Privacy Policy

We are pleased that you are interested in data protection on our website. When you visit our website, we want you to feel comfortable and secure and see our implementation of data protection as a customer-oriented quality feature.

The following data protection notices inform you about the type and scope of the processing of your personal data by Apropos Wein GmbH (also referred to as "Apropos Wein GmbH", "we" or "us" in the context of this data protection declaration). Personal data is information that can be or can be assigned directly or indirectly to your person. In particular, the General Data Protection Regulation (GDPR) serves as the legal basis for data protection.

1. Overview

The data processing by Apropos Wein GmbH can essentially in two categories can be divided into:

  • For the purpose of contract processing, all of the Execution of a contract processed with Apropos Wein GmbH required data. If external service providers are also involved in the execution of the contract, e.g. logistics companies, credit agencies or payment service providers, your data will be passed on to them to the extent necessary and processed by them for a specific purpose.
  • With Calling up the website Apropos Wein GmbH, various information is exchanged between your device and our server. This can also be personal data. The information collected in this way is used, among other things, to optimize or redesign our website Advertising in the browser of your device.

2. Calling up our website

Purposes of data processing / legal bases:

When you visit our website, the browser used on your device automatically and without your intervention

  • the IP address of the requesting internet-enabled device,
  • the date and time of access,
  • the name and URL of the file called up,
  • the website / application from which the access was made (referrer URL),
  • the browser you are using and, if applicable, the operating system of your internet-enabled computer and the name of your access provider

sent to the server of our website and temporarily in a so-called log file for the following purposes saved:

  • Ensuring a smooth connection,
  • Ensuring comfortable use of our website / application,
  • Evaluation of system security and stability.

The legal basis for the Processing of the IP address is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the presentation serves to prepare a contract, the legal basis for data processing is Article 6 (1) (b) GDPR.

Storage period / criteria for determining the storage period:

The data is stored for a period of seven days and then automatically deleted. If you stop using our website, the geolocation data will be deleted.

3. Processing of sales contracts

Purposes of data processing / legal bases:

The subject of activity of Apropos Wein GmbH is the distance selling of goods and services within the scope of the officially issued permits. In this context, we process the for the Conclusion, implementation or termination of a contract necessary data. These include in particular:

  • First name Last Name,
  • Billing and delivery address,
  • E-mail address,
  • Billing and payment data,
  • Date of birth / age,
  • Telephone number (optional).

The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us.

Recipients / categories of recipients:

As part of the above-mentioned data processing, your data will be processed on our behalf by contract processors, in particular from the logistics sector. These are carefully selected and, if required by law, contractually obliged in accordance with Article 28 GDPR.

We provide information about your delivery address for the purpose of Processing of the purchase contract to a logistics company commissioned by us. If you have agreed to an extended transmission in the payment process, we will send your e-mail address and, if applicable, your telephone number to the logistics company commissioned by us to ensure that the goods can be delivered as planned. The data are transmitted to the commissioned logistics company for this purpose only and processed by them for a purely specific purpose.

If you have selected the credit card payment method or an online payment method (e.g. PayPal, Masterpass), we will forward you to the relevant payment service provider after completing the order. There, after entering your login data, you can order payment via the service provider. In order to be able to process the payment, we particularly transmit the specific payment amount to the selected payment service provider. Further information on the data processing carried out by the payment service provider can be found in the information texts on the input mask / website of the payment service provider. You will also find the contact information for the payment service providers there.

Storage period / criteria for determining the storage period:

If we do not use your contact details for advertising purposes, we will save the data collected for the execution of the contract until the statutory or possible contractual warranty and guarantee rights have expired. After this period has expired, we keep the information of the contractual relationship required under commercial and tax law for the periods specified by law. For this period (usually ten years from the conclusion of the contract), the data will only be processed again in the event of a review by the financial administration and for customer inquiries.

4. Securing the order process and selection of payment methods

Purposes of data processing / legal bases:

To Securing and optimizing the ordering process and in order to be able to offer you different payment methods, we check during the ordering process on the basis of the information we already have, such as the order quantity or delivery address, whether there are any anomalies in the specific order. In addition, in the event of order cancellations, we save the data that has accrued up to the cancellation of the order in order to (technically) optimize the ordering process, to detect (possible) fraud patterns and to be able to answer customer inquiries about the order processes. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest follows from the described purpose of processing.

