§1 GENERAL
(1) Privacy Policy - Weingut Mueller-Oswald
§1 GENERAL
(1) We are pleased that you are visiting our website www.mueller-oswald.de and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website.
Personal data is all data with which you can be personally identified. Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and the controller responsible for your data processing. This privacy policy only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.
(2) The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Mueller-Oswald, Klara & Simon Mueller-Oswald, Wöllsteinerstr. 6, 55599 Siefersheim, Germany, Phone: 017684618235, info@mueller-oswald.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, is responsible for the processing of personal data.
(3) This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
§2 COLLECTION AND PROCESSING OF PERSONAL DATA FOR INFORMATIONAL USE
If you use our website for purely informational purposes, i.e. if you do not log in or register, no personal data will be collected from you, with the exception of data that your browser transmits to enable you to visit the website. This data includes
- the IP addresses of the requesting computers
- Approximate location based on IP range
- Volume of data transferred
- the name of the retrieved file
- Date and time of the request
- the URL of the access
- Internet provider
- Internet speed
- browser
- operating system
Access to the online store and the retrieval of a file stored in our offer is logged. The storage and use takes place on the basis of the relevant data protection laws for the purposes of advertising, market research and needs-based design, for statistical evaluations and to ensure the security of your data and our offer.
§3 HOSTING
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: www.shopify.de/legal/datenschutz
Any further processing on Shopify servers other than those mentioned above will only take place within the scope specified below.
§4 DATA PROCESSING FOR THE FULFILLMENT OF THE CONTRACT
(1) GENERAL
The personal data you provide to us during the ordering process (e.g. first/last name, address, contact details (email address), payment details) are required for the conclusion of a contract with us and for smooth order and payment processing. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us (e.g. Shopify Payments, Shop Pay or PayPal). The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract. The legal basis for this processing is Art. 6 para. 1 b) GDPR. Recipient categories are payment service providers, shipping service providers (e.g. Hermes or DHL), hosting providers, merchandise management system if applicable, suppliers if applicable (dropshipping). We store the data required for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required under commercial and tax law for the periods specified by law, generally ten years (see Section 257 HGB, Section 147 AO).
As a protective measure, the data you enter is transmitted via an encrypted connection, just like the rest of the website.
(2) FORWARDING OF INFORMATION TO PAYMENT AND SHIPPING SERVICE PROVIDERS
Shipcloud GmbH
If your goods are delivered by the shipping service provider DPD, UPS or DHL and you have expressly consented to the forwarding of your email address during the ordering process, this will be forwarded to shipcloud (shipcloud GmbH, St. Annenufer 5 | 20457 Hamburg) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. An announcement of the delivery or a coordination of the delivery date by shipcloud is then not possible.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this privacy policy) or the shipping service provider directly.
Translated with www.DeepL.com/Translator (free version)
UPS
If your goods are delivered by the shipping service provider UPS and you have expressly consented to the forwarding of your email address and telephone number during the ordering process, these will be forwarded to UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for UPS to announce the delivery or coordinate the delivery date.
Any consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this privacy policy) or the shipping service provider directly.
DHL
If your goods are delivered by the shipping service provider DHL and you have expressly consented to the forwarding of your email address during the ordering process, this will be forwarded to DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for DHL to announce the delivery or coordinate the delivery date.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this privacy policy) or the shipping service provider directly.
Translated with www.DeepL.com/Translator (free version)
DPD
If your goods are delivered by the shipping service provider DPD and you have expressly consented to the forwarding of your email address and/or your telephone number during the ordering process, this will be forwarded to DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for DPD to announce the delivery or coordinate the delivery date.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this data protection declaration) or the shipping service provider directly.
T & S Transport- & Speditionsservice GmbH
If your goods are delivered by the shipping service provider T & S - Transport & Speditionsservice GmbH and you have expressly consented to the forwarding of your email address and/or your telephone number during the ordering process, this will be forwarded to T & S Transport- & Speditionsservice GmbH (T & S - Transport & Speditionsservice GmbH, Am Ockenheimer Graben 5, 55411 Bingen) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for T & S - Transport & Speditionsservice GmbH to announce the delivery or coordinate the delivery date.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this privacy policy) or the shipping service provider directly.
Translated with www.DeepL.com/Translator (free version)
Schenker Deutschland AG
If your goods are delivered by the shipping service provider Schenker Deutschland AG and you have expressly consented to the forwarding of your email address and/or your telephone number during the ordering process, this will be forwarded to Schenker Deutschland AG (Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for Schenker Deutschland AG to announce the delivery or coordinate the delivery date.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing (named under point 1 of this privacy policy) or the shipping service provider directly.
