When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmission over the internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

§ 1 Information on the collection of personal data

(1) Below we inform you about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) for data processing on this website is

Philipp König, Landhaus Kenner 1, 65385 Rüdesheim am Rhein,

Telephone: +49 (0)6722 1064, email: info@weingut-robert-koenig.de

(3) When you contact us by email or via a contact form, the data you provide (your email address, and optionally your first name, last name, and telephone number) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if there are statutory retention obligations.

(4) The processing of data entered into the contact form is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. An informal notification by email to info@weingut-robert-koenig.de is sufficient. The lawfulness of data processing operations carried out before the revocation remains unaffected by the revocation. The data you entered in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

(5) If we use contracted service providers for individual functions of our service or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage period.

(6) Your personal data will be deleted if you have withdrawn your consent to its processing or if the personal data is no longer necessary for the purpose for which it was processed. Cookies (see Section 3, Paragraph 2) will be deleted after 12 months. Data collected in connection with a contact request will be deleted after 12 months.

(7) Your personal data will not be transferred to a third country outside the EU or the EEA. Any other transfer will only occur if we are legally or officially obligated to do so, or if the transfer is necessary for your use of the website.

(8) Data transfer to the USA: Please note that we use and have integrated tools from US providers on our website (see Sections 7 to 9). Your personal data may be transferred to these US companies and stored or otherwise processed on US servers. The level of data protection in the USA does not correspond to the standard of the European Union. In particular, there is a risk that US authorities may access and process the transferred personal data, for example, for auditing and surveillance purposes. Data subjects face the risk that, in principle, no (judicial) legal remedies are available in this regard. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para. 1 lit. a GDPR.

 

§ 2 Your rights

(1) You have the right to information regarding your personal data

– to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved.

– to request, in accordance with Article 16 GDPR, the immediate rectification of inaccurate or incomplete personal data concerning you that we hold.

– to request the erasure of your personal data stored by us in accordance with Article 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

– to request the restriction of the processing of your personal data pursuant to Article 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you object to its erasure, and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR;

– in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller ( right to data portability );

- In accordance with Article 7(3) GDPR, you have the right to withdraw your consent at any time. This means that we will no longer be permitted to process your data based on this consent in the future.

- You have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR ( right to lodge a complaint ). Generally, you can contact the supervisory authority of your habitual residence, your place of work, or our company's registered office. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection commissioners and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

(2) Right to object to processing pursuant to Article 6(1)(e) or (f) GDPR:

You have the right to object , on grounds relating to your particular situation, at any time to the processing of your personal data based on point (e) or (f) of Article 6(1) of the GDPR, which is carried out on the basis of the following provisions:

The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

If you object, we will no longer process your personal data in this case, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@weingut-robert-koenig.de

§ 3 Collection of personal data when visiting our website

(1) When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability, security, and user-friendly operation (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

– IP address

– Date and time of access

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– amount of data transferred in each case

– Website from which access is made (referrer URL)

– Browser, browser type and browser version

– Language and version of the browser software

– operating system used.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They allow the entity that sets the cookie (in this case, us) to receive certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the overall internet experience more user-friendly and effective.

(3) Use of cookies:

1. a) This website uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

1. b) Transient cookies are automatically deleted when you close your browser. These include session cookies. These store a so-called session ID, which allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
2. c) Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
3. d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.
4. e) These cookies allow us to recognize your browser on your next visit. You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to block the acceptance of cookies in certain cases or in general, and to activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website. Cookies that are necessary for carrying out the electronic communication process or for providing certain functions you have requested (e.g., the shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services. Any other cookies (e.g., cookies for analyzing your browsing behavior) are addressed separately in this privacy policy.

§ 4 Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this, you will generally need to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

(3) We may also share your personal data with third parties if we offer promotions, contests, contracts, or similar services jointly with partners. You will receive more detailed information when you provide your personal data or below in the description of the offer.

(4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.

§ 5 Objection or revocation of the processing of your data

(1) If you have given your consent to the processing of your data, you can withdraw it at any time. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have communicated it to us.

(2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the following description of the functions. When exercising such an objection, please state the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either cease or adjust the data processing or demonstrate to you our compelling legitimate grounds for continuing the processing.

(3) You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details listed above in Section 1.

§ 6 Use of our webshop

(1) If you wish to place an order in our online shop, you must provide your personal data, which we require to process your order. Mandatory information required for processing the contract is marked accordingly; all other information is voluntary. For orders of alcoholic beverages, the user's age will be collected. We process the data you provide to process your order. For this purpose, we may transfer your payment details to our bank. The legal basis for this is Article 6(1)(b) GDPR.

You can voluntarily create a customer account, which allows us to save your data for future purchases. When you create a customer account, the data you provide is stored until you revoke your consent. You can delete all other data, including your user account, at any time in the customer area.

(2) We are required by commercial and tax law to store your address, payment, and order data for a period of ten years. However, after two years, we restrict the processing of this data, meaning it will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL or TLS technology.

§ 7 Newsletter

(1) With your consent, you can subscribe to our newsletter, which will inform you about our current special offers. The advertised goods and services are specified in the consent form.

(2) We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. We also store your IP address and the date and time of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, investigate any potential misuse of your personal data.

(3) Mailchimp:

1. a) This website uses Mailchimp for sending newsletters. The provider is [name of provider].

