Wine & Deli Privacy Policy

Ensuring the confidentiality of your personal data is one of the essential concerns of SC ISO PLUS
NATURAL PRODUCTS RO S.R.L., as data operator. This document is intended to inform you about the
processing of your personal data, in the context of using our wine and deli Wine & Deli website:

https://www.isopluswines.com/

One of the key values of Wine & Deli is the trust our customers have. For this reason, we would never
exploit or misuse this trust. We respect your privacy. The objective of Wine & Deli is to help our clients
get to know our products and to make purchases as easily, safely and satisfactorily as possible.

We would also, of course, like to contact you from time to time to inform and explain some of the offers
we have, to help you choose more goods to purchase, or to request more information from you so as to
personalize and improve your visits to our website.

We also use this information for statistical purposes to improve our competitiveness. If any personal
details are not needed, we will tell you so, or if you are no longer interested in receiving any part of our
information, tell us and we will stop sending it to you.

Who oversees handling my personal details?
All the personal details collected by Wine & Deli are compiled in databases under the responsibility of
ISO PLUS NATURAL PRODUCTS RO S.R.L.

S.C. ISO PLUS NATURAL PRODUCTS RO S.R.L., a company incorporated and operating in accordance with
the laws of Romania, having its headquarters in Bucharest, 1st District, soseaua Bucuresti - Târgoviste
no. 11A, Ground Floor, Room 1, Romania, ZIP Code 013502, registered with the Trade Register under no.
J40/3431/2014, with Tax ID RO32950068, account RO11 BRMA 0999 1000 6395 3066 - opened with Bank
- EXIM, represented by Mr. KOTSIOPOULOS GEORGIOS - as Director.

The personal details we collect will be processed in accordance with Organic Law 3/2018, of December 5,
regarding data protection and guarantee of digital rights, and Regulation 2016/679 of the European
Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulations
(GDPR).

What kind of details do we collect?
We collect two kinds of personal details through the pages of wine and deli Wine & Deli website: personal
details provided directly by the customer, and details collected automatically as the customer browses
our webpage. Personal details are collected confidentially and directly from our customers via the
different forms to fill in on our website or via messages customers send to one of our contact addresses.

These details include: email address, name and surnames, delivery and billing addresses, contact phone
number, bank card details, date of birth, and the password the customer chooses.

The automatically-collected data includes the following: IP address; device (computer, mobile phone,
tablet), operating system, and browser used; and visitors log and browsing history via our own or third-
party cookies.

What categories of personal data do we process?
If you are a client of the Wine&Deli website: https://www.isopluswines.com/, ISO PLUS NATURAL
PRODUCTS RO S.R.L. will process your personal data, such as: name, surname, telephone, e-mail address,
billing address, delivery address, date of birth, data related to how you use our site (user preferences,
products saved as favorites), as well as any other categories of data that you provide us directly in the
context of creating your account of the user, of placing an order through our website or in any other way
resulting from the use of our website.

If you are a visitor of the wine and deli business website: https://www.isopluswines.com/, ISO PLUS
NATURAL PRODUCTS RO S.R.L. will process your personal data that you provide directly in the context of
using our website, such as the data you provide us by completing the contact form.

The purposes and grounds of personal data processing

Categories of persons concerned: the personal data processed by the company as an operator are mainly
identification and contact data of consumers, customers and potential customers, within the sales and
marketing activities carried out by the company.

If you are a customer of ISO PLUS NATURAL PRODUCTS RO S.R.L., the processing of your personal data is
carried out as follows:

- For the development of the contractual relationship between you and ISO PLUS NATURAL

PRODUCTS RO S.R.L., respectively for the receipt, validation, dispatch and invoicing of the order
or orders placed, information on the status of the order, organization of the return of ordered
products, etc., according to GDPR Art. 6.1, lit. B.

