privacy policy

We process personal data only to the extent necessary for operating this website and providing our services. This page explains what data this is, what we use it for and what rights you have. Last updated: 18 August 2026.

Controller

Bio-Weingut Frühwirth (Owner: Hans Frühwirth)
Wiener Neustädter Straße 75, 2524 Teesdorf, Austria
Phone: +43 2253 81216 · E-mail: info@fruehwirth.bio

The essentials first

This website uses no tracking or advertising cookies and uses no Google AnalyticsFonts are hosted on our own server (no Google Fonts). We only process data that you provide to us yourself (e.g. via the reservation form), along with technically necessary access data. We do count how often our pages are viewed without cookies and without recognising you. A cookie is only ever created in one single place, and only if you trigger it: when you start the 360° tour .

Hosting and server logs

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the website, Vercel processes technically necessary access data (IP address, date and time, page accessed, browser type). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; the transfer to the USA is based on the EU Standard Contractual Clauses.

Traffic measurement

We want to know how often our pages are viewed, and use Vercel Web Analytics — the same provider that hosts the website. The measurement runswithout cookies without leaving anything on your device. Visitors are not recognised: Vercel generates a checksum from the request for this purpose, which expires after 24 hours and does not allow linking across multiple days or websites.

Only aggregated information is collected: page viewed, referring page, country, device type, operating system and browser. This makes it impossible to draw conclusions about individual people; no profiles are created and no data is passed on to third parties. The legal basis is our legitimate interest in tailoring our offering to demand (Art. 6(1)(f) GDPR).

Contact

If you contact us by email or phone, we process your details in order to handle your enquiry and any follow-up questions (Art. 6(1)(b) GDPR). Our email account is operated by Google (Google Workspace, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland).

Phone calls

Calls made via our telephone system are recorded and automatically transcribed. The purpose is to document what has been agreed — in particular orders, reservations and commitments (Art. 6(1)(b) and (f) GDPR; our legitimate interest lies in being able to trace telephone agreements).

A summary is created from the call, which we file under the relevant contact in our customer management system (see there). We use software on our own computers for the transcription; the audio recording does not leave our premises. To help interpret the content of the call, we use a processor (Anthropic).

Recordings and transcripts are kept for ten years and then deleted. They are not passed on to third parties. If you would prefer a call with you not to be recorded, please let us know — you can also reach us by email at any time.

Customer management

To look after our customers, we keep a customer directory. It contains contact details (name, email address, phone number, and address where applicable), notes on enquiries, orders and calls, and a note of your relationship with us (for example, wine customer or Heuriger (wine tavern) guest). This information comes from your orders, from your contact by email or phone, and from the reservation form.

The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) as well as our legitimate interest in orderly customer management (Art. 6(1)(f) GDPR).

As a processor, we use Attio for this purpose (Attio Limited, 42 St John's Square, 2nd Floor, London EC1M 4EA, United Kingdom); a data processing agreement is in place. The European Commission has issued an adequacy decision for the United Kingdom, so no additional safeguards are required for the transfer. The data is stored on servers within the EU (Ireland).

An entry in the customer directory is not the same as signing up to our newsletter. You will only receive marketing emails if you have specifically signed up for them and confirmed your sign-up (see Newsletter).

We delete an entry as soon as it is no longer needed for customer management and no statutory retention period applies — and of course earlier if you wish (see Your rights).

Table reservation

Via the reservation form, we process name, phone number, requested date, time, number of people and, optionally, email address and comments — for the purpose of the reservation and its handling (Art. 6(1)(b) GDPR). The data is stored in our reservation management system (Google Workspace as processor) and forwarded internally to the service team. We delete reservation data as soon as it is no longer needed for handling and record-keeping.

If you are already listed in our customer directory, we will note there that you were a guest at our Heuriger. If you also tick the newsletter box on the form, we will create an entry for you in the customer directory with your name, email address and phone number (see Customer management).

Newsletter

If you sign up for our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). Sign-up follows a double opt-in procedure: you will receive a confirmation email and are only signed up once you have clicked the confirmation link. For sending emails, we use Resend (Resend, Inc., USA) as a processor; the transfer is based on the EU Standard Contractual Clauses. You can unsubscribe at any time via the unsubscribe link in every email or informally by emailing us; you may withdraw your consent at any time with effect for the future.

If you register via the reservation form, we also store your details in our customer directory (see Customer Management). This is independent of the newsletter: nothing is sent until you have clicked the confirmation link.

Online shop and basket

The basket is stored solely locally in your browser (localStorage) and is not transmitted to us. As soon as you complete an order, the purchase is processed via Shopify (Shopify International Ltd., 2nd Floor, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland) as processor; in doing so, we process the data necessary for order processing (Art. 6(1)(b) GDPR) and retain it in accordance with the statutory retention obligations (in particular 7 years under § 132 BAO).

360° tour

On the page Premises we offer a 360° tour provided by 3D Swissmedia (Swissmedia Group AG, Switzerland). The tour is only loaded once you explicitly start it — beforehand, no connection is made to this provider and no data is transmitted there.

If you start the tour, your IP address and technical details of your browser are transmitted to the provider and its service provider Cloudflare; in doing so, a cookie (cf_clearance, validity one year) is set, which the provider uses to protect against automated access. The legal basis is your consent, which you give by starting the tour (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can delete the cookie in your browser at any time; if you do not load the tour, it is never created.

Local storage in the browser

The website stores certain technically necessary settings (e.g. basket, display mode) in your browser's localStorage. This data remains on your device, is not transmitted to us and is not used for recognition or tracking.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, simply contact info@fruehwirth.bio. If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the Austrian data protection authority (www.dsb.gv.at).