of personal data, please contact: