Privacy policy and consent

Contents

1. Objective and responsible authority
2. Basic information on data processing
3. Processing of personal data
4. Registration and termination
5. Collection of access data
6. Cookies & Audience measurement
7. Google Analytics
8. Google Re/Marketing Services
9. Facebook Social Plugins
10. Facebook Remarketing
11. Integration of third-party services and content
12. User rights and erasure of data
13. Right of objection
14. Changes to the privacy policy

  1. Objective and responsible authority
    1. This privacy policy clarifies the nature, scope and purpose of the processing of personal data within our online offer and its related websites, online shops, functions and contents (hereinafter collectively referred to as “online offer” or “website“). This privacy policy applies irrespective of the domains, systems, platforms and devices (e.g. desktop or mobile) via which the online offer is accessed.
    2. Provider of the online offer and the data protection authority is Privatbrauerei Schweiger GmbH & Co. KG, Ebersberger Straße 25, 85570 Markt Schwaben, Germany (hereinafter referred to as “we” or “us”). For further information and ways of contacting us, please refer to our legal notice: https://www.schweiger-bier.de/impressum.
    3. Name and ways of contacting our data privacy officer: datenschutzbeauftragter@schweiger-bier.de.
    4. The term “user” encompasses all customers and visitors to our online offer. The terms used, such as “user”, refer to both genders.
  2. Basic information on data processing
    1. We process personal data of the users only in compliance with the relevant data protection regulations. This means that the data of users are only processed if legal consent has been given, i.e. in particular, when data processing is necessary and/or legally prescribed in order for us to provide our contractual services (e.g. processing of orders) and online services, when consent has been given by the users, as well as on the grounds of legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer), particularly with regard to internet audience measurement, collection of access data and use of services by third parties.
    2. With regard to the processing of personal data on the basis of the data protection ordinance (GDPR) valid from 25. May 2018 onwards, we hereby declare that the legal basis of consents shall be Art. 6, para. 1(a) and Art. 7 of the GDPR, the legal basis for the processing of data for the performance of services and contractual obligations shall be Art. 6, para. 1(b) of the GDPR, the legal basis for the data processing for the fulfilment of our legal obligations shall be Art. 6, para. 1(c) of the GDPR, and the legal basis for the processing of data in order to maintain our legitimate interests shall be Art. 6, para. 1(f) of the GDPR respectively.
    3. We employ organisational, contractual and technical security measures based on state-of-the-art technology to ensure that the regulations defined by data protection legislation are complied with and to safeguard against the data processed by us being subject to any incidental or malicious manipulation, loss, destruction or access by unauthorised parties.
    4. If, in the context of this privacy policy, use is made of content, tools or other means from other providers (hereinafter referred to collectively as “third-party providers”) whose registered offices are abroad, it is assumed that a data transfer takes place to the home countries of these third-party providers. The transmission of data to third countries is either based on legal authorization, user consent or special clauses of the contract, which ensure a legally required security of the data.
  3. Processing of personal data
    1. In addition to the use expressly stated in this privacy policy, the personal data are processed to fulfil our contractual duties and to carry out pre-contractual measures and to fulfil our statutory duties. These services include providing, carrying out, maintaining, optimising and securing our services, services and user services.
    2. We pass user data to third parties only if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes when this is necessary to fulfil our contractual obligations vis-a-vis users (e.g. address notification to suppliers).
    3. When contact is made with us (using the contact form or via email), the user’s details are stored for the purposes of processing the enquiry and in case any follow-up questions arise.
  4. Registration and termination
    1. As part of the registration, the necessary mandatory information will be communicated to the users. These include in particular:- name, first name, street, house number, post code, city, place of birth, email address (is not visible to other users) and password (is assigned automatically and stored encrypted).
