Privacy Policy

Thank you for your interest in our services. Protecting your personal data is very important to us. At this point, we would like to inform you about data protection in our company. Of course, we comply with the legal provisions of the EU General Data Protection Regulation (GDPR). You can trust us with your personal data! It is encrypted by digital security systems and transmitted to us. Our websites are protected by technical measures against damage, destruction, or unauthorized access. — Please read carefully — Privacy Policy 1. Name and Contact Details of the Data Controller and the Company Data Protection Officer This privacy information applies to data processing by: Data Controller: Knyphausen GmbH & Co. KG Owner Frederik zu Knyphausen Erbacher Strasse 26-28 65346 Eltville-Erbach in Rheingau Email: wein@baron-knyphausen.de Phone: +49 (0)6123 / 790 71-0 Fax: +49 (0)6123 / 790 71-18 Website: www.baron-knyphausen.de The company data protection officer of Knyphausen GmbH & Co. KG can be reached at the above address, c/o Gerko Freiherr zu Knyphausen, or at wein@baron-knyphausen.de. 2. Collection and Storage of Personal Data and the Nature and Purpose of Their Use a) When Visiting the Website When you visit our website www.knyphausen-wein.de, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion: IP address of the requesting computer, Date and time of access, Name and URL of the retrieved file, Website from which access is made (Referrer URL), Browser used and, if applicable, the operating system of your computer as well as the name of your access provider. We process the data mentioned for the following purposes: Ensuring smooth connection to the website, Ensuring comfortable use of our website, Evaluating system security and stability, and For other administrative purposes. The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest arises from the purposes listed above for data collection. Under no circumstances do we use the collected data to draw conclusions about your person. Furthermore, when you visit our website, we use cookies and analysis services. Detailed explanations can be found in sections 4 and 5 of this privacy policy. b) Data Collection When You Subscribe to a Newsletter or During Newsletter Distribution After a Previous Order You can subscribe to a free newsletter via our website, through which we inform you about our offers, news, and ongoing activities. The specific content of the newsletter is listed in the respective consent form. The newsletter is sent on our behalf by a service provider (Mailster, https://mailster.co), to whom we pass on your email address. During registration, your email address (mandatory field) is transmitted to us. If you provide us with additional personal data, it is voluntary and aims to address you personally. Once we receive your registration, we will send an email to the address you provided, asking you to confirm that you wish to receive the newsletter (so-called double opt-in procedure). If you do not confirm the registration within 48 hours, you will receive two more automated confirmation requests. If these are also unanswered, your data will be deleted in the monthly deletion cycle. Additionally, we store your IP addresses and the times of registration and confirmation. This is to prove your registration and to clarify any misuse of your personal data. After you confirm the newsletter subscription, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) (a) GDPR. You can revoke your consent to receive the newsletter at any time with future effect and unsubscribe from the newsletter. You can revoke your consent by clicking the link provided in each newsletter or by sending us an email to weingut@baron-knyphausen.de. If you order goods or services from us and we receive your email address in this context, we use this email address to offer you similar goods or services (§ 7 (3) UWG). The legal basis for this is Art. 6 (1) (f) GDPR. c) When Using Our Contact Email Address Alternatively, you can contact us via the provided email address(es). In this case, the personal data transmitted with the email is stored. There is no forwarding of data to third parties in this context. The data is used solely for processing the conversation. If a contractual relationship develops from the contact request, section 9 applies accordingly. The legal basis for processing the data transmitted via email is Art. 6 (1) (f) GDPR. If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6 (1) (b) GDPR. In the case of email contact, the necessary legitimate interest in processing the data lies in handling the contact request. The data is deleted as soon as it is no longer necessary for the purpose of its collection, that is, when the conversation is over and the matter is resolved, subject to legal retention periods. d) When Using Our Contact Form For various inquiries, we offer you the option to contact us via forms provided on the website. In this case, providing your full name, full address, telephone number, and email address is required, sometimes also providing a date of birth and, for booking inquiries, a check-in/check-out date (start) and departure/event date (end), so we know who the request is from and can respond to it, and if necessary, verify the age. Additional information can be provided voluntarily. If a contractual relationship develops from the contact request, section 9 applies accordingly. Data processing for the purpose of contacting us is based on Art. 6 (1) (a) GDPR, based on your voluntarily given consent. The personal data collected through the use of the contact form will be deleted after your request has been processed, subject to legal retention periods. 3. Disclosure of Data Your personal data will not be transmitted to third parties for any purposes other than those listed below. We only disclose your personal data to third parties if: You have explicitly given your consent in accordance with Art. 6 (1) (a) GDPR, The disclosure is necessary for the protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR, and there is no reason to believe that you have a predominant interest in not disclosing your data, There is a legal obligation to disclose the data in accordance with Art. 6 (1) (c) GDPR, or It is legally permissible and necessary for the performance of contractual obligations with you in accordance with Art. 6 (1) (b) GDPR. 4. Cookies We use cookies on our site. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device and do not contain viruses, Trojans, or other malware. Cookies store information that is related to the specific device used. However, this does not mean that we gain direct knowledge of your identity. The use of cookies serves to make the use of our offer more pleasant for you. For example, we use session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our site. Additionally, we use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, predetermined period. When you revisit our site to use our services, it is automatically recognized that you have been here before and which entries and settings you have made, so you do not have to re-enter them. The data processed by cookies is required for the mentioned purposes to safeguard our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR. Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is set. Complete deactivation of cookies may result in you not being able to use all the features of our website. 5. Analysis Tools The tracking measures listed below and used by us are carried out based on Art. 6 (1) (f) GDPR. With the tracking measures used, we aim to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are considered legitimate in terms of the above regulation. The respective data processing purposes and data categories can be found in the corresponding tracking tools. For the purpose of needs-based design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created, and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as Browser type/version, Operating system used, Referrer URL (the previously visited page), Hostname of the accessing computer (IP address), Time of the server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, compile reports on website activities, and provide additional services related to website and internet use for market research and needs-based design of these websites. This information may also be transferred to third parties if required by law or if third parties process these data on our behalf. In no case will your IP address be merged with other Google data. IP addresses are anonymized so that an assignment is not possible (IP masking). You can prevent the installation of cookies by adjusting the settings of your browser software; however, we point out that in this case, not all functions of this website may be fully utilized. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). Alternatively, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking this link. An opt-out cookie will be set that prevents future collection of your data when visiting this website. The opt-out cookie applies only to this browser and only to our website and is stored on your device. If you delete cookies in this browser, you will need to set the opt-out cookie again. For more information on data protection related to Google Analytics, please refer to the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en). 6. Social Media Plug-ins Based on Art. 6 (1) (f) GDPR, we use social media plug-ins from Facebook on our website to make our company better known. The underlying advertising purpose is considered a legitimate interest within the meaning of the GDPR. The responsibility for ensuring data protection compliance is to be ensured by the respective provider. The use of Facebook social media plug-ins on our website is intended to make their use more personal. We use the "LIKE" or "SHARE" button, which is an offer from Facebook. When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection with Facebook's servers. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the website. By integrating the plug-ins, Facebook receives the information that your browser has accessed the relevant page of our website, even if you do not have a Facebook account or are not logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plug-ins, such as by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook can use this information for advertising purposes, market research, and needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website in relation to the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services related to Facebook use. If you do not want Facebook to associate the data collected about our website with your Facebook account, you must log out of Facebook before visiting our website. For information on the purpose and scope of data collection, as well as the further processing and use of data by Facebook and your related rights and privacy settings, please refer to Facebook's privacy policy (https://www.facebook.com/about/privacy/). 7. Use of YouTube We use the provider YouTube to embed videos, among others. YouTube is operated by YouTube LLC with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. On some of our web pages, we use plugins from the provider YouTube. When you visit a web page of our website that contains such a plugin, a connection to the YouTube servers is established and the plugin is displayed. This transmits to the YouTube server which of our web pages you have visited. Additionally, further information about the use of this website, including your IP address, may be transmitted to YouTube or Google, particularly the data mentioned in sections 2 and 4 of this privacy policy. This occurs regardless of whether YouTube provides a user account through which you are logged in or if no user account exists. If you are logged into YouTube as a member, YouTube assigns this information to your personal user account. If you use the plugin, such as by clicking the play button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. before using our website and deleting the relevant cookies. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or needs-based design of its website. Such evaluation is carried out, in particular (also for non-logged-in users), to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. Google processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. We have no influence on the extent of the data collected by Google in this manner. We also have no influence on the further processing and use of the data by YouTube and cannot accept any responsibility for this. For information on the purpose and scope of data collection and the further processing and use of data by YouTube (Google), as well as your rights and privacy settings, please refer to Google's privacy policy (https://policies.google.com/privacy?hl=en). By using our website, you consent to the processing of the data collected about you by YouTube in the manner and for the purposes described above. 