Data protection
I.Data protection information according to Art. 13, 14 and 21 GDPR for the website of Schloss Vollrads
1. general information
We, Schloss Vollrads GmbH & Co KG, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible to you as the data subject are you sufficiently informed about the meaning, purpose and scope of the processing. Our privacy policy therefore explains to you in detail which so-called personal data (see definition below, 2.1.) is processed by us when you use the website https://www.schlossvollrads.com/ and all other websites that refer to it (see definition below, 2.2.).
The controller within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other data protection regulations is
Schloss Vollrads GmbH & Co. KG
Vollradser Allee
65375
Oestrich-Winkel
Telephone
06723/66-0
info@schlossvollrads.com
www.schlossvollrads.com
Notwithstanding the above, the person responsible for the online store and the subpages with information on the winery is
Winery management Schloss Vollrads KG
Vollradser Allee
65375
Oestrich-Winkel
Telephone
06723/66-0
info@schlossvollrads.com
www.schlossvollrads.com
When the term "controller" or "we" is used in the following, this refers to the respective company above.
Please note that links on our website may take you to other websites that are not operated by us, but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and the secure handling of your personal data on these websites operated by third parties.
2 Definitions
2.1 From the GDPR
This privacy policy uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR) at https://dejure.org/gesetze/DSGVO/4.html, for example.
2.2 Cookie
Cookies are text files that are stored on or read from your device by a website. They contain combinations of letters and numbers, e.g. to recognize the user and his settings when reconnecting to the cookie-setting website, to enable the user to remain logged in to a customer account or to statistically analyze certain usage behavior.
3. general information on data processing
We process personal data only to the extent permitted by law. Personal data is only passed on in the cases described below (see 4. below).
The personal data will be deleted or protected by technical and organizational measures (e.g. pseudonymization, encryption) as soon as the purpose of the processing no longer applies. This also takes place when a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or fulfillment of a contract.
Unless we are legally obliged to store the data for a longer period or to pass it on to third parties (in particular law enforcement authorities), the decision as to which personal data we collect, how long it is stored and to what extent you may have to disclose it depends on which functions of the website you use in each individual case.
4 Data processing in connection with the use of the website
The use of the website and its functions regularly requires the processing of certain personal data.
4.1 Informational use of the website
If you access our website and use it purely for information purposes, i.e. without using additional functions such as the contact form or social media plugins, we automatically collect personal data. This is the following information IP address of your end device as well as the date and time of accessing the website, the browser type and the operating system of your PC. This information is transmitted by your browser unless you have configured it to suppress the transmission of this information.
This personal data is processed to ensure the functionality and optimization of the website and to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Art. 6 (1) (f) GDPR.
The personal data is stored for a period of four weeks. We do not merge this personal data with other data sources. Data is only passed on to third parties if this is necessary for the operation of our website. For this purpose, personal data is transferred to the website agency and hoster. A transfer to a third country or to an international organization is not intended.
4.2 Google Maps
Parts of our website use Google Maps functions to integrate map data. This content is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows interactive maps to be displayed directly on the website and enables the use of the map function. When you access the subpage of our website on which Google Maps is used, your browser loads the necessary code from Google. For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. At the same time, Google can store cookies on your end device, unless you have prohibited the use of cookies in your browser, or read cookies. Location data may also be collected if you allow this in your browser. This takes place regardless of whether you are logged in via a Google user account. If you are logged in to Google, your data will be assigned to your Google user account. If you do not wish such an assignment, you must log out before accessing the map function. Google Maps is used for the purpose of making our website appealing and convenient and to make it easier to find the places indicated on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 letter f GDPR. Your IP address is collected by us to enable transmission to Google. You are not obliged to provide this personal data, but it is not possible to use the relevant parts of our website without providing it.
Further information can be found in Google's privacy policy at https://policies.google.com/privacy.
4.3 Social media plugin: YouTube
Parts of our website use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, ("YouTube") to display video content. When you access the relevant pages, your browser loads the YouTube code required to display the video. For this purpose, the browser you are using must connect to YouTube's servers. As a result, YouTube becomes aware that our website has been accessed via your IP address. At the same time, YouTube can store cookies on your end device, unless you have prohibited the use of cookies in your browser, or read cookies.
YouTube plugins are used for the purpose of making our website appealing and to enable the display of video content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 letter f GDPR.
Your IP address is collected by us to enable transmission to YouTube. You are not obliged to provide this personal data, but it is not possible to use the relevant parts of our website without providing it.
If you do not want YouTube to assign the personal data collected via our website to your YouTube account, you must log out of YouTube before visiting our website. You can find more information about YouTube at https://www.youtube.com/intl/de/yt/about/.
You can find YouTube's privacy policy at https://policies.google.com/privacy.
4.4 Functions: Contact form and contact by email
If you use the contact form on our website or send us an email, the personal data you provide there will be processed by us. This information is transmitted by your browser or email client and stored in our information technology systems. The processing of this personal data is necessary for answering your request. In addition, your IP address and the date and time of the contact request are stored if you send us an e-mail.