    2. Each user decides themselves whether to add any data beyond the aforementioned.
    3. The user profiles are public and cannot be indexed by search machines.
    4. It is the responsibility of the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
    5. The retention of backups is kept as short as possible. However, when running software (especially if newly developed and subject to continual improvement), it may be necessary to rectify certain irregularities retroactively and thereby also protect the integrity of user data. Therefore, after termination it may take up to 14 days for final deactivation of the user account and deletion of data from backups. Data remains stored beyond this period for billing purposes or if legitimate contractual interests exist that outweigh users’ deletion interests (e.g. the blocking of an email address in the event of a house ban) or retention is necessary for statutory reasons.
  5. Collection of access data
    1. On the basis of our legitimate interests, we collect data about each access to the server on which this service resides (so-called server logfiles). Access data includes name of the retrieved web page, file, date and time of the retrieval, transmitted data volume, message of successful retrieval, browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider.
    2. We use the log data without assignment to the user’s identity or other profile creation according to the legal regulations only for statistical evaluations for the purpose of operation, security and optimization of our online offer. However, we reserve the right to check the log data at a later date, if there is a reasonable suspicion of unlawful use.
  6. Cookies & Audience measurement
    1. Cookies are information which is transferred from our web server or third party web servers to the web browsers of users and which are stored there for later access. Cookies may relate to small files or other means of storing information. We use session cookies to check your login status and to manage the shopping basket while you browse our online offer. During a session cookie, a unique randomly-generated identification number is stored, a so-called session ID. Besides this, the cookie receives details of its origin and storage duration. These cookies are not able to store any other data. Session cookies are deleted once you have finished using our online offer and have logged out, for example. Users are informed about the use of cookies in the context of pseudonymous Internet audience measurement as part of this privacy policy.
    2. If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
    3. The option is available to manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices or the European website http://www.youronlinechoices.com/uk/your-ad-choices/.
  7. Google Analytics
    1. We use Google Analytics, a web-based analysis service provided by Google Inc. (“Google”) on the grounds of our legitimate interests (i.e. interests in analysing, optimising and commercially operating our online offer). Google uses cookies. The information generated by the cookie about the use of the online offer by users is generally transferred to a Google server in the USA and stored there.
    2. Google will use this information on our behalf to evaluate the use of our online offer by users in order to compile reports on the activities within this online offer and to provide further services related to the use of this online offer and the Internet. Here, pseudonymous user profiles can be created from the processed data.
    3. We only use Google Analytics with IP anonymisation enabled. This means that the IP address of the users will be shortened by Google within the Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be first transferred to a Google server in the USA and truncated there.
    4. The IP address transmitted by the user’s browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the online offer, as well as the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=deDisable Google Analytics
    5. Further information about Google’s usage of data, setting and opt-out options can be found on the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of your website or our partners’ apps”), http://www.google.com/policies/technologies/ads (“Data usage for promotional purposes”), http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”).
  8. Google-Re/Marketing-Services
    1. We are able to use the marketing and remarketing services (“Google Marketing Services” for short) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”) within our online offer on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer).
    2. Google Marketing Services allows us show ads for and on our website in a more targeted way, showing users only those ads that are potentially of interest to them. If a user is shown ads for products that he/she has been interested in on other websites, the process is referred to as “remarketing”. For this purpose, Google executes a code as soon as a user calls up our or other websites for which Google Marketing Services have been activated. So-called (re)marketing tags (invisible graphics or codes, also referred to as “web beacons”) are embedded into the website. This allows a customised cookie, i.e. a small text file, to be stored on the user’s device (comparable technologies may also be used instead of cookies). The cookies can be placed by various domains including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file contains information about the websites visited by the user, the contents he/she is interested in and the offers he/she clicked on, as well as technical information relating to the browser and operating system, the referrer websites, the visit time and other details regarding the use of the online offer. The user’s IP address is also logged; please note that with regard to Google Analytics, IP addresses within member states of the European Union or in other signatory states to the Agreement on the European Economic Area are truncated, and that, only in exceptional cases, is a complete IP address transmitted to a Google server in the USA before being truncated there. The user’s IP address is not combined with the user’s data within other Google services. Google may combine the information mentioned above with such information from other sources. When the user subsequently visits other websites, he/she can be shown ads which are tailored to his/her interests.
