Phone number tracking

We use a so-called "tracking telephone number" from Matelso GmbH, Heilbronner Str. 150, 70191 Stuttgart ("MaTelSo") to determine caller behaviour. In doing so, a tracking phone number is displayed on our website. If you call this tracking phone number, you will be redirected to our original phone number.

The call is forwarded by MaTelSo. It determines how often the individual tracking phone number was called and from which phone number this was done. After the phone call, the following data is transmitted to us by MaTelSo:

• Tracking phone number called
• Caller’s phone number, if not suppressed
• Called party’s phone number
• Start and length of call

This enables us to statistically evaluate the advertising campaigns shown.

The information obtained is processed by MaTelSo in accordance with our instructions, stored on servers in the EU and automatically deleted after 3 months.

You can find more information on the Matelso GmbH website:
https://www.matelso.com/de/privacy-statement

Contacting us

Personal data are collected when you contact us (e.g. by e-mail or via the contact form on our website, or through the weinor “3D Designer” app). Exactly what data are collected if you use a contact form is shown in the corresponding contact form. Over and above this, you may also provide further data voluntarily when reaching out to us.

This data will be stored and used solely for the purpose of replying to your query or for us and our retailer/partners to contact you, and for related technical administration purposes. The legal basis for these data being processed is our legitimate interest in answering your query, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.

If you contact us for the purpose of entering into a contract with us, Article 6, Paragraph 1, Point (b) of the GDPR constitutes a further legal basis for data processing.

When your query has been dealt with, the data will be erased. This is the case when the circumstances indicate that the issue in question has been definitively resolved and that erasing the data does not conflict with any statutory retention requirements.

Signing up for our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers.

The only mandatory information required for sending the newsletter is your e-mail address. Any other information is supplied on a voluntary basis and used to address you personally. To send the newsletter, we use the “double opt-in” process. That means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to it being sent. We will then send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6, Paragraph 1, Point (a) of the GDPR. When you register for the newsletter, we will save your IP address as assigned by your Internet Service Provider (ISP) as well as the date and time of registration so as to trace any possible misuse of your e-mail address at a later date.

The data collected by us when you register for the newsletter will be used exclusively for promotional purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. After unsubscribing, your e-mail address will immediately be deleted from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to further data use which is permitted by law and about which we inform you in this statement.

Processing of data concerning online surveys

Any personal data that you provide us during online surveys will solely be used for internal purposes, e.g. customer satisfaction analyses. No such data will be forwarded to third parties.

Your participation in the online survey is voluntary and also possible without you having to register or provide any contact details.

You can unsubscribe from future online surveys at any time by clicking on the link included with the invitation or by sending a corresponding email to interview@weinor.de.

Data processing when entering into a contract as a customer (specialist partner) and creditworthiness assessment

When a contractual relationship as a customer (specialist partner) is entered into, a standardised creditworthiness assessment is carried out.
The personal data collected by us (name, address, tax ID) will be passed on to the commissioned credit rating agency as part of the assessment. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR.

Data processing for the purpose of implementing and processing the contract and of transferring data

We process the personal data which we collect from you to implement the contract. Without processing those data, we cannot conclude or implement the contract with you. To implement and process the contract, we work with service providers which support us in full or in part in implementing contracts which have been concluded. The personal data which we collect while implementing the contract will be passed to the transport company commissioned with the delivery, to the extent that this is necessary in order to deliver the goods. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR. Your personal data are not transferred to third parties for any purposes other than those listed below.

We only pass on your personal data to third parties if:

• You have granted express consent according to Art. 6 para. 1 lit. a) GDPR, e.g. for passing your data on to a retailer within the scope of the retailer search function,
• processing is necessary for the establishment, exercise or defence of legal claims pursuant to Article 6, Paragraph 1, Clause 1, Point (f) of the GDPR, and there are no reasons to consider that you have an overriding interest worth protecting in your data not being disclosed,
• forwarding occurs in accordance with Article 6, Paragraph 1, Sent. 1 of Point (f) of the GDPR in order to enable the retailer/partner to contact you for the sole purpose of providing advice or information, and there are no reasons to consider that you have an overriding interest worth protecting in your data not being disclosed,
• if there is a legal obligation to pass them on pursuant to Article 6, Paragraph 1, Clause 1, Point (c) of the GDPR, and
• this is legally permissible and necessary to process contractual relationships with you pursuant to Article 6, Paragraph 1, Clause 1, Point (b) of the GDPR.

Data processing during training

The personal data you provide to us in the context of this registration shall only be used to process your registration and participation. No data shall be passed on to third parties.
During the training, the participants shall be asked to enter their names on an attendance list. This shall solely serve the purpose of documentation and invoicing. After the event, the attendance list for the training shall be kept in the invoicing records. These documents shall be destroyed after a retention period of 10 years.

Creation and use of photos/videos at events

From time to time, we may take photos/make videos to document the event and use these for advertising and marketing our company (e.g. on our homepages or social media sites, in flyers and print advertising). If you do not wish to appear in photos/videos, you can notify us at any time. All you need to do is get in touch with us. The legal basis for processing data when taking photos/making videos is Art. 6, Paragraph 1, Point (a) GDPR, provided that you have furnished your consent; Art. 6, Paragraph 1, Point (b) GDPR, provided that data must be processed in order to perform the contract/exercise rights; as well as Art. 6, Paragraph 1, Point (f) GDPR, which preserves our legitimate interests to create and use the photos/videos.

DoubleClick by Google

The website uses remarketing technology developed by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Using this technology, users who have visited this site and are interested in the products are shown targeted advertising again on the Google Partner Network.

