Data protection

scope

This privacy policy clarifies users about the nature, scope and purpose of the collection and use of personal data by the responsible provider [winery Hermeshof, Reiner Hermes Nachf., Ettenstr.21. 54349 Trittenheim, Tel: 06507-5380, E-Mail: info (a) hermeshof.de] on this website (in the following "offer").

Name and contact details of the controller and the company data protection officer

This privacy policy applies to data processing by:

Responsible: Winery Hermeshof, Ettenstr.21. 54349 Trittenheim, 06507-5380, info (a) hermeshof.de

The company data protection officer is under the o.g. To reach the address or the following contact details:

This email address is being protected from spambots. You need JavaScript enabled to view it.

General

When you visit our website, personal data is also processed.

In order for the pages to be displayed in your browser, the IP address of the device you are using must be processed. In addition, more information about the browser of your device.

In terms of data protection, we are also obliged to guarantee the confidentiality and integrity of personal data processed using our IT systems.

For this purpose, the following data is logged:

    Information about the browser type and version used
    The operating system of the user
    The Internet service provider of the user
    The IP address of the user (for a maximum of 7 days)
    Date and time of access
    Websites from which the system of the user comes to our website
    Websites that are accessed by the user's system through our website

The IP address will be deleted or anonymised after 7 days at the latest of all systems used in connection with the operation of this website. We can no longer create a personal reference from the remaining data.

The data is also used to fix website errors.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our "interest" i.S.d. Art. 6 para. 1 lit. f) is the operation of this website and the implementation of the protection goals of confidentiality, integrity and availability of the data.
SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us can not be read by third parties.

cookies

Cookies are used on our website. Cookies are small textual information stored in your device via your browser. Cookies are required to enable certain features of our website. On the one hand, we use session cookies that are automatically deleted from your browser immediately after you have finished visiting the website. In the field of web analytics, on the other hand, we also use persistent cookies.

You have the option to prevent the setting of cookies by means of appropriate settings in your browser. We point out, however, that the use of our website may be restricted. Cookies do not install or start any programs or other applications on your computer.

The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO in conjunction with § 15 TMG. Our "interest" i.S.d. Art. 6 para. 1 lit. f) is the operation of this website.Contact via form, e-mail contact

We offer contact forms on our website where you can contact us with concerns regarding our service, such as reservation requests. The personal data provided will be stored for the purpose of processing the request as well as in the event that follow-up questions arise.

Alternatively, a contact via our e-mail address is possible, which is linked to various buttons. In this case, the user's personal data transmitted by e-mail will be stored for the purpose of processing the message and in case of follow-up questions.

Inquiries and messages received via the contact forms on our website or via our e-mail address are usually stored in our CRM system. The CRM system is regularly checked to see if data can be deleted. If data in the context of a guest or prospective customer relationship is no longer necessary or outweighs a conflicting interest of the guest or prospective customer, we will delete the relevant data, as far as there are no legal storage requirements.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our "interest" i.S.d. Art. 6 para. 1 lit. f) is the communication with guests and interested parties.

Online booking

We also offer the possibility of an online contract for our guests. The data to be provided in this regard are marked as mandatory fields in the respective form. Without the specification of data in the respective mandatory fields an online booking is not possible. The legal basis for this data processing is Art. 6 para. 1 lit. b) GDPR.

In the case of other personal information that you have voluntarily provided, in the case of a personal reference, we assume that the processing is in your interest (Article 6 (1) (f) GDPR). It is our interest to provide our services in a manner consistent with the contract.

Providing information

As far as you have data opposite us e.g. voluntarily provide in forms and these are not required for the performance of our contractual obligations, we process these data on the basis that we assume that the processing and use of this data is in your interest.Recipient / transfer of data
Data that you provide to us will generally not be disclosed to third parties. In particular, your data will not be disclosed to third parties for their advertising purposes.

However, we may use service providers for the operation of this website, our newsletter, online bookings via our website or for other products from us. Here it may happen that a service provider receives knowledge of personal data. We carefully select our service providers - in particular with regard to data protection and data security - and take all data protection measures necessary for permissible data processing.

minor

Minors may not submit personal information to us without the consent of the guardian. As part of the website, we do not process any personally acquired personal data of minors.

Inclusion of third-party services and content

Within the website third-party content is included. For the use of such content, the transmission of the IP address of the user to the respective third-party provider is technically required. Because without the IP address, the third-party providers could not send the content embedded in the website to the browser of the respective user. We have no control over whether a third party provider uses the IP address, e.g. stored or otherwise used for statistical purposes.

Google reCAPTCHA
We use "Google reCAPTCHA" (hereafter "reCAPTCHA") on our websites. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

With reCAPTCHA we want to check if the data entry on our websites (for example in a contact form) is done by a human or by an automated program. For this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (for example, the IP address, the website visitor's visit time on the website, or user mouse movements). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyzes are completely in the background. Site visitors are not advised that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The Web site operator has a legitimate interest in protecting its web sites from abusive automated spying and SPAM.

For more information about Google reCAPTCHA and Google's privacy policy, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android. html.

GOOGLE MAPS

We include maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

The use of Google Maps takes place in the interest of easy discovery. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) DSGVO. When Google Maps is called, servers are called in the USA or at least outside the EU. An appropriate level of data protection is demonstrated by the fact that Google LLC is listed in the Privacy Shield.