For the In the event of a delay in payment If the other legal requirements are met, we may transmit the necessary data to a company commissioned to assert the claim. The legal bases for this are both Article 6 Paragraph 1 Letter b) and Article 6 Paragraph 1 Letter f) GDPR. The assertion of a contractual claim is to be regarded as a legitimate interest within the meaning of the second regulation. If the legal requirements are met, we also transmit information about the delay in payment or a possible bad debt loss to credit agencies cooperating with us (see below). The legal basis for this is in particular Article 6 Paragraph 1 Letter f) GDPR. The justified interest required hereunder arises from our interest as well as the interest of third parties in reducing contractual risks for future contracts.

Data protection provisions for PayPal, direct debit, GiroPay, instant and credit card payments as payment methods

The controller has integrated components from PayPal on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects "PayPal" as a payment option during the order process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.

The personal data sent to PayPal are usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract, also such personal data are necessary, which are in connection with the respective order.

The purpose of the transmission of the data is payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. This transmission aims at the identity and credit check.

PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of.

The data subject has the option to revoke the consent to the handling of personal data against PayPal at any time. A revocation has no effect on personal data which must be processed, used or transmitted for (contractual) payment processing.

PayPal's applicable privacy policy is available at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Data protection provisions on direct debit as a payment method

If the person concerned chooses the direct debit payment method in order to process payments on the Apropos Wein GmbH websites, personal data will be passed on to the Apropos Wein GmbH financial institution, Rottaler Raiffeisenbank Pocking, when using direct debit payments for payment to the Apropos Wein GmbH and processed. These are then deleted by Apropos Wein GmbH after the legally prescribed retention period. The personal data that are passed on to our bank for payment processing reasons are also subject to the data protection conditions and terms of use of the Rottaler Raiffeisenbank. Details on how your data is handled by Rottaler Raiffeisenbank as well as your rights and setting options to protect your personal data can be found at: https://www.rottaler-raiba.de/service/rechtliche-hinweise/datenschutzhinweis.html

Possibility of revocation

If you have given us your consent under data protection law, you can revoke this informally at any time with effect for the future vis-à-vis Apropos Wein GmbH. For this purpose, for example, an email to the contact details mentioned under item 15 is sufficient. The revocation leads to the deletion of the collected data.

5. Customer account in the Apropos Wein GmbH online shop

Purposes of data processing / legal bases:

In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data in a password-protected customer account for our online shop. After setting up a customer account, you do not need to enter your personal data again for the purchase process. In addition, you can view and change the data stored about you in your customer account at any time and use the "wine cellar" function to permanently save items for later purchases.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This, together with your email address, is used to access your customer account. Please treat your personal access data confidentially and, in particular, do not make them accessible to unauthorized third parties. We cannot accept any liability for improperly used passwords, unless we are responsible for the abuse.

The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us or in advance of it.

Recipients / categories of recipients:

This data is passed on to third parties in accordance with Section 3 for the processing of sales contracts. We generally exclude any further transfer of this data to third parties.

Storage period / criteria for determining the storage period:

If you arrange for the customer account to be deleted, your data will be deleted accordingly.

6. Contact form / email contact / phone calls / LiveChat

Purposes of data processing / legal bases:

It goes without saying that we treat personal data that you give us when filling out contact forms, by phone, email or LiveChat confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for data processing is Article 6 Paragraph 1 Letter f) or Article 6 Paragraph 1 Letter b) GDPR. Our and your concurrent (legitimate) interest in this data processing arises from the aim of answering your inquiries, solving any problems that may arise and thus maintaining and promoting your satisfaction as a customer or user of our website.

Recipients / categories of recipients:

It may be necessary for us to pass on extracts of your inquiry to contractual partners (e.g. suppliers in the case of product-specific inquiries) to process your inquiry. In these cases, the request is anonymized beforehand so that the third party cannot establish any reference to you. If, in individual cases, it is necessary to pass on your personal data, we will inform you of this in advance and obtain your consent.