The advertising is shown using cookies, which are employed to analyse users’ behaviour when visiting the website and can then be used for targeted advertising based on their interests.

If you do not want to be shown interest-based advertising using Google’s remarketing technology, you can disable Google’s use of cookies for that purpose by going to the DoubleClick opt-out page https://www.google.com/settings/ads.

However, please note that if you do so, you may not be able to use all the functions of this website to their full extent.

Google Analytics service

This website uses Google Analytics, a web analytics service provided by Google LLC, based in the USA. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of this website (including your truncated IP address) is generally transmitted to and stored on Google’s servers in the USA.

This website exclusively uses Google Analytics with the extension "anonymizelP", which ensures that the IP address is anonymised by means of truncation and cannot be directly connected to any individual. This extension means that Google will previously truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area.

In exceptional cases only, the full IP address will be transmitted to a Google server in the USA and truncated there. This processing takes place in accordance with Article 6, Paragraph 1, Point (f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for the purposes of optimisation and marketing.

On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and Internet usage. Your browser IP address as ascertained for the purposes of Google Analytics will not be brought together with other data gathered by Google.

You may refuse the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. Moreover, you may prevent Google from gathering the data (including your IP address) collected using the cookie and regarding your use of the website, and prevent Google from processing this data in future, by downloading and installing the browser plugin available from the following link: 

http://tools.google.com/dlpage/gaoptout?

An opt-out cookie is stored which prevents your data from being collected when you visit this website in future.

We have committed Google to processing your data in accordance with data protection regulations by means of an order processing agreement.

Google LLC, based in the United States, is certified under the EU-US Privacy Shield framework, which ensures compliance with the level of data protection required in the EU.

For more information about how user data are dealt with at Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245

The recorded data will be erased automatically after 26 months.
If you do not agree with data being collected, you can disable this feature by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). The add-on only needs to be installed once.

Video surveillance of the premises

The weinor GmbH & Co. KG premises are monitored by means of optical recording equipment for the purpose of deterring property damage and theft, exercising the house rules and, if necessary, providing evidence in the case of theft and property damage. This processing is carried out in accordance with Article 6, Paragraph 1, Point (f) of the GDPR based on our legitimate interest in protecting our property. The recording shall be stored for a period in line with statutory regulations.

Data subjects’ rights

Currently valid data protection law grants you comprehensive rights as a data subject in terms of the processing of your personal data by the controller (rights of access and intervention); the following informs you of those rights.

– Right of access pursuant to Article 15 of the GDPR:

Among other things, you have a right to access to

• the personal data concerning you which we process, 
• the purposes of the processing, 
• the categories of personal data concerned, 
• the recipients or categories of recipient to whom your data have been or will be disclosed 
• the envisaged period for which the data will be stored, including the criteria used to determine that period, 
• the existence of the right to request rectification, erasure or restriction of processing, or to object to such processing, 
• the right to lodge a complaint with a supervisory authority, 
• where we do not collect your data from you, information as to their source, 
• the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing, 
• your right to be informed of the safeguards relating to the transfer of your data to a third country.

– Right to rectification pursuant to Article 16 of the GDPR: 

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, and/or to have incomplete data which we have stored completed.

– Right to erasure pursuant to Article 17 of the GDPR:

You have the right to obtain the erasure of personal data concerning you where one of the grounds in Article 17, Paragraph 1 of the GDPR applies. This right shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

– Right to restriction of processing pursuant to Article 18 of the GDPR:

You have the right to obtain restriction of the processing of your personal data where the accuracy of data which you have contested is being verified, where you oppose the erasure of the personal data as the processing is unlawful and request the restriction of their use instead, where we no longer need the personal data for the purposes of the processing but you require your data for the establishment, exercise or defence of legal claims, or where you object on grounds relating to your particular situation pending verification whether our legitimate grounds override your grounds.

– Right to be informed pursuant to Article 19 of the GDPR:

If you have exercised your right to the rectification, erasure or restriction of processing by the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of data or restriction of their processing, unless the provision of such information proves impossible or would involve a disproportionate effort. You have the right to be informed about these recipients.

– Right to data portability pursuant to Article 20 of the GDPR:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to have them transmitted to another controller, where technically feasible.

– Right to withdraw your consent pursuant to Article 7, Paragraph 3 of the GDPR:

You have the right to withdraw any consent to data processing which you have given us at any time, with future effect. In the case of such withdrawal, we shall erase the data concerned without undue delay to the extent that further processing cannot be carried out on another legitimate basis without your consent. Withdrawing your consent does not affect the legality of the processing carried out based on your consent until the time of its withdrawal.

– Right to lodge a complaint pursuant to Article 77 of the GDPR:

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

The data protection supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Kavalleriestr. 2 - 4
40213 Düsseldorf
Germany

Tel.: +49 211/38424-0
Fax: +49 211/38424-10
E-mail: poststelle@ldi.nrw.de

– Right to object pursuant to Article 21

If, on weighing up the different interests, we process your personal data on the basis of an overriding legitimate interest, you have the right to object at any time to that processing with future effect, on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the data in question. If we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims, we reserve the right to continue processing the data.

Where your personal data are processed by us for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing. Where you exercise your right to object, we will stop processing the data concerning you for direct marketing purposes.

For queries regarding your rights, please get in touch via the above address: 

Datenschutz@weinor.de

Updating and changing the privacy statement

This privacy statement is currently valid as of May 2018. In the process of further developing our website and related offers, and due to changes in legal or regulatory requirements, it may become necessary for this privacy statement to be changed. The current privacy statement can be retrieved and printed by you at any time on our website at https://www.weinor.com/data-protection/.