The processing for this purpose is based on the performance of the contract between you and ISO PLUS
NATURAL PRODUCTS RO S.R.L., as defined in the Terms and Conditions section. The provision of personal
data is necessary for the execution of this contract. Refusal to provide data may lead to the impossibility
of carrying out contractual relations between you and ISO PLUS NATURAL PRODUCTS RO S.R.L.

- For the fulfillment of the legal obligations of ISO PLUS NATURAL PRODUCTS RO S.R.L., in the

context of the services provided through the website, including the obligations in fiscal matters,
but also in terms of archiving

The basis for this processing is the fulfillment of legal obligations, according to GDPR Art. 6.1 letter. C.
The provision of personal data is necessary for the execution of this contract. Refusal to provide data
may lead to the impossibility of carrying out contractual relations between you and ISO PLUS NATURAL
PRODUCTS RO S.R.L.

- For general, marketing purposes and may include, without being limited to: sending information

through newsletters, direct marketing, promotional offers, loyalty cards, promotion and
advertising activities through the Facebook or Google networks, anonymized traffic analysis or
user preferences on the company's wine and deli website (https://www.isopluswines.com/), etc.
Depending on its specificity, the purpose is declared in detail and expressed specifically: for
participation in a promotional campaign, for subsequent communication through direct
marketing, etc.

The legal basis for the processing of personal data is, according to GDPR, Art 6. Point 1.a – Consent of the
person concerned, with all conditions and derived implications: information, period limitation, limitation
of data categories, access to exercise rights, Point 1.b - the execution of a contract to which the data
subject is a party or to take steps at the request of the data subject before concluding a contract.
The processing period will be limited, determined and specified for each processing, according to the
registration in the processing record register.

To unsubscribe from receiving such commercial communications, you can use the option at the end of
each e-mail/SMS containing commercial communications. In addition, you can unsubscribe by accessing
the My Account - Newsletter - Subscribe / Unsubscribe newsletter section.
If you are a visitor of the website https://www.isopluswines.com/, the processing of your personal data
is carried out as follows:

- For marketing activities, respectively for the transmission, by means of remote communication

means (e-mail, SMS), of commercial communications regarding the products and services
offered by ISO PLUS NATURAL PRODUCTS RO S.R.L., through the wine and deli Website.

The processing of your data for this purpose is based on your consent, if you choose to provide it to us.
To unsubscribe, you can use the option displayed at the end of each e-mail that contains commercial
communications. Providing your data for this purpose is voluntary. Refusal to give us your consent for
the processing of your data for this purpose will not have negative consequences for you.
To resolve complaints, complaints and to monitor traffic and improve your experience on this website.
The processing of your data for this purpose is based on the legitimate interest of ISO PLUS NATURAL
PRODUCTS RO S.R.L. to ensure the correct functioning of the website https://www.isopluswines.com/, as
well as to permanently improve the experience of visitors, including by solving various comments,
questions or complaints. Providing your data for this purpose is voluntary. Refusal to give us your
consent for the processing of your data for this purpose will not have negative consequences for you.

What are my details used for?
We only use your email address with which you subscribed to the Wine & Deli Newsletter to send you
our newsletters with offers, promotions, new products, and other news related to the world of wine and
the goods we sell at Wine & Deli.

If you have given us your email address for us to inform you when an out-of-stock product becomes
available again, it will only be used for this purpose. Email addresses registered when you make an order,
as well as the other personal details needed to provide the service requested (i.e. process and deliver the
order following the customer's conditions), will only be used for this purpose, or to keep you informed
about the status of your orders from Wine & Deli, to inform you of any aspects related to your purchase
or subscriptions, to inform you of questions relating to your personal details (for example, possible
errors, or deadlines for personal details or services), or to inform you of updates regarding our date
protection rules.

As a supplement to our principal service — delivering your purchases — Wine & Deli will also use your
email address in a controlled and specific way to inform you of our different offers or other services. You
can choose to unsubscribe and stop receiving this information at any time without affecting the main
purpose of our communications with you.

