Data Policy

I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Winery Karp-Schreiber
Moselweinstraße 186
54472 Brauneberg
phone 06534-236
Contact

II. Name and address of the data protection officer
The data protection officer of the controller is:
We do not need a data protection officer.

III. General information on data processing
1. Scope of processing of personal data
In principle, we only process personal data insofar as this is necessary to provide a functional website and our content and services. The processing of personal data takes place only with the consent of the user or in those cases in which prior consent cannot be obtained for actual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) lit. f GDPR as the legal basis for processing.

3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

IV Provision of the website and creation of log files
1. Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected: browser type and version, the operating system used, the user’s internet service provider. the IP address, device, add-ons used, downloaded data, date and time of access, websites from which the user’s system accesses the website below, websites that are accessed by the user’s system via our website

The data is also stored in our system’s log files. This does not affect the user’s IP addresses or other data that enable the data to be assigned to a user. This data is not stored together with other user data.

2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be saved for the duration of the session.

The storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing in accordance with Art. 6 Paragraph 1 lit. f GDPR.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Any further storage is possible. In this case, the users’ IP addresses are deleted or alienated so that it is no longer possible to assign the client called up.

5. Opposition and removal option
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.

V Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after changing pages. These are, for example, the access data for closed areas of our website that require a log-in.

We also use cookies on our site that enable an analysis of the surfing behavior of the users. When accessing our site, the user is informed about the corresponding use and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration.

2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 f. GDPR and Art. 6 Para. 1 a GDPR.

3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Not all functions can be offered without the use of cookies.

The data collected by technically unnecessary cookies is used to improve the quality of our website and content. This enables us to find out how the website is used and so we can continuously optimize our offer.

Our legitimate interest in processing personal data in accordance with Art. 6 Paragraph 1 lit. f GDPR.

4. Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site from there. Therefore, users also have full control over the use of cookies. By changing the settings in the Internet browser, users can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used in full.

The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash player.

VI Contact form and email contact
1. Description and scope of data processing
If there are contact forms on our website that can be used to contact us electronically and a user makes use of this option, the data entered in the input mask will be transmitted to us and saved. Depending on the form selected, these data are usually: surname, first name, title, company, zip code, city, address, telephone, e-mail address

When the message is sent, the following data is also stored: the user’s IP address, date and time of registration

The consent of the user is obtained for processing during the registration process and reference is made to this data protection declaration, which also contains the specific consent text below.

Alternatively, you can contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be saved.

In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

2. Legal basis for data processing
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

The legal basis for the processing of the data that is transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of data processing
We only process the personal data from the input mask to process the contact. If you contact us by e-mail, there is also the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Opposition and removal option
The user has the option of revoking his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The revocation of the consent and the objection to the storage is possible verbally, in writing or by email.
In this case, all personal data that was stored in the course of making contact will be deleted.

VII Order by a consumer
1. Description and scope of data processing
We offer users the opportunity to order goods on our website. The data is entered in an input mask and transmitted to us and stored.

The following data can be entered: first name, last name, salutation, company, email address, telephone, address, zip code, place, date of birth

At the time the message is sent, the following data is also stored: IP address of the user, date and time of the order: The consent of the user is obtained for processing during the registration process and reference is made to this data protection declaration, which also includes the specific consent text below contains.

2. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of data processing
The purpose is to carry out the order.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case during the ordering process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.

5. Opposition and removal option
As a user, you have the option to cancel the order at any time. The data stored about users can be changed at any time.

You can contact us by email, phone or in writing.

However, if the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations to prevent deletion.

VIII Registration by a consumer
1. Description and scope of data processing
On our website, we offer customers the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored.

The customer registers on the website in order to use all of our functions. For this, the customer enters the necessary data and confirms his registration.

On our website, the following data is at least collected as part of the registration process: E-mail address, salutation, first name, surname, company, a password and user name assigned by the user, address, postcode, city, telephone, date of birth

When the message is sent, the following data is also stored: the user’s IP address, date and time of registration

2. Legal basis for data processing
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

3. Purpose of data processing
Creation and management of a customer account to provide the functions of the customer account and the functions themselves as well as the receipt of targeted advertising and recommendations from those responsible.

4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case for those during the registration process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.

5. Opposition and removal option
As a user, you can cancel your registration at any time. You can have the data stored about you changed at any time.

You can contact us by email, telephone or in writing.
However, if the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations to prevent deletion.

IX web analysis by Google Analytics
1. Scope of processing of personal data
We use Google Analytics on our website to analyze the surfing behavior of our users. The software places a cookie on the user’s computer (see above for cookies). If individual pages of our website are called up, the following data is stored: Two bytes of the IP address of the calling system of the user, the called up website, the website from which the user came to the called up website (referrer), the sub-pages that were accessed by the website accessed, the length of time spent on the website

1.6. The frequency with which the website is accessed
Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with European data protection law. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by downloading and installing the browser plug-in available at the following link. You can find more information about data usage by Google, setting and objection options on the websites of Google Data usage by Google when you use websites or apps of our partners, data usage for advertising purposes, manage information that Google uses to show you advertisements. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet. In doing so, pseudonymous user profiles can be created from the processed data.

