Privacy Policy

1. General Information

The following notes provide an overview of what happens to your personal data when you visit our website www.herres-sekt.com. Personal data is any information by which you can be personally identified. For detailed information on data protection, please refer to the privacy policy given below this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by
Peter Herres Wein- und Sektkellerei GmbH
Rudolf Diesel Straße 7 9
54292 Trier

How do we collect your data?

Your data are collected in two ways:

Data you provide to us voluntarily, for example when you fill out a contact form.
Data that our IT systems collect automatically when you visit the website. These are primarily technical data (e.g. web browser, operating system, or the time of page visit). This collection happens automatically as soon as you enter the website.

What do we use your data for?

Some of the data are required to ensure error free operation of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time, free of charge, to receive information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of these data. If you have given consent to data processing, you may withdraw your consent at any time for the future. You also have the right, under certain circumstances, to request restriction of processing of your personal data. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.

For this purpose and for further questions concerning data protection, you may contact us at any time.

Analysis tools and third party tools

When you visit this website, your surfing behavior may be statistically evaluated. This mainly happens using so called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting

This website is hosted externally. The personal data collected on this website are stored on the servers of the hosting provider. These may include IP addresses, contact inquiries, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website.

External hosting is performed for the purpose of fulfilling the contract with our prospective and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). If consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent covers storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our host will only process your data to the extent necessary to fulfill its contractual obligations and will follow our instructions regarding these data.

We use the following hosting provider:

nr city.net Medienhaus e.K.
Hauptstraße 23
56307 Harschbach

Order processing

We have concluded a data processing agreement (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use them for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g. when communicating by e mail) can have security gaps. Complete protection of data from access by third parties is not possible.

Responsible party

The responsible party for data processing on this website is:
Peter Herres Wein- und Sektkellerei GmbH
Rudolf Diesel Straße 7 9
54292 Trier
Phone: +49 651 209060
E mail: info@herres sekt.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, e mail addresses, etc.).

Storage duration

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing ceases. If you assert a legitimate deletion request or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention obligations); in the latter case, deletion will take place once those reasons no longer apply.

Legal basis for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR if special categories of data pursuant to Art. 9 (1) GDPR are processed. In the event of express consent to the transfer of personal data to third countries, processing also takes place on the basis of Art. 49 (1) lit. a GDPR. If you have consented to the storage of cookies or to access information on your device (e.g. via device fingerprinting), processing additionally takes place on the basis of § 25 (1) TDDDG. Consent may be revoked at any time. If your data are necessary for contract performance or for pre contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if required to comply with a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The specific legal bases applicable to each processing operation are described in the following sections of this privacy policy.

Data protection officer

We have appointed a data protection officer:
Mr. Rainer Faldey
Data Protection Officer GDDcert. EU
Im Handwerkerhof 1
54338 Schweich
Phone: +49 6502 6019061
E mail: datenschutzbeauftragter@herres sekt.com

Recipients of personal data

In the course of our business activities, we work with various external parties. In some cases, it is necessary to transfer personal data to these external parties. We only pass on personal data if it is required for contract performance, if we are legally obliged to do so (e.g. disclosure to tax authorities), if we have a legitimate interest pursuant to Art. 6 (1) lit. f GDPR, or if another legal basis allows data transfer. When using processors (order processors), we only share data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of consent to data processing

Many data processing operations are only possible with your explicit consent. You may withdraw consent at any time. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If data processing is based on Art. 6 (1) lit. e or f GDPR, you may object at any time, on grounds relating to your particular situation, to processing of your personal data; this also applies to profiling based on these provisions. The legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such advertising, including profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with the supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Right to data portability

You have the right to receive personal data that you have provided to us in a structured, commonly used, and machine readable format, and to transmit those data to another controller without hindrance, where technically feasible, provided that the processing is based on consent (Art. 6 (1) lit. a GDPR) or on contract (Art. 6 (1) lit. b GDPR).

Right to access, correction, and deletion

You have the right, within the applicable statutory framework, at any time to obtain free information about your stored personal data, their origin and recipients, and the purpose of data processing, and—where applicable—the right to rectify or erase these data. For this and further questions on personal data, please contact us at any time.

Right to restrict processing

You have the right to request restriction of processing of your personal data. This applies in the following cases:

If you dispute the accuracy of your data, we usually need time to verify this. During the verification period, you may request restriction of processing.
If processing is unlawful but you oppose deletion and instead request restriction.
If we no longer need your data but you need them for the assertion, exercise, or defense of legal claims.
If you have objected pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.

