Privacy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data in this context is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Weinbörner UG (limited liability), Freie-Vogel-Strasse 369, 44269 Dortmund, Germany, Tel.: 0231 9999 0225, Email: info@weinboerner.eu. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Contact

When you contact us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

4) Data Processing When Opening a Customer Account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for account opening can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods conflict with this, and we have no legitimate interest in continued storage.

5) Use of Customer Data for Direct Marketing

5.1 Subscription to our Email Newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For newsletter delivery, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters after you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later point in time. The data we collect when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

5.2 Campaign.Plus

Our email newsletters are sent via this provider: Campaign.Plus GmbH, Schulgasse 5, 84359 Simbach am Inn, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 Para. 1 lit. f GDPR, so that they can handle the newsletter dispatch on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits disclosure to third parties.

6) Data Processing for Contract Execution

6.1 To execute the contract, we work with the following service provider(s) who assist us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

6.2 Use of Payment Service Providers

- Lemon Squeezy

One or more online payment methods from the following provider are available on this website: Lemon Squeezy LLC, 222 Main Street, Suite 500, Salt Lake City, UT 84101, USA

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be forwarded to them in accordance with Art. 6 (1) (b) GDPR. In this case, your data will be transferred exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and alternative payment method if applicable) during the ordering process.

To protect our legitimate interest in determining the solvency of our customers, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) (f) GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called "score values"). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

6.3 Electronic Cancellation Option for Continuous Obligation Contracts with Consumers

Consumers who have entered into paid continuous obligation contracts (such as subscription contracts) on this website have the option to cancel these via an electronic button in accordance with the applicable cancellation periods.

Clicking the button leads to a confirmation page where the consumer can provide further details about the cancellation, clearly identify themselves, and subsequently declare their cancellation electronically.

The collection of personal data and its transmission to us in this process is carried out in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also based on Art. 6 Para. 1 lit. b GDPR, the provided personal data is used to confirm the receipt of the cancellation declaration and the cancellation date electronically in text form. Another legal basis for the processing is Art. 6 Para. 1 lit. c GDPR. We are legally obligated to provide an electronic cancellation option for consumer contracts on paid continuous obligations concluded via electronic business transactions.

8) Tools and Miscellaneous

- Collmex

For accounting purposes, we use the service of the cloud-based accounting software from the following provider: Collmex GmbH, Lilienstr. 37, 66119 Saarbrücken, Germany

The provider processes incoming and outgoing invoices as well as bank transactions of our company, if applicable, to automatically record invoices, match them to transactions, and create financial accounting in a semi-automated process.

If personal data is processed in this context, the processing is carried out on the basis of our legitimate interest in efficient organization and documentation of our business transactions.

9) Rights of the Data Subject

9.1 The applicable data protection law grants you the following rights of the data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective exercise conditions:

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) (a) GDPR, this data is stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) (b) GDPR, this data is routinely deleted after the retention periods expire, provided that it is no longer required for the fulfillment or initiation of the contract and/or we have no legitimate interest in continued storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.