Privacy Policy

of NIBIRU WINE GMBH

Effective Date: May 2026

1. General Information

The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data in connection with the use of our website and online shop.

2. Controller

NIBIRU WINE GMBH
Thürneustift 6
3562 Schönberg am Kamp
Austria
E-mail: mail@nibiru.wine
Phone: +43 664 1227406
Commercial Register Number: FN 609505 g
VAT Number: ATU79758246

3. Collection and Processing of Personal Data

We process personal data only to the extent necessary to provide our website, our online shop, and to process orders.

The following data may be processed:

  • First and last name
  • Billing and delivery address
  • E-mail address
  • Telephone number
  • Payment information
  • Order details
  • IP address
  • Website usage data
  • Communication data

4. Purposes of Data Processing

Your personal data is processed in particular for the following purposes:

  • Providing and operating the website
  • Processing orders
  • Delivering goods
  • Payment processing
  • Customer service and communication
  • Compliance with legal obligations
  • IT security and fraud prevention
  • Marketing and newsletters (only with consent)

5. Legal Basis for Processing

Your data is processed on the basis of:

  • Art. 6(1)(a) GDPR (consent)
  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(c) GDPR (legal obligation)
  • Art. 6(1)(f) GDPR (legitimate interest)

Our legitimate interest particularly consists of the secure and efficient provision of our online services.

6. Data Retention

We store personal data only for as long as necessary to fulfill the respective purposes or as required by statutory retention obligations.
Tax and commercial law retention periods may extend up to seven years.

7. Disclosure of Data

Personal data is only disclosed where necessary, particularly to:

  • Payment service providers
  • Shipping and logistics companies
  • IT service providers and hosting providers
  • Tax advisors and public authorities (where legally required)

Any disclosure is carried out exclusively in accordance with applicable data protection laws.

8. Payment Service Providers

As part of payment processing, payment data is transmitted to the selected payment service provider.
Processing is carried out solely for the purpose of payment handling and on the basis of Art. 6(1)(b) GDPR.

9. Cookies

Our website uses cookies.
Cookies are small text files stored on your device that enable certain website functions.
We use:

  • technically necessary cookies
  • functional cookies
  • analytics and marketing cookies (only with consent)

You may configure your browser to inform you about the use of cookies or to allow cookies only in individual cases.

10. Analytics and Tracking

If analytics or tracking tools are used (e.g. Google Analytics or Meta Pixel), this is done exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time.
Note: If tracking or marketing tools are actually used, they should be specifically listed in this Privacy Policy.

11. Newsletter

If you subscribe to our newsletter, we process your e-mail address for the purpose of sending information about our products and offers.
Subscription is carried out exclusively on the basis of your consent.
You may unsubscribe from the newsletter at any time using the unsubscribe link included in the newsletter or by contacting us via e-mail.

12. Contact Requests

If you contact us via e-mail or contact form, the data you provide will be processed for the purpose of handling your request.
Your data will not be shared with third parties without your consent.

13. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against loss, manipulation, or unauthorized access.
Our website uses SSL/TLS encryption.

14. Rights of Data Subjects

You have the right at any time to:

  • obtain information about your stored data
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • receive your data in a portable format
  • withdraw granted consent
  • object to data processing

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at/

15. Protection of Minors

The sale of alcoholic beverages is exclusively intended for persons who have reached the legally required minimum age.
Age verification may be carried out during the ordering process.

16. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy in the event of changes to legal requirements or our services.

The current version published on our website shall apply.