The data processing serves the purpose of responding to your inquiry and preventing misuse of the contact form and ensuring the security of our information technology systems.
This processing is lawful because responding to your inquiry and protecting our IT systems constitute legitimate interests within the meaning of Article 6(1)(f) GDPR.
The personal data will be stored for as long as is necessary to answer your request. If your inquiry leads to the conclusion of a contract at a later date, the data will be stored for as long as is necessary to carry out pre-contractual measures or to fulfill the contract. After that, the personal data is routinely deleted on a regular basis. We do not merge this personal data with other data sources. Data is not passed on to third parties. A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but it is not possible to use the contact form or send an e-mail without providing it.
4.5 Functions: Setting up and using a customer account
You can create a customer account on our website. If you do this, the personal data you enter there will be transmitted to us by your browser and stored in our information technology systems. Your IP address and time of registration are also stored. When you log into your customer account, our website stores cookies on your end device to enable you to remain logged in, even if you have to reload the website in the meantime.
The processing of the personal data entered by you serves the purpose of being able to assign future usage processes such as orders or contact inquiries to your customer account. This processing is lawful because it is necessary for the performance of a contract pursuant to Article 6(1)(b) GDPR. The storage of the IP address and time of registration is necessary to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted in accordance with Article 6(1)(f) GDPR.
The personal data you enter will be stored until your customer account with us is terminated, but in any case for as long as necessary to fulfill the contract. The cookies lose their validity when you log out, otherwise after four weeks at the latest. We do not merge this personal data with other data sources. Data is not passed on to third parties. A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data.
4.6 Functions: Online shop
Our website provides an online store. When you add products to your shopping cart, our website places cookies on your device to enable you to continue with your order even if you have to reload the website in the meantime. When you place an order, the personal data entered in the order form is also transmitted to us by your browser and stored in our IT systems. Your IP address and the time of the order are also stored.
The processing of the personal data entered by you serves the purpose of being able to deliver an order. This processing is lawful because it is necessary for the performance of a contract pursuant to Art. 6 (1) (b) GDPR. The storage of the IP address and time of the order serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted in accordance with Art. 6 (1) (f) GDPR.
The personal data you enter will be stored for as long as necessary to fulfill the contract. The cookies lose their validity after four weeks at the latest. We do not merge this personal data with other data sources. Data will only be passed on to third parties if this is necessary to fulfill the contract (e.g. to payment service providers, IT service providers, shipping companies, external call centers). A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but it is not possible to place an order in our online store without providing it.
4.7 Functions: Subscription to a newsletter
You can subscribe to our newsletter on our website. If you do so, the personal data you provide when registering will be transmitted to us by your browser and stored in our IT systems. Your IP address and the time of registration are also stored.
The processing of the personal data entered by you serves to send the newsletter. This processing is lawful because you have given us your consent in accordance with Article 6(1)(a) GDPR. The purpose of storing the IP address and time of registration is to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted in accordance with Art. 6 (1) (f) GDPR.
The personal data you enter will be stored until your subscription with us is canceled. We do not merge this personal data with other data sources. Data will only be passed on to third parties if this is necessary for sending the newsletter (e.g. to email service providers). A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but it is not possible to subscribe to our newsletter without providing it.
4.8 Functions: Request for advertising material or offers
On our website, you can request individual offers for our products and/or services or have advertising material sent to you. If you do this, the personal data you provide when making the request will be transmitted to us by your browser and stored in our IT systems. If you are already our customer, it is sufficient to provide your customer number and your e-mail address; we will then use the personal data from your customer account. Your IP address and the time of the request are also stored.
The processing of the personal data entered by you serves the purpose of creating and sending the individual offer or sending the advertising material. This processing is lawful because it is necessary for the performance of pre-contractual measures pursuant to Article 6(1)(b) GDPR and responding to your request is a legitimate interest of ours pursuant to Article 6(1)(f) GDPR. The purpose of storing the IP address and time of the request is to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted in accordance with Art. 6 (1) (f) GDPR.
The personal data you provide will be stored for as long as is necessary to send the advertising material or prepare the offer or, if a contract is concluded, to fulfill the contract. We do not merge this personal data with other data sources. Data will only be passed on if this is necessary to fulfill your request (e.g. to shipping companies). A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but it is not possible to send advertising material or prepare an offer without providing it.
4.9 Functions: Registration for wine tastings
You can register for seminars organized by us on our website. If you do this, the personal data you provide when making the request will be transmitted to us by your browser and stored in our IT systems. If you are already a customer of ours, it is sufficient to enter your customer number and your e-mail address; we will then use the personal data from your customer account. Your IP address and the time of the request are also stored.
The processing of the personal data entered by you serves the purpose of preparing and conducting the seminar in which you wish to participate. This processing is lawful because it is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR. The storage of the IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted in accordance with Art. 6 (1) (f) GDPR.
The personal data you provide will be stored until after the seminar has been held. We do not merge this personal data with other data sources. Data will only be passed on to third parties if this is necessary to carry out the seminar (e.g. to cooperation partners who provide the premises). A transfer to a third country or to an international organization is not intended.
4.10. Payment service provider: paydirekt
If you place an order on our website, you can opt for the paydirekt payment method. In this case, payment is made via the payment service provider paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. Your payment data (e.g. payment amount, details of the payee) and your confirmation that the payment data is correct will be collected, processed and transmitted to your bank by paydirekt GmbH in order to carry out the paydirekt payment. This processing is lawful because it is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR if you wish to pay with paydirekt.
The collection of your personal data serves the purpose of enabling transmission to paydirekt for payment processing. We do not store any further data. You are not obliged to provide this personal data; payment processing is also possible via alternatives (e.g. bank transfer, invoice).
Further information on paydirekt can be found at: https://www.paydirekt.de/agb/index.html .
5. rights of data subjects
As a data subject, you have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).
6 Automated decisions in individual cases including profiling
Automated decisions in individual cases, including profiling, do not take place.
7 Notification obligations of the controller
We will notify all recipients to whom your personal data has been disclosed of any rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, Art. 17 para. 1 and Art. 18 GDPR, unless this notification is impossible or involves a disproportionate effort. We will inform you about the recipients if you request this.
8. right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
9. right to withdraw consent to the processing of personal data
In accordance with Art. 7 para. 3 sentence 4 GDPR, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. The revocation therefore only applies to the processing planned after the revocation. Revocation is possible informally by post or e-mail. If you object, we will no longer process your personal data unless another (legal) basis permits this. However, if you revoke your consent and there is no other basis for permission, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 2 letter b GDPR.
The revocation can be made informally and should be addressed to
Schloss Vollrads GmbH & Co. KG
Vollradser Allee
65375 Oestrich-Winkel
Telephone
06723/66-0
info@schlossvollrads.com
www.schlossvollrads.com
If the objection concerns the processing of personal data for the online store, the revocation can be addressed informally to
Weingutsverwaltung Schloss Vollrads KG
Vollradser Allee
65375
Oestrich-Winkel
Telephone
06723/66-0
info@schlossvollrads.com
www.schlossvollrads.com
10. general information on data protection
We also process personal data outside our website, e.g. if you enquire about our products by telephone or otherwise make use of our services outside the website. The applicable information on data protection in accordance with Art. 13, 14 and 21 GDPR can be found in our data protection information sheet.
Shopware Analytics
- Zweck der Verarbeitung
-
Wir werten zusammen mit unserem Shopsoftware-Dienstleister in gemeinsamer Verantwortlichkeit bestimmte Informationen unseres Kundenbestands aus, z. B.:
- Kundengruppe (keine individuellen Kundendaten)
- besuchte Seiten und Klickpfade
- Datum und Uhrzeit des Besuchs
- Informationen über das genutzte Endgerät (Auflösung, Auflösungsdichte, Betriebssystem)
- Referrer-URL
- Informationen des verwendeten Browsers
- Gebietsschema
- Suchanfragen
- Zeitzone
- Rechtsgrundlage
- Art. 6 Abs. 1 Buchst. f DSGVO
- Datenkategorien
- Ableitungen aus Stamm- und Kontaktdaten (Kundengruppe, keine individuellen Kundendaten), Nutzungsdaten, Verbindungsdaten
- Empfänger der Daten
- shopware AG, Ebbinghoff 10, 48624 Schöppingen, Deutschland (als gemeinsam Verantwortlicher), sowie IT-Dienstleister
- Wesentliches der gemeinsamen Verantwortlichkeit
- Die gemeinsame Verantwortlichkeit besteht zwischen uns und der shopware AG; die Daten werden auf unserem Shop erhoben und sodann auf Server der shopware AG bzw. deren Dienstleister übertragen. Mit Ausnahme der Einholung Ihrer Einwilligung für den Einsatz von Cookies oder vergleichbaren Technologien sowie der Erfüllung dieser Informationspflichten obliegen alle Pflichten, insbesondere die Umsetzung der Betroffenenrechte, der shopware AG, die Sie unter legal@shopware.com erreichen können. Sie können Ihre Betroffenenrechte auch bei uns geltend machen; wir werden Ihre Anfrage dann entsprechend an die shopware AG weiterleiten. Die shopware AG kann aus den erhobenen Daten Verhaltensweisen auf unserem Store ableiten, diese Daten jedoch nicht Ihnen als Person zuordnen.
- Beabsichtigte Drittlandübermittlung
- Keine
- Speichern/Lesen auf Ihrem Endgerät
- Speichern wir auf Ihrem Endgerät aufgrund Ihrer Einwilligung personenbezogene Daten oder lesen solche aus? Ja, Details siehe Consent Management.
