Dear Sir or Madam,
with this data protection declaration we would like to inform you about,
- which personal data we collect, store, process, block and delete (together referred to as “processing”)
- what we use them for,
- how you can object to the use or revoke consents and
- what other rights you have as a data subject and how you can exercise them.
The body responsible for data processing within the meaning of the DS-GVO is
Stairway to Heaven Tramuntana SL
Apdo. Correos 11
Ctra. Alaró-Lloseta, Km 8,7
Telefon: +49 (0) 9181 231-202
Telefax: +49 (0) 9181 231-278
You can reach us by e-mail or by fax to the above fax number.
- Is there an obligation to provide data?
Within the framework of our business relationship, you must provide only those personal data that are necessary for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to conclude or execute the contract with you.
- What sources and data does Stairway to Heaven SL use?
We process personal data that we receive from our customers within the scope of our business relationship. In addition, we process – insofar as this is necessary for the provision of our services – personal data which we permissibly obtain from publicly accessible sources (e.g. commercial register, press, Internet) or which are legitimately transmitted to us by other third parties (e.g. credit agencies). Translated with www.DeepL.com/Translator (free version)
The personal data processed by us include in particular
- Personal data (name, address and other contact details)
- Order data (e.g. information on orders and deliveries),
- Data from the execution of the contract (e.g. information on turnover achieved),
- Advertising and sales data
- and other data comparable with the above categories
- Processing purposes and legal basis
We process personal data in accordance with the provisions of the European Data Protection Basic Regulation (DS-GVO) and the Federal Data Protection Act (BDSG) on the following legal bases:
- To fulfil contractual obligations (Art. 6 para. 1 b DS-GVO)
The processing of data is carried out in order to fulfil the contracts concluded with our customers, to carry out pre-contractual actions at the request of our customers or to carry out all activities necessary for the operation and/or management of a winery.
- As part of the balancing of interests (Article 6 (1) f DS-GVO)
If necessary, we process personal data beyond the actual fulfilment of the contract to protect our legitimate interests.
This includes in particular the following activities and processes:
- Testing and optimisation of procedures for requirements analysis for the purpose of direct customer contact,
- advertising or market and opinion research, provided that you have not objected to the use of your data,
- Assertion of legal claims and defence in legal disputes,
- Ensuring the IT security and IT operation of our company,
- Measures for business management and further development of services and products,
- other information dispatch (e.g. newsletter),
If you have given us permission to process personal data for specific purposes, the legality of this processing is based on your consent.
Consent that has been granted can be revoked at any time. This also applies to the revocation of declarations of consent that were issued to us before the DSGVO was applicable. Please note that the revocation of consent does not affect the lawfulness of the processing carried out up to the revocation.
The revocation of a consent can be made free of charge and informally to our contact data mentioned under point 1. A revocation by telephone can only be considered if you prove your identity to us in a verifiable way.
- Due to legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO)
Like any company, Stairway to Heaven Tramuntana SL is subject to numerous legal obligations that require the processing of personal data. Examples of these include identification requirements to prevent money laundering and compliance with tax documentation requirements.
- To what extent is there automated decision making in individual cases?
As a matter of principle, we do not use a fully automated decision-making process in accordance with Article 22 of the DSGVO to establish and implement the business relationship. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
- To what extent will my data be used for profile building?
In order to be able to inform and advise you about products in a targeted manner, we use partially automated evaluation instruments. These enable communication and advertising to be tailored to your needs, including market and opinion research.
- Who gets my data?
Within Stairway to Heaven Tramuntana SL, those entities and departments will have access to your data which they require to fulfil our contractual and legal obligations. Service providers employed by us may also receive data for these purposes, but in this case they are obliged to comply with the data protection requirements that also apply to us within the framework of so-called order processing. These can be, for example, companies in the fields of IT services, logistics, print services, telecommunications and debt collection.
A transfer to recipients outside the Stairway to Heaven Tramuntana SL will only take place if there is a corresponding legal obligation or with your consent.
In other cases a transfer of your personal data is excluded!