Under no circumstances will this data be used to send publicity nor will it be given to third parties,
except for those with whom Wine & Deli has a contract necessary to provide their services, e.g.:
payment platforms or courier services. Our customer assessment and review service are also managed
by a third party (Trusted Shops). If customers decide to use this service, Wine & Deli will pass on your
email address and order reference number to this firm for them to manage your request and verify any
reviews you may wish to make. In each of these cases ISO PLUS NATURAL PRODUCTS RO S.R.L., takes all
necessary measures to guarantee the data privacy of users when this data is used by third parties.

The IP access address is used to provide each customer with the most appropriate service with regards
to their geographical location and to compile information for statistical purposes for Wine & Deli to be
able to improve our services.

We use information about some technical aspects of your browsing on Wine & Deli (device, operating
system and browser used) in order to adapt our services better to each user's needs and for statistical
purposes. Under no circumstances will this information be given to third parties.
Information compiled via browser cookies is used for these purposes (see our Cookies policy):

Data storage
Data storage and processing will be done on the website https://www.isopluswines.com/.

Personal data processing period:

ISO PLUS NATURAL PRODUCTS RO S.R.L. will process your personal data as much as it is necessary to
achieve the processing purposes mentioned above.

If you are our client, we will process your data for the entire duration of the contractual relationships
and thereafter according to the legal obligations that fall under the responsibility of ISO PLUS NATURAL
PRODUCTS RO S.R.L.

For example, in the case of financial and accounting supporting documents for which the retention
period provided by law is of 10 years from the end of the financial year during which they were drawn
up.

If you are our customer and exercise the option to delete your user account, by pressing the Delete
account button in the My Account section, ISO PLUS NATURAL PRODUCTS RO S.R.L. will interpret this
action as the option to unsubscribe from receiving commercial communications via that we keep you
informed about the products and services offered through the website. Thus, if you choose to delete
your user account, we will no longer send you e-mails and/or SMS of this kind. However, we would like
to inform you that deleting the account will not automatically delete your personal data. If you want
your personal data to stop being processed or if you want the data to be deleted, you can exercise the
rights detailed below. If you request the deletion of the account, or if you withdraw your consent for
data processing for marketing purposes, ISO PLUS NATURAL PRODUCTS RO S.R.L. will stop processing
your personal data for this purpose, but without affecting the processing carried out by ISO PLUS
NATURAL PRODUCTS RO S.R.L. based on the consent expressed by to you before its withdrawal.

Can I refuse to provide my personal details?

We request very few personal details at Wine & Deli and most of them are essential for us to provide the
service our customers have requested. Any personal details which are optional are marked as such and
their purpose explained on our website. It is not necessary to provide these details if you don&t want to.

Disclosure of personal data
In order to fulfill the processing purposes, ISO PLUS NATURAL PRODUCTS RO S.R.L. may disclose your
data to partners or third parties that support ISO PLUS NATURAL PRODUCTS RO S.R.L. in carrying out its
activity, such as courier companies, IT service providers, or authorities, as follows:

For the administration of the viniridonysos.ro website
For awarding prizes or other facilities to the persons concerned, as a result of their participationin various promotional campaigns organized by ISO PLUS NATURAL PRODUCTS RO S.R.L.
To maintain, optimize and personalize the website or the services provided through it
For the analysis of traffic data, usage and activity trends, the implementation of safety features and the authentication of users with created accounts
For the transmission of commercial marketing communications, in accordance with the legislation in force

In the situation where the disclosure of personal data is provided by law

Transfer of personal data
The personal data provided to ISO PLUS NATURAL PRODUCTS RO S.R.L. can be transferred outside of
Romania, but only to the countries of the European Union.

