Privacy Policy

1. Data Controller

Enowise (“we”, “us”, “our”) is the data controller responsible for your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Greek data protection law.

2. Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, company name, tax ID, billing address
• Winery data: vineyard information, wine details, tasting notes, images, lab analysis, brand identity, experiences, and availability
• Consumer data (WineKite): booking requests, saved wines, tasting logbook, followed wineries, and preferences
• Notification emails: email addresses submitted through interest forms (e.g., WineryOps launch notifications)
• Usage data: login activity, feature usage, browser type, IP address
• Payment data: processed securely through Stripe; we do not store card details

3. Purpose and Legal Basis

We process your data for the following purposes:

• Contract performance: providing the Service, managing subscriptions, generating e-labels, publishing winery profiles on WineKite, and processing booking requests
• Legal obligation: tax compliance, EU e-label regulations
• Legitimate interest: improving the Service, analytics, security
• Consent: marketing communications and launch notifications (where applicable)

4. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: payment processing
• WineKite: winery profile data you choose to publish for consumer discovery
• Infrastructure providers: hosting and data storage within the EU

5. Data Storage and Security

Your data is stored on servers located within the European Union. We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. E-labels and their associated QR codes remain accessible to consumers indefinitely, even after subscription cancellation, to comply with EU wine labelling requirements. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., tax records).

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Hellenic Data Protection Authority

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. Analytics, where used, are privacy-focused and do not involve cross-site tracking.

9. E-Label Consumer Privacy

In compliance with EU wine labelling regulations, our e-label pages do not collect or track any consumer data. No cookies, analytics, or user identification is used when consumers scan an e-label QR code. Access to e-label information is direct and without any intermediate steps.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact

For privacy-related inquiries, please contact us at info@enowise.io.