Privacy Policy

1. Controller

The controller for data processing on this website is Thorsten Migge, 69115 Heidelberg, Germany, e-mail: hello@cellarmap.wine. Full details are in the legal notice.

2. Hosting and server log files

The website runs on the platform provider sota.io. Each page request involves technically necessary data: IP address, date and time, requested URL, referrer, and browser and operating system details. This is required to deliver the website and protect it against abuse (Art. 6(1)(f) GDPR).

To prevent abuse, some features (search, wine trip planner, forms) limit the number of requests per IP address. For this, the IP address is held briefly in memory and not stored.

3. Fonts

All fonts are served from our own server. Visiting the site does not connect to Google Fonts or any other font provider.

4. Browser storage

Without cookies, we keep in your browser's local storage only what a feature needs: your saved list, your choice in the cookie notice and – for the current session only – your latest wine trip plan. This data stays on your device and can be deleted in your browser settings.

5. Maps (OpenStreetMap)

Map tiles are loaded from the servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom), which receive your IP address. The legal basis is our legitimate interest in providing interactive maps (Art. 6(1)(f) GDPR); the United Kingdom is covered by an EU adequacy decision. Map data © OpenStreetMap contributors, ODbL licence.

6. Images from Wikimedia Commons and Unsplash

Many landscape and vineyard photos are loaded directly from Wikimedia Commons (Wikimedia Foundation Inc., USA) or Unsplash (Unsplash Inc., Canada/USA). These providers receive your IP address and technical browser data. The legal basis is our legitimate interest in an illustrated presentation (Art. 6(1)(f) GDPR).

7. Wine trip planner

Place search: when you enter a place, our server first looks it up in our own data and otherwise queries the Nominatim geocoding service of the OpenStreetMap Foundation. Only the search text is transmitted – not your IP address.

Choosing wineries: to compile the day plan, our server sends your planning details (region, date, times, party size, preferences, transport) together with data on candidate wineries to the AI service of Anthropic PBC (USA). No name, e-mail address or IP address is transmitted. Legal basis: Art. 6(1)(b) and (f) GDPR (providing the requested feature).

Requests to wineries: when you prepare a request from the plan, we store your name, e-mail address, message and the planned stops to document the request. Wineries with a Cellarmap inbox receive it there; for all others you open a prepared e-mail in your own mail app and send it yourself, not via us. Legal basis: Art. 6(1)(b) GDPR.

8. Contact and listing forms

When you write to us via the contact form, suggest a winery, claim a profile as a winery, or contact a winery via its profile, we store the form details (e.g. name, e-mail address, phone number, message, for visit requests the preferred date and party size, and for profile claims your role at the business) to handle the request or verify the claim. Contact requests are passed on to the winery concerned. Legal basis: Art. 6(1)(b) GDPR. The data is deleted once no longer needed for handling, or at your request.

8a. Sending e-mail

Confirmations and notifications (e.g. acknowledging your message, approving a winery profile, forwarding a visit request to the winery) are sent via an e-mail service provider acting on our behalf (Art. 28 GDPR). This involves the recipient address, name and content of the e-mail. Legal basis: Art. 6(1)(b) and (f) GDPR.

9. Statistics for wineries

For the statistics wineries see in their Cellarmap account, we count events on winery profiles (e.g. views, clicks on website or route) with a timestamp and a coarse country of origin. No cookies are set and no IP addresses are stored (Art. 6(1)(f) GDPR).

10. Google Analytics 4

This website uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyse how the atlas is used (page views, time on site, country, regions and estate profiles viewed). Processing takes place only on the basis of your consent under Art. 6(1)(a) GDPR. IP addresses are truncated by Google. Without consent, no analytics cookies are set and no data is sent to Google Analytics (Google Consent Mode). Transfers to the USA rely on the EU-US Data Privacy Framework. Retention of analytics data: 14 months.

11. Google AdSense

We use Google AdSense (Google Ireland Limited) to fund the atlas. The ad script is loaded only after you have made a choice in the cookie notice. With “Accept all”, Google and its partners may use cookies for personalised ads (Art. 6(1)(a) GDPR). With “Essential only”, only non-personalised ads are requested; Google still processes technical data such as the IP address to deliver ads and prevent fraud. Transfers to the USA rely on the EU-US Data Privacy Framework. More information: policies.google.com/technologies/ads.

12. Withdrawing consent

You can change or withdraw your choice at any time via “Cookie settings” in the footer. Withdrawal applies to the future.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Please contact hello@cellarmap.wine.

You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.