PRIVACY POLICY
Personal data (hereinafter mostly referred to simply as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
Pursuant to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to simply as “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we, either alone or jointly with others, determine the purposes and means of processing. In addition, we inform you below about third-party components used by us for optimisation purposes and to improve the quality of use, insofar as third parties process data on their own responsibility as a result.
Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The responsible provider of this website within the meaning of data protection law is:
Weingut Georg Preisinger
Neubaugasse 26
A 7122 Gols
Burgenland – Austria
Tel. / Fax: +43 2173 2256
The data protection officer of the provider is:
Georg Preisinger
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR);
- to rectification or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
- to immediate erasure of data concerning them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is required pursuant to Art. 17 para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (cf. also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection regulations (cf. also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not apply if such notification proves impossible or involves disproportionate effort. Irrespective of this, the user has a right to information about these recipients.
Users and data subjects also have the right, pursuant to Art. 21 GDPR, to object to the future processing of data concerning them, provided that the data is processed by the provider on the basis of Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.
III. Information on data processing
Your data processed when using our website will be erased or blocked as soon as the purpose of storage no longer applies, provided that no statutory retention obligations prevent the erasure of the data and no different information is provided below for individual processing procedures.
Server Data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our webspace provider by your internet browser. These so-called server log files include, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which the use of our website takes place.
The data collected in this way is stored temporarily, but not together with other data about you.
This storage is carried out on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.
The data will be deleted no later than after seven days, unless further retention is required for evidentiary purposes. Otherwise, the data will be wholly or partially excluded from erasure until the final clarification of an incident.
Cookies
a) Session Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the display of our website in different languages or the provision of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, provided that these cookies process data for the initiation or performance of a contract.
If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party Cookies
Where applicable, cookies from partner companies with whom we cooperate for advertising, analysis or functionality purposes of our website may also be used on our website.
For details, in particular regarding the purposes and legal bases of the processing of such third-party cookies, please refer to the following information.
c) Options for Removal
You can prevent or restrict the installation of cookies by changing the settings of your internet browser. You can also delete cookies that have already been stored at any time. The steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, however, this may mean that not all functions of our website can be used to their full extent.
Contract Processing
The data transmitted by you for the purpose of using our goods and/or services is processed by us for the purpose of contract processing and is necessary in this respect. Conclusion and processing of the contract are not possible without providing your data.
The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.
We delete the data once the contract has been fully processed, but must observe tax and commercial law retention periods.
As part of contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.
Online Withdrawal Form
If you withdraw from a contract via our website, we process the data entered in the form. This includes, in particular, your first name, last name, email address, order number, and the information you provide in the free-text field.
We use this data to receive, process, and document the withdrawal. We also send a confirmation of receipt by email. The data is not used for advertising purposes.
The processing is carried out for the purpose of handling the contractual relationship and fulfilling legal obligations. The data will be deleted as soon as it is no longer required and no statutory retention obligations prevent its deletion.
Customer Account / Registration Function
If you create a customer account via our website, we will collect and store the data you enter during registration (for example, your name, your address or your email address) exclusively for pre-contractual services, for contract fulfilment or for customer care purposes (for example, to provide you with an overview of your previous orders from us or to offer you the so-called wish list function). At the same time, we will store your IP address and the date and time of your registration. This data will, of course, not be passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this privacy policy. The data collected by us in this process will be used exclusively for providing the customer account.
If you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or contract fulfilment, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.
You may withdraw the consent given to us for the opening and maintenance of the customer account at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. To do so, you only need to inform us of your withdrawal.
The data collected in this respect will be deleted as soon as the processing is no longer necessary. However, we must observe tax and commercial law retention periods.
Newsletter
If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to receive the newsletter, describe the content in detail and refer to this privacy policy. The data collected in this process will be used exclusively for sending the newsletter – in particular, it will not be passed on to third parties.
The legal basis here is Art. 6 para. 1 lit. a) GDPR.
