Privacy Policy

Last updated: 02.01.2026

The protection of your personal data is important to us. Below we inform you about what personal data is processed when using the website www.wein-qr.at, for what purposes this is done, and what rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Jo & Fred Web Design LLC
Dubai, Vereinigte Arabische Emirate
E-Mail: office@wein-qr.at

Jo & Fred Web Design LLC operates the WeinQR service.

2. Applicability of the GDPR

Although the controller is based outside the European Union, the General Data Protection Regulation applies because the WeinQR service is specifically aimed at users within the European Union (Art. 3 Para. 2 GDPR).

3. EU Representative pursuant to Art. 27 GDPR

For data subjects within the European Union, a representative has been appointed pursuant to Art. 27 of the General Data Protection Regulation:

Kerstin Schrempf
Aigen 15
8354 St. Anna am Aigen
office@wein-qr.at

The EU representative serves as a contact point for data subjects and supervisory authorities in connection with the processing of personal data by the controller.

4. Collection and Processing of Personal Data

4.1 Definition

Personal data is any information relating to an identified or identifiable natural person, e.g. name, email address, IP address or contract data.

Processing is always carried out in compliance with applicable data protection regulations.

4.2 Server Log Files

When you visit our website, the following data is automatically collected and stored in server log files:

  • pages accessed
  • date and time of access
  • amount of data transferred
  • referrer URL
  • browser and operating system used
  • IP address

This data is used exclusively for technical security, statistical analysis and optimization of the website. No personal evaluation takes place; IP addresses are processed anonymously.

Legal basis: Art. 6 Para. 1 lit. f GDPR

Legitimate interest: Ensuring stable and secure web operations

5. Purpose of Data Processing

Personal data is processed in particular for the following purposes:

  • Provision of product information (e.g. ingredients and mandatory information about wines)
  • Provision and operation of the WeinQR service
  • Contract execution and customer management
  • Processing of subscription contracts
  • Payment processing
  • Communication with users
  • Improvement and security of the website

6. Registration and User Account

During registration, personal data required for setting up and using a user account is processed.

Storage period:

Data is stored for the duration of the existing user account. After deletion of the user account, personal data is deleted immediately, unless legal retention obligations apply.

7. Email Contact

When contacting us by email, the personal data transmitted with the request is processed exclusively for handling the request.

  • No disclosure to third parties
  • Use exclusively for communication

Legal basis: Art. 6 Para. 1 lit. f GDPR

Storage period: until final resolution of the matter

8. Payment Processing and Subscription Model

Payment processing is carried out via the payment service provider:

Stripe Payments Europe Ltd
Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Irland

The following data is processed in particular during payment processing:

  • Name
  • Billing address
  • Payment data
  • Contract and transaction information

Processing is carried out for the execution of the subscription contract (annual subscription with optional monthly payment).

Legal basis: Art. 6 Para. 1 lit. b GDPR (contract performance)

For more information about data protection at Stripe, please visit stripe.com/privacy.

9. Data Transfer to Third Countries

As the controller is based in the United Arab Emirates, personal data may be transferred to a third country.

The transfer is based on appropriate safeguards pursuant to Art. 46 GDPR, in particular through the use of standard contractual clauses as well as supplementary technical and organizational measures.

Please note that third countries may have a different level of data protection than the European Union.

10. Use of Social Media Plugins

Social media plugins may be integrated on our website. When accessing a page with such a plugin, a direct connection to the servers of the respective provider is established.

Legal basis: Art. 6 Para. 1 lit. a GDPR (consent)

Integration only takes place after appropriate consent via a consent management system.

11. Rights of Data Subjects

Data subjects have in particular the following rights:

  • Information (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7 Para. 3 GDPR)

Requests can be sent at any time by email to datenschutz@wein-qr.at .

12. Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority. For Austria, this is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
E-Mail: dsb@dsb.gv.at
https://www.dsb.gv.at/

13. Note on Data Security

We point out that data transmission over the Internet may have security vulnerabilities. Complete protection of data against access by third parties is technically not possible.