privacy policy

privacy policy


1) In­for­ma­tion on the col­lec­tion of per­sonal data and data proces­sor's con­tact de­tails

1.1 We ap­pre­ci­ate your visit to our web­site and thank you for your in­ter­est. In the fol­low­ing in­for­ma­tion, we would like to in­form you about how we han­dle your per­sonal data when you use our web­site. Per­sonal data is de­fined as any data which can be used to per­son­ally iden­tify you.

1.2 The party re­spon­si­ble for data pro­cess­ing on this web­site within the mean­ing of the Gen­eral Data Pro­tec­tion Reg­u­la­tion (GDPR) is ((Kunde/ad­dress/Tele­phone/fax/E-Mail)).

The data proces­sor is the nat­ural or legal per­son who in­di­vid­u­ally or col­lec­tively de­ter­mines for which pur­poses and by which means per­sonal data shall be processed.
1.3 The data proces­sor has ap­pointed a Data Pro­tec­tion Of­fi­cer, who can be con­tacted as fol­lows: 

Data Pro­tec­tion Of­fi­cer, 

Kiech­lins­berger Str. 2-6, D-79346 Endin­gen-Königschaffhausen,

Phone: 07642-90 41-0, E-Mail: daten­schutzbeauf­tragter@kk-weine.de.


2) Data col­lec­tion when vis­it­ing our web­site. 

When you use our web­site for in­for­ma­tion pur­poses only, i.e., if you do not reg­is­ter or oth­er­wise trans­mit in­for­ma­tion to us, we will only col­lect the data that your browser trans­mits to our server (so-called "server log files"). When you ac­cess our web­site, we col­lect the fol­low­ing data, which is tech­ni­cally nec­es­sary for us to dis­play the web­site to you:
- Our vis­ited web­site
- Date and time at the time of ac­cess
- Amount of data sent in bytes
- Source/link from which you reached the web­site
- Browser used
- Op­er­at­ing sys­tem used
- IP ad­dress used ( where re­quired: in an anonymised for­mat)
The pro­cess­ing is car­ried out in ac­cor­dance with Art. 6 para. 1 lit. f GDPR on the basis of our le­git­i­mate in­ter­est in im­prov­ing the sta­bil­ity and func­tion­al­ity of our web­site. The data will not be for­warded or used for any other pur­poses. How­ever, we re­serve the right to re­view server log files ret­ro­spec­tively if con­crete in­di­ca­tions of un­law­ful use arise.


3) Cook­ies
In order to make vis­it­ing our web­site at­trac­tive and to en­able the use of cer­tain func­tions, we use so-called cook­ies on var­i­ous pages. These are small text files that are stored on your end de­vice. Some of the cook­ies we use are au­to­mat­i­cally deleted at the end of the browser ses­sion, i.e., after you close your browser (so-called ses­sion cook­ies). Other cook­ies re­main on your end de­vice and en­able your browser to be recog­nised the next time you visit (so-called per­sis­tent cook­ies).


If cook­ies are set, they col­lect and process cer­tain user in­for­ma­tion such as browser and lo­ca­tion data as well as IP ad­dress val­ues on an in­di­vid­ual basis. Per­sis­tent cook­ies are au­to­mat­i­cally deleted after a pre­de­fined pe­riod of time, which may dif­fer de­pend­ing on the cookie. The du­ra­tion of the re­spec­tive cookie stor­age can be found in your web browser's cookie set­tings overview. In some cases, cook­ies are used to sim­plify the or­der­ing process by stor­ing set­tings (e.g., re­mem­ber­ing the con­tents of a vir­tual shop­ping bas­ket for a fu­ture web­site visit). If per­sonal data is also processed by in­di­vid­ual cook­ies used by us, the pro­cess­ing is car­ried out in ac­cor­dance with Art. 6 para. 1 lit. b GDPR ei­ther for the per­for­mance of the con­tract, in ac­cor­dance with Art. 6 para. 1 lit. a GDPR, on the basis of granted con­sent, or in ac­cor­dance with Art. 6 para. 1 lit. f GDPR, in order to safe­guard our le­git­i­mate in­ter­ests in en­sur­ing the best pos­si­ble func­tion­al­ity of our web­site and a cus­tomer-friendly / ef­fec­tive struc­tur­ing of the site visit.

Please note that you can set your browser in such a way that you are in­formed about the set­ting of cook­ies and can de­cide in­di­vid­u­ally about their ac­cep­tance or can ex­clude the ac­cep­tance of cook­ies for cer­tain cases or in gen­eral.
Every browser dif­fers in the way it man­ages cookie set­tings.


This is de­scribed in each browser's help menu, which ex­plains how to change your cookie set­tings. You can find these help pages for the re­spec­tive browsers using the fol­low­ing links:


In­ter­net Ex­plorer:
https://support.microsoft.com/de-de/help/17442/win...
Fire­fox: https://support.mozilla.org/de/kb/cookies-erlauben...
Chrome: https://support.google.com/chrome/answer/95647?hl=...
Sa­fari: https://support.apple.com/de-de/guide/safari/sfri1...
Opera: https://help.opera.com/de/latest/web-preferences/#...
Please note that the func­tion­al­ity of our web­site may be lim­ited if cook­ies are not ac­cepted.