The rights you benefit from
In the conditions provided by the legislation on the processing of personal data, as data subjects, you
benefit from the following rights:

- the right to information, respectively the right to receive details regarding the processing activities carried out by ISO PLUS NATURAL PRODUCTS RO S.R.L., according to what is described in this document;
- the right to access the data, respectively the right to obtain confirmation from ISO PLUS NATURAL PRODUCTS RO S.R.L. regarding the processing of personal data, as well as details regarding the processing activities such as the manner in which the data are processed, the purpose for which processing, recipients or categories of data recipients, etc.;
- τhe right to rectification, respectively the right to obtain the correction, without justified delay, by ISO PLUS NATURAL PRODUCTS RO S.R.L. of inaccurate/unjustified personal data, as well as the completion of incomplete data; The rectification/completion will be communicated to each recipient to whom the data were sent, unless this proves impossible or involves disproportionate efforts.
- the right to delete the data, without undue delay, ("the right to be forgotten"), if one of the following reasons applies:

- they are no longer necessary to fulfill the purposes for which they were collected or
processed;
- if consent is withdrawn and there is no other legal basis for processing;
- if the data subject opposes the processing and there are no legitimate reasons to prevail;
- if the personal data were processed illegally;
- if personal data must be deleted to comply with a legal obligation;
- the personal data were collected in connection with the provision of services of the
information society according to the Union law or the internal law under which the operator is.

It is possible that, following the request to delete the data, ISO PLUS NATURAL PRODUCTS RO S.R.L. will
anonymize these data (thus depriving them of their personal character) and continue the processing for
statistical purposes under these conditions;

- the right to restrict processing to the extent that:

- the person contests the accuracy of the data, for a period that allows us to verify the
correctness of the data;
- the processing is illegal, and the person concerned opposes the deletion of personal data,
requesting instead the restriction of their use;
- the operator no longer needs the personal data for the purpose of processing, but the data
subject requests them for establishing, exercising or defending a right in court; or
- the data subject objected to the processing (other than those for direct marketing), for the
time interval in which it is checked whether the legitimate rights of the operator prevail over
those of the data subject.
- the right to data portability, respectively (i) the right to receive personal data in a structured
way, commonly used and in an easy-to-read format, as well as (ii) the right for this data to be
transmitted by ISO PLUS NATURAL PRODUCTS RO S.R.L. to another data operator, to the extent
that the conditions stipulated by law are met;

- the right to opposition - regarding the processing activities can be exercised by submitting a request as indicated below;

- at any time, for reasons related to the particular situation in which the data subject is, that
the data concerning him/her be processed on the basis of the legitimate interest of ISO PLUS
NATURAL PRODUCTS RO S.R.L. or on the basis of the public interest, with the exception of
cases where ISO PLUS NATURAL PRODUCTS RO S.R.L. can demonstrate that it has legitimate
and imperative reasons that justify the processing and that prevail over the interests, rights
and freedoms of the persons concerned or that the purpose is to establish, exercise or
defend a right in court;

- at any time, free of charge and without any justification, that the data concerning it be
processed for direct marketing purposes.

- the right not to be subject to an automatic individual decision, respectively the right not to be the subject of a decision made solely on the basis of automatic processing activities, including the creation of profiles, which produce legal effects that concern the data subject or affect him in a similar way in - a significant measure;
- the right to address the National Supervisory Authority for the Processing of Personal Data or the competent courts, as you consider necessary.

For any additional questions regarding how personal data is processed and to exercise your rights
mentioned above, please contact the email address office@iso-plus.ro This website uses cookie files. For
more information on how these files are used, please access the Cookies Policy.

Can I modify or eliminate my data?

Depending on the data in question, this can be done directly via the personal area of My account, or by
changing the cookies settings on your browser, or you can request us to do it either by email to
office@iso-plus.ro or by writing to the following address:

Bucharest, 1st District, soseaua Bucuresti - Târgoviște no. 11A, Ground Floor, Room 1, Romania,
ZIP Code 013502