Privacy policy
Version of 24 October 2026. This is an English translation; the Polish version is binding.
Who processes your data
The controller of your personal data is Infinitum Retail spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Warsaw, ul. Annopol 21, 03-236 Warszawa, KRS 0001170123, NIP 9512620236 (hereinafter: we). For matters relating to personal data, write to kontakt@szampan.com.pl or to our registered office address. The same company runs the Cruvino shop; the customer data of the two shops is not combined without your knowledge.
What data, why and for how long
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Order and delivery | e-mail address, first name and surname, delivery address, phone number (if you give it), engraving text, order history | performance of a contract (Article 6(1)(b) of the GDPR (RODO)) | until the contract has been performed, then until claims become time-barred |
| Accounting and tax | receipt or invoice data, including the company name and NIP | legal obligation (Article 6(1)(c)) | 5 years from the end of the year in which the tax payment deadline expired |
| Age confirmation | your declaration that you are an adult and when you made it; on delivery the courier may look at your ID, but we do not record its details | the legal obligation of an alcohol seller (Article 6(1)(c)) and our legitimate interest in demonstrating that it has been met (point (f)) | as long as the order data |
| Delivery of a gift to another address | the recipient's first name, surname, address and phone number, provided by you | our legitimate interest in delivering the parcel (Article 6(1)(f)); we give the recipient this information on delivery | as long as the order data |
| Quote request for business | e-mail address, NIP, content of the enquiry, file with the list of recipients' addresses | steps taken before entering into a contract (point (b)) and our legitimate interest in handling the enquiry (point (f)) | 12 months from the last correspondence or until the end of the contract, if one is concluded |
| Champagne letters (with a welcome code), reminder about an unfinished order, back-in-stock message | e-mail address and, for back-in-stock messages, also the product you are asking about | your consent (point (a)) | until you withdraw your consent (link in every message) |
| Shop account (if you create one) | e-mail address, password in encrypted form, first name, surname, addresses, order history | performance of the account agreement (point (b)) | until the account is deleted; order data is kept for the period required by tax law |
| Contact and complaints | contact details and content of the correspondence | performance of a contract (point (b)) and legitimate interest (point (f)) | until the matter is resolved, then until claims become time-barred |
| Statistics and improving the shop | data on use of the website stored in cookies of analytics tools | your consent (point (a)) | as set out in the cookie policy |
| Counting visits without cookies | anonymous signals sent to Google Analytics before you decide about cookies or after you refuse them: that a page was opened, the type of device and browser, the approximate country and your consent decision; without cookies and without any identifier that would allow you to be recognised | our legitimate interest in knowing the number of visits and sales (point (f)) | Google stores them in aggregated form; we do not combine them with your data |
| Security and pursuit of claims | server log data, order data | legitimate interest (point (f)) | until claims become time-barred |
Providing your data is voluntary, but without the data needed for an order we cannot fulfil it. We do not make decisions based solely on automated processing that would produce legal effects for you.
Who we share data with
Only with those without whom we could not fulfil your order or run the shop, and only to the extent necessary:
- the bank that holds our account (mBank S.A.), as regards the data from your bank transfer,
- courier companies,
- our hosting and e-mail provider (Zenbox sp. z o.o.),
- Klaviyo, Inc. (USA), which sends the Champagne letters and reminders about unfinished orders: e-mail address, welcome code and, if you consent to cookies, also the bottles you viewed and the contents of the order you started,
- Anthropic PBC (USA), the provider of the model that answers in the “Sommelier” chat: only the content of the questions you type in the chat; we do not store conversations, and please do not include personal data in your questions,
- providers of analytics tools: Google Ireland Limited (Google Analytics; full measurement with cookies only with your consent, without consent only the anonymous signals described in the table above) and Microsoft Ireland Operations Limited (Microsoft Clarity, only with your consent),
- our accounting firm, law firm and public authorities, where required by law.
We do not sell personal data. Data shared with analytics tool providers, Klaviyo and Anthropic may be transferred to the USA; the basis for this is the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interest. You can withdraw your consent at any time; this does not affect the lawfulness of processing before it was withdrawn. You can change your cookie consent using the “Change cookie consent” link in the website footer. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
Changes
We will announce changes to this policy on this page and, for significant changes affecting orders in progress, also by e-mail.
