data protection

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means any information by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Hörner GbR, Hauptstraße 4, 76833 Knöringen, Germany, Tel.: +49 6341-932482, Fax: +49 6341-34282, Email: info@johannes-weine.de.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you visit our website purely for information purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Wix
For hosting our website and displaying the content, we use the system of the following provider:
Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel
Data is also transferred to: Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA.

All data collected on our website is processed on the provider’s servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

3.2 Google Cloud CDN
We use a Content Delivery Network (CDN) of the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service enables us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interests in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR.

Data may also be transferred to: Google LLC, USA.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files stored on your device. Some cookies are automatically deleted after you close your browser (“session cookies”), while others remain on your device for longer and enable us to save your settings (“persistent cookies”). You can find the storage duration of persistent cookies in your browser’s cookie settings overview.

Where personal data is also processed by individual cookies used by us, the processing takes place either pursuant to Art. 6(1)(b) GDPR for the execution of the contract, pursuant to Art. 6(1)(a) GDPR in the event of consent, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly, effective website experience.

You can configure your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data will be collected. The specific data collected in the case of a contact form can be found in the respective contact form. These data are stored and used solely for the purpose of responding to your request or for establishing contact and the related technical administration.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed, provided that there are no statutory retention obligations to the contrary.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to Our Email Newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required is your email address. Providing additional data is voluntary and will be used to address you personally.

We use the so-called double opt-in procedure: you will only receive a newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking a link.

With activation of the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. At the time of registration, we also store your IP address and the date and time of registration as provided by your ISP to trace possible misuse of your email address.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned above. Upon unsubscribing, your email address will be immediately removed from our mailing list unless you have expressly consented to further use of your data or we have reserved a further data use permitted by law, which we inform you about in this policy.

6.2 Advertising by Postal Mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, postal address, and — if you have provided these additional details within the contractual relationship — your title, academic degree, year of birth, and professional, industry, or business designation pursuant to Art. 6(1)(f) GDPR and to use them for sending interesting offers and information about our products by postal mail.
You may object to the storage and use of your data for this purpose at any time.

7) Website Functionalities

Google Web Fonts
This site uses so-called web fonts for the uniform display of fonts, provided by:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA.

The processing of personal data in connection with establishing contact with the provider of the fonts is carried out only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by disabling this service in the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.

Further details on Google’s privacy policy can be found here:
https://business.safety.google/intl/de/privacy/

8) Tools and Miscellaneous

Cookie Consent Tool
This website uses a “cookie consent tool” to obtain valid user consents for cookies and cookie-based applications requiring consent. The tool is displayed to users upon accessing the page as an interactive interface that allows consent by selecting checkboxes. Accordingly, all cookies/services requiring consent are only loaded if the respective user gives consent.

The tool sets technically necessary cookies to save your cookie preferences. Personal data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) are processed for storage, assignment, or logging of cookie settings, this processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant website design.

The further legal basis is Art. 6(1)(c) GDPR, as we are legally obliged to make the use of non-essential cookies dependent on user consent.

Where necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and prohibit unauthorized disclosure to third parties.

More information about the provider and the settings options of the cookie consent tool can be found directly in the user interface on our website.

9) Rights of the Data Subject

9.1 Under applicable data protection law, you have the following rights with regard to the processing of your personal data by the controller (rights of access and intervention). For the requirements of each, reference is made to the cited legal basis:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to notification pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR

9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, processing purpose, and — if applicable — the relevant statutory retention period (e.g., commercial and tax retention periods).

If processing is based on express consent under Art. 6(1)(a) GDPR, the data will be stored until you revoke your consent.
If statutory retention periods exist for data processed under Art. 6(1)(b) GDPR, these data will be routinely deleted after the retention periods have expired, provided they are no longer necessary for contract fulfillment or initiation and/or there is no legitimate interest in continued storage.
If data are processed under Art. 6(1)(f) GDPR, they will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing or the processing serves legal claims.
If data are processed for direct advertising under Art. 6(1)(f) GDPR, they will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in this Privacy Policy, personal data that are no longer necessary will be deleted when the purposes for which they were collected or otherwise processed no longer apply.

👉 Soll ich dir diesen Text auch in ein sauberes, rechtssicher formatiertes Layout (z. B. PDF- oder Word-Vorlage) setzen, das du direkt für deine Website verwenden kannst?