Privacy policy
Privacy policy and information on any consents you may have given us
As the responsible party within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.
I. The concept of personal data and other important concepts
In simple terms, personal data is any information that relates to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the DS-GVO (General Data Protection Regulation).
II. Name and contact details of the data controller; contact details of the data protection officer
In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of the processing of personal data. The name and contact details of the person responsible (and if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / imprint.
III. Purposes of the processing of your personal data; legal bases for the processing
We process your personal data within the scope of our activities for the purposes listed below in accordance with the legal bases stated in each case.
1. in order to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, the processing of your personal data is based on Article 6 (1) (f) DS-GVO.
2. in order to carry out pre-contractual measures based on an enquiry from you, the processing of your personal data is based on Article 6 (1) (b) DS-GVO.
3. In order to protect our legitimate interest in responding to enquiries and in taking other measures based on an enquiry from you, the processing of your personal data is based on Article 6 (1) (f) DS-GVO.
4. For the performance of a contract to which you are a party, the processing of your personal data is based on Article 6 (1) (b) DS-GVO.
5. For the implementation of measures for the purpose of advertising, the processing of your personal data is either based on your consent pursuant to Article 6 (1) (a) DS-GVO or on the basis of Article 6 (1) (f) DS-GVO.
6. In order to comply with legal obligations to which we are subject, the processing of your personal data is based on Article 6(1)(c) DS-GVO.
7. In order to protect our legitimate interest in enforcing our rights and defending claims against us, the processing of your personal data is based on Article 6(1)(f) DS-GVO.
Our systems are secured in accordance with the state of the art by technical and organisational measures in order to protect your personal data from access, modification or distribution by unauthorised persons as well as from loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further notes within the framework of this data protection declaration.
IV. Transfer of your personal data to third parties; categories of recipients of your personal data
Insofar as this is necessary to achieve the purposes of the processing of your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further notes within the scope of this data protection declaration. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the minimum necessary.
Data transfer to shipping service providers
If you have given us your express consent to do so during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider on the basis of this consent in accordance with Art. 6 (1) sentence 1 lit. a DSGVO so that the shipping service provider can contact you before delivery for the purpose of delivery notification or coordination. You can revoke your consent at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
DHL Parcel GmbH
Kruppstr. 74
45145 Essen
Germany"
V. Scope of the processing of your personal data for the individual processing purposes
Below we inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when it is no longer needed for processing for the relevant processing purpose, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.
1. use of our website for information purposes
If you visit our website without transmitting any information to us, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:
- the page you have accessed
- Date and time of the request
- data volume transferred
- Source or reference from where you reached the page
- Browser you are using
- Operating system you use
- Your IP address
Your personal data is processed on the basis of Article 6 (1) (f) of the German Data Protection Act (DS-GVO) to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website.
Your personal data will be deleted after 6 months unless it is still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding proceedings.
You are not obliged to provide your personal data. However, failure to provide your personal data would result in you not being able to view our website.
2. processing of enquiries
If you contact us with an enquiry or a request, we will process the personal data and information/documents you provide. Regardless of the way in which you send us your enquiry or request, this may be:
- Date and time of contact
- Name data
- Kontaktdaten
- Data on request/concern
- Information/documents submitted
Depending on the content of your enquiry or request, the processing of your personal data and the information/documents submitted is based on Article 6 (1) (b) DS-GVO for the performance of pre-contractual measures or on Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party or on Article 6 (1) (f) DS-GVO for the protection of our legitimate interest in responding to enquiries/concerns and in taking other measures in connection with the processing of enquiries/concerns.
Insofar as this is necessary for the processing of your enquiry/your request, we transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the necessary minimum.
Your personal data will be deleted when your enquiry/concern has been clarified, but at the earliest after expiry of the retention periods under tax and commercial law of 6 or 10 years, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
You are not obliged to provide your personal data. However, failure to provide your personal data would result in us being unable to process your enquiry or request.
3. performance of contracts
If you provide us with personal data for the purpose of concluding a contract or in connection with a contract, we process the data you provide for the purpose of processing the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract and payment and delivery information).
Your personal data is processed on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party.
Insofar as this is necessary for the fulfilment of the contract with you, we transmit your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the processing of the contract. These are the providers of the processing tools used by us, the companies commissioned with the transport and the payment service providers commissioned with the payment matters.
Insofar as you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.
Your personal data will be deleted after the expiry of the retention periods under tax and commercial law of 6 or 10 years, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
The provision of your personal data is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, failure to provide your personal data would result in us not being able to conclude a contract with you.
4. advertising via newsletter
If you register for our newsletter, we will process the email address you provide - and if you also provide other personal data - in order to send you information about our offers by email. In this respect, only the provision of your email address is obligatory. If you voluntarily provide further personal data, we may process this data in order to address you personally in the newsletter.