Restricted data may—aside from storage—only be processed with your consent or for claiming, exercising, or defending legal claims or protecting another natural or legal person’s rights, or for important public interest reasons.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content (e.g. orders or inquiries you send to us), this site uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock icon in your browser line. When SSL/TLS encryption is active, third parties cannot read the data you transmit to us.

Objection to advertising e mails

The use of contact data published in the legal notice for sending unsolicited advertising and information materials is hereby objected to. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam e mails.

4. Data collection on this website

Cookies

Our websites use so called “cookies.” Cookies are small data packets and cause no damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your end device. Session cookies are deleted automatically when you leave the site. Persistent cookies remain stored until you delete them or they are automatically deleted by your browser.

Cookies can come from us (first party cookies) or from third parties (so called third party cookies). Third party cookies enable the integration of certain services from third parties (e.g. cookies for payment services).

Cookies perform various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. shopping cart function or video display). Other cookies can be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for electronic communication processes, for provision of certain user desired functions (e.g. shopping cart function), or for website optimization (e.g. audience measurement cookies) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis has been specified. The site operator has a legitimate interest in the storage of necessary cookies for the technically error free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been obtained, processing occurs exclusively on the basis of this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG); consent may be revoked at any time.

You can set your browser so that you are informed about cookie placement and only allow cookies on a case by case basis, exclude cookies for certain or all cases, or activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

These data are not merged with other data sources. Collection is based on Art. 6 (1) lit. f GDPR. The site operator has a legitimate interest in the technically error free display and optimization of the website—server log files must be recorded for this purpose.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored for the purpose of processing the inquiry and in case of follow up questions. We do not share these data without your consent.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry relates to contract fulfillment or pre contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if obtained; consent may be revoked at any time.

The data you enter in the contact form remain with us until you request deletion, withdraw consent to storage, or the purpose for data storage ceases (e.g. after your inquiry has been fully processed). Mandatory statutory provisions—especially retention periods—remain unaffected.

Contests

The recipient of the information provided by participants is Peter Herres Wein und Sektkellerei GmbH. Participants are responsible for the accuracy of their information. Personal data you provide in connection with contests on our website or social media profiles will be processed solely for contest administration and deleted after the contest ends or prizes are awarded. This typically includes your postal address and e mail address. These personal details are used only to identify winners. Processing for the contest is based on your consent under Art. 6 (1) lit. a GDPR. Further rules are set out in the specific contest terms and conditions.

Inquiries by e mail, telephone, or fax

If you contact us by e mail, telephone, or fax, your inquiry—including all resultant personal data (name, inquiry)—is stored and processed for the purpose of handling your request. We do not share these data without your consent.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry is related to contract fulfillment or necessary for pre contractual measures. Otherwise, processing is based on our legitimate interest in effective inquiry handling (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if obtained; consent may be revoked at any time.

Your inquiry data remain with us until you request deletion, withdraw consent to storage, or the purpose for storage ceases (e.g. after complete handling of your request). Mandatory statutory provisions—especially retention periods—remain unaffected.

5. Plugins and Tools

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service. We embed map material from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, which is considered a privacy safe third country. When using OpenStreetMap maps, a connection is made to the OSMF servers and your IP address and other usage data may be transmitted. OSM may store cookies or use similar recognition technologies in your browser.

Use of OpenStreetMap is in the interest of an appealing presentation of our online offers and easy locatability of the places we list. This constitutes a legitimate interest under Art. 6 (1) lit. f GDPR. If consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG; consent may be revoked at any time.

Friendly Captcha

We use Friendly Captcha on this website. Provider: Friendly Captcha GmbH, Am Anger 3 5, 82237 Wörthsee, Germany. Friendly Captcha verifies whether data entry on this website (e.g. in a contact form) is performed by a human or an automated program by analyzing visitor behavior. It evaluates information such as anonymized IP address, referrer, visit time, etc. For details see friendlycaptcha.com/legal/privacy-end-users/.

Storage and analysis of data are based on Art. 6 (1) lit. f GDPR. The site operator has a legitimate interest in protecting its web offerings from abusive automated scanning and spam. If consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG; consent may be revoked at any time.

6. Our Own Services

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e mail, post, or via an online application form). Below we inform you about the scope, purpose, and use of your personal data in the application process. We assure you that collection, processing, and use of your data comply with applicable data protection law and all other legal provisions, and that your data are treated with strict confidentiality.

Scope and purpose of data collection

When you submit an application, we process your personal data (e.g. contact and communication data, application documents, interview notes) to decide on establishing an employment relationship. Legal basis is § 26 BDSG (German Federal Data Protection Act) for initiating an employment relationship, Art. 6 (1) lit. b GDPR for general contract initiation, and—if you have given consent—Art. 6 (1) lit. a GDPR. Consent may be revoked at any time. Your data are only shared internally with persons involved in processing your application.