4) Con­tact
Per­sonal data is col­lected when con­tact­ing us (e.g., via the con­tact form or e-mail). The data col­lected when using a con­tact form can be iden­ti­fied from the re­spec­tive con­tact form. This data is stored and used ex­clu­sively for the pur­pose of an­swer­ing your re­quest or for con­tact­ing you as well as for any re­lated tech­ni­cal ad­min­is­tra­tion. The legal basis for pro­cess­ing this data is our le­git­i­mate in­ter­est in re­spond­ing to your re­quest in ac­cor­dance with Art. 6 (1) lit. f GDPR. If the pur­pose of your con­tact en­quiry is to con­clude a con­tract, the ad­di­tional legal basis for the pro­cess­ing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your re­quest has been processed. This shall be the case if it can be con­cluded from the cir­cum­stances that the mat­ter in ques­tion has been com­pletely clar­i­fied and pro­vided that no op­pos­ing legal oblig­a­tions to re­tain data exist.


5) Data pro­cess­ing when open­ing a cus­tomer ac­count and for con­tract pro­cess­ing in ac­cor­dance with Art. 

6 para. 1 lit. b GDPR, per­sonal data will con­tinue to be col­lected and processed if you pro­vide it to us for the per­for­mance of a con­tract or when open­ing a cus­tomer ac­count. The data col­lected can be iden­ti­fied from the re­spec­tive input forms. Dele­tion of your cus­tomer ac­count is pos­si­ble at any time and can be re­alised by send­ing a mes­sage to the afore­men­tioned ad­dress of the per­son re­spon­si­ble for data pro­cess­ing. The data you pro­vide us with will be stored and used for the pur­pose of pro­cess­ing the con­tract. Once the con­tract has been fully processed or your cus­tomer ac­count has been deleted, your data will be deleted in ac­cor­dance with tax and com­mer­cial legal re­quire­ments.


The data will be blocked for the du­ra­tion of the data re­ten­tion pe­ri­ods and deleted after these pe­ri­ods have ex­pired un­less you have ex­pressly con­sented to fur­ther use of your data or we are en­ti­tled to use the data fur­ther in ac­cor­dance with the law.


6) Use of cus­tomer data for di­rect ad­ver­tis­ing
6.1 Sub­scrip­tion to our e-mail newslet­ter
If you sub­scribe to our e-mail newslet­ter, we will reg­u­larly
send you in­for­ma­tion about our of­fers. The only manda­tory in­for­ma­tion re­quired for us to send you the newslet­ter is your e-mail ad­dress. The pro­vi­sion of fur­ther data is vol­un­tary and will be used to ad­dress you per­son­ally. We use a so-called dou­ble opt-in pro­ce­dure for send­ing the newslet­ter. This means that we will only send you an e-mail newslet­ter once you have ex­pressly con­firmed that you con­sent to re­ceiv­ing newslet­ters. We will then send you a con­fir­ma­tion e-mail ask­ing you to con­firm that you wish to re­ceive the newslet­ter in fu­ture by click­ing on a cor­re­spond­ing link.
By ac­ti­vat­ing the con­fir­ma­tion link, you give us your con­sent to use your per­sonal data in ac­cor­dance with Art. 6 para. 1 lit. a GDPR. When you reg­is­ter for the newslet­ter, we save the IP ad­dress spec­i­fied by your In­ter­net ser­vice provider (ISP) as well as the date and time of reg­is­tra­tion in order to be able to trace any pos­si­ble mis­use of your e-mail ad­dress at a later date. The data we col­lect when you reg­is­ter for the newslet­ter is used ex­clu­sively for the pur­pose of ad­ver­tis­ing in the newslet­ter.


You can un­sub­scribe from the newslet­ter at any time via the link pro­vided for this pur­pose in the newslet­ter or by send­ing a cor­re­spond­ing mes­sage to the per­son re­spon­si­ble for data pro­cess­ing spec­i­fied at the be­gin­ning of this doc­u­ment. After un­sub­scrib­ing, your e-mail ad­dress will be deleted from our newslet­ter dis­tri­b­u­tion list im­me­di­ately, un­less you have ex­pressly con­sented to the fur­ther use of your
data or pro­vided that we re­serve the right to use your data for any other pur­pose per­mit­ted by law that we have in­formed you about in this de­c­la­ra­tion.


6.2 Send­ing the e-mail newslet­ter to ex­ist­ing cus­tomers
If you have pro­vided us with your email ad­dress when pur­chas­ing goods or ser­vices, we may pe­ri­od­i­cally email you of­fers for goods or ser­vices sim­i­lar to those you have al­ready pur­chased from our range. In ac­cor­dance with Sec­tion 7 (3) of the Ger­man Un­fair Com­pe­ti­tion Act (UWG), we do not need to ob­tain sep­a­rate con­sent from you for this pur­pose. In this re­spect, the data pro­cess­ing is car­ried out solely on the basis of our le­git­i­mate in­ter­est in per­son­alised di­rect ad­ver­tis­ing in ac­cor­dance with Art. 6 (1) lit. f GDPR. If you have ini­tially ob­jected to the use of your e-mail ad­dress for this pur­pose, no e-mails will be sent by us. You are en­ti­tled to ob­ject to the use of your e-mail ad­dress for the afore­men­tioned ad­ver­tis­ing pur­poses at any time with im­me­di­ate and fu­ture ef­fect by no­ti­fy­ing the per­son re­spon­si­ble for data pro­cess­ing spec­i­fied at the be­gin­ning of this doc­u­ment. For this pur­pose, you will only incur trans­mis­sion costs in ac­cor­dance

with the basic rates. After re­ceipt of your ob­jec­tion, the use of your e-mail ad­dress for ad­ver­tis­ing pur­poses will cease im­me­di­ately.