Storage period / criteria for determining the storage period:

All personal information that you send us in response to inquiries (suggestions, praise or criticism) via this website or by email will be deleted or anonymized by us no later than 90 days after the final response has been given. Experience has shown that there are generally no more questions about our answers after 90 days. If you assert your rights as a data subject according to Section 19, your personal data will be stored for 3 years after your final response to prove that we have provided you with comprehensive information and that the legal requirements are complied with.

7. Data processing for advertising purposes

Purposes of data processing / legal bases:

If you have concluded a contract with us, we will manage you as an existing customer. In this case we will process your postal contact details outside of the existence of a specific consent, in order to send you information about new products and services in this way. Her E-mail address we process in order to send you information for our own, similar products outside of the existence of a specific consent.

You can object to data processing for the aforementioned purposes at any time free of charge, separately for the respective communication channel and with effect for the future. For this purpose, for example, an email to the contact details mentioned under item 15 is sufficient.

With your consent, we record Your usage behavior on the websites operated by us and the newsletters we send. The evaluation of usage behavior includes in particular which areas you are in and which links you click there. We use it to create personalized user profiles with the assignment of your person and / or email address in order to be able to better align a possible advertising approach by Apropos Wein GmbH in the form of a newsletter, on-site advertising and print advertising to your personal interests and to be able to to improve our web offers. You can revoke your consent to this at any time with effect for the future. The revocation leads to the deletion of the collected user data.

The legal basis for the aforementioned processing is Article 6 Paragraph 1 Letter f) GDPR or, if consent has been given, Article 6 Paragraph 1 Letter a) GDPR. The processing of existing customer data for our own advertising purposes or for third-party advertising purposes is to be regarded as a legitimate interest within the meaning of the first-mentioned standard.

Storage period / criteria for determining the storage period:

If you revoke your consent to individual advertising measures or object to certain advertising measures, your data will be deleted from the corresponding (e-mail) distribution lists.

If you object, the contact address concerned will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after receipt of your objection. This is technically due to the lead time required for advertisements and does not mean that we will not implement your objection. Thank you for your understanding.

8. Submission of purchase reviews

Purposes of data processing / legal bases:

With your consent, we enable you to submit purchase reviews after your orders have been placed. We will send you an e-mail with a link to the e-mail address stored in your customer account, which you can use to directly submit an anonymous evaluation of the purchased product.

The legal basis for the above data processing is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

You can revoke your consent to this data processing at any time with effect for the future. For this purpose, for example, an email to the contact details mentioned under item 15 is sufficient.

Recipients / categories of recipients:

If external processors are used to enable the submission of purchase reviews, they are contractually obliged according to Article 28 GDPR.

Storage period / criteria for determining the storage period:

If you revoke your consent to receive the purchase evaluation e-mails, your e-mail address will be blocked from receiving these e-mails. Your data will then be deleted from the corresponding e-mail distribution lists after six weeks.

9. Sending out newsletters

Purposes of data processing / legal bases:

On our website we offer you the opportunity to register for our Newsletter to register. If you have consented to receive our newsletter, we will use yours E-mail address and, if applicable, your name for the sending of (if possible individual) information about products, promotions, competitions and news from the online shop offer, as well as for surveys on customer satisfaction. We save and process this data for the purpose of sending the newsletter.

The Contents of the newsletter include promotions (offers, discount campaigns, competitions, etc.) as well as information about goods and services from Apropos Wein GmbH.

After placing an order, we enable you to submit purchase reviews.

The legal basis for the above data processing is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

In order to be able to ensure that no errors were made when entering the email address, we use the so-called double opt-in procedure: After you have entered your email address in the registration field, we will send you an Confirmation link. Your email address will only be added to our mailing list when you click on this confirmation link.

Shipping service provider Mailchimp:

The newsletters are sent by MailChimp, a mailing service provider of Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. The privacy policy of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/, The Rocket Science Group LLC is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is based on our legitimate interests acc. Art. 6 para. 1 lit. f. DSGVO and a contract processing agreement acc. Art. 28 para. 3 S. 1 DSGVO used.

