Data protection
Privacy Policy
The protection of your personal data is very important to us. We therefore process your data solely on the basis of legal provisions (GDPR, TKG 2003). In this privacy policy document, we inform you about the most important aspects of data processing on our website. By using these sites, you acknowledge and agree to be bound by the terms of this privacy policy. If you do not wish to accept this privacy policy, do not share any personal information on this site.
[borlabs-cookie type=”btn-consent-preferences” title=”Cookie Einstellungen anpassen”/]
Hosting with HostProfis
Our website is hosted by HostProfis ISP Telekom GmbH (Rennweg 9, 9587 Riegersdorf, Austria). We have concluded a data processing agreement with HostProfis (Art. 28 GDPR) to ensure that your personal data is processed there in accordance with legal requirements. More information on data protection at HostProfis can be found here: https://www.hostprofis.com/web/data-protection
Server Log Files & IP Anonymization
Automatic collection: Each access to our website automatically records information in server log files (e.g., Apache Access Log, Error Log, FTP Access Log, Email Logs). This includes, among other things, the date and time of access, the name and URL of the accessed file, referrer URL, browser and system information, and an IP address.
Retention period: According to HostProfis, these log files are stored for 31 days and then automatically deleted. Authentication log files (e.g., login attempts) are retained for 90 days.
IP anonymization: We have enabled IP address anonymization with HostProfis.
Systems & Plugins
Use of WordPress
This website is based on the WordPress content management system (CMS), developed by the WordPress Foundation (660 4th Street, San Francisco, CA 94107, USA).
Cookies: WordPress uses technically necessary cookies, for example, to enable logins or save user preferences.
WP Emojis: External resources from wordpress.org may be loaded, and the IP address may be transmitted to servers in the USA.
Borlabs Cookie
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to save your cookie consents. Borlabs Cookie does not process any personal data. Your consents are stored in the borlabs-cookie. You can revoke your consents by deleting the cookie in your browser. Reloading or revisiting the website will ask you for your consent again.
Data Storage in the Web Shop
For easier shopping and later contract processing, the webshop operator stores IP data of the user, as well as name, address, and credit card/payment information.
For contract fulfillment, the following data is also stored with us: all data entered during the order process and the respective product data of the order. The data you provide is necessary for fulfilling the contract or for pre-contractual measures. Without this data, we cannot conclude the contract. Data is not transmitted to third parties, except for: transmitting credit card/payment details to the processing bank/payment provider for payment, transmitting data to the shipping company for delivery, and transmitting data to our tax advisor for tax compliance.
If the purchase is canceled, stored data is deleted. If a contract is concluded, all data is stored until the expiration of the statutory retention period (7 years).
Name, address, purchased goods, and purchase date are additionally stored until the expiration of product liability (10 years). Data processing is based on § 96 Abs 3 TKG and Art. 6 Abs 1 lit a (consent) and/or lit b (necessary for contract fulfillment) GDPR.
Web Analysis
Our website uses web analytics functions from HostProfis ISP Telekom GmbH. Cookies are used to analyze website usage. Data is transferred to the provider’s server and stored there.
You can prevent this by setting your browser not to store cookies. Your IP address is recorded but pseudonymized by deleting the last 8 bits. No data is transferred outside the EU.
Data processing is based on § 96 Abs 3 TKG and Art. 6 Abs 1 lit a (consent) and/or lit f (legitimate interest) GDPR. Our legitimate interest is improving our website and services. User data is pseudonymized and stored for 1 year.
Newsletter
You can subscribe to our newsletter via our website. We require your email address and consent. Additional information you provide voluntarily may also be processed.
After subscription, a confirmation email is sent with a link to confirm your subscription. You can cancel the newsletter at any time via the link in the newsletter or by emailing weinmarkt@poysdorf.at. Your data related to the newsletter will then be deleted immediately.
Google Fonts Privacy Policy
We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. The use of Google Fonts does not require authentication and no cookies are sent to the Google Fonts API. If you have a Google account, none of your account data is transmitted to Google during the use of Google Fonts. Google only collects information on the CSS and fonts used and stores this data securely. More information can be found at https://developers.google.com/fonts/faq. Data collected by Google and its usage can be found at https://www.google.com/intl/de/policies/privacy/
Facebook Privacy Policy
We use features from Facebook, a social media network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Information on which functions (social plugins) Facebook provides can be found at https://developers.facebook.com/docs/plugins/
. Visiting our website can transmit information to Facebook. If you have a Facebook account, Facebook may assign this data to your account. To prevent this, log out of Facebook. Facebook’s privacy policies, including what data they collect and how it is used, can be found at https://www.facebook.com/policy.php.
Google Maps Privacy Policy
We use Google Maps from Google Inc. on our website. Using map functions transfers data to Google. Information about what data Google collects and its use can be found at https://www.google.com/intl/de/policies/privacy/.
Contact Form 7
If you use our contact form via Contact Form 7, the data you provide (e.g., name, email, message) is stored and processed exclusively to handle your request. The data is not shared with third parties without your consent. Processing is based on your consent according to Art. 6 Abs. 1 lit. a GDPR. All data transfers are encrypted via HTTPS. More information at https://contactform7.com/privacy/.
Smash Balloon Plugin
We use the Smash Balloon plugin to display social media content, particularly from Facebook.
Automatic collection: When loading social media content, your browser connects to the respective social media servers, transmitting your IP address. External scripts may be loaded to display content correctly and may collect data such as your IP address. The plugin itself does not set cookies, but embedded social media content may use cookies.
Legal basis: Consent (Art. 6 Abs. 1 lit. a GDPR). Use occurs only with your explicit consent given via our cookie banner.
More information: Smash Balloon privacy policy https://smashballoon.com/gdpr-and-our-plugins/
Facebook privacy policy https://www.facebook.com/about/privacy/.
Use of qTranslate XT
Our website uses qTranslate XT to display content in multiple languages. A functional cookie stores the chosen language (qtrans_frontend_language) for up to 1 year. This cookie contains no personal data and is not shared. Processing is based on our legitimate interest in user-friendly multilingual presentation (Art. 6 Abs. 1 lit. f GDPR).
Use of Cloudflare Turnstile (Captcha Protection)
We use Cloudflare Turnstile on our website. Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Cloudflare Turnstile verifies whether data entry (e.g., in the contact form) is done by a human or a bot by analyzing visitor behavior (mouse movements, time on page, etc.). Data collected (IP, browser info, date/time, referrer URL, behavioral data) is transmitted to Cloudflare and used solely for security and functionality.
Processing is based on Art. 6 Abs. 1 lit. f GDPR (legitimate interest). If consent is obtained via a cookie/consent banner, processing is based on Art. 6 Abs. 1 lit. a GDPR and can be revoked at any time. Cloudflare is EU–US Data Privacy Framework certified. More info: https://www.cloudflare.com/de-de/privacypolicy/.
Your Rights as a Data Subject
Under GDPR, you have the right to:
- Access (Art. 15 GDPR) – What data do we process about you?
- Rectification (Art. 16 GDPR) – Correct inaccurate data
- Erasure (Art. 17 GDPR) – “Right to be forgotten”
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdraw consent (Art. 7 Abs. 3 GDPR)
To exercise these rights, contact:
Weinmarkt Poysdorf
Brünner Straße 28, 2170 Poysdorf
T: +43 2552 20371 22
E: weinmarkt@poysdorf.at
Right to complain to the Data Protection Authority
If you believe data processing violates GDPR, you can contact the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Tel: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
Currency and changes of this privacy policy
This privacy policy is current as of November 2025.





