Status: 08/2021

We process personal data of the users only insofar as this is necessary for the provision of a functional and comfortable website as well as our content and services.

“Processing” is the collection, use, transfer and / or storage. According to the General Data Protection Regulation (GDPR), all data with which a natural person can be identified are considered “personal data”. The exact definitions of the terms are set out in Art. 4 GPDR

The following statements inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, about the purposes and means of processing we decide alone or together with others, as well as about what we do to optimize and use quality, if necessary Third party components used who process data on their own responsibility:
_________________________________________

A) Information on the person responsible
B) Rights of the user
C) Information on data processing
_________________________________________

A) Information on the controller

The person responsible “provider” within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Wine Anatolia B.V.
Poortland 1046 Amsterdam / Netherlands

E-Mail: [email protected]

B) rights of the user

With regard to the processing of his personal data reproduced below by the provider, the user has the right to

1. to request a confirmation as to whether the data concerning him will be processed and for precise information about this data as well as for further information and copies of the data in accordance with Art. 15 GDPR;

2. to request the immediate correction of incorrect data concerning him or the completion of this data in accordance with Art. 16 GDPR;

3. to demand that the data concerning him be deleted immediately in accordance with Art. 17 GDPR, alternatively, if, for example, further processing is necessary in accordance with Art. 17 Paragraph 3 GDPR, a restriction of the processing of the data in accordance with Art. 18 GDPR to demand;

4. that he receives the data concerning him and provided by him in accordance with Art. 20 GDPR and to request their transfer to other responsible parties;

5. to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR if the user is of the opinion that the processing of his data by the provider violates the GDPR.

_________________________

6. In principle, the user can object to the future processing of the data concerning him, which is carried out by a person responsible on the basis of Art. 6 Para. 1 lit. f GDPR, at any time in accordance with Art. 21 GDPR. The objection can in particular be made against processing for direct marketing purposes.
________________________

7. The provider is also obliged to notify all recipients of the data to whom the data is received by the provider of any correction or deletion of personal data or any restriction of processing that takes place on the basis of Article 16 GDPR, Article 17 Paragraph 1 GDPR and Article 18 GDPR have been disclosed. The obligation does not exist in the event that this notification turns out to be impossible or is associated with a disproportionate effort. The customer has the right to information about these recipients.

C) Information on data processing

If no detailed information is given below about the individual data processing, the user’s data processed by the provider will be deleted or blocked as soon as the purpose of storage no longer applies and the deletion does not conflict with any statutory retention requirements.

Cookies

a) “Session” cookies / “Persistent” cookies

The provider uses so-called cookies on its website. Cookies are small text files or other storage technologies that the Internet browser used by the user stores and stores on the end device. These cookies process certain information of the user on an individual basis, such as browser and location data and IP address values.

The processing allows the provider to make his website more user-friendly, more effective and more secure. The processing of the “session” cookies enables the content to be reproduced in different languages or, if necessary, the use of a shopping cart function.

The “persistent” cookies allow the website to recognize the user via his browser when he visits the website regularly.

If these cookies process personal data for the purpose of contract initiation or contract execution, the legal basis for processing is Article 6 (1) (b) GDPR.

If the processing does not aim to initiate or process a contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Article 6 (1) (f) GDPR.

The “session” cookies are deleted when the user closes his browser. The “persistent” cookies are automatically deleted after a period specified by the provider. This period varies depending on the cookie, but does not exceed a period of one year.

b) Third party cookies

If necessary, cookies from third-party providers are also used on the provider’s website. These third-party providers are partner companies with which the provider cooperates for the purpose of advertising, analysis or the functionalities of the website. If this is the case, the purposes and legal bases of the corresponding processing will be reproduced in the following explanations.

c) possibility of elimination

The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. Should the user prevent or restrict the installation of cookies, this may mean that not all functions of the website can be used to their full extent.

Contract processing

a) Processing

The personal data provided by the user for the purpose of purchasing goods or services will be processed by the provider for the purpose of processing the contract. The details of the data are required to conclude the contract; Without the provision of the data, it is not possible to conclude a contract. The legal basis for processing is Article 6 (1) (b) GDPR. After the contract has been fully processed, the user’s data will be deleted with due regard for retention periods under tax and commercial law.

b) disclosure

The personal data of the user will be passed on to the transport company commissioned with the delivery or to the financial service provider as part of the contract processing, insofar as this is necessary for the delivery or payment of the goods. The legal basis for forwarding the data is Article 6 (1) lit. b GDPR.

contact

If the user contacts the provider via the contact form or email, the personal data entered by the user on this occasion will be used to process the request. The details of the data are required to answer the request; without the provision of the data, an answer is not possible or only possible to a limited extent.

If the contact request serves to fulfill a contract or to initiate a contract, the legal basis is Art. 6 Paragraph 1 lit. b GDPR.

The user’s data will be deleted if the user’s request has been answered conclusively and there are no statutory retention requirements, e.g. in the event of subsequent contract processing.

The legal basis can also be the consent of the user in accordance with Article 6 (1) (a) GDPR. In the context of the contact form, the user’s consent to the above processing may be obtained and reference may be made to this data protection declaration.

According to Art. 7 Para. 3 GDPR, the user can revoke consent given for the customer account at any time by notifying the provider. The data processed in connection will be deleted as soon as their processing is no longer necessary.

