Privacy policy

Thank you for your interest in our website and our products and services. Esterhazy Wein GmbH (hereinafter referred to as "Esterhazy") attaches great importance to the protection of your personal data entrusted to us, which we treat as strictly confidential and handle responsibly. Therefore, we inform you, in accordance with the relevant data protection regulations (Data Protection Regulation, DSG, TKG) as follows: The website www.esterhazywein.at is operated as the responsible entity by: www.esterhazywein.at wird als verantwortliche Stelle betrieben von:

Esterhazy Wein GmbH
Trausdorf 1
7061 Trausdorf an der Wulka
FN 140080a

Contact for data subject rights: datenschutz@esterhazy.at datenschutz@esterhazy.at

Although we carefully check external links, we are not liable for the content and security of these external links.

1. collection and processing of personal data

Your personal data will only be collected and processed on our website / in our data processing systems if you have provided this information, e.g. at an event, registration or purchase. Indirect personal information is not stored or processed by Esterhazy. Data disclosed by you will be used for the purpose of processing and transmitting data within the scope of a business relationship, including electronically created and archived documents (such as correspondence) and - if a business relationship or valid declaration of consent exists - processing for contacting you by mail, e-mail, fax, telephone or SMS for the purpose of sending you information about our own goods and services. Also included are special offers and promotions relating to these (e.g. invitations to events, travel offers, competitions, surveys, orders via the digital platforms, newsletters). The data will be stored until the termination of the business relationship or until the expiry of the warranty, guarantee, limitation and statutory retention periods applicable to the client; in addition, the data will be stored until the termination of any legal disputes in which the data is required as evidence until the expiry of the third year after the last contact with the person responsible or until the revocation of a declaration of consent.

The persons of Esterhazy Wein GmbH or the Esterhazy companies responsible for processing have access to the data disclosed. The data is protected against unauthorized access by technical and organizational measures such as access controls, encrypted transmission, encrypted storage, role authorization concept, data security concept and physical protection measures for the servers. The security measures are continuously revised in line with technological developments.

For example, the following personal data may be processed:
- First and last name incl. title
• Date of birth
• Nationality
• gender
• Your Address
• E-mail address
• Telephone contact details
• Company affiliation

The data originate for example

• From a business relationship (customers/suppliers, input in online forms, personal visit at our locations or by telephone)
• From participation in competitions (by Esterhazy or by third parties, if you have agreed to the data transfer there)
• From newsletter orders after successful DOI (Double Opt In) confirmation.
• Based on declarations of consent to be included in the database for the sending of information material

We would like to point out that the data disclosed to us, e.g. name, address, date of birth, email address, telephone number, may also be used for the following additional purposes, provided that the corresponding consent has been given: Transmission and processing by pan.event GmbH (Esterhazyplatz 4, 7000 Eisenstadt), an address publisher and direct marketing company of the Esterhazy group of companies. pan.event GmbH passes on the personal data within the scope of the trade license iSd § 151 GewO for the preparation and implementation of marketing campaigns, including the design and dispatch of advertising materials, exclusively to companies within the Esterhazy group of companies on the basis of consent. This consent can be revoked at any time, also separately (e.g. by letter, fax or e-mail)

2. processing of the data

Within the Esterhazy Group, your data will only be processed if this is necessary for the execution of the contract; it will only be passed on to other Esterhazy companies with your consent. You have the right to revoke your consent at any time. You will receive newsletters or information material by email - or other electronic means - only if you consent to receive them. You can unsubscribe from electronic mailings at any time free of charge by clicking on the link provided in the mailing.

3. data storage

Data storage webshop: We would like to point out that for the purpose of simplifying the shopping process and for subsequent contract processing, we store the IP data of the connection owner within the framework of cookies, as well as the name, address and credit card number of the buyer. In addition, for the purpose of contract processing, the following data is also stored by us: master data, date of birth, receivables: Product, price, taxes, payment date, invoice number, purchase data. The data provided by you are necessary for the fulfillment of the contract or for the implementation of pre-contractual measures. Without this data we cannot conclude the contract with you. No data is transferred to third parties, with the exception of the transfer of credit card data to the processing banking institutions / payment service providers for the purpose of debiting the purchase price to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill our tax obligations. After cancellation of the purchase process, the data stored by us will be deleted. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the retention period under tax law (7 years). The data name, address, purchased goods and purchase date will be stored beyond that until the expiry of product liability (10 years). The data processing is based on the legal provisions of § 96 para 3 TKG and Art 6 para 1 lit a (consent) and / or lit b (necessary for the performance of the contract) of the DSGVO.

4. your rights
According to the General Data Protection Regulation (GDPR), you as a data subject are entitled to the rights and remedies listed below. To assert your rights and if you have any questions, please contact the Data Protection Officer at datenschutz@esterhazy.at Right of access.
Pursuant to Art 15 of the Data Protection Regulation, the Esterhazy Wein GmbH shall provide information to any data subject who requests confirmation as to whether personal data concerning him or her are being processed. If necessary, it may be necessary for you to prove your identity in an appropriate form.

Correction and deletion
Pursuant to Art 16 DSGVO, you as the data subject have the right to request without undue delay the rectification of any inaccurate personal data concerning you or - taking into account the purposes of the data processing - the completion of any incomplete personal data.
According to Art 17 DSGVO, there is a right to erasure ("right to be forgotten") of the data.

Restriction of processing
According to Art 18 DSGVO, there is a right to restriction of processing of all personal data collected, which may henceforth only be processed with individual consent or for the assertion and enforcement of legal claims.

Data portability
According to Art. 20 DSGVO, the right to data portability exists, which is the right to demand the unhindered and unrestricted transfer of collected personal data to a third party.

Right to object
Pursuant to Art 21(1) of the GDPR, every data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Art 6(1)(e) of the GDPR) or which is necessary for the purposes of safeguarding the legitimate interests of the controller or of a third party (Art 6(1)(f) of the GDPR). This also applies to profiling based on these provisions. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

Pursuant to Art 21 (2) and (3) DSGVO, every data subject has the right to object to data processing for the purpose of direct marketing with effect for the future. If you take measures to enforce your rights under the GDPR as listed above, Esterhazy must respond to the requested measure or comply with the request at the latest within one month after receipt of your request. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated, you can complain to the supervisory authority, which is the data protection authority.