Data protection

We are pleased that you are visiting our website. And we want to thank you for your interest! The protection of your privacy when using our website is important to us, so please take note of the following information about the handling of your data:

 

 

Privacy Policy as per the GDPR

I. Name and address of the controller

The controller in accordance with the General Data Protection Regulation and other national data protection laws of the member states and other data protection provisions is:

Gut Hermannsberg Weinhandels GmbH

Formerly Weinbaudomäne

D - 55585 Niederhausen-Nahe

Tel.:                 +49 67 58-92 50-0

Fax:                 +49 67 58-92 50-19

Email:              info@gut-hermannsberg.de

Internet:          www.gut-hermannsberg.de 

 

II. Name and address of the Data Protection Officer

The controller’s Data Protection Officer is:

Gerold Langner

Gneisenaustrasse 20

20253 Hamburg

Tel.:                 +49 40 30039090.

Mail:              datenschutz@gut-hermannsberg.de


 

III. General information about data processing

 

1. Which data do we collect from you and which purposes do we process it for?

When booking & staying in our guest house.

 

  • Date of arrival and the probable date of departure
  • Title
  • Family names
  • First names
  • Date of birth
  • Contact details & address
  • Nationalities
  • Address
  • Number of travellers and their nationalities
  • Serial number of the recognised and valid passport or equivalent documents for foreign persons

 

For wine purchasing, ordering and order settlement:

 

  • Title
  • Family names
  • First names
  • Contact details & address and telephone number & email address
  • If applicable, bank details for payment requested by the customer using SEPA debits

 

For making contact as per an explicit request (newsletter & telephone/letter):

 

  • Title
  • Family names
  • First names
  • Contact details & address and telephone number & email address

 

We generally only collect personal data from our users and customers if this is necessary to provide our services. We usually only collect personal data from our users after obtaining the user's consent.

2. Scope of processing of personal data

We generally only collect personal data from our users and customers if this is necessary to provide our services. We usually only collect personal data from our users after obtaining the user's consent. An exception applies in cases in which obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

3. Legal basis for processing personal data

If we obtain consent to process personal data from a data subject, Art. 6 (1) a EU General Data Protection Regulation (GDPR) provides the legal basis for processing personal data.

When processing personal data required to fulfil a contract whose contracting party is the data subject, Art. 6 (1) b GDPR provides the legal basis. This also applies to processing steps required to carry out pre-contractual measures.

If the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) c GDPR provides the legal basis.

If vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) d GDPR provides the legal basis.

If the processing is required to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject are overridden by those of those mentioned first, Art. 6 (1) f provides the legal basis.

 

 

4. Gut Hermannsberg Weinhandels GmbH transfers your data to the recipients and/or categories of recipients detailed below.

- PayPal including any credit agencies downstream of PayPal

PayPal uses the result of the credit check relating to the probability of payment default for the purposes of deciding whether to provide the relevant method of payment. The credit check can include probabilities (so-called scoring). If scoring is involved in the result of the credit check, this is based on a scientifically recognised mathematical-statistical procedure. Address data is among that included in the scoring. Please find further information on data protection law, including the credit agencies used, in the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- Credit card institutions

- DHL

If merchandise is delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn), we will transfer your email address to DHL before delivering the merchandise for the purposes of agreeing a delivery date or reporting the shipping status, if you have given explicit consent as follows:

 

“I agree that my email address is transferred to DHL (Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn) in order that DHL contacts me by email before delivering the merchandise for the purposes of agreeing a delivery date or can transmit status information relating to the delivery of the consignment. I can withdraw my consent in this respect at any time.”

 

Otherwise, we will only give the name of the consignee and the delivery address to DHL.

 In this case, prior agreement of a delivery date with DHL or the transmission of status information relating to the delivery of the consignment will not be possible.

- DPD

If merchandise is delivered by the transport service provider DPD (DPD Dynamic Parcel Distribution GmbH & Co. KG, Wailandtstrasse 1, 63741 Aschaffenburg), we will transfer your email address and/or telephone number to DPD before delivering the merchandise for the purposes of agreeing a delivery date or reporting the shipping status, if you have given explicit consent as follows:

 

“I agree that my email address and telephone number are transferred to DPD (DPD Dynamic Parcel Distribution GmbH & Co. KG, Wailandtstrasse 1, 63741 Aschaffenburg) in order that DPD contacts me by email or telephone before delivering the merchandise for the purposes of agreeing a delivery date or can transmit status information relating to the delivery of the consignment. I can withdraw my consent in this respect at any time.” Otherwise, we will only give the name of the consignee and the delivery address to DPD. In this case, prior agreement of a delivery date with DPD or the transmission of status information relating to the delivery of the consignment will not be possible.

- For the purposes of checking creditworthiness and identity, as well as scoring for purchases made on account

If we provide services upfront (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard this legitimate interest. We transfer the personal data necessary for a credit check to the following service provider:

 

Creditreform Bad Kreuznach Langenfeld KG

Planiger Str. 34a

55543 Bad Kreuznach

 

The credit check can include probabilities (so-called scoring). If scoring is involved in the result of the credit check, this is based on a scientifically recognised mathematical-statistical procedure. Address data is among that included in the scoring. We use the result of the credit check relating to the probability of payment default for the purposes of deciding whether to establish, carry out or terminate a contractual relationship.

GUT HERMANNSBERG Weinhandels GmbH uses external IT service providers that on behalf of GUT HERMANNSBERG Weinhandels GmbH provide e.g. server infrastructure, assume IT maintenance tasks or provide extensive IT and software solutions.

GUT HERMANNSBERG Weinhandels GmbH transfers your personal data to shipping companies if processing for communication by post is required.

Your data will not be transferred to third countries.

5. Data erasure and storage period

The personal data of the data subject will be erased or restricted as soon as the purpose of the storage has ended. However, data can be stored if this has been provided by European or national legislators in Union-law regulations, laws or other requirements to which the controller is subject. Data will also be erased or restricted if a storage period stipulated in one of the norms specified expires, unless it is necessary to continue to store the data to conclude or fulfil a contract.

 

Legal basis for data processing

The legal basis for temporary storage of data is Art. 6 (1) f GDPR.

 

Rights of the customer as a data subject

The customer is entitled to all the rights specified in chapter 3 (Art. 12-23) GDPR, in particular the right to information, rectification, erasure, restriction of processing, objection and the right to data portability.

Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.
Rapidmail. 


This website uses Rapidmail for the sending of newsletters. The provider is the rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
Rapidmail services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on Rapidmail servers in Germany.


Data analysis by Rapidmail
For analytical purposes, e-mails sent via Rapidmail are tagged with a so-called “Tracking Pixel”, which connects to Rapidmail’s servers once the e-mail is opened. As a result, it is possible to determine whether a newsletter e-mail was actually opened.
With the assistance of Rapidmail we are also able to determine whether and which links in the newsletter message the recipient clicked. All links integrated into the e-mail are so-called Tracking Links that enable us to count your clicks. If you do not want to permit an analysis by Rapidmail, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.
For more details on the Rapidmail analysis functions, please follow this link: https://de.rapidmail.wiki/kategorien/statistiken/.
Legal basis
The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
Storage period
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Regulations of Rapidmail at: https://www.rapidmail.de/datensicherheit.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR

 

If required, we will be pleased to send you a detailed version of the rights of data subjects.

 

Status of 30.04.2018