1. Controller
The controller within the meaning of the GDPR (DSGVO) is:
VINOSOMM Tibor Stefán
Kreittmayrstraße 16
80335 München, Germany
Email: info@vinosomm.ai
2. Visiting the website
Hosting & server log files
This website is hosted by Hetzner Online GmbH on servers in Germany. When you visit, the server processes technically necessary access data (including the page requested, the time, the amount of data, the browser type). The legal basis is our legitimate interest in secure operation (Art. 6 Abs. 1 lit. f DSGVO).
Analytics
We measure usage with our own privacy-friendly solution that counts anonymous events. No IP addresses and no personal identifiers are stored, and we do not build cross-device profiles. Legal basis: Art. 6 Abs. 1 lit. f DSGVO.
Google Analytics 4
In addition, we use Google Analytics 4 (Google Ireland Ltd. or Google LLC, USA) in what is known as consent mode. Without your consent, no analytics cookies are set; only cookieless, anonymous signals are transmitted in that case. If you consent via the notice on the website (Art. 6 Abs. 1 lit. a DSGVO, § 25 TDDDG), Google Analytics collects pseudonymized usage data (pages visited, time spent, approximate origin) in order to provide us with reports on website usage. IP addresses are processed in truncated form. Any transfer to the USA takes place on the basis of EU standard contractual clauses. You can withdraw your consent at any time by deleting the selection stored in your browser (clear website data).
Cookies
The website uses technically necessary cookies - and analytics cookies (Google Analytics) only if you have consented to them. No third-party advertising cookies are set.
3. Using the VinoSomm app
Account & sign-in
To use the app you create an account; in doing so, we process the data required to sign in (email, display name). Via "Sign in with Apple" or "Sign in with Google" we receive the information needed to create the account. Legal basis: performance of a contract (Art. 6 Abs. 1 lit. b DSGVO).
Taste profile & tastings
We store your ratings, tastings, and taste profile linked to your account in order to give you personal recommendations (Art. 6 Abs. 1 lit. b DSGVO).
Wine and wine-list scanning
When you photograph a bottle, a wine list, or a dish, the image is processed for recognition or recommendation (Art. 6 Abs. 1 lit. b DSGVO). The photos are used to handle your request and are not permanently published.
AI features (scanning, sommelier chat, recommendations)
For AI features, we transmit your request (e.g. a chat message or scan photo) to specialized AI providers that generate a response on our behalf. Depending on the feature, these are OpenAI, Mistral AI, or Anthropic. Processing may also take place in third countries (in particular the USA); it is carried out on the basis of EU standard contractual clauses (Art. 46 DSGVO). Under the agreements we have concluded with these providers, your content is not used to train their models. Legal basis: Art. 6 Abs. 1 lit. b DSGVO.
Push notifications
You only receive push notifications if you allow them in the iOS system dialog. You can disable them at any time in settings. Legal basis: consent (Art. 6 Abs. 1 lit. a DSGVO).
4. Processors & recipients
We use the following service providers, which process personal data on our behalf and on our instructions (Art. 28 DSGVO); data processing agreements are in place with all of them, plus EU standard contractual clauses for any transfer to a third country:
- Hetzner Online GmbH (Germany) - hosting of website and backend
- Google Ireland Ltd. / Google LLC - Google Analytics (only with consent, see section 2)
- Supabase - database and authentication
- OpenAI (USA) - AI features (including image recognition, chat)
- Mistral AI (France) - AI features
- Anthropic (USA) - AI features
We do not sell personal data and do not pass it on to third parties for advertising purposes.
5. Our own advertising & communication
We use your email address and your use of the app to send you our own offers and product news about VinoSomm - by email to existing customers within the scope of § 7 (3) UWG (you can object at any time, e.g. via the unsubscribe link) or with your consent (Art. 6 Abs. 1 lit. a DSGVO). Within the app, we personalize content, recommendations, and offers based on your taste profile and your usage (Art. 6 Abs. 1 lit. b and f DSGVO). No cross-app tracking for third-party advertising takes place.
6. Aggregated analyses & market insights
We analyze usage, tasting, and taste data in anonymized and aggregated form (e.g. "how a vintage lands with Riesling drinkers") and reserve the right to use such analyses commercially and to share them with business partners such as wineries or the trade. These analyses contain no personal data: they do not allow any conclusions about individual people, and no re-identification takes place. We base the upstream anonymization on our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO).
7. Product improvement & security
We process usage and diagnostic data (e.g. error reports, feature usage) to keep the app stable, prevent abuse, and further develop our recommendations; pseudonymized or anonymized where possible. Legal basis: legitimate interest (Art. 6 Abs. 1 lit. f DSGVO).
8. Retention period & deleting your account
We store your data for as long as your account exists. You can delete your account at any time directly in the app ("Delete account") or request deletion by email to info@vinosomm.ai. Statutory retention obligations (e.g. for invoicing data) remain unaffected.
9. Business succession
If VinoSomm is sold or restructured in whole or in part, your data may pass to the legal successor within the limits permitted by law; that successor is bound by this privacy policy. We will inform you in that case.
10. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and objection - in particular against processing based on legitimate interests. Contact us at info@vinosomm.ai. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA).
11. Status & changes
This policy is updated whenever features change. Last updated: July 13, 2026.