We appreciate your interest in our company. Data protection has a particularly high priority for the management of the following publisher of this website: Gerhard Schlegl. In principle, Gerhard Schlegl's website can be used without providing any personal data. If a data subject wishes to use our company's special services via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing of personal data, for example, the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to Gerhard Schlegl. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed about their rights by means of this data protection declaration. Gerhard Schlegl, as the controller, has implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us in alternative ways, for example by telephone.

1. Definitions The data protection declaration of Gerhard Schlegl is based on the terminology used by the European guideline and regulation giver when issuing the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance. We use the following terms in this data protection declaration:

1) Data collection and usage “Wine Diary” collects and uses your information below to provide its service and to improve it over time. • Information is collected upon registration. While using the service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally, identifiable information includes your email address, your username, your password, your country, telephone number, and your IP address. • If you contact us via email, we may keep your message and email address to respond to your request. • “Wine Diary” owns all rights to photos taken with the Service. • “Wine Diary” is designed to help you to manage your wine data, tasting notes, etc. Data can be saved offline and will be automatically synced with the “Wine Diary” server once you go online. • Location information. We may use and store information about your location if you give us permission to do so. We use this information to provide features of our service, to improve and customize “Wine Diary”. You can enable or disable location services when you use “Wine Diary” at any time, through your mobile device settings. • Cookies. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser or app from the “Wine Diary” and stored on your device. We use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. • Telephone number and contacts. “Wine Diary” uses your telephone number and contacts to share tasting notes with other people in your contact list. Sharing happens only if you choose actively to do so.

2) Personal data Personal data is all information that relates to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is considered identifiable if he or she directly or indirectly, in particular by assigning an identifier such as a name, to one Identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

3) Data subject Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

4) Processing Processing is any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, recording, organization, organization, storage, adaptation or modification, reading, querying, the use, disclosure by transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

5) Restriction of processing Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

6) Profiling Profiling is any type of automated processing of personal data, which consists in the fact that this personal data is used to evaluate certain personal aspects that relate to a natural person, in particular to aspects related to work performance, economic situation, health, personal Analyze or predict the preferences, interests, reliability, behavior, location or relocation of this natural person.

7) Pseudonymization Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.

8) Controller or controller The person responsible or responsible for processing is the natural or legal person, public authority, agency, or other body that alone or together with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for naming them can be provided in accordance with Union law or the law of the Member States.

9) Processor The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible.

10) Receiver The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation mandate under Union law or the law of the Member States are not considered recipients.

11) A third a party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who are authorized to process the personal data under the direct responsibility of the controller or processor.

12) Consent Consent is any expression of will voluntarily be given by the data subject for the specific case in an informed manner and unequivocally in the form of a declaration or other clear confirmatory act, with which the data subject indicates that they consent to the processing of their personal data is.

2. The name and address of the person responsible for processing within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with a data protection character is: