Privacy Policy

The protection of your personal data is of great importance to us. Therefore, we would like to provide you with all relevant information regarding the processing and storage of your data when visiting our website and interacting with our company. In order to use all functions and services of our website, the collection of personal data is necessary. However, such data is processed and stored exclusively in accordance with the applicable legal provisions of the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG 2021).

 

CONTROLLER

Weingut Familie Strehn GmbH
Weinbergweg 1
A – 7301 Deutschkreutz
Austria

Contact: office@strehn.at

Further information can be found in the Legal Notice.

COLLECTION AND PROCESSING OF PERSONAL DATA ON THIS WEBSITE

Note: To protect your data as comprehensively as possible against unauthorized access, we implement technical and organizational measures and use encryption technology on our website. Your data is transmitted over the Internet using what is known as TLS encryption from your computer to ours and vice versa. TLS stands for “Transport Layer Security” and is an encryption protocol for secure data transmission on the Internet. You can usually recognize TLS by the closed padlock symbol in your browser’s address bar and by the fact that the website address begins with https://.

1. COLLECTION OF ACCESS AND LOG DATA

This website automatically collects and stores information in server log files, which your browser transmits to us. These include:

  • anonymized IP address;
  • user’s Internet service provider;
  • date and time of access;
  • browser type;
  • language and browser version;
  • content accessed;
  • time zone;
  • access status/HTTP status code;
  • amount of data transferred;
  • websites from which the request originates (referrer);
  • operating system.

 

The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This legitimate interest arises from the need to identify indications of unlawful use of our website.

Your personal data is generally not transferred to third parties. We have concluded a data processing agreement pursuant to Art. 28 GDPR with the provider of this website, ALL-INKL.com – Neue Medien Münnich, based in Germany. This is a legally required agreement that ensures that ALL-INKL.com – Neue Medien Münnich processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The collected data is stored in server log files, which your browser automatically transmits to us, for a period of 7 days. Only in the event of attacks on our server infrastructure or other legal violations will the server log files be stored for a longer period. This extended storage is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in the preservation of evidence.

2. INQUIRIES VIA EMAIL AND TELEPHONE

Any personal information you voluntarily provide to us will, of course, be treated confidentially. We use your personal data solely to process and respond to your inquiry. The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This interest arises from our need to respond to inquiries from customers, business partners, and interested parties, as well as to promote and maintain customer satisfaction. For natural persons, an additional legal basis is the initiation or performance of a contract pursuant to Art. 6(1)(b) GDPR.

All personal data you provide to us as part of your inquiry will be deleted or anonymized no later than one year after our final response, provided that no contract is concluded. The retention period of one year is based on the fact that, in some cases, you may contact us again regarding the same matter and refer to previous correspondence. Based on our experience, no further inquiries are typically received after one year.

3. NEWSLETTER SUBSCRIPTION

You can subscribe to our newsletter on our website. The newsletter contains information about offers and promotions. When subscribing, we collect and store the data you enter in the input form. Only your email address is mandatory.

After submitting the registration form, you will receive an email with a confirmation link. By clicking this link, you give your consent to receive our newsletter and successfully complete your subscription. You will receive a further confirmation email. This process ensures that no unauthorized person can subscribe to our newsletter (double opt-in procedure).

You can unsubscribe from the newsletter at any time by clicking the “unsubscribe” link at the end of each newsletter. Upon withdrawal of your consent, your data will be deleted immediately. We store proof of your withdrawal for a further three years in order to comply with our accountability obligations pursuant to Art. 5(2) GDPR. This storage is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The legal basis for the confirmation email is also our legitimate interest pursuant to Art. 6(1)(f) GDPR, as we must be able to demonstrate that you have given your consent.

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR as well as Section 174(3) TKG 2021. You may withdraw your consent at any time.

We generally do not share your data with third parties. For the distribution of our newsletter, we use the service provider sendinblue GmbH (Brevo), based in Germany, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. It may occur that sendinblue GmbH transfers personal data to subcontractors for the provision of its services (e.g. assets.brevo.com and sibforms.com). Where data transfers to third countries without an adequacy decision occur, these are safeguarded by standard contractual clauses concluded by sendinblue GmbH.

Newsletter performance tracking is carried out using a so-called “web beacon,” a small file that transmits information to the server when the newsletter is opened. Technical data such as browser type, system information, IP address, and access time are collected. This data helps improve the service technically and analyze user behavior, for example based on location (derived from the IP address) or access times.

Statistical analysis also includes whether and when newsletters are opened and which links are clicked. Although this information can theoretically be assigned to individual recipients, neither we nor the service provider aim to monitor individual users. Instead, this analysis is used to tailor content to user interests and optimize communication.

A separate opt-out from performance tracking is not possible; if you do not agree, you must unsubscribe from the newsletter entirely.

EMAILS UNDER THE EXISTING CUSTOMER PRIVILEGE

If the legal requirements are met, we regularly send product recommendations by email to existing customers. In doing so, we provide information about products from our range that may be of interest to you based on your previous purchases. The legal basis for this is our legitimate interest pursuant to Art. 6(1)(f) GDPR as well as Section 174(4) TKG 2021, which lies in informing our existing customers about further services. We strictly comply with legal requirements. You may object to this at any time (Art. 21 GDPR). Of course, every email also contains an unsubscribe link.

