privacy policy
We process personal data only as far as is necessary to run this website and provide our services. This page explains which data that is, what we use it for and what rights you have. Last updated: 4 October 2026.
Controller
Bio-Weingut Frühwirth (Owner: Hans Frühwirth)
Wiener Neustädter Straße 75, 2524 Teesdorf, Austria
Phone: +43 2253 81216 · E-mail: info@fruehwirth.bio
The essentials first
This website uses no tracking or advertising cookies and uses no Google Analytics. Fonts are served from our own server (no Google Fonts). The only data processed is what you send us yourself (e.g. via the reservation form), plus the access data that is technically necessary. We count how often our pages are visited without cookies and without recognising anyone. A cookie is created in a single place, and only if you trigger it: when you start the 360° tour .
Hosting and server logs
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the website, Vercel processes technically necessary access data (IP address, date and time, page accessed, browser type). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; the transfer to the USA is based on the EU Standard Contractual Clauses.
Traffic measurement
We want to know how often our pages are viewed, and use Vercel Web Analytics, the same provider that hosts the website. The measurement works without cookies and stores nothing on your device. Visitors are not recognised: Vercel builds a checksum from the request that expires after 24 hours and does not allow any linking across several days or websites.
Only aggregated information is collected: page viewed, referring page, country, device type, operating system and browser. This makes it impossible to draw conclusions about individual people; no profiles are created and no data is passed on to third parties. The legal basis is our legitimate interest in tailoring our offering to demand (Art. 6(1)(f) GDPR).
Contact
If you contact us by e-mail or telephone, we process your details to handle the enquiry and any follow-up questions (Art. 6 (1) (b) GDPR). Our e-mail account is run by Google (Google Workspace, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). We sort incoming e-mails and orders with the help of processors (Anthropic and OpenAI).
Phone calls
Calls on our telephone system are recorded and automatically transcribed. The purpose is to document what was agreed, in particular orders, reservations and commitments (Art. 6 (1) (b) and (f) GDPR; our legitimate interest lies in being able to trace what was agreed by telephone).
A summary is created from the call, which we file under the relevant contact in our customer management system (see there). We use software on our own computers for the transcription; the audio recording does not leave our premises. To help interpret the content of the call, we use processors (Anthropic and OpenAI).
Recordings and transcripts are kept for ten years and then deleted. We do not pass them on to third parties. If you do not want a call with you to be recorded, please tell us. You can also reach us by e-mail at any time.
Customer management
To look after our customers we keep a customer register. It holds contact details (name, e-mail address, telephone number, postal address where applicable), notes on enquiries, orders and conversations, and a note on how you relate to us (for instance wine customer or Heuriger (wine tavern) guest). The details come from your orders, from your contacting us by e-mail or telephone, and from the reservation form.
If an existing entry lacks an e-mail address or telephone number, we add it from publicly accessible sources, such as your own website or a business directory. For the search we pass name, postal address, company or website, any contact details we already hold and the note on how you relate to us to processors (Anthropic and OpenAI); we record the source with the entry. We use details added in this way for customer care, that is, for queries about orders and reservations. You will only receive promotional e-mails at such an address if you have signed up yourself. The legal basis is our legitimate interest in having reachable customer data (Art. 6(1)(f) GDPR); you can object to this at any time (see Your rights).
The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) as well as our legitimate interest in orderly customer management (Art. 6(1)(f) GDPR).
As a processor, we use Attio for this purpose (Attio Limited, 42 St John's Square, 2nd Floor, London EC1M 4EA, United Kingdom); a data processing agreement is in place. The European Commission has issued an adequacy decision for the United Kingdom, so no additional safeguards are required for the transfer. The data is stored on servers within the EU (Ireland).
Wine post after a purchase. If you buy wine from us via the order form or in the web shop, we will send you the occasional wine post by e-mail about our own wines. Under § 174 (4) TKG 2021 this is permitted without a separate subscription, because we received your address with the purchase. The legal basis is our legitimate interest in advertising our own products (Art. 6 (1) (f) GDPR). You can decline this when you order (in the order form, „keine Weinpost“ (no wine post) in the remarks is enough) and at any time, free of charge, via the unsubscribe link in every wine post or with a short e-mail to info@fruehwirth.bio. Addresses listed in the RTR's ECG list do not receive wine post. All other entries in the customer register, for instance after a reservation or an enquiry, receive marketing e-mails only with a separate subscription (see Newsletter).
We delete an entry as soon as it is no longer needed for customer care and no statutory retention period stands in the way. Earlier at your request, of course (see Your rights).
Receipts, business cards and photos
Invoices and delivery notes from companies, business cards and documents we receive at trade fairs, for example, as well as photos and files sent to us by customers or our team are read automatically so that we can sort and file them. For this we pass the image or file on to processors (Anthropic and OpenAI). The legal basis is the performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), for receipts our statutory retention obligations (Art. 6 (1) (c) GDPR) and otherwise our legitimate interest in orderly record-keeping (Art. 6 (1) (f) GDPR).
Table reservation
Via the reservation form we process name, telephone number, requested date, time and number of people, and optionally e-mail address and remarks, for the purpose of making and handling the reservation (Art. 6 (1) (b) GDPR). The data is stored in our reservation system (Google Workspace as processor) and passed on internally to the service team. We delete reservation data as soon as it is no longer needed for handling and proof.
If you are already in our customer register, we note there that you were a guest at our Heuriger (wine tavern). If you also tick the newsletter box in the form, we create an entry for you in the customer register with name, e-mail address and telephone number (see Customer records).
Newsletter
If you sign up for our newsletter, we process your e-mail address on the basis of your consent (Art. 6 (1) (a) GDPR). Sign-up uses a double opt-in procedure: you receive a confirmation e-mail and are only subscribed once you click the confirmation link. For sending we use Resend (Resend, Inc., USA) as processor; the transfer rests on the EU standard contractual clauses. You can unsubscribe at any time via the unsubscribe link in every e-mail or informally by e-mail to us; you can withdraw your consent at any time with effect for the future.
If you sign up via the reservation form, we also store your details in our customer register (see Customer records). That is independent of the newsletter: nothing is sent until you have clicked the confirmation link.
Online shop and basket
The basket is stored only locally in your browser (localStorage) and is not sent to us. Once you complete an order, the purchase is processed via Shopify (Shopify International Ltd., 2nd Floor, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland) as processor; in doing so we process the data needed to handle the order (Art. 6 (1) (b) GDPR) and keep it in line with statutory retention periods (in particular 7 years under § 132 BAO).
360° tour
On the page Premises we offer a 360° tour provided by 3D Swissmedia (Swissmedia Group AG, Switzerland). The tour is only loaded when you explicitly start it. Before that, no connection to this provider is made and no data is sent there.
If you start the tour, your IP address and technical details of your browser are sent to the provider and its service provider Cloudflare; in the process a cookie (cf_clearance, valid for one year) is set, which the provider uses to protect against automated access. The basis is your consent, which you give by starting the tour (Art. 6 (1) (a) GDPR, § 165 (3) TKG 2021). You can delete the cookie in your browser at any time; if you do not load the tour, it is never created.
Local storage in the browser
The website stores a few technically necessary settings (e.g. basket, display mode) in your browser's localStorage. This data stays on your device, is not sent to us and is not used for recognition or tracking.
Your rights
You have the rights to access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, simply contact info@fruehwirth.bio. If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the Austrian data protection authority (www.dsb.gv.at).