Privacy Policy
1. Overview of Data Protection
General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy below.
Data Collection on Our Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information on the Controller” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering information into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This includes primarily technical data (e.g. browser type, operating system, time of access). These data are collected automatically when you enter our website.
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this and for any further questions about data protection, you can contact us at the address provided in the imprint. You also have the right to lodge a complaint with the competent supervisory authority.
Analysis Tools and Third-Party Tools
Your browsing behavior may be statistically evaluated when you visit our website. This is mainly carried out using cookies and analytics tools. These analyses are usually anonymous and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Details can be found in this privacy policy.
2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of this host. This may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data, and other data generated via the website.
The hosting service is used to fulfill contractual obligations toward potential and existing customers (Art. 6(1)(b) GDPR) and to ensure a secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR).
Our host will process your data only to the extent necessary to fulfill its service obligations and only according to our instructions.
We use the following hosting provider:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Contract Processing Agreement
To ensure data processing complies with data protection regulations, we have entered into a data processing agreement with our hosting provider.
3. General Information and Mandatory Details
Data Protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection requirements and this privacy policy.
When you use this website, various personal data are collected. This policy explains what data we collect and what we use it for, and how and for what purpose this happens.
Please note that data transmission over the internet (e.g. email communication) may have security gaps. A complete protection of data from access by third parties is not possible.
Information on the Controller
The controller responsible for data processing on this website is:
Erzeugergemeinschaft Goldenes Rheinhessen w. V.
Mainzer Landstraße 21
D-55237 Bornheim
Phone: 06734 9440-0
Email: info@goldenes-rheinhessen.de
The controller is the natural or legal person who determines the purposes and means of processing personal data.
Storage Duration
Unless a more specific storage period is mentioned in this privacy policy, personal data remains with us until the purpose for processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we have legally permissible reasons to retain it (e.g. tax or commercial retention periods). In such cases, deletion occurs after these periods expire.
Transfer of Data to the USA and Other Third Countries
Tools from companies based in the USA or other non-secure third countries may be integrated on our website. When these tools are active, your personal data may be transferred to these countries. A level of data protection comparable to that in the EU cannot be guaranteed.
For example, U.S. companies may be required to hand over personal data to security authorities without allowing you to take legal action. We have no influence on these processing activities.
Withdrawal of Your Consent
Many data processing operations are possible only with your explicit consent. You may withdraw your consent at any time via a simple email to us. The legality of data processing prior to withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or if the processing serves the establishment, exercise, or defense of legal claims.
If your data is processed for direct marketing purposes, you may object at any time. After your objection, your data will no longer be used for direct marketing.
Right to Lodge a Complaint
In case of GDPR violations, you may lodge a complaint with a supervisory authority, especially in your country of residence or your workplace. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data processed with your consent or automatically in fulfillment of a contract in a structured, machine-readable format. You may also request direct transfer to another controller, where technically feasible.
SSL / TLS Encryption
This website uses SSL or TLS encryption to protect transmitted data. You can recognize an encrypted connection when the browser’s address line changes from "http://" to "https://" and a lock icon appears.
When SSL/TLS encryption is active, transmitted data cannot be read by third parties.
Right of Access, Erasure, and Correction
Within the framework of legal requirements, you have the right to access your stored personal data at any time as well as its origin, recipients, and purpose of processing. You may also request correction or deletion of this data. For this and other questions regarding personal data, you can contact us at any time.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data in the following cases:
- You contest the accuracy of your personal data. Processing will be restricted while we verify the accuracy.
- The processing is unlawful but you prefer restriction instead of deletion.
- We no longer need your data, but you need it to exercise or defend legal claims.
- You have objected to processing under Art. 21(1) GDPR. Restriction applies until a balance of interests is completed.
If processing is restricted, your data may only be processed with your consent or for legal claims or reasons of public interest.
Objection to Promotional Emails
We object to the use of contact details published in the imprint for sending unsolicited advertising or informational materials. We reserve the right to take legal action against unsolicited advertising, such as spam emails.
4. Data Collection on Our Website
Cookies
Our website uses cookies. Cookies are small text files stored on your device. They may be temporary (session cookies) or persistent (permanent cookies). Session cookies are deleted automatically when you leave the site; persistent cookies remain until manually deleted.
Third-party providers may also place cookies on your device when visiting our site. These may enable certain services such as payment processing.
Cookies serve various purposes. Some are technically necessary for website functionality; others analyze usage or display advertising.
Cookies necessary for electronic communication or certain features are stored based on Art. 6(1)(f) GDPR. If consent is requested, cookies are stored exclusively based on Art. 6(1)(a) GDPR.
You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, block them entirely, or automatically delete them when closing the browser.
Server Log Files
The website provider automatically collects and stores information in server log files which your browser transmits to us:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
This data is not merged with other data sources.
Data processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the technical functionality and optimization of the website.
Contact Form
If you send us inquiries via contact form, the data entered including provided contact details will be stored for processing and follow-up questions. We do not pass on this data without your permission.
Email, Phone, or Fax Requests
If you contact us via email, phone, or fax, your inquiry and the related personal data will be stored and processed for handling the request. We do not pass on this data without your permission.
5. Plugins and Tools
Google Web Fonts (Local Hosting)
This site uses Google Web Fonts to ensure consistent font display. The Google Fonts are locally installed, so no connection is made to Google servers.
Google Maps
This site uses Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
To use Google Maps, your IP address must be stored. This information is usually transmitted to Google servers in the USA. We have no control over this transfer.
Google Maps may use Google Web Fonts for consistent text display. Your browser loads these fonts automatically into its cache.
6. eCommerce and Payment Providers
Processing Customer and Contract Data
We collect, process, and use personal data only to the extent required to establish, structure, or modify a contractual relationship (inventory data). Processing is based on Art. 6(1)(b) GDPR.
Usage data (data required to make use of the website) is processed only as needed to enable or bill the service.
Customer data will be deleted after completion of the order or termination of the business relationship unless legal retention periods apply.