6.3 Newslet­ter mail­ing via Clev­er­Reach
Our email newslet­ter is dis­trib­uted via the tech­ni­cal ser­vice provider Clev­er­Reach GmbH & Co. KG, Mühlen­str. 43, 26180 Rast­ede (''Clev­er­Reach''), to whom we pass on the data you pro­vided when reg­is­ter­ing for the newslet­ter. This dis­clo­sure is made in ac­cor­dance with Art. 6 (1) lit. f GDPR and serves our le­git­i­mate in­ter­est in using a newslet­ter sys­tem that is pro­mo­tion­ally ef­fec­tive, se­cure, and user-friendly. The data you enter for the pur­pose of re­ceiv­ing the newslet­ter (e.g., e-mail ad­dress) is stored on Clev­er­Reach's servers in Ger­many or Ire­land.


Clev­er­Reach uses this in­for­ma­tion to send and sta­tis­ti­cally eval­u­ate the newslet­ters on our be­half. For eval­u­a­tion pur­poses, the newslet­ters sent by e-mail con­tain so-called web bea­cons or track­ing pix­els, which are sin­gle-pixel image files stored on our web­site. These make it pos­si­ble to de­ter­mine whether a newslet­ter mes­sage has been opened and which links, if any, have been clicked on. With the help of so-called con­ver­sion track­ing, it can also be eval­u­ated whether a pre­de­fined ac­tion (e.g., pur­chase of a prod­uct on our web­site) has taken place after the user has clicked on links of this type. Fur­ther­more, tech­ni­cal in­for­ma­tion is recorded (e.g., time of re­trieval, IP ad­dress, browser type and op­er­at­ing sys­tem). The data col­lected is strictly anonymised and will not be linked to your other per­sonal data; di­rect ref­er­ence to in­di­vid­ual per­sons is ex­cluded. This data is used ex­clu­sively for the sta­tis­ti­cal analy­sis of newslet­ter cam­paigns. The re­sults of these analy­ses can be used to im­prove the cus­tomi­sa­tion of fu­ture newslet­ters to bet­ter re­flect the re­cip­i­ents' in­ter­ests. If you would like to ob­ject to data analy­sis for sta­tis­ti­cal eval­u­a­tion pur­poses, you must un­sub­scribe from the newslet­ter.
We have con­cluded an order pro­cess­ing con­tract with Clev­er­Reach, which obliges Clev­er­Reach to pro­tect our cus­tomers' data and not dis­close it to third par­ties.


You can read more about Clev­er­Reach's data analy­sis poli­cies here:
https://www.cleverreach.com/de/funktionen/reportin...
Clev­er­Reach's pri­vacy pol­icy can be viewed here:
https://www.cleverreach.com/de/datenschutz/.


6.4 Postal ad­ver­tis­ing
Based on our le­git­i­mate in­ter­est in pro­vid­ing per­son­alised di­rect ad­ver­tis­ing, we re­serve the right to store your first name and sur­name, your postal ad­dress and - in­so­far as we have re­ceived this ad­di­tional in­for­ma­tion from you as part of the con­trac­tual re­la­tion­ship - your title, aca­d­e­mic de­gree, year of birth and your oc­cu­pa­tional, in­dus­try or busi­ness des­ig­na­tion in ac­cor­dance with Art. 6 (1) lit. f GDPR and to use this in­for­ma­tion to send you in­ter­est­ing of­fers and in­for­ma­tion about our prod­ucts by post.


You can ob­ject to the stor­age and use of your data for this pur­pose at any time by send­ing a mes­sage to the per­son re­spon­si­ble for data pro­cess­ing.


7) Data pro­cess­ing for order pro­cess­ing
In order to process your order, we work to­gether with the fol­low­ing ser­vice provider(s), who sup­port us in whole or in part with the per­for­mance of con­cluded con­tracts. Cer­tain per­sonal data is trans­ferred to these ser­vice providers in ac­cor­dance with the fol­low­ing in­for­ma­tion. The per­sonal data col­lected by us will be passed on to the trans­port com­pany com­mis­sioned with the de­liv­ery as part of the con­tract pro­cess­ing, in­so­far as this is nec­es­sary for the de­liv­ery of the goods. Your pay­ment data will be for­warded to the com­mis­sioned credit in­sti­tu­tion within the frame­work of pay­ment pro­cess­ing, in­so­far as this is nec­es­sary for pay­ment pro­cess­ing. Should pay­ment ser­vice providers be used, we will ex­plic­itly in­form you about this below. The legal basis for the trans­fer of data is Art. 6 para. 1 lit. b GDPR.


8) Use of so­cial media: so­cial plu­g­ins
8.1 Face­book plu­g­ins using a 2-click so­lu­tion
Our web­site uses so-called so­cial plu­g­ins ("plu­g­ins") pro­vided by the so­cial net­work Face­book, which is op­er­ated by Face­book Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land ("Face­book").
In order to in­crease the pro­tec­tion of your data when vis­it­ing our web­site, the plu­g­ins are ini­tially de­ac­ti­vated and in­te­grated into the page using a so-called "2-click" so­lu­tion.


You can iden­tify de­ac­ti­vated plu­g­ins by the fact that they are greyed out. This in­te­gra­tion en­sures that when you ac­cess one of our web­site pages that con­tain plu­g­ins of this type, no con­nec­tion is es­tab­lished with Face­book's servers.


