data protection

Privacy Policy

1. Introduction and Contact Details of the Data Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2

The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Hörner GbR
Hauptstraße 4
76833 Knöringen
Germany

Phone: +49 6341 932482
Fax: +49 6341 34282
Email: info@johannesweine.de

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2. Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the website server (so-called "server log files").

When you access our website, we collect the following data, which is technically necessary to display the website to you:

The website visited
Date and time of access
Amount of data transmitted in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries addressed to the controller), this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3. Hosting & Content Delivery Network

3.1 Wix

We use the system of the following provider to host our website and display its content:

Wix HQ, 6350671, Namal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Data is also transferred to:

Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

All data collected on our website is processed on the provider's servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

When data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

3.2 Cloudflare

We use a Content Delivery Network (CDN) provided by:

Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables us to deliver large media files, such as graphics, website content, or scripts, more quickly via a network of regionally distributed servers.

Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

3.3 Google Cloud CDN

We use a Content Delivery Network (CDN) provided by:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service enables us to deliver large media files, such as graphics, website content, or scripts, more quickly via a network of regionally distributed servers.

Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR.

Data may also be transferred to:

Google LLC, USA

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

4. Cookies

To make visiting our website more enjoyable and to enable the use of certain functions, we use cookies. Cookies are small text files that are stored on your device.

Some cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow website settings to be saved (so-called "persistent cookies").

In the latter case, you can find information about the storage duration in the cookie settings overview of your web browser.

Where individual cookies used by us also process personal data, processing is carried out in accordance with:

Art. 6(1)(b) GDPR for the performance of a contract,
Art. 6(1)(a) GDPR where consent has been given, or
Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective browsing experience.

You can configure your browser to inform you when cookies are being set and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or generally.

Please note that the functionality of our website may be limited if cookies are not accepted.

5. Contacting Us

When you contact us (e.g. via a contact form or email), personal data is collected.

The specific data collected when using a contact form can be found in the respective contact form.

This data is stored and used exclusively for the purpose of responding to your inquiry or contacting you and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR.

If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR serves as an additional legal basis for processing.

Your data will be deleted once your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6. Use of Customer Data for Direct Marketing

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers.

The only information required to receive the newsletter is your email address. Providing additional information is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for sending our newsletter.

This means that we will only send you an email newsletter once you have expressly confirmed that you wish to receive it.

We will send you a confirmation email asking you to confirm your wish to receive future newsletters by clicking on the corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR.

When you subscribe to the newsletter, we store your IP address as recorded by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date.

The data collected when you subscribe to the newsletter is used exclusively for promotional communication via the newsletter.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named above.

Once you have unsubscribed, your email address will be removed from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and as explained in this policy.

6.2 Advertising by Postal Mail

On the basis of our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name and postal address and, where we have received this additional information from you as part of our contractual relationship, your title, academic degree, year of birth, and professional, industry, or business designation in accordance with Art. 6(1)(f) GDPR.

We may use this information to send you interesting offers and information about our products by postal mail.

You may object to the storage and use of your data for this purpose at any time by contacting us.

7. Website Features

7.1 Google Maps

This website uses an online mapping service provided by:

Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive maps and visualizing geographical information.

Using this service allows us to show you our location and makes it easier for you to find directions to us.

When you access pages of our website that contain embedded Google Maps, information about your use of our website (such as your IP address) is transmitted to and stored on Google's servers.

This may also involve transferring data to servers operated by Google LLC in the USA.

This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists.

If you are logged in to Google, your data will be directly associated with your account.

If you do not want your data to be associated with your Google profile, you must log out before activating the button.

Google stores your data (including data from users who are not logged in) as usage profiles and evaluates this information.

The collection, storage, and evaluation of this data are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites according to user needs.

You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly.

If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely disable the Google Maps service by turning off JavaScript in your browser.

In this case, Google Maps and the map display on this website cannot be used.

Where legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure described above for submitting an objection.

Further information on Google's privacy practices can be found here:

https://business.safety.google/intl/de/privacy/

7.2 Google Web Fonts

This website uses web fonts provided by the following provider to ensure the consistent display of fonts:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers.

In this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to:

Google LLC, USA

The processing of personal data in connection with establishing a connection to the font provider only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by disabling this service via the cookie consent tool provided on the website.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google's privacy policy can be found here:

https://business.safety.google/intl/de/privacy/

8. Tools and Other Services

Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies and cookie-based applications that require consent.

The Cookie Consent Tool is displayed to users when they visit the website in the form of an interactive user interface, allowing them to give their consent to specific cookies and/or cookie-based applications by selecting the relevant checkboxes.

Through the use of this tool, all cookies and services requiring consent are only loaded when the respective user has given their consent by selecting the corresponding checkbox.

This ensures that such cookies are only placed on the user's device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences.

As a general rule, no personal user data is processed in this context.

If personal data (such as an IP address) is processed in individual cases for the purpose of storing, assigning, or recording cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and, consequently, in ensuring the legally compliant operation of our website.

An additional legal basis for processing is Art. 6(1)(c) GDPR.

As the data controller, we are legally obliged to make the use of technically non-essential cookies dependent on the consent of the respective user.

Where required, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

9. Rights of the Data Subject

9.1

Under applicable data protection law, you have the following rights in relation to the controller regarding the processing of your personal data (rights of access and intervention).

The relevant legal basis is referenced for the respective conditions under which these rights may be exercised:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED.

HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES.

YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

10. Duration of Storage of Personal Data

The duration for which personal data is stored depends on the respective legal basis, the purpose of processing, and, where applicable, the relevant statutory retention periods (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar legal obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted once the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the information provided in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.