When you register for our newsletter, you give your consent with the following content: "I agree to be informed by eMail about interesting offers and therefore consent to the processing of my eMail address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."
The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After registration, you will first receive an email with a message about the registration for the newsletter combined with a request for confirmation of the registration. Your confirmation of registration is necessary to document the required consent to send the newsletter and to be able to recognise registrations to third-party email addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements if necessary.
Your personal data is processed on the basis of your consent in this regard pursuant to Article 6 (1) (a) DS-GVO.
You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to send a corresponding message to the person responsible, whose contact details you can find in the information on the person responsible. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.
If you withdraw your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.
To receive our newsletter, you must at least provide us with your email address. You are not obliged to provide your email address. However, failure to provide your email address would result in you not being able to subscribe to our newsletter.
5. advertising by letter post
We process the personal data you provide on first and last name and address, if necessary, for sending information on our offers by letter post.
In this respect, your personal data is processed on the basis of Article 6 (1) (f) DS-GVO to protect our legitimate interest in carrying out advertising measures by letter post.
You can object to the processing of your personal data for the purpose of carrying out advertising measures by letter post at any time. To do so, it is sufficient to notify the person responsible, whose contact details you can find in the information on the person responsible.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on first and last name and address will be deleted immediately, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.
You are not obliged to provide your personal data for the purpose of carrying out advertising measures by letter post. However, failure to provide your personal data would result in us not being able to send you advertising by letter post.
6. compliance with legal obligations to which we are subject
Within the framework of the relevant requirements, we process your personal data for the fulfilment of legal obligations to which we are subject.
In order to comply with legal obligations to which we are subject, the processing of your personal data is based on Article 6(1)(c) DS-GVO.
Insofar as this is necessary for the fulfilment of legal obligations to which we are subject, we transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the minimum necessary.
Your personal data will be deleted when it is no longer needed to comply with legal obligations to which we are subject, unless we are allowed to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information in this privacy policy.
7. use of cookies and other technologies
We may use cookies on our website to enable you to use the functions we offer, to analyse the use of the functions we offer and, where applicable, to present advertising that is as tailored to your needs as possible. Below we inform you about the cookies and other technologies we use.
Cookies are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our website as a whole more user-friendly.
7.1 Technically necessary cookies and technologies:
In some cases, the use of cookies and technologies on our website is technically necessary in order to provide you with the functions of our service that you have requested and to document the consent that you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by setting your browser software accordingly. You can delete stored cookies via the corresponding settings. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
7.1.1 Consent Tool
We use a so-called consent tool on our website, with which we inform you about the cookies we use in accordance with our data protection obligations in this regard pursuant to Art. 5 para. 2 DS-GVO in conjunction with Art. 6 para. 1 letter c) DS-GVO. Art. 6 para. 1 letter c) DS-GVO about the cookies we use and with which we document whether and to what extent you have opted in to the processing of your data.
Person responsible:
The processing of your personal data is carried out by us as the responsible party. You can find the name and contact details of the responsible person (and if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint.
Processing purposes and legal basis:
Fulfilment of obligations under data protection law, to inform about cookies used and storage/documentation of consent given in accordance with Art. 5 para. 2 DS-GVO in conjunction with. Art. 6 para. 1 letter c) DS-GVO
Provider of the Consent Tool used: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany https://www.shopware.com/de/impressum/
You can find data protection information from the provider of the consent tool we use here: https://www.shopware.com/de/datenschutz/
Name/designation of the cookie: Cookie Consent Tool (Cookie Permission)
Cookie runtime:
- Quick orderers without orders are deleted after 6 months
- Cancelled orders will be deleted after 6 months
- Days without verification until deletion is: 3 days
7.1.2 Technically necessary cookies:
Technically necessary cookies are cookies that are required so that you can use the functions of our service that you want (to carry out an order). This concerns, for example, the storage of entries in connection with the use of the shopping basket function or the storage of entries after registration in connection with the creation of a customer account.
Person responsible:
The processing of your personal data is carried out by us as the responsible party. You can find the name and contact details of the person responsible (and if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.
Processing purposes and legal basis:
The processing of your personal data is insofar carried out on the basis of Article 6 (1) (b) DS-GVO for the implementation of pre-contractual measures, which are carried out at your request as a data subject or on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party.
The validity of the session cookies is 1440 seconds
Technically required
Technically necessary cookies are required for the functionality of the online shop. In order to enable a barrier-free shopping experience across multiple page views, these cookies assign a unique ID to your browser.
