privacy policy

I. Data controller
The data controller in the context of data protection provisions is:

Korbus GbR ¦ Sieben Hügel 38 ¦ 33615 Bielefeld, Germany
Dagmar Korbus ¦ dk@korbus-wine.com

II. Processing personal data
Personal data are only processed if it is necessary to provide the website with its functionalities and content and to process the relevant contractual relationship or requests from the user. The processing of personal data is normally carried out only with the consent of the user. An exception is made in cases where it is not possible to obtain prior consent for reasons of fact or in which the processing of the data is permitted by legal provisions.

III. Legal basis
The processing of personal data by us is carried out on the following legal basis:

Art. 6 (1) (a) GDPR:
For processing operations involving personal data where we obtain consent from the data subject.

Art. 6 (1) (b) GDPR:
For processing necessary to fulfil a contract to which the data subject is a party or to implement pre-contractual measures taken at the request of the data subject.

Art. 6 (1) (c) GDPR:
For processing personal data necessary to fulfil a legal obligation to which we are subject as data controller.

Art. 6 (1) (d) GDPR:
For processing necessary to protect vital interests of the data subject or of another natural person.

Art. 6 (1) (e) GDPR:
For processing necessary to perform a task carried out in the public interest or to exercise official authority vested in the data controller.

Art. 6 (1) (f) GDPR:
For processing necessary to protect the legitimate interests of the data controller or of a third party unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child.

Log files when accessing the website
When you access the website, our system automatically saves the following information in our log files:

Browser type and version used
Operating system of the user
Internet service provider of the user
IP address of the user
Date and time of access
Website from which the user accessed our website
Websites that are accessed by the user’s system through our website

Storage together with other personal data of the user does not occur. The legal basis for temporary storage of data and log files is Art. 6 (1) (f) GDPR.

Cookies
This website uses cookies to facilitate the use of our website. Cookies are small text files that a website can store locally in the memory of your Internet browser on the computer you are using. Cookies in particular enable recognition of the Internet browser. You can delete cookies at any time by using the corresponding function of your browser or by deleting the cookies on your hard disk. You also have the option of deactivating the use of cookies via the corresponding menu item of your browser. The legal basis for processing personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

Your cookie setting
Change settings

Your consent history

Date	Version	Consents

Cookies in use by this website

Essential

Essential cookies enable basic functions and are necessary for the proper function of the website.

Polylang

Name	Polylang
Provider	Owner of this website
Purpose	Required for the multilingualism of the website. The cookie only stores the language chosen by the user without any personal data.
Privacy Policy	https://korbus-wine.com/es/privacidad/
Cookie Name	pll_language
Cookie Expiry	1 year

PHP Session Cookie

Name	PHP Session Cookie
Provider	Owner of this website
Purpose	To be able to assign related requests to a user during use.
Privacy Policy	https://korbus-wine.com/es/privacidad/
Cookie Name	PHPSESSID

Statistics

Statistics Cookies collect information anonymously. This information helps us to understand how our visitors use our website.

Google Tag Manager

Name	Google Tag Manager
Provider	Google LLC
Purpose	Cookie by Google used to control advanced script and event handling.
Privacy Policy	https://policies.google.com/privacy?hl=en
Cookie Name	_ga,_gat,_gid
Cookie Expiry	2 years

Google Analytics

Name	Google Analytics
Provider	Google LLC
Purpose	Cookie by Google used for website analytics. Generates statistical data on how the visitor uses the website.
Privacy Policy	https://policies.google.com/privacy?hl=en
Cookie Name	_ga,_gat,_gid
Cookie Expiry	2 years

Opt-out Google Tag Manager

Opt-out Google Analytics

Establishing contact
Data provided by you when contacting us by email or with the contact form will be stored by us. The data will be stored and used exclusively for the purpose of answering your request or for contacting you and the technical processing associated with this. The legal basis for processing the data is Art. 6 (1) (f) GDPR and Art. 6 (1) (a) GDPR. If the contact serves to conclude a contract, the further legal basis is Art. 6 (1) (b) GDPR. Your data will be deleted after the final processing of your request, provided that there are no legal obligations to retain records.