4. USE OF COOKIES

We use cookies to make the use of our website easier and to improve its functionality. Cookies are small text files that are stored on your computer or smartphone via your browser when you visit a website.

We use cookies for the following purposes:

  • Technically necessary: These cookies and similar technologies are essential for you to use our services, for example to display our website correctly or to enable functions you request.
  • Statistics: These technologies allow us to compile anonymous statistics on the use of our services. This helps us better adapt our website to user behavior.
  • External media:

Any use of cookies that is not technically necessary constitutes data processing that is only permitted with your explicit consent pursuant to Art. 6(1)(a) GDPR.

Link to the [borlabs-cookie type=”btn-cookie-preference” title=”Cookie Settings” element=”link”/]

[borlabs-cookie type=”consent-history”/]

You can delete stored cookies at any time via your web browser settings. You can also configure your browser to prevent cookies from being stored. In this case, some functions of our website may not be available.

 

Consent management with BORLABS

We use the cookie consent technology of Borlabs Cookies to obtain and document your consent for storing certain cookies or using certain technologies in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, based in Germany.

Borlabs uses a technically necessary cookie to store your consent preferences. The Borlabs cookie stores the following information:

  • cookie duration;
  • cookie version;
  • domain and path of the website;
  • consents;
  • UID (randomly generated ID which, according to Borlabs, cannot be linked to a person).

No data is transferred to Borlabs.

The use of Borlabs serves to obtain legally required consent for cookies. The legal basis for this is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant documentation and verification of consent (Art. 6(1)(c) GDPR) in order to fulfill our accountability obligations pursuant to Art. 5(2) GDPR.

 

USE OF GOOGLE ANALYTICS

This website uses Google Analytics, provided that you give your consent in accordance with Art. 6(1)(a) GDPR and Art. 49(1)(a) GDPR. This is a service provided by Google Ireland Limited (“Google”), a company registered and operated under Irish law (registration number: 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC (USA).

Google Analytics uses so-called “cookies.” These are text files stored on your computer that enable analysis of your use of the website. The information generated by these cookies about your use of the website is usually transferred to a Google server in the USA and stored there. An adequacy decision exists for the USA, so data transfer can take place without additional safeguards. You can view Google’s certification here.

We have activated IP anonymization. This means that your IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage.

The anonymized IP address transmitted by your browser within the scope of Google Analytics may be combined with other data about you, such as search history, personal accounts, usage data from other devices, and other data available to Google.

You can view the cookies set in connection with Google Analytics above in the list.

You can withdraw your consent at any time by adjusting your settings via our cookie banner. User and event data are deleted after 14 months. The function “reset user data on new activity” is activated, meaning that if you revisit the site before the retention period expires, your data will not be deleted.

Social media presence

We maintain the following social media profiles:

Facebook: https://www.facebook.com/weingut.strehn/
Instagram: https://www.instagram.com/piastrehn/

Instagram and Facebook are services provided by Meta Platforms Inc.: facebook.com/help/1561485474074139/?helpref=related

Data processing by us:

1. Management of social media pages and advertising
Personal data entered on social media platforms (e.g. comments, images, likes, messages) is published by the respective platform. We reserve the right to delete content where necessary. We may also interact with users via these platforms and run advertisements. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

2. Page insights
Social media platforms provide anonymized statistics (“page insights”) that help us understand user behavior. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

This data processing is carried out jointly with the platform operators in accordance with Art. 26 GDPR. The relevant agreement can be found here:

https://www.facebook.com/legal/terms/page_controller_addendum

If you wish to object to specific processing activities (e.g. deletion of comments), please contact us using the details provided above.

Providing your data is neither legally nor contractually required. However, without providing your data, interaction via social media is not possible.

Data processing by platform operators:

The platform operators themselves also process personal data and act as independent controllers under the GDPR. We have only limited influence over this processing.

Further information can be found in their privacy policies:

Facebook: www.facebook.com/help/568137493302217
Instagram: help.instagram.com/519522125107875

Data may be transferred to third countries such as the USA or the United Kingdom. Some of these countries have an adequacy decision by the European Commission. More information can be found here: link

Meta Platforms Inc. certification under the Data Privacy Framework: link

Where no adequacy decision exists, data transfers are based on standard contractual clauses.

Note: Social media platforms use web tracking methods that may operate regardless of whether you are logged in. We have no control over these tracking methods.

 

Data subject rights

You have the right to access (Art. 15 GDPR), rectify (Art. 16 GDPR), erase (Art. 17 GDPR), and restrict processing (Art. 18 GDPR) of your personal data. You also have the right to data portability (Art. 20 GDPR).

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object pursuant to Art. 21 GDPR.

You also have the right to lodge a complaint with a supervisory authority. In Austria: www.dsb.gv.at

No automated decision-making

We do not carry out automated decision-making or profiling.

Provision of data

Unless otherwise stated, the provision of personal data is neither legally nor contractually required. However, failure to provide data may result in certain services not being available.

 

These privacy notices were prepared in cooperation with the consulting company SCALELINE. These legal texts are subject to copyright.