Data Protection Policy

Data Protection Policy

I.    Name and Address of the Data Controller

"Controller" within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and regulations is:
Deutsches Weininstitut GmbH (German Wine Institute)
Platz des Weines 2
55294 Bodenheim
Germany
Tel.: + 49 6135 9323-0
E-Mail: info@deutscheweine.de
Website: www.deutscheweine.de

II.    Name and Address of the Data Protection Officer

Mario Arndt
Deudat GmbH
Zehntenhofstr. 5b
65201 Wiesbaden
Germany

Tel.: +49 611 950008-32
Fax: +49 611 950008-5932
Email:  kontakt@deudat.de  

III.    General Information on Data Processing

1. Information about the collection of personal data
(1) This privacy statement informs you about how we handle personal data we obtain from you when you use our website. The term "personal data" refers to all data relating to you as an identified or identifiable natural person, such as name, address, e-mail addresses or user behaviour.
 (2) Whenever you send us an e-mail or contact us via a contact form, we will store the communicated data (i.e. your e-mail address, your name and phone number if you indicate them) in order to answer your questions. The data collected in this context will be deleted as soon as its storage is no longer necessary, or, in case there are statutory retention obligations, we restrict the processing of such data.
(3) In case we use service providers to carry out individual functions forming part of our offer or in case we want to use your data for advertising purposes, we will inform you in detail about such proceedings as described below.

2. Your rights
(1) As regards your personal data, you shall have the following rights:
–     Right to be informed (or, in keeping with GDPR terminology, the "right of access")
–     Right to rectification or erasure,
–     Right to restriction of processing,
–     Right to object to processing
–     Right to data portability
(2) Furthermore, you are entitled to lodge a complaint about the processing of your personal data with a competent supervisory authority.

3. Collection of personal data when you visit our website
(1) If you use our website for information purposes only, i.e. if you do not register or send us information in any other way, we will only collect those personal data that your browser transmits to our server. If you want to view our website, we collect the data specified below, which is technically necessary for us in order to be able to display our website on your system and to guarantee stability and security (the legal basis for this is Art. 6 (1) sentence 1 (f) of the GDPR):
–     IP address
–     Date and time the pages are visited
–     Time zone difference from Greenwich Mean Time (GMT)
–     Content of the visit (the exact page)
–     Status of access/HTTP status code
–     Amount of data transmitted in each individual case
–     Website from which the request to view our website is made
–     Browser
–     Operating system and its surface
–     Language and version of browser software.
(2) In addition to the above-mentioned data, cookies will be stored on your computer when you use our website. Cookies are small text files which are allocated to the browser you use and stored on your hard disk, and which send certain information to the server from which the cookie is set (in this case to our server). Cookies cannot execute programmes or transmit viruses to your computer. Their purpose is to make the internet content as a whole more user-friendly and efficient.

(3) Cookie policy:
a)     This website uses the following types of cookies, the scope and functioning of which is explained below:
–     Transient cookies (see b)
–     Persistent cookies (see c).
b)     Transient cookies will be deleted automatically when you close your browser. These include, in particular, the session cookies. They store a so-called session ID, with the help of which different requests through your browser can be assigned to a common session. This allows your computer to be identified when you return to our website. The session cookies will be deleted when you log off or close the browser.
c)     Persistent cookies will be deleted automatically after a set time, which may differ from cookie to cookie. You can delete cookies at any time in the security settings of your browser.
d)     You can configure your browser settings in accordance with your wishes and, e.g., block third-party cookies or all cookies. Please note that in this case you may not be able to use all functions of our website.
e)     If you have an account with us, we use cookies to be able to identify you in case of follow-up visits. If we would not do so, you would have to log in again each time you visit us.
f)     The Flash cookies used will not be captured through your browser, but through your Flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your terminal device. These objects store the required data irrespective of the browser you use. They do not have an automatic expiry date. If you do not want Flash cookies to be used, you must install a corresponding add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe "Flash Killer Cookie" for Google Chrome. The use of HTML5 storage objects may be prevented by setting the private mode in your browser. In addition, it is recommended to delete the cookies and your browser history manually at regular intervals.

