Privacy Policy

1. Controller

Responsible for the data processing on this website is:

Ricardo D. Ullrich
Import und Vertrieb von Wein
Engelstraße 61, 55124 Mainz, Germany
Telephone: +49 174 925 4719
Email: info@vino-ventura.de

2. Principles

We process personal data only to the extent necessary to provide a functioning website and our services. The legal bases are, in particular, Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(f) GDPR (legitimate interest in the secure and economical operation of the business), Art. 6(1)(c) GDPR (legal obligation, for example tax retention) and Art. 6(1)(a) GDPR (consent).

3. Hosting and server log files

This website is operated on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the pages are accessed, the server automatically records access data in log files: the IP address of the requesting device, date and time, the address requested, the amount of data transferred, the referring page, and the browser and operating system identifier. The processing serves to deliver the website, to ensure stability and security, and to prevent abuse (Art. 6(1)(f) GDPR). The log data are deleted after a short time, unless they are needed to investigate a specific security incident.

4. Booking tours and tastings

When you book a tour or tasting through the website, we process the data you provide: name, email address, telephone number, number of people, preferred language, where applicable the pick-up location, and your voluntary comments. These data are used to reserve your place, confirm the booking and coordinate the delivery with you (Art. 6(1)(b) GDPR).

To manage the dates and the available places, the booking is entered into a Google calendar belonging to the provider. Google (Google Ireland Limited and, as sub-processor, Google LLC) processes these data as a processor on our instructions. No third-party booking portal is used, and no external booking widget is loaded in your browser.

We retain booking-related records for the duration of the statutory retention periods (up to ten years under § 257 HGB, § 147 AO). We delete other data as soon as they are no longer needed for processing.

In the comments field, you may voluntarily provide information about allergies or intolerances. These are health data. We process them solely to tailor your visit accordingly, and only with your explicit consent (Art. 9(2)(a) GDPR), which you give by entering them. You can withdraw your consent at any time by email to info@vino-ventura.de; we will then delete the information, but will also no longer be able to take it into account.

When you make a reservation, we also record that and when you accepted our general terms and conditions (AGB), and in which version, so that we can prove the conclusion of the contract (Art. 6(1)(b) and (f) GDPR).

5. Enquiries about private tours and corporate events

For private tours and corporate events, we accept your enquiry through a form. The data processed are name, email address, telephone number, preferred date, number of people, language and your message, in order to answer the enquiry and to prepare an offer (Art. 6(1)(b) and (f) GDPR). The data are transmitted to us by email and are deleted as soon as the enquiry has been finally dealt with and no retention obligations stand in the way.

6. Contact form

You can send us a message through the general contact form. Name, email address, subject and your message are required. We use these data exclusively to answer your request (Art. 6(1)(f) GDPR, and where there is a contractual connection Art. 6(1)(b) GDPR) and they are transmitted to us by email.

7. Sending email

We send confirmation and notification emails through Google Workspace (Gmail), a service of Google Ireland Limited. Google processes the sender and recipient addresses and the content of the message in order to deliver the email.

8. Cancellation

Confirmation emails contain a cancellation link. The link carries a signed identifier of your booking; no additional personal data are collected in the process.

9. Web analytics (Google Analytics for Firebase)

This website integrates Google Analytics for Firebase (Google Analytics 4, measurement ID G-CFWQYTHRYM), a service of Google Ireland Limited. Analytics collects pseudonymised usage data (including pages viewed, time and duration of the visit, approximate location based on the IP address, which is used only temporarily, device and browser type, referring page) and stores a random identifier to recognise returning visits. The IP address is not logged by Google Analytics 4.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Google Analytics is only loaded after you have chosen “Allow” in the cookie notice; without consent, no analysis takes place and no associated scripts or cookies are loaded. You can change your decision at any time with effect for the future using the “Cookie settings” link in the page footer.

10. Fonts

The fonts used (Lato, Playfair Display) are integrated locally when the website is built and are delivered from our server. As a result, no connection to Google servers is established when a page is loaded.

11. Recipients and transfers to third countries

The processors used are Google Ireland Limited and its sub-processor Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA (hosting, calendar, email, web analytics). In this context, data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; in addition, the EU Commission’s standard contractual clauses are in place. Data are passed on to other third parties only where we are legally obliged to do so.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. An informal message to the contact details given in the section “Controller” is sufficient to exercise your rights.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible for the controller is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate)
Hintere Bleiche 34, 55116 Mainz

14. Necessity of providing data

The information marked as mandatory fields is required for a booking or enquiry. Without this information, we cannot process the booking. Otherwise, the website can be visited without providing any personal data.

15. Status

This privacy policy is current as of 19 September 2026. We will adapt it if changes to the website or to the services used make this necessary.