PRIVACY AND DATA PROTECTION POLICY

1. DATA CONTROLLER AND CONTACT DETAILS

The data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and applicable Czech data protection laws (Act No. 110/2019 Coll.) is LIBATUR s.r.o., Prague, Czech Republic.

Inquiries and data protection requests: to contact the data controller regarding data privacy or to exercise your statutory rights, please use our official corporate contact channels available at www.libatur.com.

2. THE PRINCIPLE OF MINIMAL COLLECTING

We adhere strictly to the principle of data minimization. On this website that principle reaches its limit: we collect no personal data from you whatsoever.

2.1 Information You Actively Provide to Us

There is nothing here for you to submit. The Platform contains no contact form, no registration, no newsletter sign-up and no comment field, and it has no function that sends anything to us. Commercial and trade inquiries are handled by the exclusive regional distributor for your area and through the corporate channels published at www.libatur.com, not through this website.

2.2 The Age Declaration

Access to the Platform requires a declaration that you are of legal drinking age in your country of residence. When you make that declaration, your browser records a single flag so that you are not asked again on your next visit.

• · The flag records one fact only: that the declaration was made.
• · It carries no identifier, no timestamp and no date of birth, and nothing in it could distinguish you from any other visitor.
• · It is stored in your browser and is never transmitted to our servers or to anyone else. We therefore never receive it.
• · If you decline, nothing is stored at all.
• · You can remove the flag at any time by clearing this website’s data in your browser settings; the declaration will then be requested again.

2.3 Technical Log Data

Our hosting provider records standard technical information about requests, such as IP address, time, requested address, browser type and operating system, for the sole purpose of operating and securing the Platform. These records are not used to profile visitors, are not combined with the age declaration described above, and are never used for advertising, analytics or targeting.

3. LEGAL BASIS AND PURPOSES OF PROCESSING

Under the GDPR we must have a lawful basis for every processing operation. Because the Platform collects nothing from you, the list is short:

• · Platform security and operation. Category of data: technical log data recorded by our hosting provider, including IP address and timestamps. Legal basis: legitimate interest under Art. 6(1)(f) GDPR in operating the Platform and safeguarding it against misuse.
• · The age declaration is deliberately absent from this list. It never leaves your browser and we never receive it, so there is no processing of it by us, no recipient and no processor.

4. STRICT NON-DISCLOSURE AND DATA SHARING

We do not sell, rent, lease, trade, or share personal information with third parties for their independent marketing purposes. On this website there is nothing of yours to share.

The only processor involved in operating the Platform is our infrastructure hosting provider, whose servers are located within the European Economic Area and who is bound by a GDPR-compliant processing agreement. The Platform loads no fonts, maps, players, analytics or other assets from third-party domains, so no request carrying your IP address reaches anyone but us and that provider.

In exceptional circumstances, we may disclose personal data if required to do so by European Union or Member State law, or in response to valid requests by public authorities such as a court or a government agency.

5. INTERNATIONAL TRANSFERS

Our operations are based in the Czech Republic and our servers are located within the EEA. If we ever utilize service providers that process data outside the EEA, we will ensure that such transfers are governed by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to guarantee a level of protection equivalent to that provided within the EU.

6. DATA RETENTION AND "THE RIGHT TO SILENCE"

We do not keep personal data longer than necessary, and in connection with this website there is almost nothing to keep. We hold no inquiry records, no mailing list and no visitor database. Technical log data is retained by our hosting provider only for as long as it is needed to operate and secure the Platform and to diagnose faults, and it is not archived for any other purpose.

7. YOUR DATA PROTECTION RIGHTS

As a data subject under the GDPR you possess the following rights, free of charge, at any time:

• · Right of Access (Art. 15 GDPR): the right to obtain confirmation as to whether your personal data is being processed, and to receive a copy of that data.
• · Right to Rectification (Art. 16 GDPR): the right to demand that we correct inaccurate or incomplete personal information.
• · Right to Erasure (Art. 17 GDPR): the right to request the permanent deletion of your personal data from our systems.
• · Right to Restriction of Processing (Art. 18 GDPR): the right to temporarily freeze the processing of your data under specific statutory conditions.
• · Right to Data Portability (Art. 20 GDPR): the right to receive your personal data in a structured, commonly used and machine-readable format.
• · Right to Object (Art. 21 GDPR): the right to object to processing based on our legitimate interests.
• · Right to Withdraw Consent (Art. 7(3) GDPR): where processing is based on your consent, the right to withdraw it at any time.

To exercise any of these rights, please contact the data controller through the official corporate channels published at www.libatur.com. The age declaration is the one thing you can settle without us: because it never leaves your browser, you remove it yourself by clearing this website’s data in your browser settings.

If you believe our processing of your data violates data protection regulations, you also have the right to file a complaint with the competent supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz.

8. COOKIES: NONE

We respect your digital peace. Unlike mainstream commercial websites that track your behavior across the internet, this Platform uses no advertising, tracking or targeting cookies — and in fact it sets no cookies of any kind, not even functional ones.

The age declaration described in section 2.2 is kept in your browser’s local storage, not in a cookie, and is never attached to any request. Because there is no non-essential processing, no consent is requested and no consent banner is shown. We embed no marketing trackers, no analytics and no social media pixels. Your digital journey through NOCTAIRE is entirely yours.

9. UNDERAGE PRIVACY

The Platform is strictly prohibited to individuals under the legal drinking age in their respective countries. We do not knowingly collect, verify or retain any personal data from anyone under the legal age limit. If we discover that we have inadvertently collected personal data from a minor, we will delete that information from our servers immediately and without delay.

10. MODIFICATIONS TO THIS POLICY

As our fermentation research progresses and we expand our digital ecosystem, we may update this Policy to reflect technical, legal or operational changes. Any modifications become effective immediately upon being posted to the Platform. We encourage you to review this page periodically to remain informed about how we safeguard your trust.