Privacy Policy

1. Data Controller

Nommelier is the data controller responsible for your personal data. For any questions regarding this policy or your data, contact us at:

Email: nicolechavesruiz@gmail.com

2. Information We Collect

We collect the following types of personal data:

• Account Information: Email address and name when you create an account
• Taste Preferences: Your wine preferences from our taste quiz (sweetness, acidity, boldness, fruitiness)
• Usage Data: Information about how you interact with our service, including wines viewed, ratings submitted, and features used
• Technical Data: IP address, browser type, device information, and cookies

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To provide our services when you create an account
• Consent: For optional features like taste preferences and marketing communications
• Legitimate Interest: To improve our services and ensure security

4. How We Use Your Information

We use your personal data to:

• Provide personalized wine recommendations based on your taste profile
• Enable you to save ratings and reviews
• Improve our service and develop new features
• Communicate important updates about our service
• Ensure the security and integrity of our platform

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Third-party services that help us operate (hosting, analytics)
• Legal Requirements: When required by law or to protect our rights

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion at any time. After account deletion, we may retain anonymized data for analytical purposes.

7. Your Rights Under GDPR

As an EU resident, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at nicolechavesruiz@gmail.com. We will respond within 30 days.

8. Cookies

We use essential cookies to operate our service and analytics cookies (with consent) to understand usage patterns. You can manage cookie preferences through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure servers, and access controls.

10. International Transfers

Your data may be processed outside the EEA. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or through our service.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

14. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at:

nicolechavesruiz@gmail.com

15. Newsletter

If you subscribe to our newsletter, you must confirm your subscription by clicking a link we email to you — we never send the newsletter until that confirmation is received. The legal basis for processing under GDPR is your consent.

For each confirmed subscriber, we store:

• Your email address
• Your language preference (English or Swedish)
• The date and time your consent was confirmed

You can withdraw your consent at any time using the unsubscribe link included in every newsletter email — no explanation required.

When you unsubscribe or request deletion of your data, we retain your email address on a suppression list for the sole purpose of ensuring we never contact you again. This is what makes your opt-out durable: a future import or form submission cannot silently re-enrol you. Addresses are also added to this suppression list automatically if an email to them bounces or is marked as spam.