Data privacy information
Henkell & Co. Sektkellerei KG (hereinafter “we”) respect your privacy and personal space. We therefore take the protection of your personal data, such as your name, date of birth, address, email address, telephone number, etc., very seriously.
This data privacy information provides information about the collection, processing and use (hereinafter also referred to together as “processing”) of your personal data if and to the extent that these things come up when using our website. Furthermore, all those affected by data processing will be informed of their rights.
We act in strict compliance with the relevant legal data protection regulations and the following principles when handling this data. We have implemented numerous technical and organisational measures to ensure the extensive protection of personal data processed via our website.
The controller for processing your personal data described in this data privacy information is the following company:
Henkell & Co. Sektkellerei KG
Biebricher Allee 142, 65187 Wiesbaden
Tel.: 0611 / 63 0
The data privacy information contains the following definitions of the EU General Data Protection Regulations 2016/679 (“GDPR”)
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as the “you”). Identifiable means a natural person who can be identified directly or indirectly in particular by assignment to an identifier, such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Processing is any operation carried out with or without the help of automated procedures or any such set of operations relating to personal data, such as the collection, recording, organisation, classification, storage, adaptation or alteration, selection, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.
Pseudonymisation is processing personal data in a way in which the personal data can no longer be assigned to a specific data subject without additional information provided that this additional information is kept separately and is subject to technical and organisational measures that ensure that the personal data is not assigned to an identified or identifiable natural person.
The controller is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are prescribed by EU law or by the law of the member states, the controller or the specific criteria for his appointment may be stipulated in accordance with EU law or the law of the member states.
An external processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller.
Consent is any informed and unequivocal expression of will voluntarily given by the data subject for a particular case in the form of a declaration or other clear affirmative act by which the data subject indicates his or her consent to the processing of personal data concerning him or her.
A supervisory authority is an independent state body established by a member state in accordance with Article 51 GDPR.
3. Data processing and consent
In all cases of data processing described below, we observe the principle of data avoidance and data economy. This means that we process as little personal data as possible.
We process your personal data if and as far as this is necessary for the establishment, execution or termination of a contractual or quasi-contractual relationship.
The legal basis for processing personal data in connection with a contractual or quasi-contractual relationship is Article 6 Para. 1 Sentence 1 b GDPR. This also applies to processing required for executing precontractual measures.
The personal data is deleted after the end of the contractual or quasi-contractual relationships in compliance with the statutory retention obligations.
Your personal data may be transmitted to third parties as part of contractual relationships, who then process this data exclusively for the purpose of fulfilling the contract. This notably applies to postal delivery services for delivering goods and payment services for fulfilling your payment obligations.
We also process your personal data if and to the extent that you have given us your consent to do so. This data will only be used for the purpose and scope stated in the consent, e.g. we will provide you with information about our products and services only according to the consent you have given.
The legal basis for data processing is your consent is Article 6 Para. 1 Sentence 1 a GDPR, in which case you have the right to revocation for the future. You can send the revocation by letter or email to the contact details of the responsible body stated in number 1. The legality of the data processing carried out up to the assertion of your rights shall remain unaffected by this.
The personal data is deleted after the completion of the purpose pursued by the consent, taking into account the statutory retention obligations.
Your personal data may be transmitted to third parties as part of the consent, who then process this data exclusively for the purpose of the consent.
We also process your personal data in a pseudonymised form.
If processing is necessary to safeguard our legitimate interest or that of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 Para. 1 Sentence 1 f GDPR serves as the legal basis, whereby there is generally the option of objecting to this data processing in the future. You can send the objection by letter or email to the contact details of the responsible body stated in number 1. The legality of the data processing carried out up to the assertion of your rights shall remain unaffected by this.
The personal data is deleted after achieving the legitimate interest or objection, taking into account the statutory retention obligations.
Your personal data may be transmitted to third parties as part of the legitimate interests, who then process this data exclusively for the purpose of fulfilling the interest.
4. Registration, login and making contact
Our website may provide the option of registering or logging in (e.g. for the newsletter) by providing personal data. The personal data that is transferred to the controller depends on the respective registration form. The data you enter will only be processed for the purposes stated in connection with the registration.