You may withdraw your consent to receive the newsletter at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. To do so, you only need to inform us of your withdrawal or use the unsubscribe link included in every newsletter.
Contact Requests / Contact Options
If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary for processing and answering your request – without providing it, we cannot answer your request, or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Your data will be deleted once your request has been conclusively answered and provided that no statutory retention obligations prevent deletion, such as in the case of any subsequent contract processing.
User Contributions, Comments and Reviews
We offer you the opportunity to publish questions, answers, opinions or reviews on our website, hereinafter referred to simply as “contributions”. If you make use of this offer, we process and publish your contribution, the date and time of submission, and any pseudonym you may use.
The legal basis here is Art. 6 para. 1 lit. a) GDPR. You may withdraw your consent at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. To do so, you only need to inform us of your withdrawal.
In addition, we also process your IP address and email address. The IP address is processed because we have a legitimate interest in taking or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.
In this case, the legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in any necessary legal defence.
YouTube
We maintain an online presence on YouTube in order to present our company and our services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
In this respect, we point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may pose increased risks for users, for example because later access to user data may be made more difficult. We also have no access to this user data. Access lies exclusively with YouTube. Google LLC is certified under the Privacy Shield and has thus undertaken to comply with European data protection standards.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
You can find YouTube’s privacy policy at
https://policies.google.com/privacy
To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Facebook’s data protection officer can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6 para. 1 lit. a GDPR given to the platform operator. The user may withdraw consent for the future at any time pursuant to Art. 7 para. 3 GDPR by notifying the platform operator.
When our online presence on the Facebook platform is accessed, Facebook Ireland Ltd., as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data is used for statistical information on the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users within and outside Facebook according to their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. may also link the data to the respective user account.
In the event that the user contacts us via Facebook, the personal data entered by the user on that occasion will be used to process the inquiry. The user’s data will be deleted by us once the user’s inquiry has been conclusively answered and no statutory retention obligations, for example in the case of subsequent contract processing, prevent deletion.
Facebook Ireland Ltd. may also set cookies for the purpose of processing the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but only by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be used to their full extent.
Further details on the processing activities, their prevention and the deletion of the data processed by Facebook can be found in Facebook’s data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that processing by Facebook Ireland Ltd. may also take place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
Facebook Inc. has submitted to the “EU-US Privacy Shield” and thereby declares compliance with EU data protection requirements when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Instagram’s data protection officer can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6 para. 1 lit. a GDPR given to the platform operator. The user may withdraw consent for the future at any time pursuant to Art. 7 para. 3 GDPR by notifying the platform operator.
When our online presence on the Instagram platform is accessed, Facebook Ireland Ltd., as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data is used for statistical information on the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users within and outside Instagram according to their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. may also link the data to the respective user account.
In the event that the user contacts us via Instagram, the personal data entered by the user on that occasion will be used to process the inquiry. The user’s data will be deleted by us once the user’s inquiry has been conclusively answered and no statutory retention obligations, for example in the case of subsequent contract processing, prevent deletion.
Facebook Ireland Ltd. may also set cookies for the purpose of processing the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but only by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be used to their full extent.
Further details on the processing activities, their prevention and the deletion of the data processed by Instagram can be found in Instagram’s data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that processing by Facebook Ireland Ltd. may also take place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
Facebook Inc. has submitted to the “EU-US Privacy Shield” and thereby declares compliance with EU data protection requirements when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Social Media Links via Graphic or Text Link
We also promote presences on the social networks listed below on our website. These are integrated via a linked graphic of the respective network. The use of this linked graphic prevents an automatic connection from being established to the server of the respective social network when a website containing social media advertising is accessed in order to display a graphic of the respective network itself. Only when the corresponding graphic is clicked is the user redirected to the service of the respective social network.
After the user is redirected, information about the user is collected by the respective network. It cannot be ruled out that the data collected in this way may be processed in the USA.
This initially includes data such as IP address, date, time and visited page. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information from the user’s specific visit to the user’s personal account. If the user interacts via a “share” button of the respective network, this information may be stored in the user’s personal user account and possibly published. If the user wishes to prevent the collected information from being directly assigned to their user account, they must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.