The mail-order service provider may use the recipient's data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Subarea Mailchimp created with Datenschutz-Generator.de by RA Dr. jur. Thomas Schwenke

You can give your consent to the receipt of the newsletter, participation in Revoke surveys on customer satisfaction and the creation of personalized user profiles at any time with effect for the future, e.g. by unsubscribing from the newsletter on our website. You will find the link to the unsubscribe page at the end of each newsletter. When you unsubscribe, we consider your consent to the creation of your personalized user profile and the receipt of the newsletter based on it to be revoked. Your usage data will be deleted by us.

Recipients / categories of recipients:

If external processors are used to carry out the newsletter dispatch or to enable the submission of purchase reviews, they are contractually obliged according to Article 28 GDPR.

Storage period / criteria for determining the storage period:

If you revoke your consent to receive the Apropos Wein GmbH newsletter, your email address will be blocked for receiving the Apropos Wein - Schmalhofer and Apropos Wein GmbH newsletter. Your data will then be deleted from the relevant e-mail distribution lists after six months. When registering for the newsletter on a social media site, the data protection provisions of the respective operator of the social media site also apply.

10. Online presence and website optimization

10.1 Cookies - general information

We use so-called cookies on our website on the basis of Article 6 Paragraph 1 Letter f) GDPR. Our interest in optimizing our website is to be regarded as justified within the meaning of the aforementioned regulation. Cookies are small files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. So we put so-called Session cookies to recognize that you have already visited individual pages on our website or that you have already logged into your customer account. These are automatically deleted after you leave our website. In addition, we also use it for the purpose of user-friendliness temporary cookies which are stored on your device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us, which entries / settings you have made and which items you may have already placed in your shopping cart so that you do not have to do this again have to do.

If you have a customer account and are logged in, the information stored in cookies will be added to your customer account.

On the other hand, we use cookies to facilitate the use of our website to be recorded statistically, for the purpose of optimizing our offer and for displaying information specially tailored to you. These cookies enable us to automatically recognize when you visit our site again that you have already visited us. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you completely deactivate cookies, you may not be able to use all the functions of our website.

You can find an overview of the cookies used with further information (e.g. storage duration) in our Cookie Policy.

10.2 Google Analytics

Purposes of data processing / legal bases:

For the purpose of the needs-based design and continuous optimization of our websites, we use Google Analytics, a web analysis service provided by Google LLC (“Google”), on the basis of Article 6 (1) (f) GDPR. Our legitimate interest follows from the purposes presented. In this context will be pseudonymized usage profiles and uses cookies. The cookie generates the following information about your use of this website:

  • Browser type / version,
  • used operating system,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request.

The information is used to evaluate the use of our website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. The IP addresses are anonymized so that a Assignment not possible is (so-called IP masking).

You can prevent the installation of cookies by setting your browser software accordingly prevent; however, we would like to point out that in this case not all functions of this website can be used to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by clicking this browser add-on download and install. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on [google_analytics_optout] this link [/ google_analytics_optout]. An opt-out cookie is set that prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.

Recipients / categories of recipients:

The information generated in the cookie is transmitted to and stored by Google on servers in the United States. To the best of our knowledge, your IP address will never be merged with other Google data. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us.

Storage period / criteria for determining the storage period:

Once the IP address has been anonymized, it is no longer possible to identify you personally. There is no longer any personal reference in reports created on the basis of Google Analytics.

Google signals

This website also uses Google Signals. This is an expansion function of Google Analytics that enables so-called "cross-device tracking". This means that as long as your internet-enabled devices are linked to your Google account, Google can create reports on usage behavior (in particular the number of users across all devices), even if you change your device. Google uses data for this, provided you have activated the “personalized advertising” setting in your Google account.
This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit.
We do not process personal data in this respect, we only receive statistics based on Google Signals.
You can change the setting "personalized advertising" at any time. Deactivate in your Google account, and thus object to collection by Google Signals.

