Privacy Policy
Important notice
This English version of the Privacy Policy is provided for information purposes only.
The legally binding version is the German-language Privacy Policy.
In the event of discrepancies, the German version shall prevail.
Introduction
We take the protection of your personal data very seriously and comply with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this Privacy Policy.
We process personal data only insofar as this is necessary to provide a functional website and our content, services and offers.
Personal data means any information relating to an identified or identifiable natural person.
This Privacy Policy provides an overview of which personal data we process, for what purposes, and how we protect your data.
1. Controller
This Privacy Policy applies to data processing by:
Controller
J.G. Orb GbR
Am Markt 9–13
67593 Westhofen, Germany
Phone: +49 6244 828
Email: [kontakt@weingut-orb.de](mailto:kontakt@weingut-orb.de)
Website: [www.weingut-orb.de](http://www.weingut-orb.de)
For data protection matters, you may contact us using the details above.
2. Collection and Processing of Personal Data
2.1 Visiting the Website (Log Files)
You may visit our website without actively providing personal information.
When using the website for informational purposes only, we process only the data that your browser automatically transmits to our server. These data are temporarily stored in log files and may include:
* IP address
* Date and time of access
* Requested file name and URL
* Referrer URL
* Browser type and version
* Operating system
* Access provider
* Language settings
Purpose of processing:
* Ensuring website functionality
* Ensuring system security and stability
* Administrative purposes
Log file data are deleted after 7 days, unless longer storage is required for security reasons.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
We do not use this data to identify individual users.
Note: We also use cookies and similar technologies. Further information is provided in section 4.
2.2 Use of the Online Shop / Order Form
When using our online shop, we process personal data solely for contract initiation and performance.
Legal basis: Art. 6(1)(b) GDPR.
Processed data may include:
* Name
* Address
* Email address (if provided)
* Date of birth (if provided)
Payment data are processed exclusively by payment service providers. We do not receive full payment card or bank details.
2.3 Newsletter Subscription
If you have given your explicit consent, you may subscribe to our newsletter.
Legal basis: Art. 6(1)(a) GDPR (consent).
* Mandatory information: email address
* Double opt-in procedure
* You may unsubscribe at any time via the link in each newsletter or by email
2.4 Contact Form
When contacting us via the contact form, we process your name and email address to respond to your inquiry.
Legal basis: Art. 6(1)(a) GDPR.
Data are deleted once the inquiry has been fully processed.
3. Disclosure of Data to Third Parties
We do not transfer personal data to third parties unless:
* You have given explicit consent
* It is necessary for contract performance
* There is a legal obligation
* It is required to assert or defend legal claims
PayPal
Payments may be processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Relevant personal data may be transferred for payment processing.
More information:
4. Cookies and Consent Management
4.1 Essential Cookies
Essential cookies are used based on § 25(2) TTDSG to ensure core website functionality (e.g. security, shopping cart, language settings).
4.2 Consent-Based Cookies
Analytics and marketing cookies are used only with your prior consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TTDSG.
You may change or withdraw your consent at any time via the cookie settings.
4.3 Consent Tool
We use the consent management platform Usercentrics GmbH, Munich, Germany.
5. Third-Party Services
5.1 Essential Services
* PayPal
* Google Site Verification
* Usercentrics
* Wix Core Services
5.2 Functional Services
* Gravatar (Automattic Inc.)
5.3 Analytics
* Wix Analytics (consent-based)
5.4 Marketing and Tracking
* Meta Pixel (Facebook / Instagram)
* Embedded Instagram content
All marketing and analytics services are used only with your consent.
6. Data Retention
Personal data are deleted when no longer required, unless statutory retention obligations apply:
* 10 years (accounting records)
* 6 years (commercial correspondence)
7. Hosting (Wix)
Our website is hosted by Wix.com Ltd., Israel.
Data transfers are based on Standard Contractual Clauses (Art. 46 GDPR) or the EU–US Data Privacy Framework, where applicable.
8. Data Subject Rights
You have the right to:
1. Withdraw consent
2. Access your data
3. Rectification
4. Erasure
5. Restriction of processing
6. Data portability
7. Lodge a complaint with a supervisory authority
9. Right to Object
You may object to processing based on legitimate interests at any time.
You may also object to processing for direct marketing purposes.
10. Data Security
We use technical and organizational security measures, including SSL/TLS encryption, to protect your data.
11. Updates
This Privacy Policy reflects the status January 2026.
The current version is available at:
[www.weingut-orb.de/datenschutz](http://www.weingut-orb.de/datenschutz)