Storage duration

If we cannot make you a job offer, you decline an offer, or withdraw your application, we reserve the right to retain your data on the basis of our legitimate interests (Art. 6 (1) lit. f GDPR) for up to six months after the end of the application process. Thereafter, the data will be deleted and any physical documents destroyed. This retention serves as proof in the event of legal disputes. If it becomes apparent that data will still be required after six months (e.g. due to pending litigation), deletion will occur once the retention purpose ceases.

Longer retention may also occur if you have given specific consent (Art. 6 (1) lit. a GDPR) or if legal retention obligations prevent deletion.

Inclusion in the applicant pool

If we do not make you an offer, you may be included in our applicant pool. In this case, all documents and information from your application are transferred to the pool so we can contact you for suitable vacancies. Inclusion happens only on the basis of your explicit consent (Art. 6 (1) lit. a GDPR). Providing consent is voluntary and unrelated to the application process. You may withdraw consent at any time; in that case, data in the pool will be irrevocably deleted, unless legal retention reasons apply. Pool data are deleted no later than two years after consent.

7. Our Social Media Profiles

This privacy policy applies to the following social media profiles:

Data processing by social networks

We maintain publicly accessible profiles on social networks. The specific networks we use are listed above. Social networks such as Facebook or X can generally comprehensively analyze your user behavior when you visit their site or any site with embedded social media content (e.g. Like buttons or ads). Visiting our social media presences can trigger numerous data processing operations. In detail:

If you are logged into your social media account and visit our profile, the operator of the social network can associate the visit with your user account.
Your personal data may also be collected if you are not logged in or do not have an account, for example via cookies stored on your device or by capturing your IP address.
Using this data, social networks can create user profiles that store your preferences and interests, allowing them to display personalized advertising on and off the network. If you have an account, such advertising may appear on all devices where you are or were logged in.

Please note we cannot fully track all processing by social media operators. Depending on the provider, additional processing may occur. For details, see the terms and privacy policies of the respective social media platforms.

Legal basis

Our social media profiles ensure a broad Internet presence. This constitutes a legitimate interest under Art. 6 (1) lit. f GDPR. The analysis processes initiated by social networks may be based on different legal bases specified by the network operators (e.g. consent under Art. 6 (1) lit. a GDPR).

Joint responsibility and exercising your rights

When you visit one of our social media profiles, we are jointly responsible with the platform operator for the data processing operations triggered. You can assert your rights (access, correction, deletion, restriction of processing, data portability, and complaint) against both us and the respective social media operator (e.g. Facebook). Please note that although we share responsibility, we do not have full control over social media data processing; our influence depends on the provider’s policies.

Storage duration

Data directly collected by us through our social media profiles are deleted from our systems as soon as you request deletion, withdraw consent, or the storage purpose ceases. Cookies remain on your device until you delete them. Mandatory legal retention obligations remain unaffected. We have no influence on how long the social media operators store your data for their own purposes; please refer to their privacy policies for details.

Your rights

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to object, to data portability, and to lodge a complaint with the supervisory authority. You may request correction, blocking, deletion, and under certain circumstances restriction of processing of your personal data.

Individual social networks

Facebook

We have a Facebook profile operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the collected data are also transferred to the USA and other third countries. We have concluded a Controller Addendum with Meta that specifies which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view this addendum here: www.facebook.com/legal/terms/page_controller_addendum. You can adjust your ad settings in your user account at www.facebook.com/settings. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details: www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/566994660333381. For Meta’s privacy policy see www.facebook.com/about/privacy/. Meta is certified under the “EU US Data Privacy Framework” (DPF). Details at www.dataprivacyframework.gov/participant/4452.

Instagram

We have an Instagram profile operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details: www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/566994660333381. For Instagram’s privacy policy see privacycenter.instagram.com/policy/. Meta is certified under the “EU US Data Privacy Framework” (DPF). Details at www.dataprivacyframework.gov/participant/4452.

We have a LinkedIn profile operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. To deactivate LinkedIn ad cookies, visit www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses: www.linkedin.com/legal/l/dpa and www.linkedin.com/legal/l/eu-sccs. For LinkedIn’s privacy policy see www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the “EU US Data Privacy Framework” (DPF). Details at www.dataprivacyframework.gov/participant/5448.

TikTok

We have a TikTok profile operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. For TikTok’s privacy policy see www.tiktok.com/legal/privacy-policy. Data transfer to non safe third countries is based on the EU Commission’s Standard Contractual Clauses: www.tiktok.com/legal/privacy-policy.