Data Protection

  1. General information

The processing of personal data in the context and context of contract initiation and execution, for example the customer name, address, email address and telephone number, is carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with those applicable to the seller country-specific data protection regulations (e.g. the Federal Data Protection Act). With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions of the General Data Protection Regulation (GDPR, Art. 4). The person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with an impact on data protection law is the seller:

Katerina Kagelmann Lutz Becker GbR
Rilkeweg 3
22607 Hamburg
Germany

Tel. 0049 40 84896252 +49 (0) 40 84896252
Email: info@winedinepro.com

Due to the size of the company, there is no need for a data protection officer (Datenschutzbeauftragter).

The seller’s website can be used for information purposes without providing any personal data. However, if a customer registers via our website ( www.winedinepro.com ) inform about the goods or order these goods, in particular the conclusion of the contract and the subsequent contract processing require the storage and processing of personal data.

  1. Cookies

The above-mentioned Internet pages of the seller use text files that are stored on a computer system via an Internet browser and stored for a short and limited time (so-called cookies). By using cookies, the seller can provide users of this website with more user-friendly services that would not be possible without the cookie setting.

Cookies enable the company to recognize use of the Internet pages. The purpose of this recognition and the associated data processing is to make it easier for users to use the website, i.e. the user does not have to re-enter his access data every time of a visit of the seller’s online shop or can find items in the shopping cart when leaving the pages for a short time. Cookies are also automatically deleted when the customer has left the aforementioned website.

The customer can prevent the setting of cookies in the online shop as well as the subsequent data processing by the seller by refusing his consent (by means of a corresponding setting in the internet browser used). Cookies that have already been set can also be deleted at any time via the internet browser or other software programs the custmer uses. If the customer refuses his consent or if he deactivates the setting of cookies in the Internet browser used, not all functions of the seller’s website may be fully usable. If the customer agrees to the inquiry to take note of the data protection regulation by clicking on “Agree”, he agrees (revocable at any time) to the setting of cookies and the data processing. This also includes consent to data processing outside the EEA (Art. 49 (1) a GDPR, third country transfer), where the high European data protection requirements only apply to a limited extent.

  1. Collection of general data and information

The seller’s website ( www.winedinepro.com) collect a range of general data and information with each call by a customer. The browser types and versions used by the customer (1) the operating system used, (3) the website from which an accessing operating system accesses the website, (4) the date and time of access to the website can be recorded , (5) an Internet protocol address (IP address) and the Internet service provider of the accessing system and (6) other similar data and information that serve to avert danger in the event of attacks on the company’s information technology systems. If you have explicitly consented to the collection of data and information or have done so by using the website, e.g. the contact options, your details: surname, first name, e-mail address and your message will be used solely for the purpose of processing and handling your request or the purchase contract in accordance with Art. 1 a) GDPR processed.

When using this general data and information, the seller does not draw any conclusions about the customer concerned. Rather, this information is required to (1) read the content of our website correctly for the execution of the contract, (2) optimize the content of the website and the advertising for customers, (3) the permanent functionality of the information technology systems and the technology of these pages and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information is evaluated with the aim of increasing data protection and data security in the company in order to ultimately ensure an optimal level of protection for the personal data processed. The anonymous data in the server log files are stored separately from all personal data provided by the customer.

  1. Registration on the website of the seller

Customers have the option of registering with a customer account by providing personal data. The personal data collected in this way is the name, the billing and / or delivery address, the email address and the telephone number. The personal data entered by the customer are collected and stored exclusively for internal use by the person responsible for processing and for their own purposes. On the basis of this information, the person responsible for the processing can arrange for the data to be passed on to one or more contract processors, for example warehouse workers, forwarders and / or parcel service providers. These will use the personal data exclusively for the fulfillment of the contract and for internal use.

When the customer registers on the seller’s website, the IP address assigned to the customer’s computer by the Internet service provider (ISP), the date and time of registration are also saved. This data is stored because this is the only way in which the services offered can be misused, if necessary, to clear up crimes that have been committed. This data is principle not passed on to third parties, unless there is a legal obligation to pass on or the passing on is used for criminal prosecution.