VII. Ordering process
Data provided by the user during the ordering process are stored by us. The data are entered by the user into an input mask, transmitted to us, and stored. The legal basis for processing the data is Art. 6 (1) (b) GDPR and Art. 6 (1) (a) GDPR. Your data will be deleted after the final processing of your request, provided that there are no legal obligations to retain records. To fulfil the contract, we will pass on your data to the shipping company commissioned with the delivery, provided that this is necessary for the delivery of ordered goods. For the processing of payments, we pass on the necessary payment data to the bank commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you in the ordering process. The legal basis for the processing is Art. 6 (1) (b) GDPR.

VIII. Registration on the website
Users can register on our website by providing personal data. In addition, users can also place orders without registering. The data are entered by the user into an input mask, transmitted to us, and stored. In addition, the user’s IP address as well as the date and time of registration and the order are stored. Your data will be deleted after final processing unless there is a legal basis for processing the data in accordance with Art. 6 (1) (a) GDPR. If the registration serves to conclude a contract, an additional legal basis is Art. 6 (1) (b) GDPR.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server in the United States and stored there.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by shortening it and excludes the possibility of direct personal reference. Through the extension, your IP address will be shortened by Google within European Union Member States or in other signatory states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the United States and abbreviated there in exceptional cases. In these exceptional cases, this processing is carried out as defined in Art. 6 (1) (f) GDPR. Google will use this information on our behalf to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not combined with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, but please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will have to click this link again): Disable Google Analytics.
Google LLC, based in the United States, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Newsletter
You must enter your email address to subscribe to the newsletter. Indicating an honorific title and name is voluntary and enables us to address you personally. Data collected from the user in this respect will be used exclusively for sending the newsletter and for its technical administration. The registration uses a “double-opt-in” procedure. By activating the sent confirmation link, the user consents to the processing of personal data by us. Legal basis for the processing is Art. 6 (1) (a) GDPR. The user can revoke consent to the storage of data and use for sending newsletters. Each newsletter includes a corresponding link for this purpose. The user can also use the other communication channels for this purpose. When registering for the newsletter, we store the IP address as well as the date and time of registration in order to be able to trace any possible misuse. Legal basis for the processing is Art. 6 (1) (a) and (f) GDPR.
Rights of the data subject
If your personal data are processed, you are a data subject within the context of the GDPR and you are entitled to the following rights vis-à-vis the data controller:
Right of access
You may request confirmation from the data controller as to whether personal data concerning you is being processed by us.
If such processing has occurred, you can request information from the data controller about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if it is not possible to give specific details, criteria for determining the duration of storage;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to restrict processing by the data controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information regarding the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated individual decision-making, including profiling, as defined in Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing on the data subject.
You have the right to request information about whether the personal data concerning you are being transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees as defined in Art. 46 GDPR in connection with the transfer.
Right to rectification
You have the right to ask the data controller to rectify and/or complete the data if the personal data processed concerning you are incorrect or incomplete. The data controller must rectify the inaccurate personal data without delay.
Right to restrict processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you if:
(1) you dispute the accuracy of the personal data concerning you for a period of time which enables the data controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the deletion of the personal data and instead demand restriction of the use of the personal data;
(3) the data controller no longer needs the personal data for the purposes of the processing, but you need it for the purpose of asserting, exercising or defending legal claims; or
(4) you have lodged an objection to the processing as defined in Art. 21 (1) GDPR and it has not yet been established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data relating to you has been restricted, such data may be processed – apart from being stored – only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
If the processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
Right to deletion
a) Duty to delete
You may demand from the data controller that the personal data relating to you be immediately deleted, and the data controller is obliged to delete such data immediately if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based as defined in Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
(3) You lodge an objection to the processing as defined in Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you lodge an objection to the processing pursuant to Art. 21 (2) GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the data controller is subject.
(6) The personal data concerning you have been collected in relation to information society services offered as defined in Article 8 (1) of the GDPR.
a) Information to third parties
If the data controller has made the personal data concerning you public and is obliged to delete it as defined in Art. 17 (1) GDPR, the data controller shall take reasonable measures, including technical measures and taking into account the available technology and the implementation costs, to inform the data controllers processing the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
b) Exceptions
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to comply with a legal obligation requiring processing under Union or a Member State to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller;
(3) for reasons of public interest in the area of public health as defined in Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
(4) for archival, scientific or historical research purposes in the public interest or for statistical purposes as defined in Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing; or
(5) to assert, exercise or defend legal claims.
Right to notification
If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, deletion or restriction of processing, unless this proves impossible or requires unreasonable effort.
You have the right with respect to the data controller to be notified about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another controller without hindrance from the data controller to which the personal data have been given, provided that
(1) the processing is based on consent as defined in Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR; and
(2) the processing is carried out by means of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from us to another data controller, where this is technically feasible. This must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to the processing of personal data necessary to perform a task carried out in the public interest or to exercise official authority vested in the data controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR, including profiling based on those provisions.
The data controller will no longer process the personal data concerning you unless the data controller demonstrates compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, provided that it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
You have the option to exercise your right to object to the use of information society services by means of automated procedures involving technical specifications, notwithstanding Directive 2002/58/EC.
Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effect on you or which significantly affects you in a similar way. This shall not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the data controller,
(2) is authorised by Union legislation or the law of the Member States to which the data controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, which shall include at least the right to obtain the intervention of a person on the part of the data controller, to state his or her own position and to challenge the decision.
Right to appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State in which you reside, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and the results of the appeal, including the possibility of a legal remedy under Art. 78 GDPR.

