Thank you for visit our website and your interest in the Monestary Cellar Muri-Gries and its products. The protection and security of our customer’s and visitor´s personal data are very close to our hearts. That is why at the Monestary Cellar Muri-Gries, we strive to design our website and business processes in a way that keeps the processing of personal data to a minimum. For this reason, we would like to inform you, in accordance with art. 13 of the European Data Protection Regulation 2016/679 ("GDPR"), about the nature, scope and the purposes of data processing, as well as your rights with regard to the processing operations carried out by us. The data processing on this website is carried out by the Muri-Gries of Szukics Stefan & C. Sas (limited partnership), who’s exact contact data can be found in the imprint of this website. The use of "we", "us", "our" or similar terminology, refers to Monestary Cellar Muri-Gries.
General Conditions
As a general rule, the use of our website is not possible without providing any personal data (e.g. IP-address). Personal data, such as name, address or e-mail addresses, are collected through our website, as far as possible only on a voluntary basis.

Data we collect
When you visit our website, some standardized information about your terminal device or the browser you are using to connect to our website is stored by our web server. As a general rule, no data are stored that could be traced back to a specific person, unless you yourself provide further details concerning your person by means of the contact forms made available on our website (such as first name, surname, address, street, house number, e-mail address, etc.).

Contact forms
Any personal information about yourself that you disclose using the contact forms available on our website, will be processed within the scope of your consent and exclusively for the fulfilment of our contractual and legal obligations. We store these data within the scope of the legal retention requirements. All consents granted can be revoked independently of each other at any time. A revocation of consent means that, from this point onwards, we will no longer process your data for the above-mentioned purposes. Any corresponding rights, advantages etc. can therefore no longer be claimed. If you wish to revoke your consent, please contact the e-mail address given in the imprint.

Newsletter
Through our website you can subscribe to our newsletter so that we can regularly inform you (2-4 times a year) about products from the Monestary Cellar range. The contact data processed by us for this purpose are: Name, surname and e-mail address. Information and advertising material is only sent on the basis of your specific consent and in the form of an express agreement. In order to ensure that the subscription request is made by theowner of the e-mail address him or herself, and not by a third party, the newsletter service will be activated only after acceptance of the confirmation e-mail (so-called "double opt-in procedure"). For reasons of traceability and optimization of our relationship with interested parties and customers, we also measure the success rate of our newsletters by checking the opening rates and link clicks of our subscribers. These measurements are not carried out pseudonymously, but are stored with reference to the individual e-mail addresses. Consent is valid until revoked and can be given at any time with effect for the future by clicking on the unsubscribe-button contained within the newsletter itself (or by e-mailing info@muri-gries.com).
The newsletter is sent exclusively via e-mail. Within the framework of already existing customer relationships and on the basis of our legitimate interests, we regularly send follow-up advertising in order to inform our customers with respect to products they have already purchased or to draw their attention to products that are analogous to those already purchased in the past.

Mailchimp - Newsletter
Our newsletters are sent via "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. To this end, Mailchimp stores e-mail addresses and other information that is necessary for the dispatch and analysis of the newsletters, i.e. for the performance of the ordered services. The company is certified under the Privacy Shield Agreement and thus guarantees compliance with the European level of data protection, see link . Mailchimp’s exact privacy practices can be viewed here.

Data processors, recepients
We process your data with the support of contract processors who help us in providing our services (e.g. web hosters and newsletter dispatch service).
These data processors must ensure the protection of your personal data and may process such data on documented instructions received by us and only in connection with the services we provide. We may transfer your data to the judicial authorities and to any other person to whom the data must be disclosed for legal or contractual reasons for the purposes stated above and without your express consent, provided the processing is necessary for such purposes (such as transfer to our tax advisors and auditors or banking and financial institutions) and only if your interests, fundamental rights and freedoms with respect to the specific purpose of the processing do not override our own. The aforementioned persons process these data in their capacity as independent data controllers.

Security
Our administrative, technical, and physical security measures are continuously being improved by us to provide protection of your data against unauthorized access, loss, destruction, or change. The security measures include firewalls and data encryption as well as access control to shared information.

Retention and deletion of data
Should you no longer be interested in us continuing to use your data to provide you with certain services via our platform, you can request that we delete your data. Please note that we may retain some of your personal information for the purposes of our legitimate business interests. Data that we process for marketing purposes will be retained for no longer than 2 years.

Cookies
This website uses cookies. Cookies make websites more user-friendly and efficient for the user. A cookie is a small text file that is used to store information. When visiting a website, the website may place a cookie on the visitor's computer. If the user visits the website again later, the website can read the data from the previously stored cookie and thus determine, for example, whether the user has visited the website before and what areas of the website the user was particularly interested in. To learn more about the use of our cookies, please read the Cookie Policy of our website.

Server log files
This website processes the following personal data in a server log file for the purpose of monitoring the website’s technical functions and increasing the operational security of the web server on the basis of our overriding legitimate interest (technical security measures) and in order to comply with statutory requirements: Invoked content, time necessary for the server to respond to a request, browser type and version, operating system, referrer URL, IP-address, hostname;
These logs remain stored for 52 weeks and are then deleted by the server itself. These data are processed exclusively within the European Union.

Your rights
As a data subject, pursuant to Articles 15-18, 20 and 21 GDPR you may exercise the following rights:
the right of access, which is to say the right to obtain from the Data Controller information as to the personal data that are processed for the abovementioned purposes and to obtain a copy thereof;
the right to rectification, namely the right to obtain rectification of inaccurate or incomplete personal data concerning you;
the right to erasure, anonymization and restriction of the personal data concerning you in the cases provided for by law;
the right to portability, namely your right to receive the Data, which you have provided to the Data Controller, either by consent or for the performance of a contract, in a structured, commonly used and machine-readable format, and to have said Data transmitted to another data controller;
the right to object to the processing of your Data, which is based on our legitimate interests; as well as
the right to withdraw your consent for the processing of your Data. From the moment of withdrawal, personal data relating to you may no longer be processed by us for the purposes for which it was originally given. As a result, any rights or benefits resulting from the processing can also no longer be exercised. The lawfulness of the processing of your Data prior to the withdrawal is not affected by it.

You also have the right to lodge a complain with the competent supervisory authority:
Garante per la protezione die dati personali, Piazza di Monte Citorio n. 121, 00186 – Roma, Fax: (+39) 06.69677.3785, Telefon: (+39) 06.696771, E-mail: garante@gpdp.it


Links to other websites
We link to websites of providers that are not affiliated with us (third parties). If you open these links, we no longer have any influence on the collection and use of your data. Information on this can be found in the data protection declarations of the respective providers of the linked websites. We do not assume any responsibility for the collection and processing of data.

Changes to the Privacy Notice
We reserve the right to adapt and amend our privacy policy at any time in accordance with these terms and conditions. Should any changes be made, this will be indicated on our website and the last modification date of this privacy policy will be publicly updated.

Contact
Muri-Gries di Szukics Stefan & Co. KG, Grieserplatz Nr. 21 – 39100 Bozen, St-Nr. 01461970210, Tel. 0471 282287, E-Mail: info@muri-gries.com, acts as the data controller within the meaning the data protection statutory regulations.

updated: October 2018