The registration of the voluntary details of personal data of the customer concerned (special preferences, etc.) is used by the seller to offer the customer concerned content, services or benefits that, due to the nature of the matter, can only be offered to registered customers. Registered customers are free to change the personal data provided during registration at any time, or to have them completely deleted from the seller’s database, provided that there are no statutory retention requirements. Furthermore, upon request, the seller will provide each affected customer with information about which personal data of the customer is stored beyond the data mentioned above.

  1. Orders on the seller’s website

When a customer places an order on the seller’s website, the order data is processed solely for the purpose of processing it. For a better service, the seller makes the archived information of previous orders available to the customer for a maximum of two years, for example to be able to make further reorders or to compare products. As part of the order processing, the seller only passes on selected data to service providers, i.e. to third parties,which is absolutely necessary for the processing. Examples include warehousing, postal service providers or forwarding companies who receive the relevant customer contact details to provide processing and transport services. In the case of private delivery, the information on the identity and age of the customer to be delivered (for the protection of minors) is also transmitted.

Service providers for processing payment transactions receive the necessary data exclusively for processing payment processing. Credit card data are only collected temporarily, insofar as this is necessary for payment processing, and are not stored permanently.

A transfer of the data to other addressees or the resale of the data takes does not take place.

  1. Protection of minors

When registering and before ordering, the customer must indicate and confirm the age. This data is forwarded to the corresponding logistics service provider to check and comply with the legal regulations on the protection of minors.

  1. Customer rights

Customers have the right to request confirmation as to whether the data concerning them are being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

According to Art. 16 GDPR the right, taking into account the purposes of the processing, to request the completion of the incomplete data concerning you or the immediate correction of the incorrect data concerning you.

In accordance with Art. 17 or Art. 18 GDPR, customers can immediately request the deletion of the relevant data or a restriction of the processing of the data.

Customers also have the right to receive the data relating to them that they have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.

You can object to the use of your data at any time in accordance with Art. 21 GDPR and when giving your consent in accordance with Art. 7 Section 3 GDPR and revoke its use.

According to Art. 77 GDPR the right to lodge a complaint with the competent supervisory authority.

  1. Routine deletion and blocking of personal data

The seller processes and stores personal data of the customer only for the period of time that is necessary to achieve the storage purpose or if this has been provided for by the European directives and regulations or another legislator in laws or regulations to which the seller is subject. If the purpose of storage no longer applies or if a storage period prescribed by the European directives and regulations or another responsible legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions. The storage period can be up to 10 years in individual cases.

  1. Data protection provisions for the application and use of the services of Vimeo, LLC (video provider)

We use plugins from the provider Vimeo on our website to integrate videos. Vimeo is operated by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011.

If you call up the Internet pages of our website with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which of our websites you have visited. If you are logged in as a member of Vimeo, Vimeo will assign this information to your personal user account. When using the plugin, for example by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the relevant Vimeo cookies.

Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.

  1. Data protection provisions on the application and use of the services of Google Ireland Limited (here: Google Analytics with anonymization function)

The person responsible for processing has integrated the Google Analytics component (with anonymization function) on this website. The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This web analysis service collects, among other things, data on the website from which the customer came to a website, which subpages of the website were accessed or how often and for how long a subpage was viewed. The person responsible for processing uses an add-on for web analysis via Google Analytics. By means of this addition, the IP address of the customer’s Internet connection is shortened and anonymized by Google if the Katerina Kagelmann Lutz Becker GbR website is accessed from a member state of the European Union or from another signatory to the Agreement on the European Economic Area.

Google Analytics places a cookie on the customer’s information technology system. By setting the cookie, an analysis of the use of the Internet pages is made possible. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, the Internet browser on the customer’s information technology system is automatically prompted by the respective Google Analytics component to transfer data to be transmitted to Google for the purpose of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the customer’s IP address. The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by the customer. Each time you visit the website, this personal data, including the IP address of the Internet connection used by the customer, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical process on to third parties.