10.3.Google AdWords

Google AdWords is an internet advertising service that allows advertisers to place ads in Google's search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance by means of which an advertisement is only displayed in Google's search engine results if the user calls up a keyword-relevant search result with the search engine. In the Google advertising network, the advertisements are distributed to topic-related websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, for example the shopping cart from an online shop system, have been accessed on our website. The conversion cookie enables both we and Google to understand whether a person concerned who came to our website via an AdWords ad generated sales, i.e. completed or canceled a purchase.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords advertisements, i.e. to determine the success or failure of the respective AdWords advertisement and to optimize our AdWords advertisements for the future . Neither our company nor other Google AdWords advertisers receive information from Google that could identify the person concerned.

The conversion cookie is used to store personal information, such as the websites visited by the person concerned. Each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical process on to third parties.

The person concerned can prevent the setting of cookies by our website, as already shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.

Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/.

10.4 Facebook Pixel, Facebook Custom Audiences and Facebook Conversion
Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”).

With the help of the Facebook pixel, Facebook is on the one hand able to identify you as a visitor to our online offer as a target group for the presentation of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to only display the Facebook ads placed by us to Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are based on the visited Websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying. With the help of the Facebook pixel, we can further understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion").

  • Facebook privacy policy
    The processing of the data by Facebook takes place within the framework of the Facebook data usage guidelines. Accordingly, general information on the presentation of Facebook ads in the Facebook's Data Usage Policy. You can get special information and details about the Facebook pixel and how it works in the Help section of Facebook.
  • EU-US Privacy Shield
    Facebook is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law.
  • Basis
    The use of the Facebook pixel and the storage of “conversion cookies” are based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
  • Data processing contract
    For the processing of the data, for which Facebook acts as a data processor, we have concluded a data processing contract with Facebook in which we oblige Facebook to protect our customers' data and not to pass them on to third parties.
  • opposition
    Although we register legitimate interests in using the Facebook pixel and storing "conversion cookies", we offer you opt-out options. You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. In order to set which types of advertisements are shown to you within Facebook, you can call up the page set up by Facebook and there follow the instructions for setting usage-based advertising. The settings are platform-independent, ie they are adopted for all devices such as desktop computers or mobile devices. You can also use cookies, which are used for range measurement and advertising purposes, via the Deactivation page of the network advertising initiative and additionally the USAmerican website aboutads.info or the European website youronlinechoices.com disagree.
    You can find another opt-out option in our Cookie statement.

10.5 Re-targeting / Interest-Based Online Advertising

Purposes of data processing / legal bases:

We also use re-targeting technologies from various providers. This enables us to tailor our online offer to be more interesting. For this purpose, a cookie is set with which interest data is collected using pseudonyms. Information about your surfing behavior is collected anonymously for marketing purposes and stored in cookie text files on your computer and analyzed using an algorithm. Subsequently, targeted product recommendations can be displayed as personalized advertising banners for our products that are of interest to you on the websites of our partners. Under no circumstances can this data be used to personally identify the visitor to this website. Be there no directly personal data processed, and there will be too no usage profiles merged with personal data. This data processing takes place on the basis of Article 6 Paragraph 1 Letter f) GDPR. With the targeting measures used, we want to ensure that you are only shown advertising on your end devices that is based on your actual or supposed interests. Not to bother you with advertisements that are uninteresting to you is both in your and our interests.

If you nevertheless no longer want to receive personalized advertising banners from the Apropos Wein GmbH online shop, you can object to this data collection and storage for the future as follows:

  • With one click on the button displayed in each advertising banner (e.g. “i”) you will get to the respective website of the provider. There the system of retargeting technology is explained again and the option of opting out is offered. If you unsubscribe from a provider, a so-called “opt-out” cookie is stored on your computer, which prevents the respective provider's advertising banners from being displayed in the future. Please note that you can only unsubscribe from your computer and that the respective “opt-out” cookies must not be deleted from your computer.

Recipients / categories of recipients:

We use retargeting technologies from various providers on our website, which process the above-mentioned data as part of re-targeting. For more information on the cookies used by these service providers, please refer to our Cookie Policy.

Storage period / criteria for determining the storage period:

The cookies used for re-targeting purposes and the information they contain are used for the in the Cookie Policy named Period of time saved and then automatically deleted.

10.6 Objection / opt-out option

The targeting technologies explained in 14.3 and 14.4 can be prevented by a corresponding cookie setting in your browser (see also section 14.1). In addition, you have the option of interest-based personalized advertising with the help of the so-called. Preference manager to prevent.