    3. The user’s data is processed within Google Marketing Services using pseudonyms. This means Google does not store and process the user’s name nor the e-mail address, but instead processes the relevant data within pseudonymous user profiles using cookies. This means, from Google’s point of view, that the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected by Google Marketing Services regarding users is sent to Google and stored on Google servers in the USA.
    4. One of the Google Marketing Services we use is the online advertising program “Google AdWords”. With Google AdWords, each AdWords customer receives a different “conversion cookie”. Therefore, cookies cannot be traced through the websites of AdWords customers. The information collected by means of the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers only get to know the total number of visitors who clicked on the advertisement and were forwarded to a site which includes a conversion tracking tag. However, they do not receive any information that personally identifies users.
    5. We can integrate third-party advertisements based on Google Marketing Services’ “Double Click”. “DoubleClick” uses cookies to enable Google and its partner websites to place ads based on the users’ visits to this site or other websites on the Internet.
    6. We can include third-party advertisements based on Google Marketing Services’ “AdSense”. “AdSense” uses cookies to enable Google and its partner websites to place ads based on the users’ visits to this site or other websites on the Internet.
    7. We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website.
    8. Additional information about Google’s use of data for marketing purposes can be found on this overview page: https://www.google.com/policies/technologies/ads. For details about Google’s Privacy Policy, please go to: https://www.google.com/policies/privacy.
    9. If you wish to object to interest-based advertising by Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
  9. Facebook Social Plugins
    1. Within our online offer, we are able to use social plugins (“plugins”) of the Facebook social network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer) . These plugins are recognisable through the Facebook logo (white “f” on blue tile) or the “Like” button (a “thumbs-up” sign) or are marked with the addition “Facebook”. A list showing the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
    2. When a user calls up a function of this online offer containing such a plugin, his/her device establishes a direct connection to the Facebook servers. The content of the plugin is transferred from Facebook directly to the user’s device, which integrates it into the online offer. Usage profiles of users can thereby be created from the processed data. As the operator of this website, we point out we have no influence on the extent of the data that Facebook collects or uses with the help of this plugin.
    3. Through integration of the plugin, Facebook receives information that a user has called up a particular page of the online offer. If the user is logged in to Facebook, the visit can be assigned to their Facebook account. If a user interacts with the plugin by using the Facebook “Like” button or making a comment, for example, the corresponding information is transferred from their device directly to Facebook and stored there. If a user is not a member of Facebook, the latter may still find out and store the user’s IP address. According to Facebook, in Germany only an anonymised IP address is stored.
    4. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the rights and settings for the protection of the privacy of the users, can be found in Facebook’s privacy statement: https://www.facebook.com/about/privacy/.
    5. If a user is a Facebook member and does not want Facebook to collect data about him through this online offer, and to link his or her member data stored on Facebook, he/she must log out of Facebook before using our online offer and delete his cookies. Further settings and opt-outs on the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are independent of the platform, that is, they are used for all devices, such as desktop computers or mobile devices.
  10. Facebook Remarketing
    1. Within our online offer, we are able to use so-called Facebook Pixels of the Facebook social network operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 USA or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer). With the help of Facebook Pixel, Facebook is able to determine the visitors to our offer as a target group for the display of ads, so-called “Facebook Ads”. Accordingly, we use Facebook Pixel to display our Facebook ads only to those Facebook users who have also shown interest in our Internet offer. That is, with the help of the Facebook pixel, we want to ensure our Facebook ads match the potential interests of users and are irritating. With the help of the Facebook pixel, we can also examine the efficacy of Facebook promotional ads for statistical and market research purposes, by seeing whether users have been redirected to our website after clicking on a Facebook ad.
