Information about the collection of personal data and the data controller's contact details
We are pleased that you have visited our website and would like to thank you for your interest.
We value the trust you have placed in us very highly and thus fully appreciate the importance and responsibility of dealing with your data carefully and protecting it against misuse.
This data protection statement informs you about when we store what data and how we use such data – needless to say, always taking current legal regulations into account, in particular the General Data Protection Regulation (GDPR). With regard to Internet use, we also follow the TMG (German Telemedia Act) to protect your personal data.
In the following, we will inform you about how your personal data is processed. “Personal data” means all data which can be used to personally identify you.
As defined in the General Data Protection Regulation, the controller for this website is:
weinor GmbH & Co. KG
50829 Köln - Ossendorf (Germany)
The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
The controller has appointed a data protection officer who can be contacted as follows:
weinor GmbH & Co.KG
50829 Köln / Ossendorf (Germany)
For security purposes and to protect the transfer of personal data and other confidential con-tent (e.g. information retrieval or questions for the controller), this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the string "https: //" and the lock icon in your browser bar.
Data collection when visiting our website
You can use our website without letting us know who you are. When you simply use our website to gain information, we only collect data of the kind your browser sends to our server (“log files”).
When you visit our website, we collect the following information that is technologically necessary for us to display the website:
- Our website which you visited
- Date and time of your request
- The amount of data sent in bytes
- Referring page that led you to the current page
- Browser used including version and language
- Operating system used
- IP address used (anonymised if applicable)
We use so-called cookies on various pages to make your visit to our website more interesting and informative and to enable the use of certain functions. These are small text files that are stored on your terminal device.
Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our advertising partners to recognise your browser on your next visit.
For the aforementioned purposes, we also use the services of the following advertising partners (third-party providers), who are responsible for the data processing taking place through the service in accordance with Article 4(7) GDPR. These persistent cookies are automatically deleted after a predefined period of time, which differs depending on the cookie. Further information on our advertising partners' data processing and on your rights can be found in the privacy policies listed below.
If personal data is also processed due to individual cookies implemented by us, the processing is carried out in accordance with point (b) of Article 6(1) GDPR either for the execution of the contract or in accordance with point (f) of Article 6(1) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design for the page visit.
For some of the cookies used, we require your consent in accordance with point (a) of Article 6(1) GDPR. The consent is only valid for the stated purposes. The data collected will not be used or stored for any purpose other than those listed below. You can revoke or update this consent at any time. We use the Usercentrics consent management system to manage your consent in accordance with data protection regulations. Usercentrics is a consent management system from the company Usercentrics GmbH in Munich, Sendlinger Straße 7. The Usercentrics Consent Manager records the consent given by you as a user to the website to load any technically unnecessary cookies or other services on our website The consent given is stored both in cookies and on the Usercentrics server.
Please note that you can also configure your browser so you are informed about the placement of cookies and can decide on an individual basis to accept or exclude the acceptance of cookies for specific cases or in general. You can delete cookies at any time in your browser's system settings.
Please note that if you do not accept cookies, our website's functionality may be limited.
Phone number tracking
We use a so-called "tracking telephone number" from Matelso GmbH, Heilbronner Str. 150, 70191 Stuttgart ("MaTelSo") to determine caller behaviour. In doing so, a tracking phone number is displayed on our website. If you call this tracking phone number, you will be redirected to our original phone number.
The call is forwarded by MaTelSo. It determines how often the individual tracking phone number was called and from which phone number this was done. After the phone call, the following data is transmitted to us by MaTelSo:
- Tracking phone number called
- Caller’s phone number, if not suppressed
- Called party’s phone number
- Start and length of call
This enables us to statistically evaluate the advertising campaigns shown.
The information obtained is processed by MaTelSo in accordance with our instructions, stored on servers in the EU and automatically deleted after 3 months.
You can find more information on the Matelso GmbH website:
Personal data are collected when you contact us (e.g. by e-mail or via the contact form on our website, or through the weinor “3D Designer” app). Exactly what data are collected if you use a contact form is shown in the corresponding contact form. Over and above this, you may also provide further data voluntarily when reaching out to us.
This data will be stored and used solely for the purpose of replying to your query or for us and our retailer/partners to contact you, and for related technical administration purposes. The legal basis for these data being processed is our legitimate interest in answering your query, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.
If you contact us for the purpose of entering into a contract with us, Article 6, Paragraph 1, Point (b) of the GDPR constitutes a further legal basis for data processing.
When your query has been dealt with, the data will be erased. This is the case when the circumstances indicate that the issue in question has been definitively resolved and that erasing the data does not conflict with any statutory retention requirements.