Only when you ac­ti­vate the plu­g­ins and thereby give your con­sent to the data trans­fer in ac­cor­dance with Art. 6 para. 1 lit. a GDPR, does your browser es­tab­lish a di­rect con­nec­tion to the Face­book servers. The con­tent of the re­spec­tive plu­gin is trans­mit­ted di­rectly to your browser and in­te­grated into the page. The plu­gin then trans­mits data (in­clud­ing your IP ad­dress) to Face­book. We have no in­flu­ence on the scope of the data that Face­book col­lects with the help of the plu­g­ins. As far as we are aware, Face­book re­ceives in­for­ma­tion about which of our web­sites you are cur­rently vis­it­ing and which web­sites you have pre­vi­ously vis­ited. By in­te­grat­ing the plu­g­ins, Face­book also re­ceives the in­for­ma­tion that your browser has ac­cessed our web­site's cor­re­spond­ing page if you do not have a Face­book pro­file or are not cur­rently logged in. The in­for­ma­tion col­lected (in­clud­ing your IP ad­dress) is trans­mit­ted by your
browser di­rectly to a Face­book Inc. server in the USA and stored there. If you in­ter­act with the plu­g­ins, the cor­re­spond­ing in­for­ma­tion is also trans­mit­ted di­rectly to a Face­book server and stored there. The in­for­ma­tion will also be pub­lished on Face­book and dis­played to your con­tacts there.
You can re­voke your con­sent at any time by de­ac­ti­vat­ing the ac­ti­vated plu­gin by click­ing on it again. How­ever, the re­vo­ca­tion does not af­fect any data that has al­ready been trans­mit­ted to Face­book.


For the pur­pose and scope of the data col­lec­tion and the fur­ther pro­cess­ing and use of the data by Face­book, as well as your rights in this re­gard and set­ting op­tions for pro­tect­ing your pri­vacy, please refer to Face­book's pri­vacy pol­icy: https://www.facebook.com/policy.php


8.2 Face­book plu­g­ins with a Shar­iff so­lu­tion
Our web­site uses so-called so­cial plu­g­ins ("plu­g­ins") pro­vided by the so­cial net­work Face­book, which is op­er­ated by Face­book Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land ("Face­book").
In order to in­crease the pro­tec­tion of your data when vis­it­ing our web­site, these but­tons are not fully in­te­grated into the page as plug-ins, rather, they are in­te­grated into the page using only an HTML link. This type of in­te­gra­tion en­sures that when you ac­cess one of our web­site pages that con­tains but­tons of this type, a con­nec­tion is not yet es­tab­lished with the Face­book servers. When you click on the but­ton, a new browser win­dow opens and calls up the Face­book page where you can in­ter­act with the plu­g­ins there (if nec­es­sary, after en­ter­ing your login data).
For the pur­pose and scope of the data col­lec­tion and the fur­ther pro­cess­ing and use of the data by Face­book, as well as your rights in this re­gard and set­ting op­tions for pro­tect­ing your pri­vacy, please refer to Face­book's pri­vacy pol­icy: https://www.facebook.com/policy.php


8.3 In­sta­gram plu­gin with a Shar­iff so­lu­tion
So-called so­cial plu­g­ins ("plu­g­ins") are used on our web­site. Our web­site uses so-called so­cial plu­g­ins ("plu­g­ins") pro­vided by the on­line ser­vice In­sta­gram, which is op­er­ated by Face­book Ire­land Ltd, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2 Ire­land ("Face­book").
In order to in­crease the pro­tec­tion of your data when vis­it­ing our web­site, these but­tons are not fully in­te­grated into the page as plug-ins, rather, they are in­te­grated into the page using only an HTML link. This type of in­te­gra­tion en­sures that when you ac­cess one of our web­site pages that con­tains but­tons of this type, no con­nec­tion is es­tab­lished with the In­sta­gram servers. When you click on the but­ton, a new browser win­dow opens and calls up the In­sta­gram page where you can in­ter­act with the plu­g­ins there (if nec­es­sary, after en­ter­ing your login data).
For the pur­pose and scope of the data col­lec­tion and the fur­ther pro­cess­ing and use of the data by In­sta­gram, as well as your rights in this re­gard and set­tings op­tions for pro­tect­ing your pri­vacy, please refer to In­sta­gram's pri­vacy pol­icy: https://help.instagram.com/155833707900388/


9) So­cial media use: Videos
Use of YouTube videos. This web­site uses the YouTube em­bed­ding func­tion to dis­play and play videos from the provider "YouTube", which be­longs to Google Ire­land Lim­ited, Gor­don House, 4 Bar­row St, Dublin, D04 E5W5, Ire­land ("Google").