If you contact us by email, a contact form or a similar way (e.g. enquiries about our products or services), the personal data transmitted by you will also be processed. However, this data processing is limited to the purposes of processing the enquiries or contacting you.
The IP address assigned to you at the time of registration, login or contact plus the date and time will be processed as part of the registration and login. This data processing is necessary to prevent misuse of our services as crimes committed with this data could be solved. This shows the legitimate interest in data processing.
Where consent has been obtained the legal basis for data processing is Article 6 Para. 1 Sentence 1 a GDPR, in which case you have the right to revocation for the future. You can send the revocation by letter or email to the contact details of the responsible body stated in item 1. The legality of the data processing carried out up to the assertion of your rights shall remain unaffected by this.
Within the framework of contractual or quasi-contractual relationships the legal basis is Article 6 Para. 1 Sentence 1 b GDPR. This applies, for example, to making contact aimed at concluding a contract.
Otherwise, the legal basis results from Article 6 Para. 1 Sentence 1 f GDPR. The legitimate interests result from the reasons described above. There is the option to object to this data processing for the future. You can send the objection by letter or email to the contact details of the responsible body stated in item 1. The legality of the data processing carried out up to the assertion of your rights shall remain unaffected by this.
The personal data is deleted after the objection or achieving the legitimate interest or objection, taking into account the statutory retention obligations. In the event of contact, your data will be deleted as soon as the respective enquiry has been dealt with or you object to data processing, in which case correspondence will be discontinued.
5. Automatically generated data
Every time you visit our website, log files automatically process data that originates from your device and may also contain personal data. This applies to the following data:
- the device’s operating system
- the browser type used by you
- name of your provider
- your IP address
- date and time of your visit
- websites visited, including possible search terms
- websites from which you accessed our website
We do not process this data together with your other personal data. Meaning we do not assign the aforementioned data to you personally.
The legal basis for processing automatically generated data is Article 6 Para. 1 Sentence 1 f GDPR. Processing is necessary to ensure the functionality of the website, to optimise and correctly deliver the contents of our website and to provide prosecution authorities with the information necessary for prosecution in the event of a cyberattack. This is also the legitimate interest for data processing.
The automatically generated data is deleted as soon as it is no longer necessary for achieving the aforementioned purposes, meaning when the respective visit to the website is over. If your IP address is processed, it will be deleted after 7 days at the latest.
The processing of the aforementioned data for website provision and any possible data storage in log files is necessary for operating the website. As a result, there is no possibility to object.
The different types of cookies and comparable technologies used on our website are described below.
Description and scope of data processing
Therefore, when the user visits the website at a later time, it recognises whether or that it has already been visited using this browser. This allows the website to be adapted to the needs of the user and the use of the website to be statistically analysed and the representation of the displayed content can be varied.
The term “cookies” is used below for all technologies with which user data is stored locally and, if necessary, transferred to us or third-party providers in the course of your website visit.
Cookies have a different storage period. On our website both “permanent cookies” and “session cookies” are used.
Session cookies are only stored during your current visit to our website and are used to enable you to use our services without restriction and to make using our website as convenient as possible on your current visit. If session cookies are deactivated, it cannot be ensured that all our services can be used without restriction.
Permanent cookies also remain temporarily stored locally in your Internet browser after your visit to our website (temporary cookies) and are there to allow you to use our website as comfortably as possible even after your current visit and are only used by us for this purpose. Deactivating these cookies generally has no influence on the usability of our site.
Cookies can be divided into the following categories depending on their function and purpose:
1. Necessary cookies (type 1)
These cookies are necessary for our website and its functions to work properly. They make it possible to improve the comfort and performance of websites and to make various functions available. For example, information you have already entered (such as user name, language selection or your location) can be saved to save you having to enter the same information again.
2. Functional cookies (type 2)
These cookies are used to obtain information about your use of our website. They make it possible, for example, to identify particularly popular areas of our website so that we can tailor the content of our website more specifically to your needs. You will find more information on these cookies and their individual deletion under e).
