As the responsible body (see below under II.) within the meaning of the data protection regulations, we will inform you below about the processing of your personal data by us.
I. The concept of personal data and other important terms
In simple terms, personal data is all information that relates to you personally as a data subject. Provisions on what the term “personal data” means and what other terms that are important for the following data protection information can be found in Article 4 of the GDPR (General Data Protection Regulation).
II. Responsible body for data protection
The responsible body for data protection is:
Oeno Future Ltd
The Royal Exchange,
Unit 16-17, Cornhill,
London EC3V 3LL.
Great Britain
Tel.: +44 (0) 207 846 3366
E-Mail: info@oenofuture.com
The Data Protection Officer at Oeno Future Ltd is:
Inna Sidorenko
If you have any questions about the protection of your personal data or about this Privacy Policy, please contact one of the aforementioned offices. We will then be happy to provide you with information about the data stored by us about you.
III. Purposes of processing your personal data; Legal basis for processing
We process your personal data as part of our work for the purposes listed below in accordance with the respective legal bases mentioned.
1. For the performance of a contract to which you are a party, the processing of your personal data is carried out on the basis of Article 6(1)(b) GDPR.
2. In order to carry out pre-contractual measures, which are carried out on the basis of a request from you, the processing of your personal data is carried out on the basis of Article 6(1)(b) GDPR.
3. For the purpose of carrying out measures for the purpose of advertising, the processing of your personal data shall be carried out either on the basis of Article 6(1)(a) GDPR or on the basis of Article 6(1)(f) GDPR.
4. In order to safeguard our legitimate interest in enforcing our rights and defending against claims against us, your personal data is processed on the basis of Article 6(1)(f) GDPR.
IV. Transfer of your personal data to third parties
1. Insofar as this is necessary for the purposes of processing your personal data, we transmit your personal data to third parties in accordance to the legal requirements.
2. Information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding additional information in this privacy policy declaration.
3. In the case of the transmission of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.
V. Scope of the processing of your personal data for the individual processing purposes
In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.
1. Collection and logging of data when accessing our website
Below you will find some information about what personal data is collected during your visit to our website and how we use it.
Every access to our website (and its subpages) is automatically recorded and logged. In particular, the IP address of the requesting computer can be recorded and logged. Any click, download or other retrieval of a file available on our website may also be recorded and logged accordingly. The following are logged: file name; time of retrieval (date and time); amount of data retrieved or transmitted; the browser used; notification of whether the retrieval or transmission was successful; name of the requesting domain or email. If necessary, sent confirmations and read receipts of e-mails are also recorded and logged.
b) The above data, with the exception of the requesting domain or email address, are not suitable for personally identifying you. The above data collection is not required by law or contract or required for the conclusion of a contract. You are not obligated to provide the above personal data. The fact remains that failure to provide the data would mean that you could no longer be able to use the functions of our website to its full capacity.
c) The aforementioned data will be processed by us for the following purposes:
– Ensuring a smooth connection to our website,
– Ensuring comfortable use of our website,
– Evaluation by us for system security and stability, as well as
– Administration purposes.
d) The legal basis for the aforementioned data processing is Article 6(1)(f) GDPR. Our legitimate interest follows for the aforementioned purposes for the collection of data.
2. Registration on this website
a) You may be able to register on our website to use additional features on the site. We use the data entered for this reason only for the purpose of using the respective offer or service for which you have registered. The required information requested during registration must be given in full. Otherwise, the registration will be rejected.
For important changes, for example in the scope of the offer or for technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
b) The processing of the data entered during registration is based on your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time and without giving reasons with effect for the future. See Article 7(3) GDPR. The legality of the processing carried out until the point of withdrawal remains unaffected in the case of withdrawal.
3. Processing of inquiries, also via the chat function on our website
a) If you contact us with an inquiry or a concern, we will process the personal data and information/documents you provide. Regardless of the way in which you send us your request or concern, these may be:
– Date and time of contact
– Name data
– Contact details
– Data on inquiries/concerns
– The information/documents submitted
b) The processing of your personal data and the submitted information/documents is carried out, depending on the content of your inquiry or your concern, on the basis of Article 6(1)(b) GDPR for the implementation of pre-contractual measures or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR in order to safeguard our legitimate interest in responding to inquiries/concerns and in the implementation of other measures relating to the processing of inquiries/concerns.
c) You can revoke your consent given to us at any time and without giving reasons with effect for the future. See Article 7(3) GDPR. The legality of the processing carried out until the point of withdrawal remains unaffected in the case of withdrawal.
d) Insofar as this is necessary for the processing of your inquiry/concern, we will transfer your personal data to third parties within the scope of the legal requirements. In the cases of the transmission of your personal data to third parties, the scope of the transmitted data is limited to the minimum required. See also above under IV.
e) Your personal data will be deleted when your inquiry/concern has been clarified, however we may continue to process the data for a different processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy declaration.