10.7 FAST tracking

1. General scope and description of the processing of data
We use FAST to correctly assign the success of an advertising medium. The data is automatically deleted after 90 days. There is no profile formation. FAST uses a unique key that third parties cannot assign and thus users cannot be traced. Personal advertising is not possible with FAST.
FAST creates a connection between a click on an ad, e.g. an advertisement, and an action, e.g. a purchase or a login or registration.
The information transmitted to us is used solely for the purpose of correctly assigning the success of an advertising medium and the corresponding billing.
FAST does not store any cookies or cookie-like data on your device.
When generating the device fingerprint, only non-personal parameters are merged (browser settings, time zone, CPU class, color depth, language of the browser, etc.).
2. Scope and description of the processing of data when using Google Ads / Microsoft Ads
In the event of a campaign, the order number and the shopping cart value are usually also transmitted and stored by us for 90 days. Personal data such as name, telephone number or address are expressly not recorded or stored.
In addition, the following values ​​can be transmitted:
• ID (consecutive number)
• ClickID
• Time of purchase
• Currency
• Conversion name (shop order or lead)
The processing of the device fingerprint takes place on the server of the respective customer. If it is integrated via Google Tag Manager, the device fingerprint processing takes place via the Smarketer Host-Europe server in Strasbourg.
Due to high security standards, such as an HTTPS connection, the conversion data is sent on our HOST-Europe server located in Strasbourg. The transfer of the export file and the processing of the data (ClickID, conversion name, time stamp, order value, currency) takes place according to Google Ads / Microsoft Ads on an American server.
The software is set so that no profiling takes place.
3. Legal basis for the processing of personal data
The legal basis for processing the user's data is Art. 6 Para. 1 lit. f GDPR.
4. Purposes of processing
The information transmitted to us serves the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing and is justified with our legitimate interests according to Art. 6 Para. 1 S. 1 lit.f GDPR.
5. Duration of storage
The data of the processing described here will be automatically deleted after a storage period of a maximum of 90 days.
Operator: Name: Smarketer GmbH Postal address: Alte Jakobstraße 83/84, 10179 Berlin E-Mail: info@smarketer.de
6. Opposition and removal possibility
You can prevent tracking by deactivating FAST tracking via an opt-out link on the respective page.

You seem to have deactivated JavaScript in your browser. This will automatically disable FAST Conversions.

11. Recipients outside the EU

With the exception of the processing set out in sections 10 and 14.2, we do not pass on your personal data to recipients based outside the European Union or the European Economic Area. The processing mentioned causes data to be transmitted to the server of Google LLC. Some of these servers are located in the USA. For the USA, the European Commission decided on July 12.7.2016, XNUMX that under the regulations of EU-US Privacy Shields an adequate level of data protection exists (so-called "adequacy decision" according to Article 45 GDPR). The service provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, is certified according to the EU-US Privacy Shield.

12. Contractual relationships with business partners

The following data protection notices apply to you when you contact us, when contractual negotiations are taking place with us and / or there are contractual agreements with us and data of natural persons are processed in this context.

In particular, the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act serve as the legal basis.

Which data is processed in detail depends largely on the agreed services. Therefore, not all parts of this information will be relevant to you.

We generally collect your data from you.

However, it may also be necessary to process personal data that we receive from other companies, authorities or other third parties, e.g. credit agencies, tax offices or the like. This may also include personal data that we receive via our whistleblower channels on possible compliance violations or as part of compliance investigations.

Relevant personal data can be: personal details (e.g. first / last name, address and other contact details, date and place of birth as well as nationality), legitimation and authentication data (e.g. commercial register extracts, ID data, sample signature), data in the context of our business relationship (e.g. payment data, data on orders), creditworthiness data, data on company structures and ownership, photo and video recordings (e.g. for deliveries of goods) as well as other data comparable to the categories mentioned.

You always have the choice of whether you want to communicate with us by email or by post. For technical reasons, communication by email may be unencrypted.

