This notice applies to the WineHunter Companion app for iOS and Android, published on the app stores by Qonflate Sas di Johannes Koecher & C. - Qonflate KG des Johannes Koecher & Co.. It is written under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code. The app is intended for adults: it concerns wine and spirits and is rated for users aged 18 and over.

Who is responsible

The app is a client of the WineHunter platform. Accounts, ratings, favourites, appointments and every other record it shows are held by the platform and its operator, Gourmet’s International Srl, Via Monte Ivigna 19, 39010 Cermes (BZ), Italy, which is the data controller for that data. Its data protection officer can be reached at dpo@meranowinefestival.com; the platform’s own privacy policy is published at winehunter.it/privacy-policy.

Qonflate Sas di Johannes Koecher & C. - Qonflate KG des Johannes Koecher & Co. designs, builds and publishes the app and processes data only on the controller’s documented instructions, as a processor under article 28 GDPR. For anything about the app itself — how it works, what it stores on your device, how to delete an account — write to jk@qonflate.com; requests that concern the platform are passed to the controller the same day.

What the app processes

Without an account

The festival programme, masterclasses, exhibitors, hotels, partners and the award catalogue are open. The app makes requests to the platform to load them; those requests carry the technical data any request carries (IP address, time, app and system version) and nothing that identifies you. The app contains no analytics, advertising or tracking software of any kind, and no identifier for advertising is read or generated.

Consumer accounts

To rate wines, save favourites and keep a taste profile, you sign in with a link sent to your email address. The platform then holds your email address, your ratings, your favourites, your taste profile and the record of which products you looked at, for the purpose of providing those features (article 6(1)(b) GDPR). Nothing is used for marketing without your separate, revocable consent (article 6(1)(a)), and no profile is built for advertising.

Buyer and producer accounts

Buyers and producers sign in with the credentials of their existing platform account; the app cannot create those accounts. It shows, and lets you edit where the platform allows it, the data that account already holds — agenda, appointments, participation, showcase. The platform’s privacy policy governs that data; the app adds nothing to it beyond the technical data of each request.

On your device

To work in exhibition halls without a signal, the app keeps a copy of what it has shown you in a database on the device, and keeps sign-in tokens in the operating system’s secure storage. Ratings and favourites made offline wait on the device until a connection returns. Everything on the device is removed when you delete the app; account data on the platform is removed when you delete the account.

Notifications

The current version sends no push notifications. If a later version offers them, they will be off until you turn them on in the app, and the notice will be updated first.

Retention

Consumer account data is kept on the platform until you delete the account; deletion inside the app is immediate for ratings, favourites, taste profile and history, and the platform’s backups are purged in their normal cycle thereafter. Technical request data is not stored by the app. Buyer and producer data follows the platform’s retention rules as set out in its policy.

Recipients and transfers

Data entered in the app goes to the WineHunter platform and its operator named above, and to the providers that host the platform within the European Union. Apple and Google, as store operators, receive only what their stores and operating systems collect under their own terms. No data is sold, and none is transferred outside the European Economic Area by the app.

Your rights, and deleting your account

Under articles 15 to 22 GDPR you may ask for access, rectification, erasure, restriction, portability, and you may object to processing based on legitimate interest.

Consumer accounts can be deleted inside the app under Account → Delete account, without contacting anyone. The same can be requested by email.
Buyer and producer accounts are deleted by the platform operator on request; write to either address above and you will receive a confirmation when it has been done.

Complaints may be lodged with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it (article 77 GDPR).

Security

All traffic between the app and the platform is encrypted (TLS). The app carries no API key or secret in its binary; sign-in tokens are stored in the device’s secure storage and can be revoked from every device at once from within the app.

Changes

The date at the top marks the last substantive change. The notice is updated before any new processing begins, and the version in force at the time of a store release is the one that applies to that release.