PRIVACY POLICY
Last updated: 30 September 2026
1. Controller
The controller responsible for processing personal data on this website is:
Wintersohl GmbH
Wallstraße 8–10
60594 Frankfurt am Main
Germany
Email: office@chriswintersohl.com
2. General Information
We process personal data only where necessary to operate this website, respond to enquiries, prepare or fulfil contractual relationships, comply with legal obligations, or protect legitimate business and security interests.
Personal data means any information relating to an identified or identifiable natural person.
3. Hosting and Server Log Files
This website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
When you access the website, the hosting provider may automatically process technical information, including:
IP address
Date and time of access
Requested page or file
Referring website
Browser type and version
Operating system
Internet service provider
Access status and transferred data volume
This information is required to deliver the website securely, maintain its technical operation and investigate misuse or attempted attacks.
The processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and efficient operation of the website.
The hosting provider processes data on our behalf in accordance with Article 28 GDPR. Server log data is deleted when it is no longer required for operational or security purposes, unless longer retention is necessary to investigate a security incident or comply with legal obligations.
4. Contact Form and Enquiries
When you contact us through the website, by email or through another communication channel, we process the information you provide. This may include:
Name
Email address
Message content
Details concerning the requested jewel, gemstone or appointment
Any documents or images voluntarily supplied
Technical information generated when the form is submitted
This information is used solely to review and respond to your enquiry, arrange an appointment and, where applicable, prepare a quotation, commission, acquisition or contractual relationship.
Where your enquiry concerns a possible or existing contract, processing is based on Article 6(1)(b) GDPR. In other cases, it is based on Article 6(1)(f) GDPR and our legitimate interest in responding to business enquiries and maintaining professional communication.
Information relating to an enquiry is retained only for as long as necessary to deal with the matter. If the enquiry leads to a business relationship, relevant information may be retained for the duration of that relationship and for any subsequent statutory commercial, contractual or tax retention period.
Please do not submit sensitive personal information unless it is necessary for your enquiry.
5. Cookies and Consent Management
The website uses a consent-management system through which you can accept, reject or manage optional cookies and comparable technologies.
Your consent preferences are stored so that the website can remember your selection. This storage is necessary to document and respect your decision and is based on Section 25(2) TDDDG and Article 6(1)(c) and (f) GDPR.
Where optional technologies require consent, they are used only after you have granted that consent. The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may withdraw or change your consent at any time through the cookie settings available on the website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Language Selection and Browser Storage
The website is available in English and German. To provide the appropriate language version, the website may read the preferred language configured in your browser.
Local storage and session storage may be used to remember whether:
A language was selected manually
Automatic language detection has already taken place during the session
The stored information does not directly identify you and is not used for advertising, analytics or profiling.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing visitors with the appropriate language version and preventing repeated automatic redirects.
You can remove locally stored information through your browser settings.
7. Contact Form Technology
The contact form is provided through the WordPress plugin WPForms. Information entered into the form is transmitted through the website and delivered to Wintersohl GmbH for processing.
The form provider does not independently use your enquiry for its own advertising purposes. Data is processed only to operate the form, ensure secure submission and deliver your message.
The legal basis corresponds to the purpose of your enquiry as described in Section 4.
8. Google Fonts
This website uses fonts provided through Google Fonts. Where these fonts are retrieved directly from Google servers, your browser may transmit technical information—particularly your IP address, browser information and the requested page—to:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google may also process information in the United States or other countries outside the European Economic Area. Where required, such transfers are protected through an applicable adequacy decision, the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
External Google Fonts may only be loaded on the basis of your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Further information is available in Google’s privacy policy:
https://policies.google.com/privacy
9. Recipients and Service Providers
Personal data may be disclosed to service providers where this is necessary to operate the website, maintain its security, provide communication services or fulfil legal and contractual obligations.
Possible recipients include:
Website hosting and technical service providers
Email and communication providers
Website maintenance providers
Professional advisers
Public authorities where disclosure is legally required
Service providers acting on our behalf are contractually bound to process personal data only according to our instructions and applicable data-protection law.
Personal data is not sold.
10. International Data Transfers
Where a service provider processes personal data outside the European Union or European Economic Area, we ensure that an appropriate legal basis and safeguards are in place.
These may include:
An adequacy decision of the European Commission
Certification under the EU–US Data Privacy Framework
European Commission Standard Contractual Clauses
Other safeguards recognised under Articles 44–49 GDPR
11. Storage Periods
Personal data is retained only for as long as necessary for the relevant processing purpose.
Data may be retained for longer where this is required by statutory commercial, contractual or tax obligations, necessary for the establishment or defence of legal claims, or required to investigate security incidents.
Once the relevant purpose and applicable retention obligations cease to apply, the data is deleted or anonymised.
12. Legal Bases
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Article 6(1)(a) GDPR: Consent
Article 6(1)(b) GDPR: Performance of a contract or pre-contractual measures
Article 6(1)(c) GDPR: Compliance with a legal obligation
Article 6(1)(f) GDPR: Legitimate interests
Where processing is based on legitimate interests, these interests principally concern secure website operation, effective communication, the protection of business operations and the prevention of misuse.
13. Your Rights
Subject to the applicable legal requirements, you have the right to:
Obtain information about your personal data
Request correction of inaccurate information
Request deletion of your personal data
Request restriction of processing
Receive data you have provided in a portable format
Object to processing based on legitimate interests
Withdraw consent at any time with future effect
Lodge a complaint with a data-protection supervisory authority
Requests may be sent to:
office@chriswintersohl.com
We may request appropriate information to verify your identity before responding.
14. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.
We will cease processing the relevant information unless compelling legitimate grounds override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.
You may object to processing for direct-marketing purposes at any time.
15. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority.
The supervisory authority responsible for Wintersohl GmbH is generally:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Website: https://datenschutz.hessen.de/
You may also contact the supervisory authority at your habitual place of residence, place of work or the location of the alleged infringement.
16. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.
The website uses encrypted SSL/TLS transmission. You can recognise an encrypted connection by the https:// address and the lock symbol displayed by your browser.
Nevertheless, data transmission over the internet cannot be guaranteed to be completely secure.
17. External Links
The website may contain links to websites or social-media services operated by third parties. When you follow such a link, the respective provider is responsible for any subsequent processing of personal data.
Please refer to the privacy information provided by the relevant third party.
18. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects visitors.
19. Changes to This Privacy Policy
We may update this Privacy Policy where legal requirements, website functions or data-processing practices change.
The current version is always available on this website.