Privacy Policy

Thank you for visiting our website lost-barrels.com/ and for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices are in accordance with the legal regulations of the EU’s General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 et seq. DSGVO.

Person responsible

The person responsible within the meaning of Art. 4 No. 7 DSGVO is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to our website, the responsible party is:

Weinhaus Werner Näkel GmbH
Friedensstraße 15
53507 Dernau
Germany
E-mail: weingut@meyer-naekel.de
Tel.: +49 2643 1628

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the respective retrieving device (e.g. computer, cell phone, tablet, etc.).

What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user’s system accessed our Internet site (referrer tracking);
(8) Message as to whether the retrieval was successful;
(9) Volume of data transferred

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary for the course of a website visit to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The deletion of the aforementioned technical data takes place as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You may object to the processing at any time pursuant to Art. 21 DSGVO and request deletion of data pursuant to Art. 17 DSGVO. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.

Special functions of the website

Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens with this data:

Contact form(s)

What personal data is collected and to what extent is it processed?
The data entered by you in our contact forms, which you have entered in the input mask of the contact form.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing
We will use the data recorded via our contact form or via our contact forms only for processing the specific contact request received through the contact form. Please note that in order to fulfill your contact request, we may also send you e-mails to the address provided. The purpose of this is so that you can receive confirmation from us that your request has been correctly forwarded to us. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.

Duration of storage
After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Possibility of revocation and deletion
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

Necessity of providing personal data
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill out the required information of the contact form, you can either not send the request or we can unfortunately not process your request.

Registration

Scope of personal data processing and personal data collected
The registration and login data entered by you with us or communicated to you.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. b DSGVO (implementation of (pre)contractual measures).

Purpose of data processing
On our website, you have the option of using a separate login area. In order for us to check your authorization to use the protected area or the protected documents, you must enter your login data (e-mail or username and password) in the corresponding form. If required, we can send you your login data or the option to reset the password by e-mail upon request.

Duration of storage
The collected data will be stored as long as you maintain a user account with us.

Possibility of objection and deletion
You can object to the processing at any time pursuant to Art. 21 DSGVO and request deletion of data pursuant to Art. 17 DSGVO. You can find out which rights you have and how to assert them in the lower section of this privacy policy.

Necessity of providing personal data
The use of the login area on our site is contractually required for the use of the protected area. The use of the content protected by the login area is not possible without entering the personal data. If you wish to use our login area, you must fill in the fields marked as mandatory (user name and password). The input of the data requires the existence of a user account. It is not possible to log in if the data you have entered is incorrect. If the data entered by you is incorrect or not entered at all, the protected area cannot be used. However, the rest of the site can still be used without login.

Apply for Events

You can sign up for events on our Global Tour on our site. We will use your information to send you invitations to events and special occasions. We use MailChimp to send the invitations. More information about MailChimp can be found below.

Event processing

Your data is used for the administration and processing of events in which you participate.

Apply for Wine

You can apply to purchase wines. We will use your data to send you further information for the possible purchase of the wines in due course. We use MailChimp to send the information. You can find more information about MailChimp below.

Orders

We process your data in connection with orders for products or services.

Shipping processing

Your data will be used for the processing and delivery of ordered products.

Newsletter registration form

What personal data is collected and to what extent is it processed?
By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior).

Purpose of data processing
The data recorded in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).

Duration of storage
Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.

Revocation and deletion options
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

Necessity of providing personal data
If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The information provided for newsletter registration is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.

MailChimp – Newsletter

We offer you the opportunity to register for our free newsletter via our website.

We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as „The Rocket Science Group“.

In addition, the Rocket Science Group offers further information about its data protection practices at

http://mailchimp.com/legal/privacy/

If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be saved. During the registration process, your consent to receive this newsletter will be obtained together with a concrete description of the type of content it will offer and reference made to this privacy policy.

The newsletter then sent out by The Rocket Science Group will also contain a tracking pixel called a web beacon. This pixel helps us evaluate whether and when you have read our newsletter and whether you have clicked any links contained therein. In addition to further technical data, such as data about your computer hardware and your IP address, the data processed will be stored so that we can optimize our newsletter and respond to the wishes of our readers. The data will therefore increase the quality and attractiveness of our newsletter.

The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a) GDPR.

You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.