Use of Google Fonts

On these websites external fonts, Google fonts are used. Google Fonts is a service of Google Inc. ("Google"). The integration of these web fonts is done by a server call, usually a Google server in the USA. This will be transmitted to the server, which of our websites you have visited. Also, the IP address of the browser of the terminal of the visitor of this website is stored by Google. For more information, see the Google Privacy Policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

Your rights as a concerned person

As far as your personal data are processed during the visit of our website, you have the following rights as "data subject" within the meaning of the GDPR:

information desk

You can ask us for information about whether personal data is processed by us. No right of access exists if the granting of the coveted information against the duty of confidentiality acc. § 57 StBG would violate or the information for other reasons, in particular because of a predominant legitimate interest of a third party, must be kept secret. Deviating from this, there may be an obligation to provide the information if your interests outweigh the interests of secrecy, in particular taking into account any imminent damage. The right of access is also excluded if the data is stored only because it may not be deleted due to statutory or statutory retention periods or serve exclusively for data protection or data protection control, if the disclosure would require a disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures. If in your case the right to information is not excluded and your personal data are processed by us, you can ask us for information about the following information:

Purposes of processing,
    Categories of personal data that you process,
    Recipients or categories of recipients to whom your personal data are disclosed, particularly to recipients in third countries,
    if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the retention period,
    the right to rectify or delete or restrict the processing of personal data concerning you or a right to object to such processing;
    the existence of a right of appeal to a data protection supervisory authority,
    if the personal data has not been collected from you as the data subject, the information available on the origin of the data,
    the existence of automated decision-making including profiling and meaningful information about the logic involved, as well as the implications and implications of automated decision-making;
    in the case of transmission to recipients in third countries, if there is no decision of the EU Commission on the appropriateness of the protection level under Art. 45 (3) GDPR, information on which suitable guarantees acc. Art. 46 para. 2 GDPR for the protection of personal data.

Correction and completion

If you discover that we have inaccurate personal information, you may require us to promptly correct this incorrect information. In case of incomplete personal data concerning you, you can request the completion.

deletion

They are entitled to be deleted ("right to be forgotten"), unless the processing is necessary for the exercise of the right to freedom of expression, the right to information or to fulfill a legal obligation or to perform a task of public interest and one of the following is true:
The personal data are no longer necessary for the purposes for which they were processed.
    The justification for processing was only your consent, which you have revoked.
    You have objected to the processing of your personal data that we have made public.
    You have objected to the processing of personal data not disclosed to us and there are no legitimate reasons for the processing.
    Your personal data was processed unlawfully.
    The deletion of personal data is required to fulfill a legal obligation to which we are subject.

There is no claim for deletion if, in the case of legitimate non-automated data processing, deletion is not possible or only possible with disproportionately high outlay due to the special nature of the storage and your interest in deletion is low. In this case, the deletion is replaced by the restriction of processing.

Restriction of processing

You may require us to restrict processing if any of the following applies:

    You deny the accuracy of your personal information. The restriction may be required in this case for the duration that allows us to verify the accuracy of the data.
    The processing is unlawful and you require instead of deletion the restriction of the use of your personal data.
    Your personal information will no longer be needed by us for the purposes of processing that you may need to assert, exercise or defend your rights.
    You have contradiction gem. Art. 21 para. 1 DSGVO. The limitation of processing may be required as long as it is not certain that our legitimate reasons outweigh your reasons.

Restriction of processing means that the personal data are processed only with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have a duty to inform you.

Data portability

You have the right of data transferability if the processing is based on your consent (Article 6 (1) sentence 1 (a) or Article 9 (2) (a) GDPR) or on a contract to which you are a party and the processing is done using automated procedures. The right to data portability in this case includes the following rights, provided that this does not affect the rights and freedoms of others: You may require us to receive the personal information you provide us in a structured, common and machine-readable format , You have the right to transfer this data to another person without hindrance on our part. If technically feasible, you may require us to transfer your personal information directly to another person in charge.

opposition

Insofar as the processing is based on Article 6 (1) sentence 1 (e) of the GDPR (exercise of a task in the public interest or in the exercise of official authority) or on Article 6 (1) (1) (f) GDPR (legitimate interest of the controller or a third party), you have the right, at any time, to object to the processing of the personal data concerning you for reasons of your particular situation. This also applies to a profiling based on Art. 6 (1) sentence 1 letter e) or letter f) of the GDPR. After exercising your right to object, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

You may at any time object to the processing of your personal data for direct marketing purposes. This also applies to a profiling associated with such direct mail. After exercising this right of objection, we will no longer use the personal data concerned for direct marketing purposes.

You have the option of informing us informally by telephone, by e-mail, if necessary by fax or to our postal address listed at the beginning of this privacy policy.
Revocation of consent

You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be communicated by phone, by e-mail, possibly by fax or to our postal address informal. The revocation does not affect the lawfulness of the data processing which has taken place on the basis of the consent until receipt of the revocation. Upon receipt of the revocation, the data processing, which was based solely on your consent, is set.

complaint

If you believe that the processing of your personal information is unlawful, you may lodge a complaint with a data protection supervisory authority that has jurisdiction over your place of residence or employment or the location of the alleged breach.

Status and Update of this Privacy Policy

This Privacy Policy is as of May 14, 2018. We reserve the right to update our privacy policy in due course to improve privacy and / or adapt it to changes in regulatory practice or jurisdiction.