If your goods are delivered by the shipping service provider Hermes and you have expressly consented to the forwarding of your email address during the ordering process, this will be forwarded to Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of your email address, delivery will be made in accordance with the conditions set out in section 4.1 of this privacy policy. It is then not possible for Hermes to announce the delivery or coordinate the delivery date.
Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing or the shipping service provider directly.
Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Shopify Payments' data protection at the following Internet address: www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
Shop Pay
On this website we offer, among other things, payment with Shop Pay. The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter referred to as "Shop Pay").
If you decide to pay with Shop Pay, Shop Pay will collect various personal data from you. You can find details on this in the Shop Pay help section at www.shopify.com/pay and in Shop Pay's privacy policy at www.shopify.de/legal/datenschutz. The transmission of your data to Shop Pay is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.
PayPal
On this website we offer, among other things, payment via PayPal. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
§5 DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND WHEN CONTACTING US
(1) Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data as permitted by law.
(2) Data processing when contacting us
Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of implementing pre-contractual measures or responding to your request or for making contact and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
§6 DATA PROCESSING WHEN USING THE COMMENT FUNCTION
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you have chosen will be saved and published on this website. Your IP address will also be logged and stored. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by posting a comment. We need your e-mail address in order to contact you if a third party objects to your published content as unlawful. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
Purpose of processing
It is possible to write a comment. Your data (e.g. name/pseudonym, e-mail address, website) will then only be processed for the purpose of publishing your comment.
Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, transparency and opinion-forming. Your interest in data protection is safeguarded, as you can publish your comment under a pseudonym.
Recipient
Mueller-Oswald - Klara & Simon Mueller-Oswald
Storage period
There is no specific storage period. You can request the deletion of your comment at any time.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data which is based on Article 6(1)(f) GDPR and which is not used for direct marketing purposes.
In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
§7 DATA PROCESSING WHEN USING THE STORE EVALUATION FUNCTION
Purpose of processing
If you decide to rate our service, we process your e-mail address and your order number and date in order to send you a request for rating confirmation and a final rating request as well as to assign your rating and prevent rating abuse.
Legal basis
This processing is based on our legitimate interests in improving our services and preventing rating abuse in accordance with Art. 6 para. 1 f) GDPR.
Legitimate interest
Our legitimate interest is the public exchange of user opinions on our products. The publication serves, among other things, transparency and opinion-forming. Your interest in data protection is safeguarded, as you can publish your review under a pseudonym.
Recipient
Mueller-Oswald - Klara & Simon Mueller-Oswald
Storage period
Your data will be stored as long as the store rating is displayed on our website.
Translated with www.DeepL.com/Translator (free version)
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to data processing which is based on Article 6(1)(f) GDPR and which is not for direct marketing purposes.
In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
§8 WEB ANALYSIS WITH GOOGLE ANALYTICS
Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Legal basis
The legal basis for this processing is Art. 6 (1a) GDPR.
Categories of recipients
Google and its partner companies.
Transfer to a third country
Google Ireland Limited is a company affiliated with Google LLC. Google LLC is located
Right to object
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout
Further information on the use of data by Google, setting and objection options, can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
§9 INFORMATION ABOUT COOKIES
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are stored in the internet browser or by the internet browser on your end device. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). These cookies make it possible, for example, to place several products in a shopping cart.
Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). These cookies enable you, for example, to save your passwords for a customer account permanently or to remember the contents of a virtual shopping cart for a later visit to the website.
Translated with www.DeepL.com/Translator (free version)
The following consent to the use of cookies is displayed on your first visit to our website. You may have expressly given this consent when you visited our website:
COOKIE NOTE
In order to provide you with a pleasant online experience, we use cookies on our website. Cookies enable the use of certain features (e.g. saving your shopping cart for your next visit) or the customization of content and advertisements to your personal needs. Cookies also enable us to better understand how our website is used. You can find more detailed information in our privacy policy (link).
BUTTON: Accept all cookies
BUTTON: Accept only technical cookies
Storage duration
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a different lifespan, ranging from a few minutes to several years. The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
Translated with www.DeepL.com/Translator (free version)
Legal basis
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
Right of revocation
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may limit the functionality of our website. You can revoke your consent to permanent storage by deleting the stored cookies via your browser.
Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
You can find out how to manage (including deactivating) cookies in the most important browsers by clicking on the links below:
Translated with www.DeepL.com/Translator (free version)
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
§10 SOCIAL PLUGINS
(1) Facebook
We use social plugins from facebook.com, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition "Facebook Social Plugin". For example, if you click on the "Like" button or leave a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Facebook also makes your preferences public to your Facebook friends. If you are logged in to Facebook, Facebook can assign your visit to our site directly to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which websites you have visited, your IP address) that is stored by Facebook. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). For details on the handling of your personal data by Facebook and your rights in this regard, please refer to the Datenschutzhinweisen von Facebook. Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616.If you do not want Facebook to associate the data collected about you via our websites with your Facebook account, you must log out of Facebook before visiting our websites. You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices. You can also opt out of the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) contradict. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (Facebook).