The ex­tended data pro­tec­tion mode is used here, which, ac­cord­ing to the provider, only trig­gers the stor­age of user in­for­ma­tion when the video(s) is/are played. If the play­back of em­bed­ded YouTube videos is started, the provider, "YouTube" , uses cook­ies to col­lect in­for­ma­tion about user be­hav­iour.
Ac­cord­ing to in­for­ma­tion from "YouTube", these are used, among other things, to col­lect video sta­tis­tics, to im­prove user-friend­li­ness and to pre­vent abu­sive be­hav­iour. If you are logged in to Google, your data will be di­rectly as­signed to your ac­count when you click on a video. If you do not wish to be as­so­ci­ated with your YouTube pro­file, you must log out be­fore ac­ti­vat­ing the but­ton. Google stores your data (even for users who are not logged in) as usage pro­files and eval­u­ates these pro­files. An analy­sis of this kind is car­ried out par­tic­u­larly in ac­cor­dance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's le­git­i­mate in­ter­ests in dis­play­ing per­son­alised ad­ver­tis­ing, mar­ket re­search and/or the needs-based de­sign of its web­site. You are en­ti­tled to ob­ject to the cre­ation of these user pro­files and you must con­tact YouTube to ex­er­cise this right.
The use of YouTube may also re­sult in the trans­mis­sion of per­sonal data to the servers of Google LLC. in the USA.
In­de­pen­dently of the play­back of these em­bed­ded videos, a con­nec­tion to the Google net­work is es­tab­lished each time this web­site is called up, which may trig­ger fur­ther data pro­cess­ing op­er­a­tions over which we have no in­flu­ence.
For fur­ther in­for­ma­tion on data pro­tec­tion at 'YouTube'', please refer to the provider's pri­vacy pol­icy at:
https://www.google.de/intl/de/policies/privacy

In­so­far as legally re­quired, we have ob­tained your con­sent for the pro­cess­ing of your data as de­scribed above in ac­cor­dance with Art. 6 para. 1 lit. a GDPR. You can re­voke your con­sent at any time with im­me­di­ate and fu­ture ef­fect. To ex­er­cise your re­vo­ca­tion, de­ac­ti­vate this ser­vice in the "Cookie Con­sent Tool" pro­vided on the web­site.


10) Web analy­sis ser­vices
10.1 Google (Uni­ver­sal) An­a­lyt­ics
This web­site uses Google (Uni­ver­sal) An­a­lyt­ics, a web an­a­lyt­ics ser­vice pro­vided by Google Ire­land Lim­ited, Gor­don House, 4 Bar­row St, Dublin, D04 E5W5, Ire­land ("Google"). Google (Uni­ver­sal) An­a­lyt­ics uses so-called "cook­ies", which are text files that are stored on your end de­vice and en­able the analy­sis of your use of the web­site. The in­for­ma­tion gen­er­ated by the cookie about your use of the web­site (in­clud­ing your IP ad­dress) will be trans­mit­ted to and stored by Google on servers in the United States.


This web­site uses Google (Uni­ver­sal) An­a­lyt­ics ex­clu­sively with the ex­ten­sion "_anonymizeIp()", which en­sures anonymi­sa­tion of the IP ad­dress by short­en­ing it and ex­clud­ing the pos­si­bil­ity of any di­rect ref­er­ence to spe­cific per­sons. As a re­sult of the ex­ten­sion, your IP ad­dress will be short­ened be­fore­hand by Google within mem­ber states of the Eu­ro­pean Union or in other con­tract­ing states of the Agree­ment on the Eu­ro­pean Eco­nomic Area. Only in ex­cep­tional cases will the full IP ad­dress be trans­mit­ted to a Google LLC. Server in the USA and short­ened there. Google will use this in­for­ma­tion on our be­half for the pur­pose of eval­u­at­ing your use of the web­site, com­pil­ing re­ports on web­site ac­tiv­ity, and pro­vid­ing other ser­vices re­lat­ing to web­site ac­tiv­ity and in­ter­net usage. The IP ad­dress trans­mit­ted by your browser as part of Google (Uni­ver­sal) An­a­lyt­ics will not be merged with other Google data. Google An­a­lyt­ics also en­ables the cre­ation of sta­tis­tics with state­ments about the age, gen­der, and in­ter­ests of site vis­i­tors on the basis of an eval­u­a­tion of in­ter­est-based ad­ver­tis­ing and by using in­for­ma­tion from third-party providers via a spe­cial func­tion, so-called "de­mo­graphic char­ac­ter­is­tics".
This al­lows the de­f­i­n­i­tion and dif­fer­en­ti­a­tion of web­site user groups for the pur­pose of op­ti­mis­ing tar­geted mar­ket­ing mea­sures. About the "de­mo­graphic char­ac­ter­is­tics" How­ever, col­lected data records can­not be as­signed to a spe­cific per­son.
All pro­cess­ing de­scribed above, in par­tic­u­lar, the set­ting of Google An­a­lyt­ics cook­ies for re­triev­ing in­for­ma­tion about the end de­vice used, will only be car­ried out if you have given us your ex­press con­sent to do so in ac­cor­dance with Art. 6 para. 1 lit. a GDPR. Google An­a­lyt­ics will not be used dur­ing your visit to the site with­out the pro­vi­sion of this con­sent.


You can re­voke your con­sent at any time with im­me­di­ate and fu­ture ef­fect.
To ex­er­cise your re­vo­ca­tion, please de­ac­ti­vate this ser­vice in the 'Cookie Con­sent Tool' pro­vided on the web­site. We have con­cluded an order pro­cess­ing agree­ment with Google for the use of Google An­a­lyt­ics,
which obliges Google to pro­tect our site vis­i­tors' data and not dis­close it to third par­ties.
For the trans­fer of data from the EU to the USA, Google in­vokes the Eu­ro­pean Com­mis­sion's so-called stan­dard data pro­tec­tion clauses, which are in­tended to en­sure com­pli­ance with the Eu­ro­pean level of data pro­tec­tion in the USA.