Name | Provider | Description |
decline | Shopware AG | Set if the visitor refuses the storage of cookies. |
allow | Shopware AG | Set when the visitor allows cookies to be stored. |
shop | Shopware AG | Stores the language/subshop that the customer calls up. |
csrf | Shopware AG | The CSRF token cookie strengthens the protection of form transmissions against hacking attacks. |
preferences | Shopware AG | Cookie settings. Stores the settings from the Cookie Consent Manager. |
price | Shopware AG | The cookie is used for individual prices that may be available in the shop. |
slt | Shopware AG | Customer recognition. Enables the customer to be recognised when returning to the shop, even if the session has already expired. |
paypal | PayPal Inc. | The cookie is used for payment processing via PayPal. |
session | Shopware AG | Identifies the current session, the user and their shopping cart. |
currency | Shopware AG | Currency change. Stores the selected currency. |
Komfortfunktionen
Name | Provider | Description |
note | Shopware AG | Notepad:The cookie offers the possibility that the shop user's own notepad is available across sessions. |
Tracking
Tracking cookies help the shop operator to collect and evaluate information about the behaviour of users on their website.
Name | Provider | Description |
device | Shopware AG | The device assignment supports the shop in ensuring the optimal display for the currently active display size. |
partner | Shopware AG | Affiliate programme. Required to recognise partners for the partner programme. |
wein.cc Conversion-Tracking
A tracking system of ebizoptimizer internet services GmbH, Schulberg 3, 2500 Siegenfeld, Austria ("wein.cc") is integrated on this website. If you click on one of our products on wein.cc and come to our shop, a cookie called "weinccclid" is set by our shop under our domain on your end device. If you then place an order in our online shop, we transmit the "weinccclid" cookie, order number and shopping basket value to wein.cc. This enables wein.cc and us to determine the extent to which visitors referred by wein.cc use our online shop to place orders.
You can disable and also enable wein.cc conversion tracking.
7.2 Other cookies and technologies; right to withdraw consent given
In some cases, the use of cookies and technologies on our website is not technically necessary in order to provide you with the functions of our service that you require. The use of these other cookies and technologies on our website only takes place with your consent (opt-in). In order to enable you to make an informed decision in this respect, we inform you below about the relevant cookies and technologies. You can give your consent to the use of the relevant cookies and technologies via the consent tool we use. You can revoke your consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.
Person responsible:
The processing of your personal data is carried out by us as the responsible party. You can find the name and contact details of the person responsible (and if a data protection officer has been appointed, the contact details of the data protection officer) in our provider identification / imprint. Information on whether the cookies are set by us (first-party cookies) or by a partner company (third-party cookies) can be found in the information on the individual cookies.
Processing purposes and legal basis:
Insofar as we use other cookies and technologies on our website, these are used to optimise the use of our website (preference cookies), to analyse the use of our website (statistics cookies) and to initiate advertising that is as tailored as possible to your needs (marketing cookies). In this respect, the processing of your personal data takes place on the basis of the consent given by you in accordance with Article 6 (1) (a) DS-GVO.
7.2.1. Marketing-Cookies
Name | Provider | Description |
wein-cc | Shopware AG | The device assignment supports the shop in ensuring the optimal display for the currently active display size. |
partner | Shopware AG | Affiliate programme. Required to recognise partners for the partner programme. |
VI. duration for which your personal data are stored or criteria for determining this duration
Your personal data will be deleted when it is no longer needed for processing for the relevant processing purpose, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy. Information on the period for which your personal data is stored or the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.
VII. Your rights
1. Overview
In order to ensure fair and transparent processing of personal data, you as a data subject are entitled to the following rights in accordance with data protection law:
the right to obtain information pursuant to Article 15 of the GDPR,
the right of rectification under Article 16 of the GDPR,
the right to erasure in accordance with Article 17 of the GDPR,
the right to restriction of processing under Article 18 of the GDPR,
the right to data portability under Article 20 of the GDPR,
the right to revoke consent given at any time in accordance with Art. 7 (3) DS-GVO,
the right to object to processing pursuant to Article 21 of the GDPR, which we inform you about separately below,
and the right to lodge a complaint with the supervisory authority pursuant to Art. 77 DS-GVO, which we will inform you about separately below.
2. your right to object to processing
THE PROCESSING OF PERSONAL DATA IS ALLOWED IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS OF THE CONTROLLER OR A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART. 6 ABS. 1(F) DS-GVO.
YOU, AS THE DATA SUBJECT, HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LETTER F) DS-GVO; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU AS THE DATA SUBJECT OBJECT TO THE PROCESSING FOR THE PURPOSES OF DIRECT MARKETING, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.
3. your right to complain to the supervisory authority
As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the requirements of the GDPR.
VIII. Information on the basis for providing your personal data and possible consequences of not providing it
To the extent necessary to ensure fair and transparent processing, you will find information on the basis for providing your personal data and on the possible consequences of not providing it in the information on processing your personal data for each processing purpose.