PRIVACY POLICY

1. Responsible person

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Or et Vin
Owner: Emil Alkountar
Agricolastr. 8
38678 Clausthal-Zellerfeld
Germany
Email: info@oretvin.com

2. General information on data processing

We process personal data only to the extent necessary for the provision of our website, for contract processing, or due to legal obligations.

Personal data is any data that can be used to personally identify you.

3. Access data and hosting

When you visit our website, data is automatically collected by the server:

  • IP address
  • Date and time of access
  • Browser type and version
  • operating system
  • Referrer URL

This data is processed to ensure smooth operation and to improve our services.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

Hosting by Shopify

Our website is hosted by Shopify Inc., 151 O'Connor Street, Ottawa, ON K2P 2L8, Canada.

Shopify processes personal data on our behalf. This may involve transferring data to third countries (e.g., Canada or the USA). Shopify ensures an adequate level of data protection through appropriate safeguards in accordance with Articles 44 et seq. of the GDPR.

Further information:
https://www.shopify.com/legal/privacy

4. Collection of personal data during orders

When you place an order, we process the following data:

  • First and Last Name
  • Billing and delivery address
  • E-mail address
  • Payment details
  • Order data

This data is required for:

  • Contract processing
  • Delivery of goods
  • Payment processing
  • Customer communication

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).

5. Making contact

If you contact us by email, your information will be stored for processing your request.

Legal basis: Art. 6 para. 1 lit. b or f GDPR.

6. Payment service providers

We use external payment service providers for payment processing:

PayPal

PayPal (Europe) S.à rl et Cie, SCA, Luxembourg
Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Shopify Payments

Shopify Payments is provided by Shopify.
Privacy policy: https://www.shopify.com/legal/privacy

The payment service providers only receive the data necessary for processing the payment.

7. Shipping service provider

For the purpose of delivering the goods, we pass on data to shipping service providers (e.g. DHL).

Legal basis: Art. 6 para. 1 lit. b GDPR.

8. Cookies and consent management

Our website uses cookies.

  • Cookies are used for:
  • technical functionality
  • the analysis
  • improving our services

Technically necessary cookies are set on the basis of Art. 6 para. 1 lit. f GDPR.
All other cookies are only set with your consent (Art. 6 para. 1 lit. a GDPR, § 25 TTDSG).

You can withdraw your consent at any time via the cookie banner.

9. Data Sharing

We only share personal data if:

  • this is necessary for the fulfillment of the contract,
  • a legal obligation exists,
  • They have consented.

Your data will not be shared for advertising purposes or sold.

10. Storage duration

We only store personal data for as long as:

  • they are necessary for the processing of the contract,
  • Statutory retention periods apply.

The data will be deleted after the deadlines have expired.

11. Rights of data subjects

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact:
info@oretvin.com

12. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

13. Changes to this Privacy Policy

We reserve the right to amend this privacy policy to adapt it to legal requirements or changes to our services.