This policy applies to vinodonia.mk, ticket sales for Vinodonia 2026 and requests for corporate offers.
1. Organiser and contact
The personal data controller is the Association of Sommeliers of the Republic of Macedonia BRIKS Skopje (Здружение на сомелиери на Република Македонија БРИКС Скопје). For privacy enquiries and support: info@vinodonia.mk.
2. Data and purposes
Purchases involve processing your first name, surname, email address, optional phone number, selected day, ticket type and quantity, payment status and QR code usage records. The purposes are to fulfil your purchase, deliver the HTML/PDF ticket, manage admission and provide support. For corporate offers, we process the details submitted in the form.
3. Basis for processing
Order data is processed to perform the contract and meet legal obligations. Corporate enquiries are processed to prepare the requested offer. Separate marketing messages require an appropriate legal basis; a purchase alone does not constitute consent to marketing.
4. Payment and technical services
Card details are entered into the Cpay payment system. The online shop processes the payment status and reference, rather than your card number or CVV. The service uses hosting, WooCommerce, FooEvents and Brevo for email delivery. Technical providers may process data necessary for the service; information about recipients and any transfers to other countries can be requested using the contact above.
5. Cookies and external content
The cart, session and checkout use essential cookies. The embedded YouTube player connects to Google/YouTube and may process your IP address and technical data. External social profiles have their own privacy rules. You can change cookie settings in your browser; blocking essential cookies may prevent checkout from working.
6. Retention and protection
The retention period depends on the purpose: processing the order, delivering the event, handling requests and meeting statutory record-keeping obligations. Data is not retained longer than necessary for these purposes. You may request information about the retention period applicable to a specific record at the contact email address.
Access controls and technical and organisational measures are applied to protect personal data.
7. Your rights
You may request access, rectification, erasure or restriction, and submit an objection, subject to the applicable conditions. Records required by law may be retained. You may also contact the Personal Data Protection Agency.