Source: https://www.henkell.com/en/privacy-policy/
Timestamp: 2019-04-25 08:22:25+00:00

Document:
Henkell & Co. Sektkellerei KG and its associated platform henkell.com (hereafter “we”) respect your privacy and personality rights. We take the protection of your personal data such as your name, date of birth, address, e-mail address or telephone number very seriously.
This Data Protection Statement explains the collection, processing and utilisation (hereafter collectively referred to as “processing”) of your personal data if and when these are gathered during the use of our website. In addition, all persons subject to data processing are advised of the rights to which they are entitled.
We handle these data in strictest compliance with applicable statutory data protection regulations and the following principles.
We have implemented numerous technical and organizational measures to ensure the comprehensive protection of the personal data processed via our website.
As part of the contractual relationship, there may be a transmission of personal data to a third party which uses these data exclusively for the purpose of contract performance.
This applies in particular for postal delivery services for the delivery of goods and to payment providers for the performance of payment obligations.
Our website may provide for a registration or application (e.g. for the newsletter) by quoting personal data. Which personal data are transmitted to the Controller at such a time is shown in the respective registration mask. The data entered by you will be used exclusively for the purposes in connection with registration. When you contact us by e-mail, via a contact form or by a comparable method (e.g. enquiries about our products or services), the personal data transmitted by you will also be processed. However, this type of data processing is limited to the processing of enquiries or to enter into contact with you.
During registration and application, your IP address at the time of registration, application or entry into contact as well as the date and time of access will be processed. This data processing is necessary to prevent the abuse of our services so that offences committed by means of these data can be investigated This represents a legitimate interest in the data processing. The legal basis for this type of processing if consent was granted is Art. 6 Subsec. 1 Clause 1 a GDPR whereby in this case you are entitled to a right of revocation in the future. You may submit the revocation by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the assertion of your rights remains unaffected. As part of contractual or quasi-contractual relationships, the legal basis rests on Art. 6 Subsec. 1 Clause 1 b GDPR. This applies e.g. to an entry into contact which aims at the conclusion of a contract.
Otherwise, the legal basis rests on Art 6 Subsec. 1 Clause 1 f GDPR. The legitimate interest results from the above-mentioned legitimate reasons. There is the possibility of raising an objection against this data processing in the future. You may submit the objection by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the assertion of your rights remains unaffected. The personal data are deleted after a revocation or when the legitimate interest is met or after an objection taking the statutory retention period into account. When entering into contact, your data are deleted as soon as the respective enquiry was dealt with or if you object to data processing whereby in the latter case the correspondence with you will be terminated.
The hosting services employed by our webpages serve to supply the following services: Platform and infrastructural services, processing capacity, storage location and database services, security services, technical maintenance services used by us to supply our webpages. For this purpose we or our hosting provider offer the following data: Meta or communication data, inventory data, contact data, contents data, contract data, access data, prospects and visitors on the basis of our legitimate interest in an efficient and secure display of this website as per Art. 6 Subsec. 1 lit. f GDPR in connection with Art. 28 GDPR (Conclusion of Data Processing Agreement).
We, or our website host, collect on the basis of our legitimate interest in the sense of Art. 6 Subsec. 1 lit. f. GDPR data on every access to the server on which our ser-vices are hosted (so-called server log files). Access data include the name of the webpage visited, file, date and time of access, downloaded data volume, report of a completed download, browser type and version, the operating system of the user, the referrer URL (the website viewed just prior thereto), IP address and accessing provider. For security reasons (e.g. for the investigation of abuse or fraudulent acts), log file information is stored for a maximum of 10 days and is thereafter deleted. Excepted from deletion are data which must be stored up to the final clarification of an ongoing case.
These cookies are used to display advertisements that are more relevant to the user and more in line with his or her interests. This information may be shared with third parties such as advertisers, e.g. Cookies to improve the approach to the target audience and advertising are often linked with webpage functions of third parties. For more information on marketing cookies and their individual deletion, see lit. e.
Our webpage may also include contents of third-party providers such as Facebook services or YouTube videos. These third parties may deposit cookies while you are viewing our website and in this way receive information on your website use. These cookies are primarily used to integrate social media contents and social plug-ins on our page. Further information on the above can be found in Item 8 and on the website of the third-party provider.