Fur­ther in­for­ma­tion on Google (Uni­ver­sal) An­a­lyt­ics can be found here:
https://policies.google.com/privacy?hl=de&gl=de


10.2 - Matomo (for­merly Piwik) with­out cook­ies
On this web­site, cer­tain user in­for­ma­tion is col­lected and stored using the web an­a­lyt­ics soft­ware Matomo (www.matomo.org), a ser­vice pro­vided by In­noCraft Ltd, 150 Willis St, 6011 Welling­ton, New Zealand (?Matomo?). Anonymised usage pro­files can be cre­ated and analysed on the basis of this in­for­ma­tion.
The in­for­ma­tion col­lected using Matomo tech­nol­ogy (in­clud­ing your pseu­do­nymised IP ad­dress) is processed on our servers.
This web­site uses Matomo ex­clu­sively with­out the use of cook­ies, which means that Matomo does not set cook­ies on your end de­vice at any time.
In­so­far as per­sonal data is also processed dur­ing the de­scribed processes, the pro­cess­ing is based on our le­git­i­mate in­ter­est in the sta­tis­ti­cal analy­sis of user be­hav­iour for op­ti­mi­sa­tion and mar­ket­ing pur­poses in ac­cor­dance with Art. 6 (1) lit. f GDPR.
If you do not agree to the stor­age and eval­u­a­tion of the in­for­ma­tion from your visit, you can ob­ject to the stor­age and fu­ture use of this in­for­ma­tion at any time with a mouse click. In this case, a so-called Opt-Out-Cookie is stored in your browser, with the re­sult that Matomo will not col­lect any of your ses­sion data.
Please note that if you delete your cook­ies com­pletely, the opt-out cookie will also be deleted, and you may have to re­ac­ti­vate it.


11) Tools and mis­cel­la­neous
11.1 - Google Web Fonts
This site uses so-called web fonts pro­vided by Google Ire­land Lim­ited, Gor­don House, 4 Bar­row St, Dublin, D04 E5W5, Ire­land ("Google") to en­sure the con­sis­tent dis­play of fonts. When you ac­cess a page, your browser loads the re­quired web fonts into your browser cache in order to dis­play texts and fonts cor­rectly.


To do this, the browser you are using must con­nect to Google's servers. This may also re­sult in the trans­mis­sion of per­sonal data to Google LLC's servers in the USA. This en­ables Google to de­ter­mine that your IP ad­dress is being used to ac­cess our web­site. Google Web Fonts are used for the pur­poses of en­sur­ing the con­sis­tent and ap­peal­ing pre­sen­ta­tion of our on­line ser­vices. This con­sti­tutes le­git­i­mate in­ter­est within the mean­ing of Art. 6 para. 1 lit. f GDPR. If your browser does not sup­port web fonts, your com­puter will use a stan­dard font.
Fur­ther in­for­ma­tion on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's pri­vacy pol­icy: https://www.google.com/policies/privacy/


11.2 Ap­pli­ca­tions to job ad­ver­tise­ments via e-mail
We ad­ver­tise cur­rent va­can­cies on our web­site in a sep­a­rate sec­tion where in­ter­ested par­ties can apply for po­si­tions by send­ing an e-mail to the pro­vided con­tact ad­dress.
In­clu­sion in the ap­pli­ca­tion process re­quires that ap­pli­cants pro­vide us with all the per­sonal data re­quired for a mean­ing­ful and in­formed as­sess­ment and se­lec­tion to­gether with their ap­pli­ca­tion via e-mail.
The in­for­ma­tion re­quired in­cludes gen­eral in­for­ma­tion about the per­son (name, ad­dress, tele­phone, or elec­tronic con­tact de­tails) as well as per­for­mance-spe­cific ev­i­dence of the qual­i­fi­ca­tions re­quired for the re­spec­tive po­si­tion.
If nec­es­sary, health-re­lated in­for­ma­tion may also be re­quired, which must be given spe­cial con­sid­er­a­tion under labour and so­cial law in the in­ter­ests of the ap­pli­cant's so­cial pro­tec­tion.
The com­po­nents that an ap­pli­ca­tion must con­tain in order to be con­sid­ered and the form in which these com­po­nents are to be sent
via email can be found in the re­spec­tive job ad­ver­tise­ment.
Once we have re­ceived the ap­pli­ca­tion sent via the e-mail con­tact ad­dress pro­vided, we will store the ap­pli­cants' data and eval­u­ate it solely for the pur­pose of pro­cess­ing the ap­pli­ca­tion. In case of any queries aris­ing dur­ing the course of pro­cess­ing, we use, at our dis­cre­tion, ei­ther the e-mail ad­dress or tele­phone num­ber pro­vided by the ap­pli­cant with their ap­pli­ca­tion.
The legal basis for this pro­cess­ing, in­clud­ing con­tact­ing us for any queries, is gen­er­ally Art. 6 para. 1 lit. b GDPR (for pro­cess­ing in Ger­many in con­junc­tion with § 26 para. 1 BDSG), for the pur­poses of which the ap­pli­ca­tion process is deemed to con­sti­tute the ini­ti­a­tion of an em­ploy­ment con­tract.

