Collection, processing and storage of personal data

1. Definitions

GDPR – the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

SERVICES means the sale of wine, the organisation and running of tastings, tours of the production facility, and events held on the premises of the wine bar, tasting room and the adjoining outdoor area.

PERSONAL DATA / PERSONAL INFORMATION means any information relating to an identified or identifiable living person.

CONTROLLER means the natural or legal person who determines the purposes and means of processing personal data and is responsible for such processing in accordance with the GDPR and applicable laws.

PROCESSOR means the natural or legal person who processes personal data on behalf of the Controller.

SUB-PROCESSOR means the natural or legal person who processes personal data on behalf of the Controller, in accordance with a contract and the instructions of the Controller.

YOU refers to the natural person whose personal data is collected and processed by OPG Ivan Damjanić.

2. About OPG Ivan Damjanić

We, OPG Ivan Damjanić, are responsible as the Controller for all personal data you provide to us in connection with the use of our Services.

In providing our services to visitors, customers and guests, we act as the Controller of personal data for the purposes described in this Privacy Notice.

Contact details:
OPG Ivan Damjanić
Fuškulin 50, 52440 Poreč, Croatia
OIB: 84644821467
E-mail: info@damjanic.eu
Web: www.damjanic.eu

3. Collection, processing and storage of personal data

We collect only the basic and necessary personal data required to provide our services, to communicate with you and to meet our legal obligations.

We may collect personal data directly from you or indirectly, in the following cases:

  • When you contact us by e-mail or telephone with an enquiry, or to book a tasting, tour or event.
  • When you contact us or communicate with us via social media.
  • When you visit our website – through third-party services (e.g. Google Analytics).
  • When you visit our premises (wine bar, tasting room, events) and leave personal data for a booking or visitor record.

We collect only the data necessary for the stated purposes.

3.1. Enquiries, bookings and contact by e-mail or telephone

Personal data we collect: first name, last name, e-mail address, telephone number, number of people, date and time of the visit, and any special requests (e.g. dietary notes, tasting preferences).

Legal basis: performance of a contract (Article 6(1)(b) GDPR) and legitimate interest (Article 6(1)(f) GDPR).

Retention period: if the booking is not realised, we delete the data within 6 months of the last communication.

3.2. Communication via social media

Personal data we may collect: first and last name, username, e-mail address, telephone number, content of messages or comments.

Legal basis: consent (Article 6(1)(a) GDPR) and legitimate interest (Article 6(1)(f) GDPR).

Retention period: until consent is withdrawn or an objection to processing is raised.

Official social media pages: Facebook, Instagram

3.3. Website visits and cookies (Google Analytics)

Personal data we collect: IP address, browser type, operating system, pages visited and the order of visits, time spent on the site. The data is collected anonymously and used solely to analyse and improve the user experience.

Legal basis: consent (Article 6(1)(a) GDPR).

Retention period: until consent is withdrawn – see our Cookie Policy for more information.

3.4. Participation in events and tastings

When organising events or tastings, we may collect participant data for record-keeping, communication and safety purposes (e.g. first name, last name, contact details, event photographs with consent).

Legal basis: performance of a contract and/or consent.

Retention period: 12 months after the event, unless you request earlier deletion or withdraw your consent.

4. Who we share personal data with

We may share your personal data with:

  • Sub-processors (e.g. IT companies, web administrators, marketing and analytics providers);
  • Service providers for website maintenance, e-mail systems, bookings and payments;
  • Public authorities where required by law (e.g. tax authorities, law enforcement).

Third parties have no access to your personal data unless it is necessary for the provision of a specific service or required by law.

5. Transfer of personal data to third countries

If we use providers based outside the European Economic Area (e.g. social networks), your personal data may be transferred to third countries, including the USA. Such transfers are carried out in accordance with applicable GDPR standards and safeguards.

6. Your rights

Under the GDPR you have the following rights:

  • the right to be informed about the processing of your personal data,
  • the right of access to your personal data,
  • the right to rectification of inaccurate data,
  • the right to erasure (the „right to be forgotten”),
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing,
  • the right to withdraw consent,
  • the right to lodge a complaint with a supervisory authority.

6.1. Right to object

You have the right to object to the use of your data in the following cases:

  • where processing is based on our legitimate interest,
  • where the data is used for direct marketing.

In the event of an objection to direct marketing, we stop processing immediately.

6.2. How to exercise your rights

For any questions or requests regarding the processing of your personal data, please contact us by e-mail: info@damjanic.eu

6.3. Right to lodge a complaint with a supervisory authority

If you believe your data is being processed contrary to the regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): www.azop.hr

7. Changes to this Privacy Notice

This Privacy Notice may be updated from time to time. The most recent version is always available on our website.

Last updated: November 2025.