Privacy Policy

Last updated: October 2026

Who is responsible

The controller for this website under the General Data Protection Regulation (GDPR) is:

The short version

We do not use advertising trackers. The site sets no cookies unless you accept analytics in the banner, and advertising features stay off even then. There are no accounts and no newsletter signup. We process personal data when you write to us, in the technical logs any website produces, and, only if you consent, for visit statistics.

Hosting and server logs

The site is delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), through its servers in the EU and worldwide. To deliver pages and protect them from abuse, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time. Our legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Cloudflare processes this data for us under a data processing agreement. Where data leaves the EU, it relies on appropriate safeguards such as the standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

Visitor statistics (Google Analytics)

If you click “Accept analytics” in the banner, we load Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It sets cookies (_ga and _ga_*) and measures which pages are viewed, how long visits last, your approximate location, and your browser and device type. Google Analytics 4 does not log or store IP addresses. We have switched off Google signals and advertising personalisation, and we do not link the data to your identity. Data may be processed by Google LLC in the USA, which relies on the EU-US Data Privacy Framework and standard contractual clauses.

Until you accept, nothing is requested from Google. Our legal basis is your consent (Art. 6(1)(a) GDPR and section 25(1) of the German TDDDG). You can withdraw it at any time, with effect for the future, through “Cookie settings” in the footer, which also deletes the Analytics cookies. Analytics data is kept for no longer than 14 months.

Contact form

If you use the contact form, we receive your name, email address, the topic you chose and your message. We use them only to answer you. The form sends your message through our own server to our email provider Resend (Resend, Inc., USA), which delivers it to our mailbox, and which acts as our processor under standard contractual clauses. We do not keep your message in a database on the website.

Our legal basis is taking steps at your request before a contract (Art. 6(1)(b) GDPR) or, for general questions, our legitimate interest in answering you (Art. 6(1)(f)). We delete your message once your enquiry is resolved, unless a legal retention duty applies, for example for invoices and business correspondence connected to a paid service.

Spam protection (Cloudflare Turnstile)

The contact form uses Cloudflare Turnstile to tell people from automated spam. When the contact page loads, your browser contacts Cloudflare (challenges.cloudflare.com), which receives your IP address and technical browser signals and checks them in the background. Turnstile does not use advertising cookies or build profiles of visitors. Our legal basis is our legitimate interest in keeping the form free of spam and abuse (Art. 6(1)(f) GDPR). If the check cannot run, for example because a script blocker stops it, the form offers to open your email app instead.

Email

If you write to info@winesandjoy.com directly, your message and address are processed by our email provider Titan Email so that we can read and answer it. The same legal basis and deletion approach as for the contact form apply.

Paid advisory services

If you book a paid service, we process the details needed to perform it and to invoice you, such as name, address and the content of your brief. Our legal bases are performance of a contract (Art. 6(1)(b) GDPR) and legal obligations such as tax and accounting rules (Art. 6(1)(c)). Invoices are kept for the periods the law requires.

Content from other sites

Fonts, videos and images are hosted on this site, so your browser does not contact Google Fonts or video platforms. The links to Instagram are ordinary links: nothing from Instagram is loaded until you click, and Instagram’s own privacy policy applies from then on.

Your rights

You can ask us for access to your data, correction, deletion, restriction of processing and a portable copy. You can object to processing based on our legitimate interests, and withdraw any consent you gave, at any time with effect for the future. Write to info@winesandjoy.com.

You also have the right to complain to a data protection authority. For us, that is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin.

Changes

If we add something that changes how we handle data, such as a newsletter, we will update this page first and show the date above.