Privacy Policy

Adjust Cookie settings

Scope

This privacy policy informs users about the nature, scope, and purposes of the collection and use of personal data by the responsible provider

Weinhaus Basten KG
Auf Mertesborn 13
56821 Ellenz-Poltersdorf

Tel.: +49 2671 1508
Email: info@weingut-basten.de

on this website (hereinafter referred to as the “offer”). The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The legal basis for data protection can be found, among other places, in the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA).

Access Data / Server Log Files

The controller uses HIT Hahn Informations-Technologie GmbH & Co. KG, Dietrichshöhe 3, 55491 Büchenbeuren, as its web hosting provider, which utilizes servers from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen (host) to host the website. The host collects data on every access to the website, known as server log files, for statistical analysis for the purposes of operation, security, and optimization of the website.

The access data includes:

  • Name of the accessed website
  • Date and time of the server request
  • Browser type and browser version
  • Operating system
  • IP address
  • Requesting provider
  • Referrer URL
  • Name of the file accessed and amount of data transferred
  • Status message regarding the request

The host reserves the right to review the log data retrospectively if there are concrete indications giving rise to a legitimate suspicion of unlawful use. This data is not combined with other data sources. The legal basis for data processing is Art. 6(1)(f) GDPR, which permits the processing of data based on a legitimate interest in optimizing website operations and ensuring the security of the website.

We have entered into a data processing agreement with HIT Hahn Informations-Technologie GmbH & Co. KG in accordance with Art. 28 GDPR, which obligates both HIT Hahn and any subcontractors they engage to protect the data of our website visitors and not to disclose it to third parties. For further information, please refer to the host’s privacy policy at https://www.hetzner.com/de/legal/privacy-policy/.

TLS Encryption

This website uses TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the "https://" prefix and the lock icon next to the browser address bar.

Cookies

To make visiting our website more appealing and to enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information to a specific extent, such as browser and location data as well as IP addresses. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of each cookie’s storage in the overview of your web browser’s cookie settings.

To manage your cookie settings, we use the cookie consent tool “Contao Cookiebar,” which is provided by HIT Hahn Informations-Technologie GmbH & Co. KG, Dietrichshöhe 3, 55491 Büchenbeuren. This tool stores the settings you have individually configured for the services integrated into this website, as well as log data, such as your IP address. Your cookie settings are processed on the basis of a legal obligation in accordance with Art. 6(1)(c) GDPR and § 25 TDDDG.

In some cases, cookies serve to simplify processes by storing settings, e.g.,, by remembering information about multiple simultaneous page views within the same browser. If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(a) GDPR in the event of consent being granted, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality.

Please note that you can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in specific cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

You can find these for the respective browsers at the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

Contact

When you contact us, e.g. via the contact form, personal data such as your email address, name, and phone number is collected. Only your email address is mandatory. Providing additional data is voluntary and serves to allow us to address you more personally when responding to your inquiry. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. The provision of your data is necessary, as otherwise you will not be able to send us a message.

If you contact us to request a non-binding quote, you need to provide your name and address in addition to your email address. For inquiries regarding our guesthouse, the number of guests and the desired arrival and departure dates are also mandatory. The legal basis for processing this data is the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

Your data will be deleted after your inquiry has been fully processed. This is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this. In the event that a contractual relationship is established, retention is governed by the statutory provisions of the German Commercial Code and the German Fiscal Code.

CDN / CMS

We use the Content Delivery Network (CDN) and the Content Management System (CMS) provided by our web hosting provider, HIT Hahn Informations-Technologie GmbH & Co. KG, to deliver central scripts, fonts, and icons. When the content provided by the aforementioned services is loaded into your browser, so-called server log files are transmitted, which include, among other things, your IP address, browser data, the time of access, and the amount of data transferred. This processing serves to ensure the proper display, functionality, and security of this website. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest).
We have entered into a data processing agreement with HIT Hahn Informations-Technologie GmbH & Co. KG pursuant to Art. 28 GDPR, which obligates them to protect the data of our website visitors and to disclose it to third parties only within the scope of permissible subcontracting relationships.

Web Fonts

This website uses so-called web fonts to ensure consistent font display. When you visit the website, your browser loads the required web fonts into your browser cache to display text and fonts correctly. In doing so, log data such as your IP address, browser data, and the time of the request are processed. Individual fonts from Google Fonts by Google LLC are used, which are provided locally via the web server. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the proper presentation of the website.

Google Maps

This website uses the functions of Google Maps provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps allows us to embed maps. This feature is only active if you have consented to the use of Google Maps. In this context, your IP address, location data, and possibly other data - which Google classifies as technically necessary - are transmitted to Google. The permissibility of this processing is based on Art. 6(1)(a) GDPR (consent). You may decide for yourself whether you wish to permit this processing. You may revoke your consent at any time by deactivating it in the Cookie Consent Tool.

We have entered into a data processing agreement with Google pursuant to Art. 28 GDPR, which obligates Google to protect the data of our website visitors and not to disclose it to third parties. When using Google Maps, personal data is transferred to the servers of Google LLC in the United States. For the transfer of data from the EU to the U.S., Google relies on an adequacy decision pursuant to Art. 45(1) of the GDPR as well as on the European Commission’s Standard Data Protection Clauses pursuant to Art. 46(2)(c) GDPR, which are intended to ensure compliance with European data protection standards in the U.S.

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html; the additional Terms of Service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

Rights of the Data Subject

Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

  • Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding the logic involved, the significance for you, and the intended effects of such processing, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR in the event of a transfer of your data to third countries;
  • Right to rectification pursuant to Art. 16 GDPR: You have the right to have inaccurate data concerning you rectified without delay and/or to have incomplete data stored by us completed;
  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful processing and instead request the restriction of the processing of your data; if you require your data to assert, exercise, or defense of legal claims, after we no longer need this data following the achievement of the purpose, or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
  • Right to be informed pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request it’s transfer to another controller, provided this is technically feasible;
  • Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will delete the relevant data immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to it´s withdrawal;
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your workplace, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Withdrawal, Changes, Deletion, and Right of Access

If, as part of a balancing of interests, we process your personal data based on our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing with future effect for reasons arising from your particular situation at any time.

If you exercise your right to object pursuant to Art. 21 GDPR, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If we process your personal data on the basis of Art. 6(1)(f) GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG) for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. You may exercise this right as described above. If you exercise your right to object pursuant to Art. 21 GDPR, we will cease processing the relevant data for direct marketing purposes.

Duration of Storage of Personal Data

We store your personal data only for as long as is absolutely necessary. The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and - where applicable - additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject revokes their consent. If personal data is processed for the purpose of initiating or executing contractual relationships based on Art. 6(1)(b) GDPR, such data is deleted as soon as the initiation of the contractual relationship has failed or the established contractual relationship has ended and there is no legitimate interest on our part in retaining the data. Such a legitimate interest exists, for example, to defend against or assert legal claims. In these cases, the retention period is determined in accordance with the applicable statutory limitation period.

If statutory retention periods for data exist, such data is processed for the duration of the applicable retention periods pursuant to Art. 6(1)(c) GDPR. This data is routinely deleted upon expiration of the retention periods, provided that we no longer have a legitimate interest in continuing to store it.

When processing personal data pursuant to Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. Irrespective of the exercise of the right to object (Art. 21(1) GDPR), the data will be deleted as soon as our legitimate interest in the processing ceases to exist or the purpose of the processing has been achieved.

When processing personal data for the purpose of direct marketing based on Section 7(3) of the German Unfair Competition Act (UWG) in conjunction with Art. 6(1)(f) GDPR, this data will be processed until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.