Purposes and legal basis of processing:

To fulfill contractual obligations (Article 6 Paragraph 1 Letter b) GDPR) 
The purposes of the data processing result from the implementation of pre-contractual measures that precede a contractually regulated business relationship and in the fulfillment of the obligations from the concluded contract.

To fulfill a legal obligation (Article 6 Paragraph 1 Letter c) GDPR) 
The purposes of the data processing result in individual cases from legal requirements. These legal obligations include, for example, the fulfillment of storage and identification obligations, e.g. within the framework of requirements for the prevention of money laundering, tax control and reporting obligations and data processing in the context of inquiries from authorities.

To fulfill legitimate interests (Article 6 Paragraph 1 Letter f) GDPR) 
It may be necessary to process the personal data you have provided beyond the actual performance of the contract. The legitimate interests here are in particular the selection of suitable business partners, assertion of legal claims, defense against liability claims, access controls, clarification of possible compliance violations, prevention of criminal offenses and the regulation of damage resulting from the business relationship.

When the contract is concluded, we collect data about your creditworthiness via credit agencies in order to fulfill the above-mentioned legitimate interests. We use the creditworthiness data from the credit bureaus to check creditworthiness. The credit agencies store data that they receive from banks or companies, for example. This data includes, in particular, surname, first name, date of birth, address and information on payment behavior. Information on the data you have saved can be obtained directly from the credit bureaus.

Recipients / categories of recipients:

Within our company, those areas receive access to the data you have provided that they need to fulfill contractual or legal obligations or to fulfill legitimate interests. As part of the contractual relationship, we also commission processors or service providers who can get access to your personal data. Compliance with data protection regulations is contractually guaranteed.

Compliance with data protection regulations is contractually guaranteed. The data can also be transmitted to companies within the Schwarz Group to fulfill contractual obligations.

Storage period / criteria for determining the storage period:

The personal data will be kept for as long as is necessary to fulfill the purposes mentioned above. Particularly relevant here are the statutory retention requirements from the Commercial Code (HGB) and the Tax Code (AO), which provide for retention of up to twelve years.

Obligation to provide the data:

As part of our business relationship, you must provide the personal data that is necessary for the establishment, implementation and termination of a business relationship and for the fulfillment of the associated obligations, which we are legally obliged to collect or are entitled to collect on the basis of legitimate interests. Without this data, we will usually not be able to enter into a business relationship with you.

Data transfer to third countries:

If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the EU Commission has confirmed an adequate level of data protection for the third country and an appropriate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or your consent has been given to us.

Responsible body:

The responsible body is the respective company with which you initiate or carry out a business relationship.

Jointly responsible for the processing:

If you are jointly responsible for processing, you will receive the relevant information from the responsible body with whom you initiate or carry out a business relationship. The designated company is also responsible for fulfilling the obligations under the GDPR.

13. Shopping in our Apropos wine - Schmalhofer Vinothek

13.1 Age verification

When selling products with age restrictions, such as alcohol (18 years) / tobacco products (18 years) / sale of computer and console games, DVDs, videos (image carriers within the meaning of Section 12 JuSchG) with age restrictions (only in accordance with USK / FSK labeling ) a visual check of the ID is carried out by our cashier staff (Article 6 Paragraph 1 Letter c) GDPR).

13.2 Security cameras

Occasionally we process your data for the purpose of preventing and detecting criminal offenses (Article 6 Paragraph 1 Letter f GDPR), to protect our customers, employees and our property. The use of security cameras is indicated by a clearly visible pictogram in the branches. We save image recordings for 14 days. Maintenance companies commissioned by us may have access to stored data for installation and maintenance.

13.3 Payment Process

We process your data to process the payment (Article 6 Paragraph 1 Letter b) GDPR) as well as to carry out the SEPA direct debit procedure (Article 6 Paragraph 1 Letter f GDPR) and, if necessary, for credit checks. They also serve to prevent card misuse and limit the risk of payment defaults. The data will be deleted when they are no longer required to process the payment and do not conflict with statutory retention periods.

In the case of payment with girocard and PIN, we generally forward the following payment information to the network operator SumUp Payments Limited, 32 - 34 Great Marlborough St, W1F 7JB London, UK: IBAN, the card expiry date and the card sequence number of the girocard, date, time, payment amount, Terminal identifier, location, company and branch.