wein.cc conversion tracking
This website presents products on wein.cc to acquire customers. wein.cc is a price comparison portal of ebizoptimizer internet services GmbH, Schulberg 3, 2500 Siegenfeld, Austria (“wein.cc”).

In the context of wein.cc, we use wein.cc conversion tracking. wein.cc creates reports on our behalf. When you click on one of our products at wein.cc, cookies are set for conversion tracking. Cookies are small text files that the internet browser places on the user’s device (computer, mobile phone). These cookies lose their validity after 90 days and are not used to personally identify the user. The cookies cannot be tracked by us. The information collected by means of the conversion cookie is used to compile conversion statistics for us. We learn whether clicks from wein.cc to us have led to purchases. For this, a signal is sent from our store system to wein.cc when you make a purchase. The following data are collected by wein.cc:

Time of purchase
User agent: Browser type and version, operating system
HTTP referrer: Referrer URL
Anonymised IP address
wein.cc cookies
Optional sales

Your name, address or order number is never transmitted to wein.cc.
Consequently, no personal or individual-related data as defined by GDPR will be stored at wein.cc.
Data security

wein.cc saves the IP address in anonymised form.
The data are stored and processed in data centres within the European Union.
Access to the reports is only possible through encrypted connections (HTTPS).

Deletion
We are able to delete the data at wein.cc.

Right to object
If you do not wish to participate in conversion tracking, you can object to this use by deactivating the wein.cc conversion tracking cookies (clid and conv) in your Internet browser user settings. You will then not be included in the conversion tracking statistics.

The storage of conversion data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise the website operator’s website content and product presentation on wein.cc and to check the profitability of the cooperation with wein.cc.

More information about wein.cc and the privacy policy of wein.cc can be found at https://www.wein.cc/wein/about.php?x=5.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Name	Borlabs Cookie
Provider	Owner of this website, Imprint
Purpose	Saves the settings of visitors selected in the Cookie Box of Borlabs Cookie
Cookie Name	borlabs-cookie
Cookie Expiry	1 year