Privacy Policy

Overview and Responsible Entity
Core Principles of Data Processing
Personal Data Handling
Access Data Collection
Cookies & Measurement
Google Analytics
Google Re-/Marketing Services
Facebook Social Plugins
Facebook Remarketing
Newsletter
Third-Party Services and Content
User Rights and Data Deletion
Policy Changes

1. Overview and Responsible Entity

This Privacy Policy describes the nature, scope, and purpose of processing personal data across our online services, websites, features, and content (“online offer” or “Website”). It applies across domains, platforms, and devices used to access the online offer.

Data Controller:
Weinschmuck GmbH
Owners: Eliza Tomi and Natalia Dirodi
Obere Geerenstrasse 7, 8044 Gockhausen, Dübendorf

For data protection, Weinschmuck GmbH (referred to as “we” or “us”) is responsible under applicable data protection law.

Users: All customers and website visitors; terms are used here inclusively and are gender-neutral.

2. Core Principles of Data Processing

User data is processed in compliance with relevant data protection regulations, specifically regarding data minimization and purpose limitation (see GDPR Article 5). We process data only when legally permitted, required for contractual obligations, or based on user consent.

Data security measures are in place to protect against unauthorized access, accidental or intentional manipulation, and data loss. Transfers to third parties occur only when legally required, for service delivery, or when based on user consent, ensuring secure and GDPR-compliant handling.

E-commerce: Where applicable, data is only shared with necessary parties (e.g., banks, payment processors, delivery providers, and tax advisors).

3. Personal Data Handling

Personal data, as outlined in this policy, is used as follows:

For delivering, managing, and securing our services
To ensure efficient customer support

Data is transferred to third parties solely for fulfilling legal or contractual obligations, or based on consent, ensuring compliance with GDPR Article 5.

E-commerce: If applicable, personal data is transferred solely for payment processing and product delivery.

User data related to inquiries (e.g., via contact form or email) is stored for response processing and follow-up questions. Data is deleted once it serves its purpose and when no legal retention requirements apply.

4. Access Data Collection

We collect server access data (e.g., retrieved pages, files, dates, data volume, successful retrieval confirmation, browser details, operating system, referrer URL, IP address, and provider). Log data is used for statistical analysis to enhance site functionality, security, and optimization. However, we reserve the right to review data in case of unlawful use indications.

5. Cookies & Measurement

Cookies are stored on user browsers for data retrieval. Users can block cookies via their browser settings, although disabling cookies may limit site functionality. Cookie management options are available at About Ads and Your OnlineChoices.

6. Google Analytics

Google Analytics, provided by Google Ireland Ltd., is used for tracking. Data is anonymized to prevent user identification, and users can disable cookies and tracking through browser plug-ins (Google Opt-out).

For more information, see Google’s Privacy Policy and Ad Settings.

7. Google Marketing and Remarketing Services

We use Google Marketing and Remarketing services, provided by Google Ireland Ltd., to target advertisements to users likely to be interested in them. Google Marketing Services enable us to display relevant ads based on users’ activity on our site and other websites. For instance, remarketing allows us to show ads for products that users viewed on our site when they visit other sites.

To achieve this, Google embeds remarketing tags (invisible graphics or codes, also known as web beacons) on our site, which set an individual cookie file on users’ devices (similar technologies may be used instead of cookies). This cookie file collects information on the pages users visit, their interests, clicks, browser details, operating system, referring pages, and visit duration.

User IP addresses are also collected but anonymized within EU or EEA member states. Only in rare cases is this data transmitted to Google servers in the US and anonymized there. Google processes the data using pseudonymous user profiles; individual identities are not associated with cookie data unless users have expressly permitted it.

Among the Google services we use are:

Google AdWords: This service uses “conversion cookies” to track ad clicks and conversions without identifying individual users.
DoubleClick and AdSense: These services place cookies to allow ads based on users’ visits to this and other websites.
Google Tag Manager: This tool integrates additional Google analytics and marketing services, including AdWords, DoubleClick, and Google Analytics.

For more details on Google’s data usage in advertising, please review Google’s Privacy Policy and Ad Preferences.

Opt-Out: To opt out of Google’s tracking, please adjust your settings here.

8. Facebook and Instagram Social Plugins

Our website uses social plugins provided by Facebook and Instagram, both operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). These plugins are identifiable by Facebook logos (such as the white "f" on a blue background, the “Like” button, or the thumbs-up icon) or Instagram logos, such as the camera icon. For a complete list of social plugins, please visit Facebook Plugin and Instagram Platform.

When a user activates a feature on our website that includes one of these plugins, their device establishes a direct connection with Facebook’s servers. As a result, Facebook receives information about the user’s visit to our site, regardless of whether the user is logged into Facebook or Instagram. If logged in to either social network, Facebook can link the visit to the user’s profile. If the user interacts with the plugins (e.g., by pressing the "Like" button or leaving a comment), this information is directly transmitted to and stored on Facebook’s servers.

Data Usage Information: For more information on data use by Facebook and Instagram, please review their PrivacyPolicy.

9. Facebook Remarketing

We use Facebook Pixels, provided by Facebook Ireland Ltd., for remarketing purposes. This tool enables us to identify website visitors who may be interested in our ads, allowing us to target Facebook Ads to users who have shown interest in our website.

The Facebook Pixel stores a cookie on users’ devices. If users are logged into Facebook, the pixel data will be linked to their profile, allowing Facebook to personalize ads. We do not receive user-identifiable information but rely on Facebook’s analysis to assess ad effectiveness.

For more on how Facebook uses data, refer to Facebook’s Data Policy.

Opt-Out: You can manage your ad settings on Facebook by visiting Ad Preferences.

10. Newsletter

By subscribing to our newsletter, users consent to receive emails about our products, promotions, and updates. Subscription follows a double-opt-in process: upon registration, users receive an email to confirm their subscription, which helps prevent unauthorized sign-ups.

Newsletter analytics: Our newsletters include tracking pixels to monitor email open rates, click rates, and preferences. We use this data to understand and improve content engagement. Individual tracking is not our intent; data is anonymized for statistical analysis.

Opt-Out: Users can unsubscribe at any time via the link in each newsletter, which revokes their consent for data use and tracking.

11. Integration of Third-Party Services

We may integrate third-party services, such as maps and fonts, to enhance our website’s functionality. These providers require users' IP addresses for content delivery and may set cookies to collect additional data. Our integration choices prioritize data minimization and security, ensuring that we partner with reliable, data-protective providers.

Some of the third-party services we use include:

Google Fonts (Privacy Policy)
Google Maps (Privacy Policy)
YouTube (Privacy Policy)

12. User Rights and Data Deletion

Users have the right to request information about their stored personal data and to request correction, deletion, or restriction of their data. They may also withdraw consent to data processing at any time and file complaints with the appropriate regulatory authority in case of suspected non-compliance.

Stored data is deleted when it is no longer necessary for its purpose and when no legal requirements mandate its retention.

13. Policy Changes

We reserve the right to update this Privacy Policy in response to legal, technical, or service-related changes. Users will be informed of significant changes requiring consent and are encouraged to regularly review the Privacy Policy.

Effective Date: 4 November 2024