privacy policy

1) Information on the collection of personal data and data processor's contact details

1.1 We appreciate your visit to our website and thank you for your interest. In the following information, we would like to inform you about how we handle your personal data when you use our website. Personal data is defined as any data which can be used to personally identify you.

1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ((Kunde/address/Telephone/fax/E-Mail)).

The data processor is the natural or legal person who individually or collectively determines for which purposes and by which means personal data shall be processed.

1.3 The data processor has appointed a Data Protection Officer, who can be contacted as follows:

Data Protection Officer,

Kiechlinsberger Str. 2-6, D-79346 Endingen-Königschaffhausen,

E-Mail: datenschutzbeauftragter@kk-weine.de.

2) Data collection when visiting our website.

When you use our website for information purposes only, i.e., if you do not register or otherwise transmit information to us, we will only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website

- Date and time at the time of access

- Amount of data sent in bytes

- Source/link from which you reached the website

- Browser used

- Operating system used

- IP address used ( where required: in an anonymised format)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be forwarded or used for any other purposes. However, we reserve the right to review server log files retrospectively if concrete indications of unlawful use arise.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are automatically deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (so-called persistent cookies).

If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in your web browser's cookie settings overview. In some cases, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping basket for a future website visit). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR, on the basis of granted consent, or in accordance with Art. 6 para. 1 lit. f GDPR, in order to safeguard our legitimate interests in ensuring the best possible functionality of our website and a customer-friendly / effective structuring of the site visit.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general.

Every browser differs in the way it manages cookie settings.

This is described in each browser's help menu, which explains how to change your cookie settings. You can find these help pages for the respective browsers using the following links:

Internet Explorer:

https://support.microsoft.com/de-de/help/17442/win...

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben...

Chrome: https://support.google.com/chrome/answer/95647?hl=...

Safari: https://support.apple.com/de-de/guide/safari/sfri1...

Opera: https://help.opera.com/de/latest/web-preferences/#...

Please note that the functionality of our website may be limited if cookies are not accepted.

4) Contact

Personal data is collected when contacting us (e.g., via the contact form or e-mail). The data collected when using a contact form can be identified from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you as well as for any related technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If the purpose of your contact enquiry is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been processed. This shall be the case if it can be concluded from the circumstances that the matter in question has been completely clarified and provided that no opposing legal obligations to retain data exist.

5) Data processing when opening a customer account and for contract processing in accordance with Art.

6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be identified from the respective input forms. Deletion of your customer account is possible at any time and can be realised by sending a message to the aforementioned address of the person responsible for data processing. The data you provide us with will be stored and used for the purpose of processing the contract. Once the contract has been fully processed or your customer account has been deleted, your data will be deleted in accordance with tax and commercial legal requirements.

The data will be blocked for the duration of the data retention periods and deleted after these periods have expired unless you have expressly consented to further use of your data or we are entitled to use the data further in accordance with the law.

6) Use of customer data for direct advertising

6.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly

send you information about our offers. The only mandatory information required for us to send you the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use a so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we save the IP address specified by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used exclusively for the purpose of advertising in the newsletter.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible for data processing specified at the beginning of this document. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the further use of your

data or provided that we reserve the right to use your data for any other purpose permitted by law that we have informed you about in this declaration.

6.2 Sending the e-mail newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we may periodically email you offers for goods or services similar to those you have already purchased from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain separate consent from you for this purpose. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purposes at any time with immediate and future effect by notifying the person responsible for data processing specified at the beginning of this document. For this purpose, you will only incur transmission costs in accordance

with the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

6.3 Newsletter mailing via CleverReach

Our email newsletter is distributed via the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (''CleverReach''), to whom we pass on the data you provided when registering for the newsletter. This disclosure is made in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using a newsletter system that is promotionally effective, secure, and user-friendly. The data you enter for the purpose of receiving the newsletter (e.g., e-mail address) is stored on CleverReach's servers in Germany or Ireland.

CleverReach uses this information to send and statistically evaluate the newsletters on our behalf. For evaluation purposes, the newsletters sent by e-mail contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. These make it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be evaluated whether a predefined action (e.g., purchase of a product on our website) has taken place after the user has clicked on links of this type. Furthermore, technical information is recorded (e.g., time of retrieval, IP address, browser type and operating system). The data collected is strictly anonymised and will not be linked to your other personal data; direct reference to individual persons is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to improve the customisation of future newsletters to better reflect the recipients' interests. If you would like to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded an order processing contract with CleverReach, which obliges CleverReach to protect our customers' data and not disclose it to third parties.