4. Fulfillment of contracts
a) If you submit personal data to us for the purpose of concluding a contract, we will process the data you have submitted for the execution of the contract.
b) Your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party.
c) Insofar as this is necessary for the fulfillment of the contract with you, we transmit your personal data to third parties within the scope of the legal requirements. See IV above.
d) In the cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.
e) Your personal data will be deleted after the expiry of the tax and commercial retention periods of 6 and 10 years respectively, unless we may continue to process the data for a different purpose within the scope of the legal requirements and in accordance with the information in this privacy policy declaration.
5. Advertising by newsletter
If you subscribe to our newsletter (if available), we process your personal information in order to send you information about our offers or news by e-mail.
If you subscribe to our newsletter, you give us your consent to the fact that we can send you our newsletter. You can revoke this consent at any time and without giving reasons with effect for the future. See Article 7(3) GDPR. The legality of the processing carried out until the point of withdrawal remains unaffected in the case of withdrawal.
The processing of your personal data is based on the consent given by you in accordance with Article 6(1)(a) GDPR.
To unsubscribe from our newsletter, please send a corresponding notification to the responsible body (see II. above).
If you unsubscribe or withdraw your consent to our newsletter, your e-mail address will be deleted immediately from the newsletter mailing list. We will no longer process your e-mail address unless we may continue to process it for a different purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.
6. Enforcement of our rights and defense against claims against us
a) If necessary, we may process your personal data to protect our legitimate interest in asserting our rights and in defending against claims against us.
b) In this case, your personal data will be processed on the basis of Article 6(1)(f) GDPR.
c) Insofar as this is necessary to protect our legitimate interest, we will transmit your personal data to third parties within the scope of the legal requirements. A transmission is also made to our lawyers (www.zellerseyfert.com).
d) In the cases of the transfer of your personal data to third parties, the scope of the transmitted data is limited to the minimum required.
e) Your personal data will be deleted after completion of the procedure, but at the earliest after the expiry of the tax and commercial retention periods of 6 or 10 years, unless we may continue to process the data for a different purpose within the scope of the legal requirements and in accordance with the information of this privacy policy declaration.
VI. Duration for which your personal data is stored or criteria for determining this duration
Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are allowed to continue processing the data for a different purpose within the scope of the legal requirements and in accordance with the information in this privacy policy declaration. Information on the duration for which your personal data is stored or on the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy declaration.
VII. Your rights
1. Overview
In order to ensure fair and transparent processing of personal data, you, as the data subject, are entitled to the following rights in accordance with data protection regulations:
– the right to information in accordance with Article 15 GDPR,
– the right to rectification in accordance with Article 16 GDPR,
– the right to deletion in accordance with to Article 17 GDPR,
– the right to restrict processing in accordance with Article 18 GDPR (see under 6.),
– the right to data portability in accordance with Article 20 GDPR (see under 5.)
– the right to revoke consent at any time in accordance with Article 7(3) GDPR (see under 4.),
– the right to object to the processing in accordance with Article 21 GDPR, about which we will inform you separately below (see under 2.) and
– the right to lodge a complaint with the supervisory in accordance with Article 77 GDPR, about which we will inform you separately below (see under 3.).
2. Your right to object to processing (Article 21 GDPR)
THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS NECESSARY TO PROTECT THE LEGITIMATE INTERESTS OF THE RESPONSIBLE OR A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE PERSON CONCERNED REQUIRE THE PROTECTION OF PERSONAL DATA, IN PARTICULAR THE PERSON AFFECTED IS A CHILD, ARTICLE 6(1)(F) GDPR.
AS A DATA SUBJECT, YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, AT ANY TIME AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU BASED ON ARTICLE 6(1)(F) GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVIDE COMPELLING REASONS FOR PROCESSING THAT PROCESS YOUR INTERESTS, PERSONAL RIGHTS OR RELIABILITIES OR LEGAL DEFENSE.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT ADVERTISING, YOU AS A DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME AGAINST THE PROCESSING OF PERSONAL DATA FOR SUCH PURPOSE; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IN CONNECTION WITH SUCH DIRECT ADVERTISING. IF YOU, AS A DATA SUBJECT, OBJECT TO PROCESSING FOR DIRECT ADVERTISING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.
3. Your right to lodge a complaint to the supervisory authority (Article 77 GDPR)
As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the provisions of the GDPR .
4. Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke your already given consent at any time and without giving reasons with effect for the future. See Article 7(3) GDPR. The legality of the processing carried out until the point of withdrawal remains unaffected in the case of withdrawal.
5. Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done if it is technically feasible.
6. Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:
– If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
– If the processing of your personal data happened unlawfully, you have the right to request the restriction of the data processing instead of the deletion.
– If we no longer need your personal data, but you need your personal data to exercise, defend or assert legal claims, you have the right to request the restriction of the data processing instead of the deletion.
– If you have lodged an objection in accordance with Article 21(1) GDPR, a balance must be made between your interests and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data, except for its storage, may be processed only with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal entity or for reasons of important public interest of the European Union or a member state.
VIII. Information on the basis for the provision of your personal data
If you wish to enter into a contract with us or if you contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your inquiry. You are not obligated to provide your personal data. However, failure to provide your personal data would result in us not concluding a contract with you or cannot process your request.