In­so­far as spe­cial cat­e­gories of per­sonal data within the mean­ing of Art. 9 (1) GDPR (e.g., health data such as in­for­ma­tion on se­verely dis­abled sta­tus) are re­quested from ap­pli­cants as part of the ap­pli­ca­tion process, the pro­cess­ing is car­ried out in ac­cor­dance with Art. 9 (2) lit. b. GDPR. so that we can ex­er­cise our rights aris­ing from labour law and so­cial se­cu­rity and so­cial pro­tec­tion law and ful­fil our oblig­a­tions in this re­gard.
Cu­mu­la­tively or al­ter­na­tively, the pro­cess­ing of spe­cial data cat­e­gories may also be based on Art. 9(1)(h) GDPR if it is car­ried out for the pur­poses of pre­ven­tive health care or oc­cu­pa­tional med­i­cine, for the as­sess­ment of the ap­pli­cant's fit­ness for work, for med­ical di­ag­noses, health or so­cial care or treat­ment, or for the man­age­ment of sys­tems and ser­vices in the health or so­cial care sec­tor.
If the ap­pli­cant is not se­lected in the course of the eval­u­a­tion de­scribed above or if an ap­pli­cant with­draws their ap­pli­ca­tion pre­ma­turely, their data trans­mit­ted via e-mail as well as all elec­tronic cor­re­spon­dence in­clud­ing the orig­i­nal ap­pli­ca­tion e-mail will be deleted no later than after 6 months fol­low­ing ap­pro­pri­ate no­ti­fi­ca­tion. This pe­riod is mea­sured on the basis of our le­git­i­mate in­ter­est in being able to an­swer any fol­low-up ques­tions about the ap­pli­ca­tion and, where ap­pro­pri­ate, to meet our oblig­a­tions to pro­vide ev­i­dence in ac­cor­dance with reg­u­la­tions on the equal treat­ment of ap­pli­cants.
In the event of a suc­cess­ful ap­pli­ca­tion, the data pro­vided will be fur­ther processed on the basis of Art. 6 para. 1 lit. b GDPR (for pro­cess­ing in Ger­many in con­junc­tion with § 26 para. 1 BDSG) for the pur­poses of im­ple­ment­ing the em­ploy­ment re­la­tion­ship.


12) Data sub­ject's rights
12.1 The ap­plic­a­ble data pro­tec­tion law grants you com­pre­hen­sive data sub­ject rights (rights of ac­cess and in­ter­ven­tion) vis-à-vis the data proces­sor with re­gard to the pro­cess­ing of your per­sonal data, which we hereby in­form you about below:


- Right to in­for­ma­tion in ac­cor­dance with Art. 15 GDPR: In par­tic­u­lar, you have the right to ob­tain in­for­ma­tion about any of your per­sonal data processed by us, the pur­poses of pro­cess­ing, the cat­e­gories of per­sonal data processed, the re­cip­i­ents or cat­e­gories of re­cip­i­ents to whom your data have been or will be dis­closed, the planned stor­age pe­riod or the cri­te­ria for de­ter­min­ing the stor­age pe­riod, the ex­is­tence of a right to rec­ti­fi­ca­tion, era­sure, re­stric­tion of pro­cess­ing, ob­jec­tion to pro­cess­ing, the ori­gin of your data if it has not been col­lected from you by us, the ex­is­tence of au­to­mated de­ci­sion-mak­ing, in­clud­ing pro­fil­ing, and, if ap­plic­a­ble, mean­ing­ful in­for­ma­tion about the logic in­volved and the im­pli­ca­tions for you and the in­tended ef­fects of such pro­cess­ing, as well as your right to be in­formed about the guar­an­tees pur­suant to Ar­ti­cle 46 of the GDPR in the event that your data is trans­ferred to third coun­tries;


- Right to rec­ti­fi­ca­tion in ac­cor­dance with Art. 16 GDPR: You have a right to the im­me­di­ate rec­ti­fi­ca­tion of any in­ac­cu­rate data re­lat­ing to you and/or a right to the com­ple­tion of any in­com­plete data stored by us;


- Right to era­sure in ac­cor­dance with Art. 17 GDPR: You have the right to re­quest the era­sure of your per­sonal data if the re­quire­ments of Art. 17 (1) GDPR are met. How­ever, this right shall not apply, in par­tic­u­lar, where pro­cess­ing is nec­es­sary for the ex­er­cise of the right to free­dom of ex­pres­sion and in­for­ma­tion, for com­pli­ance with a legal oblig­a­tion, for rea­sons of pub­lic in­ter­est or for as­sert­ing, ex­er­cis­ing or
de­fend­ing legal claims;


- Right to re­stric­tion of pro­cess­ing in ac­cor­dance with Art. 18 GDPR: You have the right to re­quest the re­stric­tion of the pro­cess­ing of your per­sonal data as long as the ac­cu­racy of your data, which you dis­pute, is being ver­i­fied, if you refuse the dele­tion of your data due to in­ad­mis­si­ble data pro­cess­ing and in­stead re­quest the re­stric­tion of the pro­cess­ing of your data, if you re­quire your data for the as­ser­tion, ex­er­cise or de­fence of legal claims after we no longer need this data after the in­tended pur­pose has been achieved, or if you have lodged an ob­jec­tion for rea­sons re­lat­ing to your par­tic­u­lar sit­u­a­tion, as long as it has not yet been de­ter­mined whether our le­git­i­mate in­ter­ests pre­vail;


- Right to in­for­ma­tion in ac­cor­dance with Ar­ti­cle 19 of the GDPR: If you have as­serted the right to rec­ti­fi­ca­tion, era­sure, or re­stric­tion of pro­cess­ing against the data proces­sor, the data proces­sor is obliged to in­form all re­cip­i­ents to whom the per­sonal data con­cerned has been dis­closed of this rec­ti­fi­ca­tion or dele­tion or pro­cess­ing re­stric­tion, in ac­cor­dance with Ar­ti­cle 19 of the GDPR: un­less this proves im­pos­si­ble or in­volves a dis­pro­por­tion­ate ef­fort. You are also en­ti­tled to be in­formed about the iden­tity of these re­cip­i­ents.