2. Legal basis for processing personal data
The legal basis for processing users’ personal data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing
The processing of the personal data of the users enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

Our legitimate interest in processing the data in accordance with Art. 6 Para. 1 lit. f GDPR. By anonymizing the IP address, the interests of users in protecting their personal data are sufficiently taken into account.

4. Duration of storage
Sessions and campaigns are ended after a certain period of time. By default, sessions end after 30 minutes of inactivity and campaigns after six months. The time limit for campaigns can be a maximum of two years. Users can find more information on terms of use and data protection at www.google.com/analytics/terms/de.html or at www.policies.google.com/

5. Opposition and removal option
Cookies are stored on the user’s computer and transmitted to our site from there. Therefore, users also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used in full.

Users can also prevent Google from collecting the data generated by the cookie and relating to the use of the website (including the IP address) and from processing this data by downloading and installing this browser add-on.

Opt-out cookies prevent future collection of user data when you visit this website. In order to prevent the collection by Universal Analytics across different devices, users must perform the opt-out on all systems used.

4. Right to cancellation
4.1. Deletion obligation
Users can request the person responsible to delete the personal data concerning them immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

The personal data relating to users are no longer necessary for the purposes for which they were collected or otherwise processed.

Users revoke their consent on which the processing was based according to. Art. 6 para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing.

According to Art. 21 Para. 1 GDPR objection to the processing and there are no overriding legitimate reasons for the processing, or you lay acc. Art. 21 para. 2 GDPR objection to the processing.

The personal data concerning users have been processed unlawfully.

The deletion of the personal data concerning users is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.

The personal data relating to users were collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

4.2. Information to third parties
If the person responsible has made the personal data relating to the user public and is acc. According to Art. 17 Para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you are the data subject You have requested that you delete all links to this personal data or copies or replications of this personal data.

4.3. Exceptions
The right to deletion does not exist if processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) To fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that is transferred to the person responsible has been;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impair it, or

(5) for the establishment, exercise or defense of legal claims.
5. Right to be informed
If users have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom personal data relating to the user have been disclosed of this correction or deletion of the data or restriction of processing, unless this turns out to be impossible or involves a disproportionate effort.

Users have the right to be informed about these recipients by the person responsible.

6. Right to data portability
Users have the right to receive the personal data concerning them that they have provided to the person responsible in a structured, common and machine-readable format. In addition, users have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that

(1) the processing is based on consent in accordance with. Art. 6 para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract according to. Art. 6 para. 1 lit. b GDPR is based and

(2) the processing is carried out using automated procedures.

In exercising this right, users also have the right to have the personal data relating to them transmitted directly from one person responsible to another, insofar as this is technically feasible. This must not impair the freedoms and rights of other people.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

7. Right to Object
Users have the right, for reasons that arise from their particular situation, to object at any time to the processing of their personal data, which is based on Art. 6 Para. 1 lit e or f GDPR; this also applies to profiling based on these provisions.

The person responsible no longer processes the personal data relating to users, unless he can prove compelling legitimate reasons for the processing that outweigh their interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning the users are processed in order to operate direct mail, users have the right to object at any time to the processing of the personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If users object to processing for direct marketing purposes, the personal data concerned will no longer be processed for these purposes.

In connection with the use of information society services – regardless of Directive 2002/58 / EC – users have the option of exercising their right of objection by means of automated procedures in which technical specifications are used.

8. Right to revoke the declaration of consent under data protection law
Users have the right to withdraw their declaration of consent under data protection law at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up until the withdrawal.

9. Automated decision in individual cases including profiling
Users have the right not to be subjected to a decision based solely on automated processing – including profiling – that has legal effects on them or significantly affects them in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,

(2) is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard their rights and freedoms as well as their legitimate interests or

(3) takes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms and their legitimate interests, including at least the right to obtain intervention by a person on the part of the person responsible, to express their own point of view and heard on contesting the decision.

10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, users have the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if they are of the opinion that the processing of the personal data concerning them is contrary to the GDPR violates.

The supervisory authority to which the complaint was lodged informs the complainant about the status and results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

XIV consents (consent texts)
1. Contact form
rstand that my data entered in the entry mask will be processed for the purpose of answering my contact request, whereby the processing according to Art. 4 No. 2 GDPR is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collection , the recording, the organization, the ordering, the storage, the adaptation or modification, the reading out, the querying, the use, the disclosure by transmission, dissemination or any other form of provision, the comparison or the linking, the restriction, the Represents erasure or destruction.

2. Order
I agree that my data entered in the entry mask will be processed for the purpose of executing an order, whereby the processing according to Art. 4 No. 2 GDPR is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing through transmission, dissemination or any other form of provision, comparison or linking, the Restriction, deletion or destruction.