Privacy Policy

1. Data controller

The data controller for personal data collected through Bottiglia is Leisure Media Group, Copenhagen, Denmark. You can contact us at info@leisuretalk.dk.

2. What data we collect

• Account data — your name and email address when you register.
• Order data — wines selected, quantities, shipping address, and order status when you place an order.
• Contact data — messages you send via the contact form.
• Browsing behaviour — pages visited and wines viewed. This data is anonymous and aggregated and is used only to improve the platform.
• Cookies — we use a session cookie for authentication and a cookie to remember your age verification. We do not use tracking or advertising cookies.

We do not collect payment card details. Any payments made directly to producers are handled outside the Bottiglia platform.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR:

• Contract — to process your orders and deliver the service you have requested.
• Legitimate interest — to improve platform functionality, detect fraud, and communicate about your orders.
• Legal obligation — where applicable law requires us to retain or disclose data.

4. How we use your data

• To process and forward your orders to producers.
• To send transactional emails (order confirmations, account welcome).
• To respond to support and contact enquiries.
• To improve the platform based on aggregated, anonymised usage data.
• To detect and prevent fraud or misuse.

We do not sell your data. We do not use your data for advertising or profiling.

5. Third-party services

Bottiglia works with a small number of trusted third-party providers. Each processes data only as necessary to deliver the service:

6. Data retention

We retain your account data for as long as your account is active. Order data is retained for 5 years for accounting and legal compliance purposes. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your rights under GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data (subject to legal retention obligations).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Complaint — lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

To exercise any of these rights, email info@leisuretalk.dk. We will respond within 30 days.

8. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects the most recent update.

9. Contact

For privacy-related questions or requests, email info@leisuretalk.dk. We aim to respond within 5 business days.