You can visit our website also without any cookies. The storage of new cookies and the deletion of cookies already deposited can be achieved with the following measures: In the event of data processing on the basis of legitimate interest (Art. 6 Subsec. 1 Clause 1 GDPR), an objection to all or only to selected cookies can be declared by activating *Accept No Cookies* in your browser settings. However, it is possible that some website functions can then no longer be used to the full extent if some or all cookies for a website are disabled. For information on the automated deletion of Cookies, please see the operating instructions of your browser or manufacturer of your terminal device.
Additional information on functional cookies and marketing cookies (Type 2 & Type 3) and on their individual deletion vis-a-vis specific third parties is given below.
Our website uses various performance and marketing cookies introduced in greater detail below.
Google: To improve comfort and quality of our service, this website uses the following website services of Googler Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google receives and processes the data generated on our website through the use of the appropriate cookies.
(i) Google Analytics: Google Analytics uses temporary cookies which allow analysing your website use. The stored data on our website including your IP address (“access data”) are as a rule transferred to a Google server in the USA and stored there. We point out that on our webpages, Google Analytics is enhanced by the code „gat._anonymizeIp();;“ to ensure the anonymised logging of IP addresses (so-called IP masking). Through the activation of IP anonymization on our website, the IP-address is truncated by Google within the member states of the European Union or in other member states of the Treaty on the European Economic Area. Only in excep-tions is the complete IP address transferred to a Google server in the USA and truncated there.
from menu item DoubleClick- Deactivation Extension. Alternatively, you can disable Doubleclick cookies on the page of Digital Advertising Alliance at the following link.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by a corresponding setting of your browser (deactivation option) or by entering the following link and by installing the plug-in available there: https://www.google.com/settings/ads/plugin.
Further information on Google AdWords can be found at the following links: http://www.google.com/privacy/ads/ and http://www.google.de/policies/technologies/ads/ If not stated otherwise, the maximum validity of special cookies is 90 days.
If your personal data are used for direct mail, you have a right of objection against this practice at any time (Art. 21 Subsec. 2 GDPR). In the case of an objection, we no longer process the personal data. The legality of data processing up to the time of the objection remains unaffected by the objection.
You may forward your revocation and objection at any time by regular mail or e-mail to the Controller at the contact address stated in Item 1 above.
• The personal data were collected for purposes or processed in other ways for which they are no longer required.
• You revoke your consent on which processing was based pursuant to Art. 6 Subsec. 1 a GDPR or Art. 9 Subsec. 2 a GDPR, and there is no other legal basis for the processing.
• You lodge an objection to the processing in the sense of Art. 21 Subsec. 1 GDPR and there are no cogent or prioritary reasons for the processing.
• You lodge an objection to the processing in the sense of Art. 21 Subsec. 2 GDPR.
• The personal data were unlawfully processed.
• The erasure of the personal data is required for the performance of a legal obligation under EU law or the laws of a member state.
• The personal data were collected for services offered in an information society as per Art. 8 Subsec. 1 GDPR.
• The veracity of the personal data is disputed by you for a period of time that allows the Controller to verify the veracity of your personal data.
• Processing is unlawful. You refuse the erasure of the personal data and instead demand that access to your personal data is restricted.
• We no longer require the personal data for processing purposes while you still require them to assert, exercise or defend a legal claim.
• You have lodged an objection against the processing as per. Art. 21 Subsec. 1 GDP and it is not yet clear whether legitimate reasons or those of your own will prevail.
We integrate videos on our web pages using the “YouTube” platform of provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the Data Protection Statement of the provider, see: https://www.google.com/policies/privacy/ The Opt-Out can be added by using the link: https://adssettings.google.com/authenticated.
We use "ReCaptcha" with forms on our website to allow us to identify and exclude bots. ReCaptcha is offered by provider Google LLC, 1600 Am-phitheatre Parkway, Mountain View, CA, USA. For the Data Protection Statement of the provider, see: https://www.google.com/policies/privacy/ The Opt-Out can be added by using the link: https://adssettings.google.com/authenticated.
The supply of your personal data is partly prescribed by law (e.g. by tax provisions) or results from contractual arrangements (e.g.information on a contract partner). It may also be necessary for the conclusion of a contract that you supply personal data to us which must subsequently be processed by us. The non-supply of personal data would mean that a contract with you could not be concluded. If you are unwilling to submit your personal data in such a case, you may contact the Controller as per Item 1 also by regular mail or e-mail. We will clarify on a case-by-case basis whether the supply of the personal data is legally or contractually required or needed for contarct conclusion, whether there is an obligation to supply the personal data and the possible consequences of a non-supply of the data.

References: Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 21