The customer can prevent the setting of cookies and the subsequent data processing by the seller – as shown in section 2 – at any time by means of a corresponding setting in the Internet browser used or reject the setting of cookies including data processing altogether. Such a setting of the internet browser used would also prevent Google from setting a cookie on the customer’s information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, the customer has the option of objecting to the collection of the data generated by Google Analytics relating to the use of this website and the processing of this data by Google and to prevent this. To do this, the customer must download and install a program under the link https://tools.google.com/dlpage/gaoptout. The installation of this program is evaluated by Google as an objection and ensures that no data or information on visits to websites may be transmitted to Google Analytics.

  1. Data protection provisions on the application and use of Google AdWords services

Katerina Kagelmann Lutz Becker GbR uses Google AdWords, an internet advertising service that allows advertisers to place ads in Google’s search engine results as well as in the Google advertising network. The operating company for the services of Google AdWords is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdWords enables an advertiser to define certain keywords in advance by means of which an advertisement is only displayed in Google’s search engine results if the customer calls up a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

If a customer reaches the Katerina Kagelmann Lutz Becker GbR website via a Google ad, a so-called conversion cookie (see above) is stored by Google on the customer’s information technology system. A conversion cookie loses its validity after thirty days and is not used to identify the customer; it can also be traced whether certain sub-pages have been accessed. The conversion cookie can also be used to see whether a customer who came to the seller’s website via an AdWords ad generated sales, i.e. completed or canceled a purchase.

The conversion cookie is used to store the customer’s personal information, such as the websites visited. Every time you visit the Internet pages of Katerina Kagelmann Lutz Becker GbR, personal data, including the IP address of the Internet connection used by the customer, is sent to Google Inc. transferred in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical process on to third parties.

The customer can prevent the setting of cookies, as shown in section 2, at any time by means of a corresponding setting in the Internet browser used or object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the customer’s information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs. The customer also has the option of objecting to interest-based advertising by Google. To do this, he must enter the link from each of the Internet browsers he is using http://www.google.de/settings/adsand make the required settings there.

  1. Data protection provisions for using the services of Stripe Inc.

The person responsible for processing has integrated components from Stripe Inc., 510 Townsend St., San Francisco, CA 94103, USA (hereinafter: Stripe) on the website.

Stripe is an online payment service provider. In addition to ordering on account, customers can process payments via so-called Stripe accounts, which represent virtual private or business accounts. Stripe also offers the option of processing payments in advance or by credit card. Stripe thus enables customers to initiate online payments to the seller or to receive payments for them.

If a customer selects one of the Stripe payment options (all except the pre-payment from the customers bank account) during the ordering process, the customer’s data is automatically transmitted to Stripe. By selecting this payment option, the customer consents to the transfer of personal data required for payment processing. The customer’s personal data transmitted to Stripe are usually first name, last name, address, email address, IP address, telephone number, mobile phone number and other data that are necessary for payment processing. In order to process the purchase contract, personal data related to the respective order is also necessary. The purpose of transmitting the data is to process payments and prevent fraud. The person responsible for processing will transmit personal data to Stripe in particular if there is a legitimate interest in the transmission. The personal data exchanged between Stripe and the seller may be transmitted by Stripe to credit agencies for the purpose of identity and credit checks. Stripe may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data are to be processed on behalf of the company.

If a data transfer to Stripe is to be avoided, the person responsible for processing recommends selecting the option: Prepayment by bank transfer from your own account.

  1. Legal basis for processing

If data processing is necessary to fulfill the contract, the basis must be determined in accordance with Article 6 Paragraph 1 Letter b GDPR. However, the other principles according to Article 6 Paragraph 1 Letters c, d, e and f GDPR also apply if the relevant reasons or the prerequisites exist. The purpose here is to provide a comprehensable offers in a functional online shop and to carry out orders. Further information on the current version of the General Data Protection Regulation (GDPR), which determines the rights and obligations under European data protection law, can be found here:

https://www.bfdi.bund.de/DE/Datenschutz/DatenschutzGVO/DatenschutzGVO-node.html

14th Supervisory authority

The supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information under:https://www.datenschutz-hamburg.de.