The Rocket Science Group LLC d/b/a Mailchimp

Attn. Privacy Officer

privacy@mailchimp.com

675 Ponce de Leon Ave NE, Suite 5000

Atlanta, GA 30308 USA.

Mailchimp is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Mailchimp's servers in Germany and/or the USA .

     Attention is drawn to the data transfer to the USA and the associated risks (see above § 1 (8)).

Data processing is based on your consent, provided you have given it; consent can be revoked at any time.

If you do not want your data analyzed by Mailchimp, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter email. You can also unsubscribe directly on the website.

We have entered into a contract with Mailchimp in which we oblige Mailchimp to protect our customers' data and not to pass it on to third parties.

1. b) Data analysis by Mailchimp:

Mailchimp allows us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. This way, we can determine, among other things, which links were clicked most frequently.

Furthermore, we can see whether certain predefined actions were performed after opening/clicking (conversion rate). For example, we can see if you made a purchase after clicking on the newsletter.

Mailchimp also allows us to segment (“cluster”) newsletter recipients based on various categories. For example, recipients can be segmented by age, gender, or location. This allows us to better tailor newsletters to specific target groups.

For detailed information about Mailchimp's features, please see the following link: https://mailchimp.com/legal/ .

(4) The only mandatory information required for sending the newsletter is your email address. Providing any further data is optional.

This is voluntary and will be used to personalize our communications with you. After your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(a) of the GDPR.

(5) You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do this by clicking on the link provided in every newsletter email, by sending an email to info@weingut-robert-koenig.de, or by contacting us using the contact details provided in the legal notice.

(6) The data you provide to us for the purpose of receiving our newsletter will be stored by us until you unsubscribe. After you unsubscribe, this data will be deleted from both our servers and Mailchimp's servers (for more information, please see Mailchimp's privacy policy at: https://mailchimp.com/legal/privacy/ ). Data stored by us for other purposes will remain unaffected. The lawfulness of data processing operations already carried out also remains unaffected by your withdrawal of consent.

§ 8 Web Analytics

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This shortens IP addresses before further processing, thus preventing them from being linked to a specific individual. Therefore, any personal data collected about you is immediately anonymized and the personal data is promptly deleted.

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics we gather allow us to improve our services and make them more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR or your consent, if you have given it. You can withdraw your consent at any time.

(6) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/de.html, Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy .

(7) Attention is drawn to the transfer of data to the USA and the associated risks (see above § 1 (8)).

1. AWStats

This website uses the free web analytics software AWStats (http://www.awstats.org/) to collect and store data based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, in accordance with Article 6 Paragraph 1 Letter f of the GDPR. Pseudonymized user profiles can be created and evaluated from this data for the same purpose. Cookies may be used for this. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. Among other things, cookies enable the recognition of the internet browser. The data collected using AWStats technology (including your pseudonymized IP address) is processed on our servers. The information generated by the cookie in the pseudonymized user profile is not used to personally identify the visitor to this website and is not merged with personal data about the holder of the pseudonym. If you do not agree to the storage and evaluation of this data from your visit, you can object to its storage and use at any time by clicking below. In this case, an opt-out cookie will be stored in your browser, which means that AWStats will not collect any session data. Please note that deleting all your cookies will also delete the opt-out cookie, and you may need to reactivate it.

§ 9 Social Media

1. Use of social media plug-ins:

(1) We currently use the following social media plugins: [Facebook, Instagram, YouTube]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to the plugin providers. You can identify the plugin provider by the marking on the box above its initial letter or logo. We offer you the option of communicating directly with the plugin provider via the button. Only when you click on the marked field and thereby activate it will the plugin provider receive the information that you have accessed the corresponding page of our website. In addition, the data specified in Section 3 of this declaration will be transmitted. According to the respective providers, in the case of Facebook, the IP address is anonymized immediately after collection in Germany. By activating the plugin, your personal data is transmitted to the respective plugin provider and stored there (in the USA for US providers). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

(2) We have no influence on the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, or the storage periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or to tailor its website to user needs. This analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact the respective plug-in provider. The plug-ins allow you to interact with social networks and other users, enabling us to improve our services and make them more interesting for you. The legal basis for the use of the plug-ins is Article 6(1)(f) GDPR or your consent, if you have given it. You may withdraw your consent at any time.

(4) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, the data we collect from you will be directly associated with your existing account with that provider. If you click the activated button and, for example, share the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out of social networks regularly after use, and especially before activating the button, as this will prevent the data from being associated with your profile on the plug-in provider's platform.

(5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers, which are linked below. There you will also find further information on your rights and settings options to protect your privacy.

(6) Addresses of the respective providers with their privacy policies:

1. a) Facebook:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Privacy Policy: https://www.facebook.com/about/privacy/

Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

1. b) Instagram:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Privacy Policy: https://help.instagram.com/519522125107875

1. c) YouTube:

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA

Privacy policy: https://policies.google.com/privacy?gl=DE&hl=de

(7) Attention is drawn to the transfer of data to the USA and the associated risks (see above § 1 (8)).

1. Integration of YouTube videos:

(1) We have embedded YouTube videos in our online service, which are stored on http://www.YouTube.com and can be played directly from our website.

(2) By visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube. The legal basis for this processing is the legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in an appealing website presentation or your consent, if you have given it. You can withdraw your consent at any time.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

(4) Attention is drawn to the transfer of data to the USA and the associated risks (see above § 1 (8)).