- Will data be transferred to companies in third countries or to an international organisation?
Data will only be transferred to countries outside the European Union (so-called third countries) if it is necessary to execute your orders (e.g. payment orders), if it is required by law (e.g. tax reporting obligations) or if you have given us your consent.
- How long will my data be stored?
We process and store your personal data only as long as it is necessary to fulfil our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted, unless its – temporary – further processing is necessary for the following purposes:
- Fulfilment of commercial and tax law retention obligations: These include the German Commercial Code (HGB) and the Money Laundering Act (GwG). The periods of retention or documentation stipulated there are up to ten years.
- Preservation of evidence within the framework of the legal statute of limitations. According to §§ 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.
a) Session cookies/session cookies
We use so-called cookies with our internet presence. Cookies are small text files or other storage technologies that are stored on your terminal device by the Internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.
This processing makes our internet presence more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our internet presence in different languages or the offer of a shopping basket function.
The legal basis for this processing is Art. 6 para. 1 lit. b.) DSGVO, insofar as these cookies process data for contract initiation or contract execution.
If the processing does not serve the purpose of contract initiation or contract execution, our legitimate interest lies in the improvement of the functionality of our Internet presence. The legal basis is then Art. 6 Para. 1 lit. f) DSGVO.
These session cookies are deleted when you close your Internet browser.
b) Third party cookies
The details of this, in particular the purposes and legal basis for processing such third-party cookies, can be found in the following information.
(c) Disposal option
You can prevent or restrict the installation of cookies by adjusting your Internet browser settings. You can also delete already stored cookies at any time. However, the steps and measures required for this depend on the Internet browser you are actually using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented by the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the Flash Player you are actually using. If you have any questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, however, this may mean that not all functions of our website can be used to their full extent.
The data transmitted by you to use our range of goods and/or services will be processed by us for the purpose of processing the contract and is required in this respect. Conclusion and processing of the contract are not possible without providing your data.
The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
We delete the data when the contract has been completely processed, but in doing so we must observe the retention periods under tax and commercial law.
Within the scope of contract processing, we will pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for the transfer of data is then Art. 6 para. 1 letter b) DSGVO.
Customer account / registration function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, your address or your e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to offer you the so-called notepad function). At the same time, we then save the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.
During the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us in the process will be used exclusively for the provision of the customer account.
If you consent to this processing, Art. 6 para. 1 letter a) DSGVO is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 letter b) DSGVO.
You may revoke the consent you have given us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 Para. 3 DSGVO. All you have to do is inform us of your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we have to observe storage periods in accordance with tax and commercial law.
If you register for our free newsletter, the data requested by you for this purpose, i.e. your e-mail address and – optionally – your name and address, will be transmitted to us. At the same time, we save the IP address of the Internet connection from which you access our website as well as the date and time of your registration. During the further registration process, we will obtain your consent to send you the newsletter, describe the content specifically and refer you to this data protection declaration. We use the data collected in the process exclusively for sending the newsletter – they will therefore not be passed on to third parties.
The legal basis here is Art. 6 para. 1 lit. a) DSGVO.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. To do so, you must simply inform us of your revocation or click on the unsubscribe link contained in every newsletter.
Contact enquiries / Contact possibility
If you contact us via contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your enquiry – without the provision of this data, we cannot answer your enquiry or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.
Your data will be deleted, provided that your enquiry has been finally answered and the deletion does not conflict with any legal storage obligations, as for example in the case of a possible subsequent contract implementation.
What rights do I have as a data subject?
As a data subject, you have the right of access under Article 15 DS-GVO, the right of rectification under Article 16 DS-GVO, the right of deletion under Article 17 DS-GVO, the right to restrict processing under Article 18 DS-GVO, the right of objection under Article 21 DS-GVO and the right of data transferability under Article 20 DS-GVO. As regards the right of information and the right of deletion, the restrictions under Sections 34 and 35 of the Federal Data Protection Act apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DS-GVO in conjunction with Article 19 BDSG).