IX. Brief note about cookies
1. Session cookies
We use so-called session cookies on our website. Session cookies are managed on the server side and are not stored on your computer’s hard drive. Session cookies facilitate navigation when you visit our website, but lose their validity immediately when you leave our website. If you visit our website again, a new cookie will be created on the server side, which will lose its validity when you exit. It is therefore not possible to identify the visitor to our website or the personal data of visitors to our website by means of a session cookie. If you do not want to accept any cookies, including session cookies, the help function of most browsers (usually shown in the form of a question mark) explains how you can set your browser so that new cookies are no longer accepted when using the internet. Many browsers can also be set to automatically be notified by your browser when you receive a new cookie. The help function of your browser will usually also explain to you how you can delete all cookies received from your computer. Some browsers can also be set so that cookies are only created or allowed on your computer in accordance with your specifications depending on the requesting address.
2. The legal basis for our use of cookies, as shown under IX. above is reflected in Article 6(1)(f) GDPR (processing is necessary to protect our legitimate interests).
X. USE OF SOCIAL MEDIA
1. Social plugins
We use social plugins from the social networks Facebook, Instagram, and LinkedIn on our website on the basis of Article 6 Para. 1 S. (1)(f) GDPR in order to make our offer and our website better known. The promotional purpose we pursue is a legitimate interest within the meaning of the GDPR. The respective providers (Facebook, Instagram, LinkedIn) are responsible for ensuring that operation complies with data protection regulations.
2. Use of Facebook plugins
We use Facebook plugins on our website. A plugin is a software module that can be discovered by a software application during its runtime and integrated in order to expand its functionality. The Facebook plugins are operated by the social network Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA (hereinafter “Facebook”). The Facebook plugins are identified on our website by the Facebook logo (a small “f” in a circle), by the addition “Like” (thumbs up symbol) or with the addition “Facebook Social Plugin”.
When you visit our website or a subpage of our website that contains such a Facebook plugin, your internet browser establishes a direct connection to the Facebook servers, which in turn transmits the content of the Facebook plugin to your browser and is integrated by this into the displayed website or subpage of our website. As a result, the information that you have visited on our website or the relevant subpage of our website is forwarded to Facebook. We would like to point out that Facebook can assign your visit to our website to your personal Facebook user account, provided that you are logged into your personal Facebook user account while visiting our website or a subpage of our website. By interacting with Facebook plugins, e.g. by clicking the “Like” button or leaving a comment, this information is transmitted directly to Facebook, where it is stored and processed.
If you do not have a Facebook user account, there is still the possibility that Facebook will detect and store your IP address.
If you have a Facebook user account and refuse to allow Facebook to collect personal and/or other data about you via our website and link, process, and use your member data stored on Facebook, you must log out of your Facebook account before visiting our website. Log out of account. You can also block Facebook plugins with the help of certain add-ons for your browser, for example with the “Facebook Blocker” add-on (see, for example, http://webgraph.com/resources/facebookblocker/).
The purpose and scope of data collection, data processing, and other data usage by Facebook, as well as your related rights and setting options to protect your privacy and your personal data, can be found in Facebook’s data usage guidelines (https://www.facebook.com/about/privacy/).
On our website we also use social plugins from Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA). The plugins are marked with an Instagram logo, for example in the form of an “Instagram Camera”. For example, you can see an overview of the Instagram plugins and their appearance in the following blog: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.
If you are logged into Instagram, Instagram can assign the visit to our website directly to your Instagram account. If you interact with the plugins, for example by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information will also be posted to your Instagram account and displayed to your contacts.
The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your related rights and settings to protect your privacy can be found in Instagram’s privacy policy: https://help.instagram.com/155833707900388/
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).
4. Use of the LinkedIn share button
The LinkedIn share button is also integrated into our website. LinkedIn is offered by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as “LinkedIn”). You can recognize the LinkedIn plugins by the LinkedIn logo or the “Recommend” button on our website. When you visit our website, the LinkedIn social plugin establishes a direct connection between your browser and the LinkedIn server. This gives LinkedIn the information that you have visited our website and your IP address. If you are logged into LinkedIn, you can link the content on our website to your LinkedIn profile by clicking the LinkedIn “Recommend” button on our website. Details on data collection, data processing, and your data protection rights and settings can be found in LinkedIn’s privacy policy. You can find this information at the following link: http://www.linkedin.com/legal/privacy-policy. We would like to acknowledge that we have no influence on the specific type of data usage by LinkedIn.
XI. USE OF GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses cookies (text files) that are stored on your computer and that enable your use of our website to be analyzed. The information generated by the cookie about your use of our website, including your IP address, is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of our website, to compile reports on website activity for the website operator and to provide other services relating to your website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other data held by Google.
You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to acknowledge that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of the data collected about you by Google in the manner and for the purpose stated above.
You can object to the collection and storage of data by Google Analytics at any time with future effect. For more information, see http://tools.google.com/dlpage/gaoptout.
In view of the discussion about the use of analysis tools with complete IP addresses, we would like to acknowledge that this website uses Google Analytics with the extension “_ anonymizeIp ( )” and therefore IP addresses are only processed in abbreviated form in order to exclude direct personal reference.