4. Further functions and services of our website
(1) In addition to using our website for information only, you can also benefit from certain services, such as the provision of maps, which you might like to make use of. For some of these services, you have to provide further personal data, which we use to render the corresponding services and for which the described principles of data processing apply.
(2) In some cases, we use third-party service providers to process your data. They have been carefully selected and commissioned by us, they must follow our instructions and are checked regularly.

5. Objection to the processing of your data or revocation of consent
(1) If you have consented to the processing of your data, you may revoke such consent at any time. Once you have revoked your consent vis-a-vis us, this will affect the admissibility of the processing of your personal data.
(2) As far as we base the processing of your personal data on a balance of interests, you may object to the processing. This is in particular the case if the processing is not necessary for the performance of a contract with you, which we will explain in the following description of the individual functions.  If you object to the processing in such case, we kindly ask you to state the reasons why you do not agree to the processing of your personal data in the way we do it. In case your objection is justified, we will check the situation and either stop or adapt processing or demonstrate compelling legitimate grounds for which we continue the processing.
(3) Of course you can object at any time to the processing of your personal data for purposes of advertising or data analysis. In case of such objection to the use of your data for advertising purposes, please inform us via our contact data:
Deutsches Weininstitut GmbH
Platz des Weines 2
55294 Bodenheim
Deutschland
Tel.: + 49 6135 9323-0
E-Mail: info@deutscheweine.de.

IV.    Use of Our Webshop

(1) If you want to order in our webshop, it is necessary, for the contract we enter into that you enter your personal data which we need in order to process your order. Mandatory information that we require to execute the contract is identified as such, other details we ask for are voluntary. The data you enter is processed so as to enable us to process your order. For this purpose, we might pass on your data for the payment to our house bank. The legal basis for this is Art. 6 ( 1) sentence 1 (b) of the GDPR.
We might further process the data you enter in order to inform you about other interesting products from our portfolio or send you e-mails containing technical information.
(2)     Due to statutory requirements arising from commercial and tax law, we are obliged to store your address, payment and order data for ten years. After two years, we will restrict the processing of your data, i.e. your data is only used to comply with these legal requirements.

V.    Use of Google Analytics

(1)     This website makes use of Google Analytics, a web analysis service of Google Inc. („Google“). Google Analytics works with so-called "cookies", i.e. text files that are stored on your computer, enabling an analysis of your use of the website to be made. The information about your use of this website generated by the cookie are usually transmitted to a server of Google in the USA, where it will be stored. In case IP anonymisation is activated on this website, your IP address will be abbreviated beforehand by Google within EU Member States or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website and internet usage for the website operator.
(2)     The IP address transmitted by your browser within the scope of Google Analytics will not be associated with any other data held by Google.
(3)     You can prevent the storage of cookies by making appropriate settings in your browser software. However, please note that if you do this, you may not be able to make full use of all functions of this website. You may also prevent the data generated by the cookie and related to your usage of the website (including your IP address) being collected and processed by Google by downloading and installing the browser plug-in available via the following link: tools.google.com/dlpage/gaoptout.

Opt-out cookies prevent future collection of your data when you visit this website. To prevent Universal Analytics tracking across devices, you must opt-out on all systems you use. If you click here, the opt-out cookie will be set: Disable Google Analytics.

(4)     This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in an abbreviated form, so as to exclude that they can be linked to persons. That means that as far as the data collected about you could be linked to a person, such link will be excluded right from the beginning and the personal data will be deleted immediately.
(5)     We use Google Analytics to be able to analyse and continuously improve the use of our website. The statistical evaluations obtained through this tool help us to improve our content and make it more interesting for you. For exceptional cases in which personal data is transmitted to the USA, Google has committed itself to complying with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 (f) of the GDPR.
(6)     Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html, data protection overview: www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: www.google.de/intl/de/policies/privacy.
(7) In addition, this website uses Google Analytics for an analysis of visitor flows across devices. This analysis is made via user IDs. In your customer account, you may disable cross-device tracking of your usage under "My data", "Personal data".