    2. When our web pages are called up, the Facebook pixel is directly linked in by Facebook and able to store a so-called cookie, i.e. a small file, on your device. When you next log in to Facebook or visit Facebook in the logged-in state, the visit to our offer will be recorded in your profile. The data collected about you are anonymous, so does not allow us to draw any conclusions about the user’s identity. However the data are stored and processed by Facebook, so a connection with the particular user profile is possible. Facebook processes data as stipulated in its Data Privacy Policy. Accordingly, more information about how the remarketing pixel works and how to display Facebook ads can be found in Facebook’s Data Privacy Policy: https://www.facebook.com/policy.php.
    3. You can opt out of the recording and use of your data by the Facebook Pixel to show Facebook ads. To do this, you can visit the Facebook page and follow the advice about settings for user-based advertising: https://www.facebook.com/settings?tab=ads or the opt-out via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are independent of the platform, that is, they are used for all devices, such as desktop computers or mobile devices.
  11. Integration of third-part services and contents
    1. Within the context of our online offer and on the basis of our legitimate interests (i.e. interests in the analysis, optimisation and commercial provision of our online offer) we rely on content-based or service offerings from third-party providers in order to integrate their contents and services, such as videos and fonts, for example (hereinafter referred to as “contents”). A precondition for this is always that the third-party providers of these contents can identify the IP address of users, since they are unable to transmit the contents to their browsers without the IP address. The IP address is therefore necessary in order to display these contents. We endeavour to use only such contents where the respective providers use the IP address solely to deliver the contents. Third-party Providers may also use so-called pixel tags (invisible graphic files, also referred to as “web beacons”) for statistical analyses or marketing purposes. Pixel tags allow information such as user traffic on the pages of this website to be analysed. This pseudonymised information may also be stored in cookies installed on users’ devices and include, inter alia, technical information about the browser and the operating system, referral websites, time on site and other information about the use of our online offer and may also be combined with other such information from other sources.
    2. The following section provides an overview of third-party providers and their contents as well as links to their privacy policies which contain further information about the processing of data and, in part already mentioned here, opt-out options:- External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts is based on access to a server at Google (generally in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.- Maps of the “Google Maps” service of third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.- Videos stored on the platform “YouTube” of third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.- External fonts of Google, Inc., https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts is based on access to a server at Google (generally in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/.- Buttons and options for embedding content in the social platform Twitter, Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, Privacy policy: http://twitter.com/privacy, Opt-out: https://support.twitter.com/articles/20172847.- Options for embedding content in the social platform Instagram, belonging to Facebook, Inc., which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Privacy policy: https://www.instagram.com/about/legal/privacy/.- Options for embedding content in the platform Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”), Privacy policy and opt-out: https://about.pinterest.com/de/privacy-policy.
  12. User rights and erasure of data
    1. Users have the right, on request, to receive information free of charge about their personal data stored by us.
In addition, users have the right to insist that any incorrect personal data about them are rectified, that the processing of these data is restricted, that these are erased, where applicable, to assert their right to data portability and, if they assume that their data have been processed unlawfully, to lodge a complaint to the competent supervisory authority. Users may also revoke their consents, generally restricted to the future.
    2. Data stored by us erased as soon as they are no longer required for their intended purpose and provided that their erasure is not contradicted by any mandatory data storage obligations.
  13. Right of objectionIn accordance with the relevant legal stipulations, users may object to the future processing of their personalised data at any time. This objection can apply, in particular, to data processing for direct marketing purposes.
  14. Amendments to the privacy policy
    1. We retain the right to amend the privacy policy in response to changes in the legal environment, services or data processing. However, this only applies with regard to the data processing declaration. In as far as user consent is required or elements of the privacy policy include contractual provisions concluded with users, these amendments are subject to user consent.
    2. Users are requested to regularly inform themselves about the contents of the privacy policy.

Documents:

As of: 23.5.2018