Customer account

If the user registers for a customer account with the provider, the data entered in the course of this registration (e.g. name, address, e-mail address) will only be used for the fulfillment of a contract or the implementation of pre-contractual measures as well as for the general administration of the customer relationship ( e.g. retrieval of previous orders) collected and stored. With the registration, the IP address and the date and time of registration are also saved. It will not be passed on to third parties.

If the user has given their consent, the legal basis is Article 6 (1) (a) GDPR. As part of the registration process, the user’s consent to the above processing is obtained and reference is made to this data protection declaration. The data collected in this way will only be used for the aforementioned purpose. It will not be passed on to third parties.

If the opening of the customer account serves the fulfillment of a contract or the implementation of pre-contractual measures, the additional legal basis is Art. 6 Para. 1 lit. b GDPR.

According to Art. 7 Para. 3 GDPR, the user can revoke consent given for the customer account at any time by notifying the provider. The data processed in connection will be deleted as soon as their processing is no longer necessary. If the data is required to fulfill a contract or to carry out pre-contractual measures, the user’s data will be deleted when the retention periods under tax and commercial law have expired.

Newsletter

a) Registration

If the user signs up for the provider’s free newsletter, the data requested in the input mask (email address and, optionally, name and address) will be processed by a service provider – see dispatch below. In addition, the IP address and the date and time of registration are saved. As part of the registration process, the consent of the user is obtained and the content is specifically described. At the same time, reference is made to this data protection declaration.

b) Shipping

The provider uses mailchimp to send newsletters . “mailchimp” is a marketing platform for small businesses created by the Rocket Science Group.

Further information on data protection at mailchimp: https://mailchimp.com/legal/privacy/

c) analysis

The newsletters sent by the provider via Mailchimp contain so-called tracking pixels (web beacons), which the provider can use to identify whether and when an email was opened and which links in the newsletter were followed by the user.

This analysis data is stored by the provider in addition to the technical data (system data and IP address) so that the newsletter can be optimally tailored to the wishes and interests of the user. Accordingly, the data collected in this way are used to continuously improve the quality of the newsletter.

d) Legal basis

The legal basis for sending the newsletter and the analysis is Article 6 Paragraph 1 lit. GDPR.

e) revocation

The user can revoke his consent to this at any time in accordance with Art. 7 Para. 3 GDPR for the future by notifying the provider or by using the unsubscribe link contained in the newsletter.

Google Analytics

This website uses Google Analytics, a web analysis service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Google is certified according to the “EU-US Privacy Shield” and thus guarantees compliance with EU data protection requirements when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google Analytics is used by the provider to analyze the use of the website. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.

Information such as the time, place and frequency of the user’s website visit, including their IP address, are transmitted to and stored by Google on servers in the United States.

The provider uses Google Analytics with an anonymization function. With this addition, the IP address is already shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Google will use the data collected in this way to evaluate the user’s visit to the website and to compile reports on website activity for the provider. In addition, the data is used to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

According to its own information, Google will under no circumstances associate the IP address of the user with other Google data. Further information, in particular about the possibilities of preventing the use of data, is offered by Google under the following link:

https://policies.google.com/technologies/partner-sites

Google also offers a deactivation add-on for the most popular browsers, which gives the user more control over which data Google collects on the website accessed by the user. The add-on informs the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the deactivation add-on for browsers from Google Analytics does not prevent information from being transmitted to the provider or to other web analysis services that may be used by the provider and listed in this data protection declaration. Further information on installing the browser add-on is available at the following link:

Browser add-on to deactivate Google Analytics

Alternatively, the future analysis of the page visit by Google Analytics can be deactivated by “clicking” on the link below. By “clicking” on the link, a so-called “opt-out cookie” is set, which means that the analysis of the page visit on the provider’s website will be prevented in the future:

Activate the “opt-out cookie” for Google Analytics

Please note: If the user deletes the cookies in his browser settings, the opt-out cookie is usually also deleted and may have to be reactivated by the user.

Google AdWords with conversion tracking

The provider also uses the Google advertising component “Google AdWords” and, in this context, so-called conversion tracking. Google Conversion Tracking is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Google is certified according to the “EU-US Privacy Shield” and thus guarantees compliance with EU data protection requirements when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The provider uses conversion tracking to advertise its services in a targeted manner. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.

If the user clicks on an advertisement placed by Google, a cookie is saved on the user’s device due to the integration of conversion tracking. These so-called “conversion cookies” lose their validity after 30 days and are not used to personally identify the user.

If the user visits certain pages on the provider’s website and the cookie has not yet expired, both Google and the provider can recognize that the user clicked on one of the advertisements placed by the provider on Google and was redirected to the provider’s website.

The information obtained with the help of the “conversion cookies” is used by Google to generate visit statistics for the provider. This provides the provider with information about the total number of users who clicked on his ad and also which pages on his website were subsequently accessed by the respective user. However, the provider or other advertisers using “Google AdWords” do not receive any information with which users can be personally identified.

The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser.

Further information, in particular about the possibilities of preventing the use of data, is offered by Google under the following links:

https://services.google.com/sitestats/
http://www.google.com/policies/technologies/ads/
http://www.google.com/policies/privacy