Legal notice & privacy
The following texts provide a workable baseline for the current state of the app. Before going live, please add the provider details in the legal notice and have the final version reviewed legally.
Legal notice
Information pursuant to Section 5 TMG and Section 18(2) MStV.
Provider of this website and the e-label-check.eu application:
Jeffrey Wolf
Kunstmuehlstr. 2
83022 Rosenheim
info@e-label-check.eu
Responsible for journalistic-editorial content pursuant to Section 18(2) MStV:
Jeffrey Wolf
Kunstmuehlstr. 2
83022 Rosenheim
Notice: The automated results of e-label-check.eu do not constitute legal advice or binding compliance confirmation.
Privacy policy
1. Controller
The controller responsible for data processing is the entity named in the legal notice.
Jeffrey Wolf
Kunstmuehlstr. 2
83022 Rosenheim
info@e-label-check.eu
2. Purposes of processing
e-label-check.eu is used for the technical pre-check of wine labels, QR codes, and e-label landing pages with regard to EU-related information and plausibility requirements. Processing takes place in particular to authenticate users, create checks, evaluate uploaded files, present results, and secure the operation of the application.
3. Processed data
Depending on the feature used, the following data in particular is processed:
- email addresses used for magic-link login or access management
- technical login data such as timestamp, IP address, user agent, and token metadata
- session data for authentication during the current session
- uploaded files such as label images and QR code images
- content extracted from files or landing pages, structured fields, check results, notes, and history entries
- audit and log data for tracing security-relevant and functional actions
- technical access data created when the application or API is accessed
4. Cookies and local storage
The application uses technically necessary cookies for session management and authentication. Without these cookies, the protected area cannot be used. In addition, an entry is stored in the browser local storage to save the decision made in the cookie notice.
Visit statistics
Google Analytics is only loaded after explicit consent. If you accept essential cookies only or have not made a selection yet, the Google tag remains disabled and no analytics cookies are set.
5. Legal bases
Depending on the context of use, processing is based on Art. 6(1)(b) GDPR to provide the application and handle user requests, on Art. 6(1)(f) GDPR to securely and stably provide the service and document technical processes, and where necessary on consent under Art. 6(1)(a) GDPR. Google Analytics is activated exclusively on the basis of your consent.
6. Recipients and service providers
Data is only transferred to third parties to the extent required to operate the application. If AI-assisted extraction is enabled, uploaded label images, screenshots, HTML content, or text derived from them may be sent to an external AI service for structured analysis. e-label-check.eu currently uses OpenAI as a service provider for API usage. If Google Analytics is activated, Google may process usage data as an additional recipient through the Google tag. According to OpenAI’s current documentation, data sent to the OpenAI API is not used to train or improve models unless explicit consent is given. For API usage, standard abuse monitoring logs may also be retained for up to 30 days; reduced retention options are available depending on configuration. Email services may also be used when sending login links.
Before production use, document the specific providers, their role as controller or processor, and any data processing or DPA agreements.
7. Retention period
User data, checks, uploads, extracted data, check results, and audit logs are stored as long as this is necessary for operation, traceability, internal documentation, or legal retention obligations. Session cookies are generally set only for the duration of the session. Login tokens expire after the configured validity period.
8. Obligation to provide data
Providing the data required for login and checking is necessary to use the protected functions. Without an email address, session cookie, or the content uploaded for the check, the respective function cannot be provided, or cannot be provided fully.
9. Rights of data subjects
Within the scope of legal requirements, data subjects have the right to access, rectify, erase, restrict processing, receive data portability, and object to certain processing activities. They also have the right to lodge a complaint with the competent data protection authority.
10. Security and professional classification note
Appropriate technical and organizational measures are taken to protect stored data. Despite careful technical analysis, e-label-check.eu does not provide legally binding assessment. Results are intended only for internal pre-checks and must be reviewed separately by legal or subject-matter experts where legally relevant.