You can read more about CleverReach's data analysis policies here:

https://www.cleverreach.com/de/funktionen/reportin...

CleverReach's privacy policy can be viewed here:

https://www.cleverreach.com/de/datenschutz/.

6.4 Postal advertising

Based on our legitimate interest in providing personalised direct advertising, we reserve the right to store your first name and surname, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 (1) lit. f GDPR and to use this information to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible for data processing.

7) Data processing for order processing

In order to process your order, we work together with the following service provider(s), who support us in whole or in part with the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be forwarded to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. Should payment service providers be used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8) Use of social media: social plugins

8.1 Facebook plugins using a 2-click solution

Our website uses so-called social plugins ("plugins") provided by the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" solution.

You can identify deactivated plugins by the fact that they are greyed out. This integration ensures that when you access one of our website pages that contain plugins of this type, no connection is established with Facebook's servers.

Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. As far as we are aware, Facebook receives information about which of our websites you are currently visiting and which websites you have previously visited. By integrating the plugins, Facebook also receives the information that your browser has accessed our website's corresponding page if you do not have a Facebook profile or are not currently logged in. The information collected (including your IP address) is transmitted by your

browser directly to a Facebook Inc. server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and displayed to your contacts there.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect any data that has already been transmitted to Facebook.

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

8.2 Facebook plugins with a Shariff solution

In order to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plug-ins, rather, they are integrated into the page using only an HTML link. This type of integration ensures that when you access one of our website pages that contains buttons of this type, a connection is not yet established with the Facebook servers. When you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins there (if necessary, after entering your login data).

8.3 Instagram plugin with a Shariff solution

So-called social plugins ("plugins") are used on our website. Our website uses so-called social plugins ("plugins") provided by the online service Instagram, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook").

In order to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plug-ins, rather, they are integrated into the page using only an HTML link. This type of integration ensures that when you access one of our website pages that contains buttons of this type, no connection is established with the Instagram servers. When you click on the button, a new browser window opens and calls up the Instagram page where you can interact with the plugins there (if necessary, after entering your login data).

For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

9) Social media use: Videos

Use of YouTube videos. This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider, "YouTube" , uses cookies to collect information about user behaviour.

According to information from "YouTube", these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates these profiles. An analysis of this kind is carried out particularly in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or the needs-based design of its website. You are entitled to object to the creation of these user profiles and you must contact YouTube to exercise this right.

The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Independently of the playback of these embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations over which we have no influence.

For further information on data protection at 'YouTube'', please refer to the provider's privacy policy at:

https://www.google.de/intl/de/policies/privacy

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with immediate and future effect. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

10) Web analysis services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your end device and enable the analysis of your use of the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excluding the possibility of any direct reference to specific persons. As a result of the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC. Server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics also enables the creation of statistics with statements about the age, gender, and interests of site visitors on the basis of an evaluation of interest-based advertising and by using information from third-party providers via a special function, so-called "demographic characteristics".

This allows the definition and differentiation of website user groups for the purpose of optimising targeted marketing measures. About the "demographic characteristics" However, collected data records cannot be assigned to a specific person.

All processing described above, in particular, the setting of Google Analytics cookies for retrieving information about the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Google Analytics will not be used during your visit to the site without the provision of this consent.

You can revoke your consent at any time with immediate and future effect.

To exercise your revocation, please deactivate this service in the 'Cookie Consent Tool' provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics,

which obliges Google to protect our site visitors' data and not disclose it to third parties.

For the transfer of data from the EU to the USA, Google invokes the European Commission's so-called standard data protection clauses, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here:

https://policies.google.com/privacy?hl=de&gl=de

10.2 - Matomo (formerly Piwik) without cookies

On this website, certain user information is collected and stored using the web analytics software Matomo (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand (?Matomo?). Anonymised usage profiles can be created and analysed on the basis of this information.

The information collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

This website uses Matomo exclusively without the use of cookies, which means that Matomo does not set cookies on your end device at any time.

Insofar as personal data is also processed during the described processes, the processing is based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 (1) lit. f GDPR.

If you do not agree to the storage and evaluation of the information from your visit, you can object to the storage and future use of this information at any time with a mouse click. In this case, a so-called Opt-Out-Cookie is stored in your browser, with the result that Matomo will not collect any of your session data.

Please note that if you delete your cookies completely, the opt-out cookie will also be deleted, and you may have to reactivate it.