(2) Instagram
Our website uses social plugins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, subscribe to the authors of the content or our posts. The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here:
http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options to protect your privacy can be found in Instagram's data protection information: http://instagram.com/about/legal/privacy/.
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
(3) YouTube
Our website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence. In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information on data protection at "YouTube" can be found in the provider's privacy policy at https://www.google.de/intl/de/policies/privacy
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection.
(4) Pinterest
On our website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA ("Pinterest"). When you visit a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.
Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy can be found in Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy
§11 OUR ONLINE PRESENCE ON FACEBOOK, INSTAGRAM, PINTEREST AND YOUTUBE
Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We use them to provide information about our products and current special offers.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally placed on your device for this purpose. The visitor behavior and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f. GDPR to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be hier viewed here.
For detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, please refer to the providers' data protection notices linked below. data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here:
Facebook:https://www.facebook.com/legal/terms/page_controller_addendu
und https://www.facebook.com/about/privacy/
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy
Google/YouTube:https://www.google.de/intl/de/policies/privacy
Possibility of objection (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/?next=/settings/
Google/YouTube: https://adssettings.google.com/authenticated
§12 GOOGLE RECAPTCHA
To protect against misuse of our web forms and spam, we use the Google reCAPTCHA service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) in some forms on this website. By checking manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in protecting our website from misuse and in a trouble-free presentation of our online presence, which predominate in the context of a balancing of interests. Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, as part of the verification methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are analyzed by Google reCAPTCHA. No personal data is read or saved from the input fields of the respective form.
Google is certified under the EU-US Privacy Shield. A current certificate can be viewed hier.
Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. You can prevent Google from collecting the data generated by the JavaScript or cookie and relating to your use of the website (including your IP address) and from processing this data by Google by preventing the execution of JavaScripts or the setting of cookies in your browser settings.
Please note that this may limit the functionality of our website for your use. Further information on Google's data protection policy can be found at hier.
§13 GOOGLE MAPS PLUGIN
To make it easier to reach us or our partners, we have integrated the map function of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") via an interface (API). For technical reasons, your IP address is transmitted to Google's servers so that the map with our location can be displayed in your browser. The high security standards of the Google platform and the associated Google privacy policy apply as protective measures (http://www.google.com/intl/de-DE/privacy). Da Google is based in the USA and therefore in a so-called third country, further guarantees are required to ensure an adequate level of data protection in Europe. Google has been certified under the EU-US Privacy Shield and has thus demonstrated an appropriate level of data protection (https://www.google.de/policies/privacy/frameworks/). The purpose of the data transfer is to integrate Google's map function, which is popular among our users and can be used to display our location graphically without having to leave our website. The legal basis is the so-called legitimate interest, which has been examined for the pursuit of the purpose and in the context of the aforementioned protective measures and in accordance with the European data protection requirements under Art. 6 para. 1 lit. f GDPR.
Possibility of objection (opt-out):
https://adssettings.google.com/authenticated
§14 USE OF CUSTOMER DATA FOR DIRECT ADVERTISING
(1) Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named at the beginning. Once you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. in the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot identify which specific person has clicked on the link. You have expressly given the following consent separately or, if applicable, during the ordering process: Subscribe to newsletter
Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.
Categories of recipients
Newsletter mailing provider, if applicable
Storage duration
Your e-mail address will only be stored for the duration of the desired registration for the newsletter dispatch.
Right of revocation
You can withdraw your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter.
(2) Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services to those already purchased from our range by e-mail. In accordance with Section 7 (3) UWG, we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur transmission costs for this in accordance with the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately.
§15 DURATION OF THE STORAGE OF PERSONAL DATA
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject withdraws their consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
§16 YOUR RIGHTS AS A DATA SUBJECT
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller
1. right to information
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
2. right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. right to erasure
You can request the erasure of your personal data under the conditions of Art. 17 GDPR.
4. right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.
5. right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller in accordance with Art. 19 GDPR, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller.
7. right to revoke the declaration of consent under data protection law
In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
8. right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Art. 77 GDPR.
PLEASE ALSO NOTE YOUR RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR:O:
a) General: justified objection required
If the processing of personal data concerning you takes place
- to protect our overriding legitimate interest (legal basis pursuant to Art. 6 para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Translated with www.DeepL.com/Translator (free version)
Responsible for data processing:
Weingut Mueller-Oswald
Inhaber: Simon Müller-Oswald
Alzeyer Str. 18
55234 Wahlheim