Signing up for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers.
The only mandatory information required for sending the newsletter is your e-mail address. Any other information is supplied on a voluntary basis and used to address you personally. To send the newsletter, we use the “double opt-in” process. That means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to it being sent. We will then send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6, Paragraph 1, Point (a) of the GDPR. When you register for the newsletter, we will save your IP address as assigned by your Internet Service Provider (ISP) as well as the date and time of registration so as to trace any possible misuse of your e-mail address at a later date.
The data collected by us when you register for the newsletter will be used exclusively for promotional purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. After unsubscribing, your e-mail address will immediately be deleted from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to further data use which is permitted by law and about which we inform you in this statement.
Processing of data concerning online surveys
Any personal data that you provide us during online surveys will solely be used for internal purposes, e.g. customer satisfaction analyses. No such data will be forwarded to third parties.
Your participation in the online survey is voluntary and also possible without you having to register or provide any contact details.
You can unsubscribe from future online surveys at any time by clicking on the link included with the invitation or by sending a corresponding email to email@example.com.
Data processing when entering into a contract as a customer (specialist partner) and creditworthiness assessment
When a contractual relationship as a customer (specialist partner) is entered into, a standardised creditworthiness assessment is carried out.
The personal data collected by us (name, address, tax ID) will be passed on to the commissioned credit rating agency as part of the assessment. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR.
Data processing for the purpose of implementing and processing the contract and of transferring data
We process the personal data which we collect from you to implement the contract. Without processing those data, we cannot conclude or implement the contract with you. To implement and process the contract, we work with service providers which support us in full or in part in implementing contracts which have been concluded. The personal data which we collect while implementing the contract will be passed to the transport company commissioned with the delivery, to the extent that this is necessary in order to deliver the goods. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR. Your personal data are not transferred to third parties for any purposes other than those listed below.
We only pass on your personal data to third parties if:
- you have given your explicit consent to this pursuant to Article 6, Paragraph 1, Point (a) of the GDPR,
- processing is necessary for the establishment, exercise or defence of legal claims pursuant to Article 6, Paragraph 1, Clause 1, Point (f) of the GDPR, and there are no reasons to consider that you have an overriding interest worth protecting in your data not being disclosed,
- forwarding occurs in accordance with Article 6, Paragraph 1, Sent. 1 of Point (f) of the GDPR in order to enable the retailer/partner to contact you for the sole purpose of providing advice or information, and there are no reasons to consider that you have an overriding interest worth protecting in your data not being disclosed,
- if there is a legal obligation to pass them on pursuant to Article 6, Paragraph 1, Clause 1, Point (c) of the GDPR, and
- this is legally permissible and necessary to process contractual relationships with you pursuant to Article 6, Paragraph 1, Clause 1, Point (b) of the GDPR.
Data processing during training
The personal data you provide to us in the context of this registration shall only be used to process your registration and participation. No data shall be passed on to third parties.
During the training, the participants shall be asked to enter their names on an attendance list. This shall solely serve the purpose of documentation and invoicing. After the event, the attendance list for the training shall be kept in the invoicing records. These documents shall be destroyed after a retention period of 10 years.
Creation and use of photos/videos at events
From time to time, we may take photos/make videos to document the event and use these for advertising and marketing our company (e.g. on our homepages or social media sites, in flyers and print advertising). If you do not wish to appear in photos/videos, you can notify us at any time. All you need to do is get in touch with us. The legal basis for processing data when taking photos/making videos is Art. 6, Paragraph 1, Point (a) GDPR, provided that you have furnished your consent; Art. 6, Paragraph 1, Point (b) GDPR, provided that data must be processed in order to perform the contract/exercise rights; as well as Art. 6, Paragraph 1, Point (f) GDPR, which preserves our legitimate interests to create and use the photos/videos.
DoubleClick by Google
The website uses remarketing technology developed by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Using this technology, users who have visited this site and are interested in the products are shown targeted advertising again on the Google Partner Network.
The advertising is shown using cookies, which are employed to analyse users’ behaviour when visiting the website and can then be used for targeted advertising based on their interests.
However, please note that if you do so, you may not be able to use all the functions of this website to their full extent.
Google Analytics service
This website uses Google Analytics, a web analytics service provided by Google LLC, based in the USA. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of this website (including your truncated IP address) is generally transmitted to and stored on Google’s servers in the USA.
This website exclusively uses Google Analytics with the extension "anonymizelP", which ensures that the IP address is anonymised by means of truncation and cannot be directly connected to any individual. This extension means that Google will previously truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area.