The following social networks are integrated into our website by linking:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://www.facebook.com/policy.php
EU-US data protection certification (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://help.instagram.com/519522125107875
EU-US data protection certification (“EU-US Privacy Shield”): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy policy: https://policies.google.com/privacy
EU-US data protection certification (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
YouTube
We use YouTube on our website. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to simply as “YouTube”.
YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as “Google”.
Through certification under the EU-US data protection shield (“EU-US Privacy Shield”)
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google, and therefore its subsidiary YouTube, guarantees that the EU data protection requirements are also complied with when processing data in the USA.
We use YouTube in connection with the “enhanced privacy mode” function in order to display videos to you. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “enhanced privacy mode” function means that the data described in more detail below is only transmitted to YouTube’s server when you actually start a video.
Without this “enhanced privacy” mode, a connection to YouTube’s server in the USA is established as soon as you access one of our web pages on which a YouTube video is embedded.
This connection is required in order to display the respective video on our website via your internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time, and the website you visited. In addition, a connection to Google’s “DoubleClick” advertising network is established.
If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the corresponding settings in your YouTube user account.
For the purpose of functionality and to analyse usage behaviour, YouTube permanently stores cookies on your device via your internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by changing the settings in your internet browser. Further information on this can be found above under “Cookies”.
Further information about the collection and use of data as well as your related rights and protection options is provided by Google in its privacy policy, available at
https://policies.google.com/privacy
Sendinblue
We offer you the opportunity to register for our free newsletters via our website.
We use Sendinblue for sending newsletters. Sendinblue is a service of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, hereinafter referred to simply as “Sendinblue”.
If you register to receive our newsletter, the data requested during the registration process (your email address) is processed by Sendinblue. In addition, your IP address and the date and time of your registration are stored. As part of the further registration process, your consent to receive the newsletter is obtained, the content is described in detail and reference is made to this privacy policy.
Sendinblue also provides further data protection information at
https://www.newsletter2go.de/datenschutz/
https://de.sendinblue.com/legal/privacypolicy/
https://www.newsletter2go.de/informationen-newsletter-empfaenger/
https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go
The newsletters sent by Sendinblue contain technologies that allow us to recognise in the analyses whether and when an email has been opened and whether and which links contained in the newsletter have been followed. We store this data in addition to the technical data (system data and IP address) so that the respective newsletter can be optimally tailored to your wishes and interests. The data collected in this way is therefore used to continuously improve the quality of our newsletters.
The legal basis for sending the newsletter and for the analysis is Art. 6 para. 1 lit. a) GDPR.
You may withdraw your consent to receive the newsletter at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. To do so, you only need to inform us of your withdrawal or use the unsubscribe link included in every newsletter.
Adobe Typekit Web Fonts
Our website uses so-called web fonts from Adobe Typekit for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you access our pages, your browser loads the required fonts directly from Adobe in order to display them correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the USA. This gives Adobe knowledge that our website has been accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided. Adobe is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union intended to ensure compliance with European data protection standards. Further information can be found at: https://www.adobe.com/de/privacy/eudatatransfers.html. The use of Adobe Typekit Web Fonts is necessary to ensure a uniform typeface on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information about Adobe Typekit Web Fonts can be found at: https://www.adobe.com/de/privacy/policies/typekit.html. Adobe’s privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html
Transfer of Personal Data for Order Processing
The personal data collected by us is passed on, as part of contract processing, to the transport company commissioned with delivery, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing.
For all payment methods except advance payment, invoice and cash payment, payment processing is carried out via the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we pass on the information provided by you during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number). Your data is transferred exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. Further information about Stripe’s data protection can be found at https://stripe.com/at/terms.
Updating this Privacy Policy
We reserve the right to amend this privacy policy if necessary to reflect technical developments and legal changes, or to update it in connection with the offering of new services or products.