3. Marketing and third-party cookies (type 3)
These cookies are used to display advertisements that are more specifically relevant to the user and adapted to his or her interests. This information may be shared with third parties, e.g. advertisers. Cookies to improve targeting and advertising are often linked to the functionality of third-party sites.
You will find more information on these marketing cookies and their individual deletion under e).
Our website may also contain content from third-party providers, for example, Facebook services or YouTube videos. These third parties may set cookies when you use our website and receive information about this website usage. These cookies are primarily used to integrate social media content, such as social plug-ins, on our website. You will find more information about this under number 8 and on the website of the third-party provider.
Legal bases and further information
Cookies only process anonymised and pseudonymised data (data processing). The provision of this data is neither legally nor contractually prescribed nor necessary for the conclusion of a contract.
If personal data in the form of pseudonymised data is also processed, the legal basis for this is the consent given by you when you access our website (Article 6 Para. 1 Sentence 1 a GDPR).
You can also visit our website without using cookies. The storage of new cookies and the deletion of cookies already set can be achieved by taking the following measures:
In the event that consent to data processing is given (Article 6 Para. 1 Sentence 1 a GDPR), we will delete your data after revocation or discontinuation of the purpose of consent for the future. You can revoke your consent in the following manner by contacting the responsible party named in number 1:
Henkell & Co. Sektkellerei KG
Biebricher Allee 142
65020 Wiesbaden Germany
Please refer your browser instructions or device manufacturer for information on the automatic deletion of cookies.
The following includes additional information on functional cookies and marketing cookies (type 2 & 3) and their individual deletion with regards to specifically mentioned third parties.
Our website uses various performance and marketing cookies, which are described in more detail below.
To improve the comfort and quality of our service, we use the web service conversion tracking and retargeting technology from Adform ApS, Hovedvagtsgade 6, 1103 Copenhagen K, Denmark. Adform receives and processes data generated by using the corresponding cookies on our website.
the temporary cookie for conversion tracking is set when a user makes contact with an ad placed by Adform.
Users that do not want to take part in tracking can deactivate the Adform or Google cookie via their Internet browser. You can remove cookies already stored on your computer by deleting temporary websites.
the temporary cookie makes it possible to target those Internet users with advertising on the websites of our partners who have already shown an interest in our website and our products. During retargeting, advertising media is displayed on the basis of a cookie-based analysis of previous user behaviour.
You will find more information on the data privacy provisions of Adform at http://site.adform.com/privacy-policy/en/
To improve the comfort and quality of our service, the following web services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) are activated. Google receives and processes data generated by using the corresponding cookies on our website.
Google Analytics uses temporary cookies that enable an analysis of your use of the website. The data stored about your use of our website, including your IP address (“user data”), will normally be transmitted to and stored by Google on servers in the USA. We would like to point out that on our websites Google Analytics has been extended using the code “gat._anonymizeIp();;” to ensure the anonymous collection of IP addresses (so-called “IP masking”). By activating IP anonymisation on this website, your IP address will be truncated beforehand within a member state of the European Union or in other contracting states to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there.
Google will use the above information on our behalf to analyse your use of our website, to compile reports on website activity for us and to provide us with other services relating to the use of the website and the Internet. A transmission of this data by Google to third parties only takes place based on statutory provisions or as part of external processing.
You will find more information on Google Analytics using this link: http://tools.google.com/dlpage/gaoptout?hl=en
This website uses Google AdWords, an analyses service from Google Inc., and conversion tracking as part of Google AdWords. Google AdWords will set a temporary cookie for conversion tracking on your device (so-called “conversion cookie”) when you click on an ad placed by Google. If you visit certain pages on our website, Google may recognise that you clicked on the ad and were redirected to that page. The information obtained using conversion cookies is used to generate statistics for AdWords customers who use conversion tracking. These statistics show us the total number of users who clicked on the ad placed by Google and were redirected to a website with a conversion tracking tag.
In addition, the information on the previous section “Google Analytics” also applies to Google AdWords.
Unless otherwise stated, special cookies are valid for a maximum of 90 days.
