We take the protection of the data of users of our website and/or mobile app very seriously and are committed to protecting the information that users provide to us in connection with the use of our website and/or mobile app (collectively: “digital assets”). Furthermore, we are committed to protecting and using your data in accordance with applicable law.

This privacy policy explains our practices regarding the collection, use, and disclosure of your data through the use of our digital assets (the “Services”) when you access the Services via your devices.

Please read this privacy policy carefully and make sure you fully understand our practices regarding your data before using our Services. If you have read and fully understood this policy and do not agree with our practices, you must stop using our digital assets and Services. By using our Services, you acknowledge the terms of this privacy policy. Continued use of the Services constitutes your acceptance of this privacy policy and any amendments to it.

​

In this privacy policy, you will learn:
 

• How we collect data

• What data we collect

• Why we collect this data

• With whom we share the data

• Where the data is stored

• How long the data is retained

• How we protect the data

• How we handle minors

• Updates or changes to the privacy policy

• ​

What data do we collect?

Below is an overview of the data we may collect:

• Non-identifiable and non-identifiable information provided during the registration process or collected through the use of our Services (“non-personal data”). This data cannot be used to identify the individual it was collected from and mainly consists of technical and aggregated usage information.

• Individually identifiable information, meaning any information by which you can be identified or could reasonably be identified (“personal data”). Personal data collected through our Services may include information such as names, email addresses, physical addresses, phone numbers, IP addresses, and more. If we combine personal and non-personal data, we treat it as personal data as long as it remains combined.
   

How do we collect data?

We use the following main methods:

• When you use our Services (e.g., visiting our digital assets), we may collect and store usage, session, and related information.

• When you provide data directly to us (e.g., contacting us via email).

• From third-party sources (as described below).

• When you sign in via third-party providers such as Facebook or Google.

• ​

Why do we collect this data?

We may use your data for the following purposes:

• To provide and operate our Services

• To develop, customize, and improve our Services

• To respond to feedback, inquiries, and requests

• To analyze usage patterns

• For internal, statistical, and research purposes

• To enhance data security and prevent fraud

• To investigate violations and enforce policies

• To comply with legal obligations

• To send updates, news, and marketing materials (you can unsubscribe at any time)

• ​

With whom do we share this data?

We may share your data with service providers to operate our Services (e.g., hosting providers, technical support).

We may also disclose data:

• To investigate or prevent illegal activities

• To defend our rights

• To protect safety and property

• In case of a business transfer (e.g., merger or acquisition)

• To store/manage data via authorized third-party providers (e.g., cloud services)

• To improve user experience in cooperation with partners

Non-personal data may be shared at our discretion.

​

Cookies and similar technologies

When you access our Services, we allow third parties to use tracking technologies (e.g., cookies, web beacons, scripts).

These technologies help:

• Improve navigation and performance

• Personalize user experience

• Enhance security and prevent fraud

We may also show personalized ads based on your browsing behavior using cookies and similar technologies.

Third-party providers may use their own tracking technologies, which are governed by their own privacy policies.

​

Where is the data stored?

• Non-personal data: stored and processed globally by us and our partners.

• Personal data: may be stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as necessary.

• ​

How long is the data retained?

We retain data as long as necessary to:

• Provide our Services

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

We may correct or delete inaccurate data at any time.

​

How do we protect the data?

Our hosting provider stores data on secure servers behind a firewall and provides HTTPS access.

All payment methods comply with PCI-DSS standards (credit card security standards).

However, we cannot guarantee absolute security. We recommend:

• Using strong passwords

• Avoiding sharing sensitive information via email or messaging
   

How do we handle minors?

Our Services are not intended for minors.

We do not knowingly collect data from children. If we become aware of such data, we will delete it and may block access.

Your rights (EU residents)

You have the right to:

• Access your personal data

• Request correction or deletion

• Object to processing

• Restrict processing

• Receive your data in a portable format

• File a complaint with a supervisory authority
   

Data transfers

Your data may be transferred internationally. By using our Services, you consent to this.

For EEA users, we ensure appropriate safeguards are in place.

​

California residents (CCPA)

You may request access to or deletion of your data.

We do not sell personal data under the CCPA.

​

Updates to this policy

We may update this policy from time to time. Continued use of the Services means you accept the changes.

​

Contact

If you have questions, contact:

Weingut Eichholz
Irene Grünfelder & Johannes Hunger
Eichholz 2, 7307 Jenins
+41 79 759 89 73
info@weinguteichholz.com

​

​