Data security and data protection, communication by e-mail

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Automatic e-mail archiving

Scope of the processing of personal data
We expressly draw your attention to the fact that our mail system has an automated archiving procedure. All incoming and outgoing e-mails are digitally archived by this in an audit-proof manner.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. c DSGVO (legal obligation). The legal obligation consists of compliance with tax and commercial law requirements (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).

Purpose of data processing
The purpose of archiving is to comply with tax law requirements (e.g. §§ 146, 147 AO – obligation to retain e-mails of relevance to tax law) and commercial law requirements (e.g. §§ 238, 257 HGB – obligation to archive business correspondence).

Duration of storage
Our mail communication is stored until the expiration of tax and commercial law retention obligations. The storage period can be up to 10 years.

Possibility of objection and deletion
You may object to the processing at any time pursuant to Art. 21 DSGVO and request deletion of data pursuant to Art. 17 DSGVO. You can find out which rights you are entitled to and how to assert them in the lower section of this privacy policy.

Handling of application documents
We would also like to point out that we only consider application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. We do not consider applications in Word file format and other file formats and delete them unread. Please note that application documents sent by e-mail without encryption may be opened by third parties before they reach our IT systems. We assume that we may also reply to unencrypted application e-mails without encryption. If you do not wish this, please inform us in your application e-mail.

Right to information and correction requests – Deletion & restriction of data – Revocation of consent – Right of objection

Right to information

You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have a right to information on the information named in Art. 15 (1) DSGVO, insofar as the rights and freedoms of other persons are not affected (cf. Art. 15 (4) DSGVO). We will also be happy to provide you with a copy of the data.

Right of rectification
In accordance with Art. 16 DSGVO, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected by us at any time. You can also request a completion of the data stored with us at any time. A corresponding adjustment will be made immediately.

Right to deletion
Pursuant to Art. 17 (1) DSGVO, you have the right to request that we delete the personal data we have collected about you if

the data is either no longer required;
due to the revocation of your consent, the legal basis for the processing has ceased to exist without substitution;
you have objected to the processing and there are no legitimate grounds for the processing;
your data is processed unlawfully;
a legal obligation requires this or a collection pursuant to Art. 8 (1) DSGVO has taken place.
According to Art. 17 (3) DSGVO, the right does not exist if

processing is necessary for the exercise of the right to freedom of expression and information;
your data has been collected on the basis of a legal obligation;
the processing is necessary for reasons of public interest;
the data are necessary for the assertion, exercise or defense of legal claims.
Right to restriction of processing
According to Art. 18 (1) DSGVO, in individual cases you have the right to request the restriction of the processing of your personal data.

This is the case if

the accuracy of the personal data is disputed by you;
the processing is unlawful and you do not consent to its erasure;
the data is no longer required for the purpose of processing, but the collected data is used for the assertion, exercise or defense of legal claims;
an objection to the processing has been lodged pursuant to Art. 21 (1) DSGVO and it is still unclear which interests prevail.
Right of revocation
If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you may revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.

Right of objection
Pursuant to Art. 21 DSGVO, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 (1) (f) (in the context of a legitimate interest). You only have this right if there are special circumstances against the storage and processing.

How do you exercise your rights?
You can exercise your rights at any time by contacting us at the contact details below:

Weinhaus Werner Näkel GmbH
Friedensstrasse 15
53507 Dernau
Germany
email: weingut@meyer-naekel.de
phone: +49 2643 1628

Right to data portability

Pursuant to Art. 20 DSGVO, you have a right to the transfer of personal data concerning you. The data will be provided by us in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.

We will provide you with the following data upon request pursuant to Art. 20 (1) DSGVO:

Data collected on the basis of express consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO;
Data that we have received from you in accordance with Art. 6 Para. 1 lit. b DSGVO within the framework of existing contracts;
Data that have been processed within the framework of an automated procedure.
We will transfer the personal data directly to a responsible party requested by you, insofar as this is technically feasible. Please note that we are not allowed to transfer data that interfere with the freedoms and rights of other persons pursuant to Art. 20 (4) DSGVO.

Right of appeal to the supervisory authority pursuant to Art. 77 (1) DSGVO

If you suspect that your data is being processed illegally on our site, you can of course bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Independently of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) DSGVO. The right of complaint pursuant to Art. 77 DSGVO is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the places mentioned above. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Article 78 GDPR.