7. Mobile Apps
When using our mobile apps, analysis technologies may be used, the scope of application of which corresponds to that of cookies (c.f. number 6). As a result, the following technologies are used:
To improve the comfort and quality of our service, we use Adform tracking from Adform ApS, Hovedvagtsgade 6, 1103 Copenhagen K, Denmark. Adform receives and processes data generated by using the technologies described here. After starting our apps, installation and event data for our iOS and Android apps is processed. This serves to obtain more information about user behaviour and by doing so optimise our advertising campaigns. A unique, anonymised user ID is generated for this purpose. This is done either randomly or using the technology from Adform’s partner AdTruth. IDs created with AdTruth are generated by different characteristics of the mobile device (e.g. scripts, screen resolution, etc.). The ID created in this way is hashed, meaning it cannot be traced back to the aforementioned characteristics. IDs cannot be assigned to a specific user or mobile device. No unique IDs, such as the UDID, Apple IP, IP address or other personal information, are used to generate this ID.
If you want to eliminate the use of analysis technology in the future, you can do so at http://site.adform.com/privacy-policy/en/. You will find more information on the data privacy provisions of AdTruth at http://www.adtruth.com/adtruth-technology-and-website-privacy-policy
To further improve the recipe ideas app, we collect anonymous statistical data on app usage using Google Analytics, a web analysis service provided by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google receives and processes data generated by using the technologies described here. The explanations on Google Analytics in number 6 apply.
The information on cookies in number 6 apply correspondingly to the apps in all other respects.
8. Social Plugins
Our website contains links to external social networks, such as Facebook (“social plug-ins”). The functions assigned to the links, in particular the transmission of information and user data, are not activated by visiting our websites, but only by clicking on the links. After clicking on these links, the corresponding network plug-ins are activated and your browser establishes a direct connection to their servers.
If you click on the links while visiting our website, your user data may be transmitted to the corresponding network and processed by the network. If you click on the links while visiting our website and are simultaneously logged in to the network via your personal account, the information that you have visited our website may be forwarded to the network and stored there in connection with your account. To avoid your account being assigned by the corresponding network, you must logout of your account before clicking on the link.
The purpose and extent of data collection by the social network and further processing and the use of data by them as well as your rights and setting options to secure your privacy can be seen in the respective network’s privacy information. The respective social network is solely responsible for data processing that starts when the link is clicked.
9. Right to revocation and objection
Right to revoke a declaration of consent relating to data privacy
You have the right to revoke consent to processing personal data at any time. The legality of data processing until revocation remains unaffected by the revocation.
Right to objection
You have the right to file an objection against the processing of personal data concerning you, which is based on Article 6 Para. 1 Sentence 1 e or f GDPR at any time (Article 21 Para. 1 GDPR). The legality of data processing until revocation remains unaffected by the revocation. In the event of objection, we will no longer process personal data unless we can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is used for direct marketing purposes, you have the right to object to this at any time (Article 21 Para. 2 GDPR). In the event of an objection, we will no longer process the personal data. The legality of data processing until revocation remains unaffected by the revocation.
You can submit the revocation and objection by letter or email to the contact details of the responsible body stated in item 1.
10. Other rights
Right to confirmation
You have the right to request confirmation as to whether we process personal data about you.
Right to information
You have the right to receive personal data processed about you free of charge from us and to receive a copy of it. Furthermore, you are entitled to information about whether personal data has been transmitted to a third country or an international organisation. If this is the case, you also have the right to receive information about suitable guarantees in connection with transmission.
Right to correction
You have the right to ask us to immediately correct inaccurate personal data concerning you. Furthermore, you have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right to deletion (right to be forgotten).
The GDPR includes a right to deletion. According to this, you can ask us to delete your personal data immediately, provided that one of the following reasons applies and if processing is not necessary:
- the personal data has been collected or otherwise processed for purposes for which it is no longer necessary:
- you revoke your consent on which the processing was based according to Article 6 Para. 1 a GDPR or Article 9 Para. 2 a GDPR and there is no other legal basis for processing;
- you file an objection against processing within the meaning of Article 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing;
- you file an objection against processing within the meaning of Article 21 Para. 2 GDPR;
- the personal data has been unlawfully processed;
- the deletion of personal data is necessary to fulfil a legal obligation under EU law or the member state law;
- the personal data has been collected in relation to information society services offered according to Article 8 Para. 1 GDPR.