8. Google Maps This website uses Google Maps to display interactive maps and to create directions. Google Maps is a mapping service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (starting) address entered in the route planner, may be transmitted to Google in the USA. When you visit a page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted directly from Google to your browser and integrated into the website. Therefore, we have no influence on the scope of data collected by Google in this manner. According to our knowledge, at least the following data is collected: Date and time of the visit to the relevant web page, Internet address or URL of the visited web page, IP address, (Starting) address entered in the route planner, and Data mentioned in sections 2 and 4 of this privacy policy. This occurs regardless of whether Google provides a user account through which you are logged in or if no user account exists. If you are logged into Google, the data is assigned directly to your account. If you do not want this assignment to your Google profile, you must log out of Google before activating the relevant button. Google stores your data as usage profiles and uses them for advertising, market research, and/or needs-based design of its website. Such evaluation is carried out, in particular (also for non-logged-in users), to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. We have no influence on the further processing and use of the data by Google and cannot accept any responsibility for this. Google processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. If you do not want Google to collect, process, or use data about you through our website, you can disable JavaScript in your browser settings. In this case, however, you may not be able to use the map display. For information on the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and privacy settings, please refer to Google's privacy policy (https://policies.google.com/privacy?hl=en). By using our website, you consent to the processing of the data collected about you by Google Maps Route Planner in the manner and for the purposes described above. 9. Google reCAPTCHA We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether the data entry on this website (e.g., in a contact form) is carried out by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analysis runs completely in the background. Website visitors are not informed that an analysis is taking place. The data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and spam. For more information about Google reCAPTCHA, please refer to Google's privacy policy and terms of service at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en. 10. Data Collection When Ordering in Our Webshop When placing orders through our webshop, we collect certain personal data from you. Some fields in the order form are marked as mandatory, which means that filling them out is necessary to complete an order and to execute a contract. These mandatory fields are: Your first and last name Your address (and if different, a billing or delivery address) Your email address Your phone number Your date of birth Data related to the payment method you choose (bank details). All additional information is optional and is used to personalize our communication with you. If you create a customer account, you can place additional orders under this account. You do not need to re-enter your data each time; it will be stored by us until you revoke it. To execute the order, we will forward your name and address (or your delivery address) to the company we have commissioned for the delivery. The purpose of data collection is to process your order. The legal basis is Art. 6 (1) (b) GDPR. 11. Rights of the Data Subject You have the right to: Request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from you, as well as information about the existence of automated decision-making including profiling and, if applicable, meaningful information about the details thereof; Request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR; Request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims; Request the restriction of processing of your personal data in accordance with Art. 18 GDPR, if the accuracy of the data is contested by you, the processing is unlawful, but you object to its deletion and we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims, or if you have objected to the processing under Art. 21 GDPR; Obtain your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transfer to another controller in accordance with Art. 20 GDPR; Withdraw your consent once given at any time in accordance with Art. 7 (3) GDPR. This means that we may no longer continue the data processing based on this consent in the future; and Lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can usually contact the supervisory authority of your usual place of residence or work, or our company headquarters. 12. Right to Object If your personal data is processed based on legitimate interests in accordance with Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, if there are reasons related to your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation. To exercise your right of withdrawal or objection, an email to wein@baron-knyphausen.de is sufficient. 13. Data Security We use the commonly employed SSL (Secure Socket Layer) protocol during your visit to the website, along with the highest encryption level supported by your browser. Typically, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can identify whether a page of our website is being transmitted securely by the closed padlock or key symbol in the status bar of your browser. Additionally, we implement suitable technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continually improved in line with technological developments. 14. Currentness and Changes to this Privacy Policy This privacy policy is currently valid as of May 2018. Due to the development of our website and services or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The most current privacy policy can be accessed and printed at any time from the website. 15. Links to Other Websites The website may contain hyperlinks to or from other websites, either directly or indirectly. If you follow a hyperlink to one of these websites, please be aware that we have no influence over and do not control whether other providers adhere to applicable data protection regulations. We assume no responsibility for external content or privacy practices. Dear Legal Enforcers: To avoid unnecessary legal disputes and costs, we ask that you contact us in advance. We do not insist on enforcing any potential inaccuracies against applicable law. Usually, an email or phone call is sufficient to resolve such issues. We explicitly declare our willingness to cooperate on such matters. We expressly point out that it is possible to contact us via the provided phone number and email address. Therefore, a lawyer's warning without prior contact with us will be deemed unfounded in terms of the duty to mitigate damages.