VI.    Use of Social Media Plug-ins

(1)     Currently, we use the following social media plug-ins: Facebook, Google+, Twitter, YouTube, Instagram. Our approach in this regard is the so-called two-click solution. This means that a visit to our website will not lead automatically to personal data being passed on to the plug-in providers. You can identify the provider of the plug-in by its first letter or its logo. We give you the opportunity to communicate directly with the plug-in provider via the button. Only if you click on the selected field and thus activate it, will the information that you have accessed the corresponding page of our website content be transmitted to the plug-in provider. Further, the data specified under III (3) of the present policy statement will be transmitted. As far as Facebook is concerned, according to the corresponding providers in Germany, the IP address will be anonymised immediately upon collection. That means by activating the plug-in, personal data regarding you will be transmitted to the corresponding plug-in provider and stored there (in case of US providers in the USA). Since the plug-in provider collects the data mainly via cookies, we recommend that you delete all cookies via the security settings of your browser before you click on the greyed out box.
(2)     We do not have any influence on the data collected or the data processing procedures, nor do we know the exact extent of the data collected, the purposes of processing or the duration of storage. Furthermore, we do not have any information about the erasure of the collected data by the plug-in provider.
(3)     The plug-in provider stores the data collected about you as usage profiles and uses it for advertising purposes, market research and/or for adapting its website to demand. This evaluation takes place, in particular, (also for users who are not logged in) in order to display demand-oriented advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the corresponding plug-in provider. Via the plug-ins, we give you the opportunity to interact with the corresponding social networks and with other users, so as to enable us to improve our content and make it more interesting for you as our user. The legal basis for the use of the plug-ins is Art. 6 (1) sentence 1 (f) of the GDPR.
(4)     The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there or not. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you always log out after using a social network, especially before activating the button, since this will avoid this information being assigned to your profile with the plug-in provider.
(5)     For more information about the purpose and extent of data collection and processing by the plug-in provider, please refer to the privacy policy statements of these providers as specified below. There, you will also find further information about your rights in this regard and setting options to protect your privacy.
(6)     Addresses of the various plug-in providers and URLs with their respective information about data privacy:
a)     Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has committed itself to complying with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
b)     Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has committed itself to complying with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
c)     Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has committed itself to complying with the EU-US Privacy Shield www.privacyshield.gov/EU-US-Framework.

VII.    Integration of YouTube Videos

(1)     We have integrated YouTube videos into our website. They are stored on www.YouTube.com and can be played directly from our website.
(2)     When you visit the website, YouTube will receive the information that you have accessed the corresponding subpage of our website. In addition, the data specified under III (3) of the present policy statement will be transmitted. This will happen regardless of whether you have a user account with YouTube through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish this information to be associated with your profile on YouTube, you must log out before you activate the button. YouTube will store your data as user profiles and use them for purposes of advertising, market research and/or demand-oriented design of its website. This evaluation takes place in particular (even for users who are not logged in) in order to display demand-oriented advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact YouTube.
(3)     For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There, you will also find further information about your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA. The company has committed itself to complying with the EU-US Privacy-Shield, www.privacyshield.gov/EU-US-Framework.

VIII.    Integration of mapz.com

(1) On this website, we make use of mapz.com, a maps service of Kober-Kümmerly+Frey Media AG, Germany, to display interactive maps of wine regions and vineyards on the website.
(2) When you visit the website, Kober-Kümmerly+Frey will automatically receive the information that the corresponding page of our website has been accessed from your IP address. In addition, the data specified under section III (3) of this policy statement will be transferred.
(3) Your IP address will be stored by Kober-Kümmerly+Frey in an anonymised form, which does not enable tracking of you as a person.
(4) The data collected by Kober-Kümmerly+Frey is used exclusively to ensure the operation of the service.
(5) Kober-Kümmerly+Frey does not transmit any data to third parties and operates its server systems exclusively in member states of the European Union.