Privacy policy
Last updated:
We take the protection of your personal data seriously. This page describes how biowenzer.lu collects, uses and protects your data, in accordance with the EU General Data Protection Regulation (GDPR) and the guidelines of Luxembourg's data protection authority (CNPD).
1. Data controller
Maison Viticole Roeder, rue de la Montagne 19B, L-6586 Steinheim, Grand Duchy of Luxembourg.
Luc Roeder · luc.roeder@biowenzer.lu · +352 691 628 731.
2. Supervisory authority
You have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux. Website: cnpd.public.lu · Phone: +352 26 10 60-1.
3. Data collected and purposes
Contact form: name, e-mail, phone (optional), subject, message. Legal basis: Article 6(1)b GDPR (pre-contractual measures) and Article 6(1)f (legitimate interest in answering enquiries). Retention: as long as needed to handle the enquiry, plus three years for limitation.
Order form: in addition to the contact form, postal address and wine selection. Legal basis: Article 6(1)b GDPR. Retention: statutory commercial archiving period under Luxembourg law.
Newsletter sign-up (checkbox on the order form): e-mail address, plus the IP address and timestamp of your opt-in as proof of consent (Article 7(1) GDPR). Legal basis: Article 6(1)a GDPR. Double opt-in via confirmation e-mail. One-click unsubscribe at any time via the link in every message.
Server logs: IP address, user agent, requested URL, HTTP status. Retained for a maximum of seven days for IT security, then deleted or aggregated. Legal basis: Article 6(1)f GDPR.
4. Processors
Vercel Inc. (USA) — hosting and cookieless Web Analytics. Certified under the EU-US Data Privacy Framework (adequacy decision of 10 July 2023, confirmed by the EU General Court on 3 September 2025). Legal basis: Article 6(1)f. Policy: vercel.com/legal/privacy-policy.
Resend Inc. (USA) — transactional and newsletter e-mail. DPF certified (June 2024). Legal basis: Article 6(1)b (transactional) and 6(1)a (newsletter). Policy: resend.com/legal/privacy.
Cloudflare Inc. — Turnstile (USA) — cookieless form bot protection. IP address processed for security purposes. DPF certified. Legal basis: Article 6(1)f. Policy: cloudflare.com/privacypolicy.
Google LLC — Maps (USA) — map embedded on the Contact page, loaded only after your explicit click on the load button. DPF certified. Legal basis: Article 6(1)a (click consent). Policy: policies.google.com/privacy.
IONOS SE (Germany) — hosting of editorial images and videos via assets.webmoderno.de. Hosting in Germany. Legal basis: Article 6(1)f. Policy: ionos.de/datenschutz.
5. Cookies and similar technologies
The site uses only strictly necessary cookies (consent storage, language preference). These cookies do not require your consent, in line with the CNPD cookie guidelines (2021).
No third-party audience or marketing cookies are used. Vercel Web Analytics works without cookies and without persistent identifiers.
Google Maps on the Contact page: the map is only loaded after you click the load button. Without that click, no data is sent to Google.
You can change your choice at any time via the 'Cookie settings' icon at the bottom of every page.
6. Your rights
Under Articles 15 to 22 GDPR you have the following rights: access, rectification, erasure (right to be forgotten), restriction of processing, objection and portability.
To exercise these rights, contact us by e-mail at luc.roeder@biowenzer.lu. We respond within 30 days.
You may also lodge a complaint with the CNPD (see Section 2).
7. Security
The site uses HTTPS (TLS 1.3) across all pages. Forms are protected against bots by Cloudflare Turnstile. Hosting follows Vercel security standards (SOC 2).
8. Newsletter (forwarding)
If you sign up via one of our newsletter forms (on the Events, Cellar & Tourism or Crémant page), we forward your e-mail address, the selected topic and the page's language to Maison Viticole Roeder (luc.roeder@biowenzer.lu). Maison Viticole Roeder is the sole controller for newsletter processing and uses a newsletter tool of their choice.
We (webmoderno, technical service provider) do not store your e-mail address in our own contact base. The notification is sent by e-mail via Resend and then handled by the recipient. The actual newsletter delivery — including double-opt-in confirmation and unsubscribe link — is managed directly by Maison Viticole Roeder.
You can unsubscribe at any time via the link in every newsletter or by contacting Maison Viticole Roeder at luc.roeder@biowenzer.lu.
9. Changes
This policy may evolve as services change or in case of legal updates. The date of the last update is shown at the top of this page.