- Right to data porta­bil­ity in ac­cor­dance with Art. 20 GDPR: You have the right to re­ceive your per­sonal data that you have pro­vided to us in a struc­tured, com­monly used, and ma­chine-read­able for­mat or to re­quest that it be trans­ferred to an­other data proces­sor, in­so­far as this is tech­ni­cally fea­si­ble;


- Right to re­voke granted con­sent in ac­cor­dance with Art. 7 (3) GDPR: You have the right to re­voke your pre­vi­ously granted con­sent to the pro­cess­ing of data at any time with im­me­di­ate and fu­ture ef­fect. In the event of re­vo­ca­tion, we will im­me­di­ately delete the data con­cerned un­less fur­ther pro­cess­ing can be jus­ti­fied in ac­cor­dance with a legal basis for pro­cess­ing with­out con­sent. The re­vo­ca­tion of con­sent shall not af­fect the le­git­i­macy of the pro­cess­ing car­ried out on the basis of the pro­vided con­sent until re­vo­ca­tion has taken place;


- Right to lodge a com­plaint in ac­cor­dance with Art. 77 GDPR: If you be­lieve that the pro­cess­ing of your per­sonal data in­fringes the GDPR, you have the right to lodge a com­plaint with a su­per­vi­sory au­thor­ity, in par­tic­u­lar in the Mem­ber State of your res­i­dence, work­place or the place of the al­leged in­fringe­ment, with­out prej­u­dice to any other ad­min­is­tra­tive or ju­di­cial rem­edy.


12.2 Right of ob­jec­tion
If we process your per­sonal data within the frame­work of a bal­anc­ing of in­ter­ests on the basis of our over­rid­ing le­git­i­mate in­ter­est, you have the right to ob­ject to this pro­cess­ing with im­me­di­ate and fu­ture ef­fect based on rea­sons aris­ing from your par­tic­u­lar sit­u­a­tion at any time.
Should you ex­er­cise your right to ob­ject,
we will stop pro­cess­ing the data con­cerned. How­ever, we re­serve the right to fur­ther pro­cess­ing if we can demon­strate com­pelling le­git­i­mate grounds for the pro­cess­ing which over­ride your in­ter­ests, fun­da­men­tal rights and free­doms, or if the pro­cess­ing serves the pur­pose of as­sert­ing, ex­er­cis­ing or de­fend­ing legal claims.


If we process your per­sonal data for the pur­pose of di­rect mar­ket­ing, you have the right to ob­ject to the pro­cess­ing of your per­sonal data for mar­ket­ing pur­poses of this kind at any time. You can ex­er­cise your right of ob­jec­tion as de­scribed above.
If you ex­er­cise your right to ob­ject, we will stop pro­cess­ing the data con­cerned for di­rect mar­ket­ing pur­poses.


13) Stor­age pe­ri­ods for per­sonal data
The stor­age pe­riod for per­sonal data is de­ter­mined on the basis of the re­spec­tive legal basis, the pur­pose of the pro­cess­ing and where rel­e­vant, ad­di­tion­ally, on the basis of the re­spec­tive statu­tory re­ten­tion pe­riod (e.g., re­ten­tion pe­ri­ods in ac­cor­dance with com­mer­cial and tax law pro­vi­sions).
When pro­cess­ing per­sonal data on the basis of ex­plicit con­sent pur­suant to Art. 6 (1) a of the GDPR, such data is stored until the data sub­ject re­vokes their con­sent.


If statu­tory re­ten­tion pe­ri­ods exist for data that is processed within the scope of legal or quasi-le­gal oblig­a­tions on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be rou­tinely deleted fol­low­ing ex­piry of the re­ten­tion pe­ri­ods, in­so­far as it is no longer re­quired for con­tract ful­fil­ment or con­tract ini­ti­a­tion and/or there is no con­tin­ued le­git­i­mate in­ter­est in its con­tin­ued stor­age on our part.


When pro­cess­ing per­sonal data on the basis of Art. 6(1)(f) GDPR, this data is stored until the data sub­ject ex­er­cises their right to ob­ject in ac­cor­dance with Art. 21(1) GDPR, un­less we can demon­strate com­pelling le­git­i­mate grounds for the pro­cess­ing which over­ride the data sub­ject's in­ter­ests, rights and free­doms, or the pro­cess­ing is for the pur­pose of as­sert­ing, ex­er­cis­ing, or de­fend­ing legal claims.


When pro­cess­ing per­sonal data for the pur­pose of di­rect mar­ket­ing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data sub­ject ex­er­cises their right to ob­ject in ac­cor­dance with Art. 21 (2) GDPR.
Un­less oth­er­wise in­di­cated in the other in­for­ma­tion in this state­ment re­gard­ing spe­cific pro­cess­ing sit­u­a­tions, stored per­sonal data shall oth­er­wise be deleted when it is no longer nec­es­sary for the pur­poses for which it was col­lected or oth­er­wise processed.


Re­marks

We would like to point out that the Ger­man ver­sion of the data pro­tec­tion de­c­la­ra­tion (https://www.kk-weine.de/datenschutz) is the legally bind­ing ver­sion.