Who should read this Privacy Notice?
This Privacy Notice is relevant for anyone being a user of smartwinecellar.xyz.
About us
It is Illuminated Infinity AB's (the Data Controller) policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, smartwinecellar.xyz, and other sites we own and operate.
How do we process your personal data?
The source we obtain your personal data from
| Personal data type |
Source of personal data |
|
Name
E-mail
Postal no
Payment details
Cellartracker details
Communication between user and smartwinecellar.xyz
|
The individual |
|
Application data
|
Generated internally |
The purpose and legal basis for processing your personal data
| Personal data type |
Legal basis |
Purpose |
|
Name
E-mail
Cellartracker details
|
Fulfilment of contract |
Provision of smartwinecellar.xyz |
|
Postal no
Payment details
|
Fulfilment of contract |
Handling paid membership |
|
Application data
|
Legitimate interest |
Improvement of products and services |
|
Application data
|
Consent |
Analytics of products and services |
|
IP address
Browser and device information
|
Legitimate interest |
Protecting the sign-up form against automated abuse, and keeping the service secure and available |
The amount of time we store your personal data
| Personal data type |
Retention time |
|
Name
E-mail
Postal no
Application data
Cellartracker details
|
1 month after account deletion |
|
Payment details
|
7 years after last invoice |
|
IP address
Browser and device information
|
Kept in server access logs for 14 days, then deleted. Cloudflare retains sign-up protection data for a short period in line with their own retention policy. |
Data processors we involve to process your personal data
DigitalOcean, Inc Frankfurt, Germany
| Personal data type |
Instructions |
|
Name
E-mail
Postal no
Payment details
Application data
Cellartracker details
|
Hosting and backup of smartwinecellar.xyz application |
Sendinblue EEA
| Personal data type |
Instructions |
|
Name
E-mail
|
Sending of emails |
Slack USA
| Personal data type |
Instructions |
|
Application Data
|
Provision of a tool for internal collaboration |
Slack - The legal basis for transferring your personal data outside the EEA
| Personal data type |
Legal Basis |
|
Application Data
|
Standard Contractual Clauses |
Posthog USA
| Personal data type |
Instructions |
|
Application Data
|
Provision of a tool for analytics |
Posthog - The legal basis for transferring your personal data outside the EEA
| Personal data type |
Legal Basis |
|
Application Data
|
Standard Contractual Clauses |
Stripe USA
| Personal data type |
Instructions |
|
Name
E-mail
Postal no
Payment details
|
Process payments |
Stripe - The legal basis for transferring your personal data outside the EEA
| Personal data type |
Legal Basis |
|
Name
E-mail
Postal no
Payment details
|
Standard Contractual Clauses |
Cloudflare, Inc USA
| Personal data type |
Instructions |
|
IP address
Browser and device information
|
Protecting the sign-up form against automated abuse (Cloudflare Turnstile). This runs only on the sign-up page, and is used solely to tell a real visitor from an automated one. It is not used for analytics, profiling or advertising. |
Cloudflare - The legal basis for transferring your personal data outside the EEA
| Personal data type |
Legal Basis |
|
IP address
Browser and device information
|
Standard Contractual Clauses |
ip2c.org Poland
| Personal data type |
Instructions |
|
IP address
|
Looking up which country an IP address belongs to, so that the correct country and pricing region are pre-selected when you sign up. Only the IP address is sent, and no account details are included. |
Your rights
Your privacy is important to us. That's why we built smartwinecellar.xyz with a privacy by design approach. We don't use any third party analytics tool and we try to keep as little data as possible about you.
Your rights under the GDPR that are most relevant for you:
- The right to be informed - We provide this information above
- The right of access - Contact us and we will provide information about what data we have about you
- The right to rectification - Change your personal data types under the settings menu
- The right to erasure - Contact us and we will erase your personal data
Other rights under the GDPR:
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
Contact Us
Use the support function inside the app for any questions or concerns regarding your privacy.
Updates to this Privacy Notice
17 August 2026
- Added Cloudflare as a Data Processor, used to protect the sign-up form against automated abuse
- Added ip2c.org as a Data Processor, used to look up the country an IP address belongs to
- Added IP address and browser information as personal data types we process, with legitimate interest as the legal basis
22 October 2024
- Added Posthog and Cookiechimp as a Data Processor
14 October 2023
- Removed Crisp as a Data Processor
11 October 2021
- Change of legal entity from Me Myself & I Stockholm HB to Illuminated Infinity AB
2 April 2021