Right to restrict processing
You have the right to request that we restrict processing if one of the following requirements applies:
- you dispute the accuracy of the personal data for a period of time that enables the controller to verify the accuracy of the personal data;
- processing is unlawful and you refuse the deletion of the personal data and instead request that the use of the personal data be restricted;
- we no longer need the personal data for processing purposes but you need it to assert, exercise or defend legal claims;
- you have filed an objection to the processing according to Article 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons outweigh your reasons.
Right to data transferability
You have the right to receive the personal data that you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without our interference, provided that the processing is based on the consent in accordance with Article 6 Para. 1 Sentence 1 a GDPR or on a contract in accordance with Article 6 Para. 1 sentence 1 b GDPR and the processing is carried out using automated methods, provided that the processing is not necessary for performing a task in the public interest or for exercising public authority that has been transferred to the controller.
Furthermore, when exercising your right to data transferability, you have the right to request that the personal data be transferred directly from one controller to another, provided this is technically feasible and does not impair the rights and freedoms of other persons.
Right to complain to a supervisory authority
In addition to this right, you have the right to complain to a supervisory authority responsible for data privacy (North Rhine-Westphalia: State Representative for Data Privacy and Freedom of Information in North Rhine-Westphalia, Düsseldorf).
11. Third-party access to your personal data
We process the data ourselves and, unless we have explicitly excluded this, by service providers commissioned by us and, in the event of your consent or as part of contractual relationships, also by other third parties and, in the event of pseudonymised data, also Oetker Group companies with which we are affiliated.
In doing so, we ensure that service providers and other third parties and Group companies comply with all relevant legal data protection regulations and the rules resulting from this data privacy information. Service providers may be commissioned, for example, to send goods or advertising material (postal delivery services) or advertising agencies (for competitions).
Furthermore, no third parties have access to your personal data. We will not sell this data nor exploit it in any other way. We will only process the data based on official or legal requirements as well as legal notification obligations, in particular to state authorities.
12. Information on third-party transfers
In the event that your personal data is transferred to bodies in third countries outside the EU/EEA, this will only take place if the EU Commission has decided that the third country, one or more specific sectors in this third country concerned offer an adequate level of protection or that there are adequate or appropriate data protection guarantees within the meaning of Article 46 or Article 47 or Article 49 GDPR.
We do not process the personal data of those under 16 years of age. If we become aware that data has been transmitted to us without the consent of the parents or other legal guardians, we will delete it immediately. We depend on appropriate information from you as parents or legal guardians.
14. Storage duration, deletion and restriction/blocking
We only process your personal data for the period necessary to achieve the storage purpose or if this is provided for by relevant statutory data protection regulations. If the storage purpose storage ceases to apply or if a storage period prescribed by the relevant statutory data protection regulations expires, personal data is routinely deleted or restricted/blocked in accordance with the statutory provisions.
15. Obligation to provide data
Provision of your personal data is partly required by law (e.g. tax regulations) or also results from contractual regulations (e.g. information on the contractual partner).
It may also be necessary for the conclusion of a contract that you and personal data are made available, which must be processed by us as a result. Not providing your personal data may mean that the contract cannot be concluded with you. If you do not want to provide personal data in these cases, you can contact the responsible body stated in number 1 by post or email. We will inform you on a case-by-case basis whether the provision of personal data is required by law, contract or in order to conclude a contract, whether there is an obligation to provide the personal data and what consequences failure to provide the personal data would have.
16. Changes to this data privacy information
We always keep this data privacy information up to date. It may therefore be necessary to adapt the data privacy information to changes in actual or legal framework conditions. These adaptations are accepted with the use of our website.
17. Data protection officer
Please contact our data protection officer if you have any questions regarding the processing of your personal data:
Henkell & Co. Sektkellerei KG
Data protection officer
Biebricher Allee 142