Privacy Policy
Below, we provide information about the nature, scope, and purpose of the processing of your personal data when you use our shop at the address “www.exclusiv-weinankauf.de.” Personal data is any information relating to an identified or identifiable natural person.
1. Responsible party
The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The controller within the meaning of the GDPR for the personal data processed in this shop is: Spirit of Wine Weinhandels UG (limited liability), Am Hang 40, 40789 Monheim, phone 0175 2794026, email
2. When you visit our website
When you visit our website, our server collects the following information from your device: browser type and version, operating system, the website you visited previously (“referrer”), IP address, and time of page view.
We collect and process this data to ensure the smooth operation of our website and to be able to detect, prevent, and prosecute misuse of our services. We also use the collected data for statistical purposes, for example to evaluate which devices and browsers are used to access our shop, so that we can continuously adapt and improve our offering to the needs of our users. This data processing is carried out on the basis of Article 6(1)(f) GDPR.
We delete all of the above-mentioned personal data no later than twelve months after it has been collected.
3. When you place an order with us
When you place an order in our shop, we process your name, delivery address, and email address as you provide them during the ordering process. If you voluntarily provide additional data when placing your order (e.g., a different billing address or a telephone number), we will also process this data.
We process this data electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, payment accounting, and the processing of returns and complaints. If we are obliged to provide you with updates for a digital product or for goods with digital elements, we will also process your contact details for this purpose. This data processing is based on Article 6(1)(b) GDPR.
We store this data until all mutual claims arising from the respective contractual relationship with you have been settled in full and the commercial and tax retention periods to which we are subject have expired.
In order to conclude a contract between you and us, we need to receive your name, delivery address, and email address. The necessity of providing this data arises from legal regulations (such as Section 312i (1) No. 3 BGB, Section 14 (4) UStG). Without providing this data, you cannot conclude a contract with us.
When deciding whether to conclude a contract, we do not use automated decision-making or profiling.
4. Customer account
You have the option of creating a customer account in our online shop. The data required for this and processed by us is taken from the input mask for opening the customer account. The customer account is set up exclusively at your request. The legal basis is therefore your consent in accordance with Article 6(1)(a) GDPR. We store the personal data associated with the customer account until you delete the customer account or ask us to delete it. For personal data from contracts that have already been concluded, the retention periods as set out in the section “When you place an order with us” apply, regardless of the existence of the customer account.
5. Delivery and payment
If we send physical goods on the basis of the purchase contract, we will forward the name and address of the recipient and, if you have consented to this, your email address to Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn) or DPD (DPD Deutschland GmbH, 63741 Aschaffenburg) as shipping service providers for the purpose of delivering the shipment, including, if applicable, a prior email notification of the expected delivery time, and for the purpose of a possible return of your shipment to us on the basis of Article 6(1)(b) GDPR.
To pay for your purchase, the payment service provider you have chosen collects and processes your name, email address, card or account number, and/or other data, as required for the payment method you have chosen. In this respect, the contractual and data protection provisions of the payment service provider you have chosen apply in addition.
Upon receipt of a payment, we process the data transmitted to us by the payment service provider.
When we receive a transfer to our account, we process in particular the name of the account holder making the transfer, the account number (IBAN and BIC), and the purpose of the transfer as transmitted.
Processing is carried out on the basis of Article 6(1)(b) GDPR. We store this data until all mutual claims arising from the respective contractual relationship with you have been settled in full and the commercial and tax retention periods to which we are subject have expired.
6. Processors
To support our operational processes, we use the services of JTL-eazyAuction (JTL-Software-GmbH, 41836 Hückelhoven) and JTL, EasySolution 360 as processors in accordance with Article 28 GDPR.
For the operation of our website on the Internet, we use the technical services of Host Europe (Host Europe GmbH, 51149 Cologne) as a processor in accordance with Article 28 GDPR.
7. Contacting us
If you use a contact form or chat function on our website, we will process the data you enter; this may include your name and email address in addition to your message.
If you send us a message by email, we will store your message with the sender data transmitted with it (name, email address, and any other information added by your email program and the transmitting servers). We use an email provider to receive, store, and send emails, which acts as a processor for us in accordance with Article 28 of the GDPR.
The legal basis for this data processing is our legitimate interest in responding to your message and also being able to respond to any follow-up questions you may have (Article 6(1)(f) GDPR). We delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the provision in the following paragraph.
If you send us a legally relevant declaration regarding the contractual relationship (e.g., a revocation or a complaint), the legal basis for processing, regardless of the transmission method, is also Article 6(1)(b) GDPR. In such a case, we will delete the data related to your statement as soon as all mutual claims arising from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.
8. Newsletter
If you have subscribed to our newsletter, we will inform you by email about new offers and features in our shop. You will not receive more than one newsletter per week. You can object to the use of your email address for advertising purposes at any time without formal requirements, without incurring any costs other than the transmission costs according to the basic rates.
This data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. If you revoke your consent to the use of your email address for advertising purposes, we will delete your email address from our newsletter distribution list.
9. Use of cookies
If you have consented to the use of cookies, we will place one or more “cookies” on your device. A cookie is a small text file that allows us to recognize your device when you visit our website again at a later date. Cookies also enable us to analyze certain user behavior, e.g., which areas of the site you view, how long you stay on our website, and when and how often you return to our website. Cookies stored by us are deleted no later than twelve months after your last visit to our website.
This data processing is based on your consent (Article 6(1)(a) GDPR).
You can prevent cookies from being stored by going to the cookie settings of your internet browser and objecting to the storage of cookies for our site or for all websites. There you can also delete cookies that have already been stored.
10. Your rights
You have the following rights with regard to the personal data we process about you:
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, we will inform you of the personal data we have stored about you and provide you with further information in accordance with Article 15 (1) and (2) of the GDPR.
You have the right to have inaccurate personal data concerning you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
You can request that we delete personal data concerning you without delay under the conditions of Article 17(1) GDPR, unless processing is necessary in accordance with Article 17(3) GDPR.
You may request that we restrict the processing of your data if one of the conditions set out in Article 18(1) GDPR applies. In particular, you may request restriction instead of erasure.
We will notify any recipients to whom we have disclosed your personal data of any rectification or erasure of your personal data and any restriction of processing, unless this proves impossible or involves disproportionate effort. We will also inform you of these recipients if you request this.
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you may request that we transmit this data to another controller without hindrance, insofar as this is technically feasible.
If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of data processing that took place before you withdrew your consent.
RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; This right to object applies to data processing carried out on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail. If you exercise your right to object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G., NEWSLETTERS), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged violation. This does not exclude other administrative or judicial remedies.