B. YOU MAY EXERCISE THE FOLLOWING RIGHTS.
– Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected or disclosed by us; (2) purposes for which categories of Personal Information are collected by us; (3) categories of sources from which we collect Personal Information; and (4) specific pieces of Personal Information we have collected. Prior to disclosing the information, we are required to verify that the individual making the request is indeed the individual to whom the information relates. Once we receive a verifiable request, we must disclose to you the information requested for the twelve months preceding your request.
– Right to Delete. Subject to certain exceptions, you have the option to delete Personal data about you that we have collected from you.
Verification. Requests for access to or deletion of Personal data are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations.
Right to Equal Service and Price. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights.
Submit Requests. For other requests or to authorize an agent to make a request on your behalf, you can also reach contact us (see Section 9).
2. SHARING OF YOUR INFORMATION
We do not sell your personal data to any third party.
We use secure methods to transmit personal data.
Data we collect may also be processed by staff operating outside the EEA who work with us or for us, or for one of our affiliated companies, suppliers, or service providers
Recipients of your personal data: N/A
2.1 OUR AFFILIATES
2.2 THIRD PARTY RECIPIENTS
We may share your personal data with third parties who are controllers of your personal data as follows:
- Where required by law and similar mandatory disclosures.
- In connection with a merger, sale, or asset transfer.
- Other third parties for whom we have obtained your permission or consent to disclose your Personal data.
2.3 SERVICE PROVIDERS THAT WE MAY INVOLVE FOR THE PURPOSES DESCRIBED IN ABOVE SECTIONS
Our service providers process your personal data for data analytics/ marketing and advertising of our products and services to you. Our advertising and promotional agencies and consultants carry out marketing campaigns or email mailings on our behalf or analyze or evaluate our data collection process or customer service fulfilment, such as website hosting companies. We will ensure that any service provider engaged by us is bound to comply with data protection obligations and process your personal data only on documented instructions from us and do not use it for their own purposes.
2.4 LAW ENFORCEMENT OR GOVERNMENT BODIES
We may disclose your personal data as permitted by law to investigate, prevent or take action regarding illegal activities, suspected fraud, violation of our intellectual property rights, situations involving potential threats to the physical safety of any person, violation of our Terms of Service or other agreements, or as required by law.
3. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA AND THE UK (EEA)
If and when transferring your personal data outside the EEA and the UK, (which consists of EU member states and Iceland, Lichtenstein and Norway), we will only do so using one of the following safeguards:
- the transfer is to a non-EEA country which has an adequacy decision by the EU Commission;
- the transfer is covered by a contractual agreement, which covers the GDPR requirements relating to transfers to countries outside the EEA and the UK;
- the transfer is to an organization which has Binding Corporate Rules approved by an EU data protection authority; or
- the transfer is to an organization in the US that is EU-US Privacy Shield certified.
You may request a copy of any relevant document in relation to transfers of your personal data outside the EEA and the UK by contacting us using the contact details in section 9 below.
4. YOUR RIGHTS
When prescribed by local regulations, you are entitled to obtain information from us on how we handle your personal data, to see copies of all personal data held by us and to request that your personal data is amended, corrected, or deleted from our systems.
You can also ask us to transfer a copy of your personal data that you provided to us, limit, restrict or object to the processing of your data.
We do not carry out any decision-making based solely on automated processing, including profiling.
If you gave us your consent to use your data, e.g., so that we can use your electronic contact details to send you marketing communications, you can withdraw your consent at any time. Please note that even if you withdraw your consent, we can still rely on the consent you gave as the lawful basis for processing your personal data before you withdrew your consent.
You can object to our use of your personal data where we stated we rely on our legitimate business interests to do so. We explained the legitimate interests we rely on in sections ‘Why do we collect your personal data and what are our lawful bases for it?’ above.
If you would like to exercise any of your above rights, contact us using the contact details in section 9 below.
Our website is designed to appeal to adults only. We do not knowingly solicit any information from children or people under the legal drinking age, nor do we knowingly market or otherwise target our websites or its products or services to children or people under the legal drinking age.
If we become aware that a visitor to our websites is a child or under the Legal Drinking Age in the country or other territory in which he or she is located at the relevant time and has registered without verifiable parental consent, we will remove his or her personal data from our files.
7. RETENTION PERIOD
We will keep and Process your Personal Data only for as long as is necessary for the purposes for which it was collected in connection with your relationship with us, unless we have a legal right or obligation to retain the data for a longer period, or the data is necessary for the establishment, exercise, or defense of legal claims.
8. INFORMATION ABOUT US
For the purpose of the General Data Protection Regulation 2016/679 and any implementing legislation (the “GDPR”), Drink Good Spirits, 200 Continental Drive, Newark, Delaware 19713, will be the data controller responsible for any personal data about you.
If you are a customer or a potential customer of one or more of our EU entities, or an individual related to one of our existing or potential customers, the relevant data controller is the DGS entity which has contractual or business relations with our customer. If you contract with our EU entities in any other capacity (for example, to provide your services), your data controller will be the DGS entity with which you contract. If you are a visitor to our premises or events, the relevant controller is the EU entity that is located in that office or hosting the event.
For cross-border matters, and in relation to personal data shared by several of our EU entities, the relevant entities may operate as joint controllers that will collaborate with one another, as necessary, to comply with our obligations under the GDPR, including to address requests by data subjects to exercise their rights under the GDPR, as set out in Section 4 above. Solely for purposes of compliance with the GDPR, the main establishment for all of our EU entities is c/o Drink Good Spirits LLC, 200 Continental Drive, Newark, Delaware 19713.
If you need to communicate with us, please contact us as explained in section 9.
9. CONTACT DETAILS