Data protection information
1. Data protection information
With this data protection declaration we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”).
2. Responsible for data processing
Responsible for data processing according to the provisions of the General Data Protection Regulation (GDPR) is:
Bercher Schmidt GbR winery
D- 79235 Vogtsburg- Oberrotweil
Phone: +49 (0) 7662 - 372
Fax: +49 (0) 7662 - 6333
3. Data processing
We process data as part of our website operation. This also includes disclosure by transmission to third parties and, if applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area.
In the case of data transfers to the USA, there is an adequacy decision by the EU Commission, the so-called "EU-US Privacy Shield". The EU Commission hereby certifies that the guarantees for the transmission of data to the USA on the basis of the EU-US Privacy Shield correspond to the data protection standards in the EU. As far as we transmit data to the USA, we have marked the participation of our service providers in the EU-US Privacy Shield.
The data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed in the following list:
a) Log file when visiting the website
We log your visit to our website. The following data is processed: Name of the website accessed, the date and time of the request, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 Para. 1 f) GDPR in order to guarantee the security of the website. The log file is deleted after seven days, unless it is required for clarification or to prove specific legal violations that have become known within the retention period.
As part of hosting, all data to be processed in connection with the operation of this website is stored. We process such data on the basis of our legitimate interests in accordance with Art. 6 Paragraph 1 f) GDPR to enable the operation of the website. To provide our online presence, we use the services of web hosting providers, to whom we transmit the above-mentioned data.
If you contact us, your data (name, contact details, if provided by you) and your message will only be processed for the purpose of processing and handling your request. This data is processed by us on the basis of Art. 6 Para. 1 b) GDPR to fulfill the contract and / or to fulfill our pre-contractual obligations or based on our legitimate interests in accordance with Art. 6 Para. 1 f) GDPR to process your request.
d) Contract execution
We process your order data to process the existing contractual relationship between you and us. The data is processed accordingly on the basis of Art. 6 Para. 1 b) GDPR.
We transmit your address data to the company commissioned with the delivery. If necessary to process the contract, we will also send your e-mail address or your telephone number to the company commissioned with the delivery so that a delivery date can be agreed.
We transmit your transaction data (name, date of the order, payment method, shipping and / or receipt date, amount and payee, if applicable bank details or credit card details) to the payment service provider commissioned to process the payment.
4. Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as you have withdrawn your consent. Insofar as statutory retention requirements are to be observed, the storage period for certain data can be up to 10 years regardless of the processing purposes.
5. Your rights as a data subject
Upon request, you will receive information about all personal data that we have stored about you at any time free of charge.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if it has become incorrect, we will initiate the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we should only process data to a limited extent in the future. You have a right of objection in particular in those cases in which your data are required due to the performance of a task that is in the public interest or our legitimate interest, as well as profiling based on this. You also have such a right of objection in the case of data processing for the purpose of direct advertising.
c) Data portability
Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another person in charge if you wish.
d) Right to withdraw consent with effect for the future
You can revoke your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the point in time of the revocation.
e) Right to complain
You also have the opportunity to complain to a supervisory authority about your rights as a data subject: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Data for which we are not able to identify the person concerned, e.g. if this has been anonymized for analysis purposes, are not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify it.
6. Exercising your rights as a data subject
If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data or the request to transfer the data to another company, please contact weingut (at) bercher-schmidt.de.