Data Privacy Policy

1. Data privacy: an overview

General information

The following provides a simple overview of what happens with your personal data when you visit this website. Personal data is defined as all data that allows you to be personally identified. You’ll find detailed information on data privacy in our data privacy policy, which is included below this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website owner. You can find their contact details in the “Note on the data controller” section of this data privacy policy.

How do we collect your data?

One way your data is collected is when you share data with us. For example, data you enter on a contact form.


Other data is automatically collected, or collected after you provide consent, by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is automatically collected as soon as you access this website.

For what purpose do we use your data?

Some of the data is collected to guarantee the proper functioning of the website. Other data may be used to analyse your user behaviour.

What are your rights relating to your data?

You have the right to receive information about the origin, recipients and purpose of the personal data stored about you at any time and without charge. You also have the right to have your data rectified or erased. If you have given your consent to the data processing, you can withdraw this consent, with future effect, at any time. You also have the right, under certain circumstances, to restrict the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.


You can contact us at any time for more information on this or if you have questions about other data privacy topics.

2. Hosting

The content of our website is hosted by the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This data may include IP addresses, contact inquiries, meta- and communication data, contractual data, contact data, names, website views and other data that is generated via a website.


This external hosting is carried out for the purpose of performing a contract on behalf of potential and existing customers (Art. 6 Par. 1 b GDPR) and in the interests of a secure, fast and efficient provision of our website by a professional provider (Art. 6 Par. 1 f GDPR). Where corresponding consent has been received, the processing is carried out exclusively on the basis of Art. 6 Par. 1 a GDPR and Section 25 Par. 1 of the TTDSG (German Telecommunications-Telemedia Data Protection Act), insofar as the consent covers the storage of cookies or accessing information on the user’s end device (e.g. device fingerprinting) within the meaning of TTDSG. Consent can be withdrawn at any time.


Our hosting provider(s) will only process your data if that is necessary to fulfil their service obligations, and they will follow our instructions with regard to this data.


We use the following host(s):


Vautron Rechenzentrum AG
Obermünsterstr. 9
93047 Regensburg

3. General information and required information

Data privacy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and with the provisions of this privacy policy.


A variety of personal data is collected when you use this website. Personal data is defined as data that allows you to be personally identified. This privacy policy explains what data we collect and why we use it. It also explains how and for what purpose that happens.


Please note that there are inherent security risks to data communication on the internet (e.g. in email communication). It is not possible to guarantee complete protection to prevent the data from being accessed by third parties.

Note on the data controller

The body responsible for data processing on this website is:


Helenental Kellerei GmbH
Helenental 1
3743 Röschitz
Phone: +43 (0) 2984 2716
Email: office@helenentalkellerei.at


The data controller/responsible body is the natural person or legal entity who, alone or together with others, decides on the purpose and means of processing personal data (e.g. names, email addresses, etc.).

Storage duration

Where no specific storage duration is stated within this data privacy policy, your personal data will be stored by us until the purpose of the data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased as long as we do not have any other legally valid grounds for storing your personal data (e.g. tax- or commercial-law retention periods); in the latter case, the data shall be erased after these reasons cease to apply.

General information on the legal basis of data processing on this website

If you have consented to the data processing, we process your data on the basis of Art. 6 Par. 1 a GDPR and/or Art. 9 Par. 2 a GDPR, insofar as special categories of data are processed pursuant to Art. 9 Par. 1 GDPR. In cases where express consent is given for the transfer of personal data to third countries, the data is also processed on the basis of Art. 49 Par. 1 a GDPR. If you have given your consent to the storage of cookies or to the accessing of information on your end device (e.g. via device fingerprinting), the data is also processed on the basis of Section 25 Par. 1 TTDSG. Consent can be withdrawn at any time. If your data is needed to fulfil a contract or to perform precontractual measures, we process your data on the basis of Art. 6 Par. 1 b GDPR. Furthermore, we process your data insofar as that is necessary for fulfilling a legal duty on the basis of Art. 6 Par. 1 c GDPR. The data can also be processed on the basis of our legitimate interest in accordance with Art. 6 Par. 1 f GDPR. The following paragraphs of this data privacy policy provide details about the legal bases that apply in the respective individual cases.

Note on data transfer to the USA and other third countries

Some of the tools we use are provided by companies based in the USA or other third countries not considered safe under data protection legislation. When these tools are active, your personal data can be transferred to these third countries and be processed there. Please note that in these countries, it is not possible to guarantee a data protection level comparable to that in the EU. For example, US companies are obligated to hand over personal data to security authorities and you as the data subject would not be able to take legal proceedings to prevent such a situation. It cannot, therefore, be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store any data stored on US servers for monitoring or surveillance purposes. We have no control over such processing activities.

Withdrawing your consent to data processing

A number of data processing operations can only be carried out with your express consent. You can withdraw previously given consent at any time. The withdrawal of consent does not affect the lawfulness of data processing carried out up to the time that consent was withdrawn.

Right to object to the data processing in special cases and the right to object to direct marketing (Art. 21 GDPR)

WHEN THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PAR. 1 E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT, FOR REASONS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA; INCLUDING PROFILING BASED ON THOSE PROVISIONS. THIS PRIVACY POLICY INDICATES THE RESPECTIVE LEGAL BASIS UPON WHICH DATA PROCESSING IS CARRIED OUT IN EACH CASE. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS THE RELEVANT PERSONAL DATA OF YOURS UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PAR. 1 GDPR).


WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA SHALL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 PAR. 2 GDPR).

Right to lodge a complaint with the relevant supervisory authority

Where GDPR is breached, the party concerned has the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to receive data that we automatically process on the basis of your consent or for the performance of a contract either yourself or have it sent to a third party in a commonly used, machine-readable format. Where you request the direct transmission of data to another data controller, that will only be carried out if it is technically feasible.

Information, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to receive, free of charge, information about the personal data relating to you, its origin and recipients and the purpose of the data processing, and if applicable, a right to have the data rectified or erased. You can contact us at any time for more information on this or if you have questions about other topics relating to personal data.

Right to restrict processing

You have the right to restrict the processing of your personal data. To do so, please contact us at any time. You have the right to restrict processing in the following cases:


  • If you contest the accuracy of the personal data we store relating to you, we will usually need time to verify this. For the duration of the time it takes to verify the data’s accuracy, you can demand that we restrict the processing of your personal data.

  • If your personal data is being/has been processed unlawfully, you can request a restriction on the processing of the data, rather than for that data to be erased.

  • If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right, instead of having the data erased, to restrict the processing of your personal data.

  • If you have exercised your right to object in accordance with Art. 21 Par. 1 GDPR, a judgement must be made between your interests and ours. Until it is established whose interests take precedence, you have the right to restrict the processing of your personal data.


If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person, or for reasons relating to an important public interest of the European Union or a member state.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, e.g. orders or queries you submit to us as the website owner. You can tell a connection is encrypted when the browser address line changes from “http://” to “https://” and when the lock symbol appears in your browser line.


When the SSL or TLS encryption is activated, the data you send us cannot be intercepted by third parties.

4. Data collection on this website

Cookies

Our website uses “cookies”. Cookies are small data parcels that do not cause damage to your end device. Cookies are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete these yourself or they are automatically deleted by your web browser.


Cookies can come from us (first-party cookies) or from other companies (third-party cookies). Third-party cookies make it possible to embed certain services provided by third-party companies into websites (e.g. cookies for handling payment services).


Cookies have various functions. Many cookies are required for technical purposes because certain website functions wouldn’t work without them (e.g. the shopping-basket function or the displaying of videos). Other cookies can be used to analyse user behaviour or for advertising purposes.


Cookies that are required to carry out the electronic communication process, to provide certain functions desired by you (e.g. for the shopping-basket function) or to optimise the website (e.g. cookies for counting the web audience) – i.e. essential cookies – are stored on the basis of Art. 6 Par. 1 f GDPR, if no other legal basis is noted. The website operator has a legitimate interest in the storage of essential cookies for the proper technical functioning and optimised provision of its services. Where consent has been requested to store cookies and other similar recognition technologies, the processing is carried out exclusively on the basis of this consent (Art. 6 Par. 1 a GDPR and Section 25 Par. 1 TTDSG); consent can be withdrawn at any time.


You can change your browser settings so that you are informed whenever cookies are set and to allow cookies only in individual cases, to accept cookies for certain cases or to generally block cookies, and to automatically delete cookies when you close the browser. If you deactivate cookies, the functionality of this website may be restricted.


This data privacy policy outlines which cookies and services are used on this website.

Server log files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and browser version
  • Operating system
  • Referrer URL
  • Host name of the computer
  • Time of the server request
  • IP address

This data is not brought together with other data sources.

This data is collected on the basis of Art. 6 Par. 1 f GDPR. The website operator has a legitimate interest in ensuring the (technically) problem-free presentation and optimisation of their website – the server log files must be collected for this purpose.

Queries by email, phone or fax

If you contact us by email, phone or fax, your query including all the personal data arising from it (name, query) are stored and processed by us for the purpose of processing your query. We do not pass this data on to anyone else without your permission.


The data is processed on the basis of Art. 6 Par. 1 b GDPR insofar as your query relates to the performance of a contract or is necessary for performing precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the queries we receive (Art. 6 Par. 1 f GDPR) or on the basis of your consent (Art. 6 Par. 1 a GDPR) if this was given; consent can be withdrawn at any time.


The data you provide in your contact request will remain with us until you ask us to erase it, until you withdraw your consent for its storage or until the reason for the storage of the data no longer applies (e.g. after your request has been dealt with). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

5. Plug-ins and tools

Google Maps

This website uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


It is necessary for your IP address to be stored before you can use the functions of Google Maps. This information is, as a rule, transferred to a Google server in the USA and stored there. The provider of this website has no control over this data transfer. If Google Maps is activated, Google may use Google Fonts for the purposes of uniform display of fonts. When calling up Google Maps, your browser loads the required web fonts to your browser cache in order to display texts and fonts correctly.


Google Maps is used in the interests of attractively displaying our website and making it easier to locate the places listed on our website. This represents a legitimate interest within the meaning of Art. 6 Par. 1 f GDPR. Where corresponding consent has been received, the processing is carried out exclusively on the basis of Art. 6 Par. 1 a GDPR and Section 25 Par. 1 of the TTDSG (German Telecommunications-Telemedia Data Protection Act), insofar as the consent covers the storage of cookies or accessing information on the user’s end device (e.g. device fingerprinting) within the meaning of TTDSG. Consent can be withdrawn at any time.


Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find further details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information on how user data is handled in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.