Privacy policy

The controller for data processing on this website is:

This website sets no analytics or advertising cookies, embeds no tracking services and builds no user profiles. That is why there is no cookie banner. Fonts are served from our own server, no Google Fonts are loaded.

Personal data arises in two places: in the technical logs of our host, and in the form you use to ask for a tasting.

This website is hosted by Cloudflare (Cloudflare Germany GmbH, Rosental 7, 80331 Munich; parent company Cloudflare, Inc., USA). When a page is requested, Cloudflare processes technically necessary access data, in particular IP address, date and time, the address requested, the amount of data transferred, browser type and operating system.

The purpose is delivering the page, keeping the service stable and defending against attacks. The legal basis is Art. 6 (1) (f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Where data is transferred to third countries, we rely on the European Commission’s standard contractual clauses.

When you fill in the form we process what you enter: name, company or venue, type of business, email address, your message and the language of the page. This is stored in a Cloudflare database (D1) located in the European Union and also sent as a notification to our email address so that we can answer.

We use Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, part of the French Brevo SAS) to send that notification. Brevo processes the details of your request on our behalf under a data processing agreement according to Art. 28 GDPR. The data is processed within the European Union.

The purpose is solely to handle your request and prepare a possible contract. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual measures and Art. 6 (1) (f) GDPR for our legitimate interest in being able to answer enquiries. Providing the data is voluntary, but without it we cannot deal with the request.

We keep the request as long as it is needed to handle it, at most 24 months after the last contact, unless statutory retention periods say otherwise. We delete it sooner on request.

To protect the form from automated submissions we use Cloudflare Turnstile. Your IP address and technical characteristics of your browser are transmitted to Cloudflare and evaluated there. According to the provider, Turnstile uses no cookies for advertising or tracking purposes and builds no cross-device profiles.

The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in protection against misuse.

The site is served exclusively over an encrypted connection (HTTPS), so the data you send us is protected in transit.

You have the right to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21).

An informal email to info@corcdrinks.com is enough for any of these.

You can also complain to a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

We update this policy when the website or the legal situation changes. The version published here is the one that applies.