Privacy
Translation for information only. The German version is legally binding. To the German version
Controller
Ana Razmadze, Qvevri – Georgischer Wein and Qvevri Café-Bar, Scheelenstraße 21, 31134 Hildesheim · g.w.h.qvevri@gmail.com · Legal notice
No cookies, no tracking
This website does not set any cookies, does not use any analytics or advertising services and does not load any content from third-party servers. Fonts and images are hosted on the same server as the website; no third-party fonts (such as Google Fonts) are loaded.
Storage in your browser
Only if you yourself switch between “Wine house” and “Café & Bar” does the website store your choice in your browser's local storage (localStorage) so that it is retained on your next visit. Without this switch, nothing is stored. This information does not leave your device and can be deleted at any time via your browser settings. The legal basis is § 25(2) no. 2 TDDDG: the storage is strictly necessary for the function you have expressly requested.
Hosting and server log files
This website is hosted by Netlify, Inc. (San Francisco, USA). When you visit the website, the provider processes technically necessary data such as IP address, time of access, page visited and browser information in server log files in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and reliably accessible website. The log files are stored only for as long as is necessary to deliver the website and prevent misuse.
In the process, data may be transferred to the USA. Netlify is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision for this framework (Art. 45 GDPR). For more details, see the Netlify privacy policy.
Links to other providers
Links to Google (Maps and reviews), to booking the wine tasting via SumUp Bookings and to WhatsApp, Instagram and Facebook are simple links. Data is transferred to the respective provider only when you click such a link; the provider's privacy notices apply there. For orders in the online shop, see the section “Orders in the online shop”.
Contact by e-mail, phone or WhatsApp
If you contact us, we process your details in order to respond to your request (Art. 6(1)(b) or (f) GDPR). We delete them once the request has been dealt with, unless statutory retention periods require longer storage.
Recipients: Our e-mail mailbox is operated by Google (Gmail), WhatsApp by Meta. In the process, data may be transferred to the USA; Google and Meta are certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). If you do not want this, you can also reach us by phone or in the shop.
Reservation requests via the form
If you use the form on this website to request a table or places at a wine tasting, we process the details you enter: type of request, date or appointment, time, number of people, name and phone number and – optionally – e-mail address and comments. We use them only to process your request, to arrange and confirm it with you by phone or WhatsApp and to carry out the reservation. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract or for the performance of a contract). Without your name, phone number and the appointment details, we cannot process the request. Please do not enter any health information (such as allergies) in the form – we are happy to discuss this by phone or in person.
Recipients: The form is transmitted via the form service of our web host Netlify, Inc. (San Francisco, USA) and stored there; Netlify processes the data as a processor on our behalf (Art. 28 GDPR). For technical reasons, Netlify stores your IP address, browser identifier and the address of the page from which the form was sent together with your details. Netlify is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). To prevent spam, Netlify has each submission automatically checked by the filtering service Akismet of Automattic Inc. (USA); in this process, too, your details may be transferred to the USA. Automattic is likewise certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
The storage of the IP address and browser identifier and the automatic spam check are based on Art. 6(1)(f) GDPR. Our legitimate interest is to protect the form against misuse and automated spam submissions so that genuine requests reach us reliably.
To make sure your request reaches us reliably, Netlify additionally forwards each submission by e-mail to our mailbox g.w.h.qvevri@gmail.com. This mailbox is operated by Google (Gmail); in the process, data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).
The website, including the form, is maintained for us by a technical service provider, who has access to the requests received for this purpose (processor, Art. 28 GDPR).
If we confirm your reservation via WhatsApp, your phone number and the reservation details are transmitted to WhatsApp (Meta) in the process; see the section “Contact by e-mail, phone or WhatsApp”.
Storage period: We delete reservation requests in the form service and the associated e-mails in our mailbox as soon as the request has been dealt with, at the latest three months after the requested date – unless statutory retention obligations require longer storage.
If you choose “Send via WhatsApp instead” (on small screens “Send via WhatsApp”), WhatsApp opens with a pre-filled message containing your details. Only with this click are your details transmitted to WhatsApp (Meta); the section “Contact by e-mail, phone or WhatsApp” applies. Without this click, they do not leave your device by this route.
Orders in the online shop
If you order wine via this website, we process the details you enter at checkout: name, e-mail address, delivery address (for shipping), optionally phone number and comments, as well as the items ordered, amounts and payment status. We use them to conclude and perform the purchase contract – payment, confirmation, shipping or collection, queries and, where applicable, withdrawal (Art. 6(1)(b) GDPR) – and to comply with statutory retention obligations under commercial and tax law (Art. 6(1)(c) GDPR; generally up to ten years).
Recipients: The order is processed and stored via server functions and storage of our web host Netlify, Inc. (San Francisco, USA) and transmitted by e-mail to our mailbox g.w.h.qvevri@gmail.com (Google Gmail); Netlify acts as a processor (Art. 28 GDPR). Netlify and Google are certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Payment is handled by the payment service provider SumUp; for this purpose we transmit the order number and amount to SumUp, and you enter your payment details directly on SumUp's payment page. SumUp processes this data as an independent controller; see the SumUp privacy policy. For shipped orders, we pass your name and delivery address on to the shipping company we have engaged.
The cart is stored only in your browser's local storage (localStorage) until you place an order or empty it; it does not leave your device until you click “Order with obligation to pay” at checkout. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the function you have requested).
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, the right to object (see next section) and the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragter für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover.
Right to object (Art. 21 GDPR)
Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR) – for example the server log files for hosting, the spam check of the reservation form or your contact request – you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal message to the following address is sufficient to object: g.w.h.qvevri@gmail.com.