You are not obliged to provide us with this data. However, card payment is not possible without the data. Alternatively, you can pay with cash at any time.

14. Your rights as a data subject

14.1 Overview

In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met:

  • Right to Information about your personal data stored by us in accordance with Article 15 GDPR and Section 34 BDSG,
  • Right to correction incorrect or incomplete data in accordance with Article 16 GDPR,
  • Right to deletion Your data stored by us in accordance with Article 17 GDPR and Section 35 BDSG,
  • Right to Restriction of processing Your data in accordance with Article 18 GDPR,
  • Right to Data portability according to Article 20 GDPR,
  • Right of objection according to Article 21 GDPR.

14.2 Right to information in accordance with Article 15 GDPR

In accordance with Article 15 (1) GDPR, you have the right to request, free of charge, information about the personal data we have stored about you. This includes in particular:

  • the purposes for which the personal data are processed;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
  • the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
  • the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • all available information on the source of the data if the personal data are not collected from the data subject;
  • the existence of automated decision-making including profiling in accordance with Article 22 Paragraph 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data is transmitted to a third country or to an international organization, you have the right to be informed about the appropriate guarantees in connection with the transmission in accordance with Article 46 GDPR.

14.3 Right to rectification in accordance with Article 16 GDPR

You have the right to demand immediate correction of incorrect personal data concerning you. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

14.4 Right to deletion in accordance with Article 17 GDPR

You have the right to request that we delete personal data relating to you immediately if one of the following reasons applies:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You revoke your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing;
  • You object to the processing in accordance with Article 21 (1) or (2) GDPR, and there are no overriding legitimate reasons for the processing in the case of Article 21 (1) GDPR;
  • the personal data were processed unlawfully;
  • the deletion of personal data is necessary to fulfill a legal obligation;
  • the personal data was collected in relation to the information society services offered in accordance with Article 8 (1) GDPR.

If we have made the personal data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and the implementation costs, to inform the third parties processing your data that you have also deleted all links to these personal data from them Request data or copies or replications of this personal data.

14.5 Right to restriction of processing in accordance with Article 18 GDPR

You have the right to ask us to restrict processing if one of the following conditions is met:

  • You dispute the correctness of the personal data;
  • the processing is unlawful and you request the restriction of the use of personal data instead of deletion;
  • the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
  • You have lodged an objection to the processing in accordance with Article 21 Paragraph 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.

14.6 Right to data portability in accordance with Article 20 GDPR

You have the right to receive the personal information you have provided to us in a structured, common and machine-readable format, and you have the right to transfer that information to another person without hindrance, provided that

  • the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with Article 6 (1) (b) GDPR and
  • the processing is done using automated procedures.

When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible.

14.7 Right of objection in accordance with Article 21 GDPR

Under the conditions of Article 21 Paragraph 1 GDPR, you can object to data processing for reasons that arise from your particular situation.

The above general right of objection applies to all processing purposes described in these data protection provisions, which are processed on the basis of Article 6 Paragraph 1 Letter f) GDPR. In contrast to the special right of objection aimed at data processing for advertising purposes (compare in particular paragraphs 11 and 14 above), according to the GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance, e.g. a possible one Danger to life or health. There is also the option of contacting the supervisory authority responsible for Apropos Wein GmbH or the data protection officer of Apropos Wein GmbH.

15. Contact person

15.1 Contact person for questions or to exercise your data protection rights

If you have any questions about the website or the Apropos Wein GmbH online shop or to exercise your rights when processing your data (data protection rights), you can contact our customer service:

https://aproposwein.com/contact
Also directly by email to philipp.schmalhofer@aproposwein.com

15.2 Contact person for questions about data protection

If you have any questions about data protection, you can contact our customer service:

https://aproposwein.com/contact
Also directly by email to philipp.schmalhofer@aproposwein.com

15.3 Right of appeal to the data protection supervisory authority

You also have the right to lodge a complaint with the responsible data protection supervisory authority at any time. You can contact the data protection supervisory authority of the federal state in which you are resident or the authority in Bavaria as the federal state in which Apropos Wein GmbH is based.