Datenschutz

We take the protection of your personal data very seriously and comply with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this Privacy Policy.

We process personal data of our users only to the extent necessary to provide a functional website and our content, services, and offers.

Personal data is any information relating to an identified or identifiable natural person.

This Privacy Policy provides you with an overview of what types of personal data are processed and for what purposes. It also explains how we ensure the protection of your personal data.

1. Name and Contact Details of the Controller

This privacy information applies to data processing by:

Controller:

J.G. Orb GbR
Am Markt 9–13
67593 Westhofen
Germany

Phone: +49 (0)6244 828
Email: kontakt[at]weingut-orb.de
Website: weingut-orb.de

2. Collection and Storage of Personal Data and the Nature and Purpose of Their Use

a) When Visiting Our Website

You may visit our website weingut-orb.de without providing any information about your identity.

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with personal information, we collect only the personal data that your browser transmits to our server. When you access our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file.

The following information is collected automatically and stored until it is automatically deleted:

• IP address of the requesting device

• Date and time of access

• Name and URL of the retrieved file

• Website from which access is made (referrer URL)

• Browser used and, if applicable, the operating system of your device, as well as the name of your access provider, language, and browser version

We process the above data for the following purposes:

• Ensuring a smooth connection to the website

• Ensuring a comfortable user experience

• Evaluating system security and stability

• Other administrative purposes

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

In addition, we use cookies when you visit our website. Further details can be found in section 4 of this Privacy Policy.

b) When Using Our Order Form

When using our webshop or order form, we process the personal data you provide exclusively for the purpose of initiating or fulfilling a contract. The legal basis is Art. 6(1)(b) GDPR.

The following personal data may be processed: first and last name, street address, postal code/city, email address (if provided), date of birth (if provided), IBAN and credit card details including verification code (only if required for payment processing).

This data is processed to fulfill contractual obligations, in particular for shipping goods, processing payments and invoicing, handling warranty claims, and related correspondence.

c) When Subscribing to Our Newsletter

1. If you have expressly consented (Art. 6(1)(a) GDPR), you may subscribe to our newsletter, which informs you about current products and/or services. Only your email address is required. Additional information is voluntary and used for personalized communication.

2. We use the double opt-in procedure. After registration, you will receive an email requesting confirmation. If confirmation is not received within 24 hours, your data will be blocked and deleted after one month. We also store IP addresses and timestamps of registration and confirmation to prevent misuse.

3. The legal basis is your consent (Art. 6(1)(a) GDPR).

4. You may withdraw your consent at any time by emailing kontakt@weingut-orb.de

d) When Using Our Contact Form

To submit inquiries, we provide a contact form. Your email address and name are required; further information is optional.

The legal basis is your consent (Art. 6(1)(a) GDPR).
Data collected via the contact form will be deleted after your request has been processed.

3. Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

Data is disclosed only if:

1. You have given explicit consent (Art. 6(1)(a) GDPR);

2. It is necessary for contract fulfillment (Art. 6(1)(b) GDPR), e.g. payment institutions, shipping companies, or legal enforcement;

3. There is a legal obligation (Art. 6(1)(c) GDPR);

4. It is necessary to assert, exercise, or defend legal claims (Art. 6(1)(f) GDPR).

We offer payment via PayPal. Provider: PayPal (Europe) S.à.r.l. et Cie, S.C.A., Luxembourg. Personal data necessary for payment processing is transmitted to PayPal. Further details are available in PayPal’s privacy policy.

4. Cookies

We use cookies on our website. Cookies do not harm your device and contain no viruses or malware.

Cookies help improve usability, recognize returning visitors, and save preferences. Session cookies are deleted automatically after you leave the website.

The legal basis is Art. 6(1)(f) GDPR.

You can configure your browser to refuse cookies. However, disabling cookies may limit website functionality.

5. Data Retention and Deletion

Personal data is deleted once it is no longer necessary for its purpose, unless legal retention obligations apply (e.g. 10 years for accounting data, 6 years for business correspondence).

6. Wix Privacy Policy

a) Wix Contact Forms

This website is built and hosted by Wix.com Ltd., Tel Aviv, Israel. Wix implements security measures to protect personal data. Please refer to Wix’s privacy policy.

b) Wix Analytics

Wix collects statistical data such as accessed pages, date and time, browser type, operating system, IP address, and referrer URL for operational and optimization purposes.

7. Social Media Plug-ins

On our website, we use social media plug-ins from the social networks Facebook and Instagram on the basis of Art. 6(1)(f) GDPR in order to increase the visibility of our business through these platforms. The underlying advertising purpose constitutes a legitimate interest within the meaning of the GDPR. Responsibility for data protection–compliant operation lies with the respective provider.

The integration of these plug-ins is carried out using the so-called two-click solution, in order to protect visitors to our website as effectively as possible.

a) Facebook

Our website uses social media plug-ins from Facebook to make their use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offer by Facebook.

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Facebook’s servers. The content of the plug-in is transmitted directly by Facebook to your browser and integrated into the website.

Through the integration of the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly by your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plug-ins, for example by clicking the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research, and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, for example to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services associated with the use of Facebook.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

Further information on the purpose and scope of data collection, further processing and use of the data by Facebook, as well as your rights and options for protecting your privacy, can be found in Facebook’s privacy policy at:
https://www.facebook.com/about/privacy/

b) Instagram

Our website also uses so-called social plug-ins (“plug-ins”) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram camera”. When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Instagram’s servers. The content of the plug-in is transmitted directly by Instagram to your browser and integrated into the website.

Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to associate the data collected via our website directly with your Instagram account, you must log out of Instagram before visiting our website.

Further information on the purpose and scope of data collection, further processing and use of the data by Instagram, as well as your rights and options for protecting your privacy, can be found in Instagram’s privacy policy at:
https://help.instagram.com/155833707900388

8. Data Subject Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and to lodge a complaint with a supervisory authority (Arts. 7, 15–21, 77 GDPR).

9. Right to Object

You may object to processing based on legitimate interests or direct marketing at any time by emailing kontakt[at]weingut-orb.de.

10. Data Security

We use technical and organizational measures, including SSL/TLS encryption, to protect your data.

11. Status and Amendments

This Privacy Policy is valid as of July 2025. Updates may be made due to legal or technical changes. The current version is always available at weingut-orb.de/datenschutz.