In exceptional cases only, the full IP address will be transmitted to a Google server in the USA and truncated there. This processing takes place in accordance with Article 6, Paragraph 1, Point (f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for the purposes of optimisation and marketing.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and Internet usage. Your browser IP address as ascertained for the purposes of Google Analytics will not be brought together with other data gathered by Google.
You may refuse the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. Moreover, you may prevent Google from gathering the data (including your IP address) collected using the cookie and regarding your use of the website, and prevent Google from processing this data in future, by downloading and installing the browser plugin available from the following link:
An opt-out cookie is stored which prevents your data from being collected when you visit this website in future.
We have committed Google to processing your data in accordance with data protection regulations by means of an order processing agreement.
Google LLC, based in the United States, is certified under the EU-US Privacy Shield framework, which ensures compliance with the level of data protection required in the EU.
The recorded data will be erased automatically after 26 months.
If you do not agree with data being collected, you can disable this feature by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). The add-on only needs to be installed once.
Video surveillance of the premises
The weinor GmbH & Co. KG premises are monitored by means of optical recording equipment for the purpose of deterring property damage and theft, exercising the house rules and, if necessary, providing evidence in the case of theft and property damage. This processing is carried out in accordance with Article 6, Paragraph 1, Point (f) of the GDPR based on our legitimate interest in protecting our property. The recording shall be stored for a period in line with statutory regulations.
Data subjects’ rights
Currently valid data protection law grants you comprehensive rights as a data subject in terms of the processing of your personal data by the controller (rights of access and intervention); the following informs you of those rights.
– Right of access pursuant to Article 15 of the GDPR:
Among other things, you have a right to access to
- the personal data concerning you which we process,
- the purposes of the processing,
- the categories of personal data concerned,
- the recipients or categories of recipient to whom your data have been or will be disclosed
- the envisaged period for which the data will be stored, including the criteria used to determine that period,
- the existence of the right to request rectification, erasure or restriction of processing, or to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- where we do not collect your data from you, information as to their source,
- the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing,
- your right to be informed of the safeguards relating to the transfer of your data to a third country.
– Right to rectification pursuant to Article 16 of the GDPR:
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, and/or to have incomplete data which we have stored completed.
– Right to erasure pursuant to Article 17 of the GDPR:
You have the right to obtain the erasure of personal data concerning you where one of the grounds in Article 17, Paragraph 1 of the GDPR applies. This right shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
– Right to restriction of processing pursuant to Article 18 of the GDPR:
You have the right to obtain restriction of the processing of your personal data where the accuracy of data which you have contested is being verified, where you oppose the erasure of the personal data as the processing is unlawful and request the restriction of their use instead, where we no longer need the personal data for the purposes of the processing but you require your data for the establishment, exercise or defence of legal claims, or where you object on grounds relating to your particular situation pending verification whether our legitimate grounds override your grounds.
– Right to be informed pursuant to Article 19 of the GDPR:
If you have exercised your right to the rectification, erasure or restriction of processing by the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of data or restriction of their processing, unless the provision of such information proves impossible or would involve a disproportionate effort. You have the right to be informed about these recipients.
– Right to data portability pursuant to Article 20 of the GDPR:
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to have them transmitted to another controller, where technically feasible.
– Right to withdraw your consent pursuant to Article 7, Paragraph 3 of the GDPR:
You have the right to withdraw any consent to data processing which you have given us at any time, with future effect. In the case of such withdrawal, we shall erase the data concerned without undue delay to the extent that further processing cannot be carried out on another legitimate basis without your consent. Withdrawing your consent does not affect the legality of the processing carried out based on your consent until the time of its withdrawal.
– Right to lodge a complaint pursuant to Article 77 of the GDPR:
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
The data protection supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Kavalleriestr. 2 - 4
Tel.: +49 211/38424-0
Fax: +49 211/38424-10
– Right to object pursuant to Article 21
If, on weighing up the different interests, we process your personal data on the basis of an overriding legitimate interest, you have the right to object at any time to that processing with future effect, on grounds relating to your particular situation.
If you exercise your right to object, we will stop processing the data in question. If we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims, we reserve the right to continue processing the data.
Where your personal data are processed by us for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing. Where you exercise your right to object, we will stop processing the data concerning you for direct marketing purposes.
For queries regarding your rights, please get in touch via the above address:
Updating and changing the privacy statement
This privacy statement is currently valid as of May 2018. In the process of further developing our website and related offers, and due to changes in legal or regulatory requirements, it may become necessary for this privacy statement to be changed. The current privacy statement can be retrieved and printed by you at any time on our website at https://www.weinor.com/data-protection/.