11) Tools and miscellaneous

11.1 - Google Web Fonts

This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") to ensure the consistent display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

To do this, the browser you are using must connect to Google's servers. This may also result in the transmission of personal data to Google LLC's servers in the USA. This enables Google to determine that your IP address is being used to access our website. Google Web Fonts are used for the purposes of ensuring the consistent and appealing presentation of our online services. This constitutes legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, your computer will use a standard font.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

11.2 Applications to job advertisements via e-mail

We advertise current vacancies on our website in a separate section where interested parties can apply for positions by sending an e-mail to the provided contact address.

Inclusion in the application process requires that applicants provide us with all the personal data required for a meaningful and informed assessment and selection together with their application via e-mail.

The information required includes general information about the person (name, address, telephone, or electronic contact details) as well as performance-specific evidence of the qualifications required for the respective position.

If necessary, health-related information may also be required, which must be given special consideration under labour and social law in the interests of the applicant's social protection.

The components that an application must contain in order to be considered and the form in which these components are to be sent

via email can be found in the respective job advertisement.

Once we have received the application sent via the e-mail contact address provided, we will store the applicants' data and evaluate it solely for the purpose of processing the application. In case of any queries arising during the course of processing, we use, at our discretion, either the e-mail address or telephone number provided by the applicant with their application.

The legal basis for this processing, including contacting us for any queries, is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG), for the purposes of which the application process is deemed to constitute the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. GDPR. so that we can exercise our rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special data categories may also be based on Art. 9(1)(h) GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnoses, health or social care or treatment, or for the management of systems and services in the health or social care sector.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, their data transmitted via e-mail as well as all electronic correspondence including the original application e-mail will be deleted no later than after 6 months following appropriate notification. This period is measured on the basis of our legitimate interest in being able to answer any follow-up questions about the application and, where appropriate, to meet our obligations to provide evidence in accordance with regulations on the equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG) for the purposes of implementing the employment relationship.

12) Data subject's rights

12.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the data processor with regard to the processing of your personal data, which we hereby inform you about below:

- Right to information in accordance with Art. 15 GDPR: In particular, you have the right to obtain information about any of your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the implications for you and the intended effects of such processing, as well as your right to be informed about the guarantees pursuant to Article 46 of the GDPR in the event that your data is transferred to third countries;

- Right to rectification in accordance with Art. 16 GDPR: You have a right to the immediate rectification of any inaccurate data relating to you and/or a right to the completion of any incomplete data stored by us;

- Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right shall not apply, in particular, where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for asserting, exercising or

defending legal claims;

- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data after the intended purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate interests prevail;

- Right to information in accordance with Article 19 of the GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the data processor, the data processor is obliged to inform all recipients to whom the personal data concerned has been disclosed of this rectification or deletion or processing restriction, in accordance with Article 19 of the GDPR: unless this proves impossible or involves a disproportionate effort. You are also entitled to be informed about the identity of these recipients.

- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transferred to another data processor, insofar as this is technically feasible;

- Right to revoke granted consent in accordance with Art. 7 (3) GDPR: You have the right to revoke your previously granted consent to the processing of data at any time with immediate and future effect. In the event of revocation, we will immediately delete the data concerned unless further processing can be justified in accordance with a legal basis for processing without consent. The revocation of consent shall not affect the legitimacy of the processing carried out on the basis of the provided consent until revocation has taken place;

- Right to lodge a complaint in accordance with Art. 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

12.2 Right of objection

If we process your personal data within the framework of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing with immediate and future effect based on reasons arising from your particular situation at any time.

Should you exercise your right to object,

we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data for marketing purposes of this kind at any time. You can exercise your right of objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

13) Storage periods for personal data

The storage period for personal data is determined on the basis of the respective legal basis, the purpose of the processing and where relevant, additionally, on the basis of the respective statutory retention period (e.g., retention periods in accordance with commercial and tax law provisions).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a of the GDPR, such data is stored until the data subject revokes their consent.

If statutory retention periods exist for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted following expiry of the retention periods, insofar as it is no longer required for contract fulfilment or contract initiation and/or there is no continued legitimate interest in its continued storage on our part.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the data subject's interests, rights and freedoms, or the processing is for the purpose of asserting, exercising, or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise indicated in the other information in this statement regarding specific processing situations, stored personal data shall otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Remarks

We would like to point out that the German version of the data protection declaration (https://www.kk-weine.de/datenschutz) is the legally binding version.