1. Objective and responsible authority
2. Basic information on data processing
3. Processing of personal data
4. Registration and termination
5. Collection of access data
6. Cookies & Audience measurement
7. Google Analytics
8. Google Re/Marketing Services
9. Facebook Social Plugins
10. Facebook Remarketing
11. Integration of third-party services and content
12. User rights and erasure of data
13. Right of objection
- Objective and responsible authority
- Provider of the online offer and the data protection authority is Privatbrauerei Schweiger GmbH & Co. KG, Ebersberger Straße 25, 85570 Markt Schwaben, Germany (hereinafter referred to as “we” or “us”). For further information and ways of contacting us, please refer to our legal notice: https://www.schweiger-bier.de/impressum.
- Name and ways of contacting our data privacy officer: firstname.lastname@example.org.
- The term “user” encompasses all customers and visitors to our online offer. The terms used, such as “user”, refer to both genders.
- Basic information on data processing
- We process personal data of the users only in compliance with the relevant data protection regulations. This means that the data of users are only processed if legal consent has been given, i.e. in particular, when data processing is necessary and/or legally prescribed in order for us to provide our contractual services (e.g. processing of orders) and online services, when consent has been given by the users, as well as on the grounds of legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer), particularly with regard to internet audience measurement, collection of access data and use of services by third parties.
- With regard to the processing of personal data on the basis of the data protection ordinance (GDPR) valid from 25. May 2018 onwards, we hereby declare that the legal basis of consents shall be Art. 6, para. 1(a) and Art. 7 of the GDPR, the legal basis for the processing of data for the performance of services and contractual obligations shall be Art. 6, para. 1(b) of the GDPR, the legal basis for the data processing for the fulfilment of our legal obligations shall be Art. 6, para. 1(c) of the GDPR, and the legal basis for the processing of data in order to maintain our legitimate interests shall be Art. 6, para. 1(f) of the GDPR respectively.
- We employ organisational, contractual and technical security measures based on state-of-the-art technology to ensure that the regulations defined by data protection legislation are complied with and to safeguard against the data processed by us being subject to any incidental or malicious manipulation, loss, destruction or access by unauthorised parties.
- Processing of personal data
- We pass user data to third parties only if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes when this is necessary to fulfil our contractual obligations vis-a-vis users (e.g. address notification to suppliers).
- When contact is made with us (using the contact form or via email), the user’s details are stored for the purposes of processing the enquiry and in case any follow-up questions arise.
- Registration and termination
- As part of the registration, the necessary mandatory information will be communicated to the users. These include in particular:- name, first name, street, house number, post code, city, place of birth, email address (is not visible to other users) and password (is assigned automatically and stored encrypted).
- Each user decides themselves whether to add any data beyond the aforementioned.
- The user profiles are public and cannot be indexed by search machines.
- It is the responsibility of the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
- The retention of backups is kept as short as possible. However, when running software (especially if newly developed and subject to continual improvement), it may be necessary to rectify certain irregularities retroactively and thereby also protect the integrity of user data. Therefore, after termination it may take up to 14 days for final deactivation of the user account and deletion of data from backups. Data remains stored beyond this period for billing purposes or if legitimate contractual interests exist that outweigh users’ deletion interests (e.g. the blocking of an email address in the event of a house ban) or retention is necessary for statutory reasons.
- Collection of access data
- On the basis of our legitimate interests, we collect data about each access to the server on which this service resides (so-called server logfiles). Access data includes name of the retrieved web page, file, date and time of the retrieval, transmitted data volume, message of successful retrieval, browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider.
- We use the log data without assignment to the user’s identity or other profile creation according to the legal regulations only for statistical evaluations for the purpose of operation, security and optimization of our online offer. However, we reserve the right to check the log data at a later date, if there is a reasonable suspicion of unlawful use.
- Cookies & Audience measurement
- If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
- The option is available to manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices or the European website http://www.youronlinechoices.com/uk/your-ad-choices/.
- Google Analytics
- Google will use this information on our behalf to evaluate the use of our online offer by users in order to compile reports on the activities within this online offer and to provide further services related to the use of this online offer and the Internet. Here, pseudonymous user profiles can be created from the processed data.
- We only use Google Analytics with IP anonymisation enabled. This means that the IP address of the users will be shortened by Google within the Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be first transferred to a Google server in the USA and truncated there.
- The IP address transmitted by the user’s browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the online offer, as well as the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=deDisable Google Analytics
- Further information about Google’s usage of data, setting and opt-out options can be found on the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of your website or our partners’ apps”), http://www.google.com/policies/technologies/ads (“Data usage for promotional purposes”), http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”).
- We are able to use the marketing and remarketing services (“Google Marketing Services” for short) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”) within our online offer on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer).
- Google Marketing Services allows us show ads for and on our website in a more targeted way, showing users only those ads that are potentially of interest to them. If a user is shown ads for products that he/she has been interested in on other websites, the process is referred to as “remarketing”. For this purpose, Google executes a code as soon as a user calls up our or other websites for which Google Marketing Services have been activated. So-called (re)marketing tags (invisible graphics or codes, also referred to as “web beacons”) are embedded into the website. This allows a customised cookie, i.e. a small text file, to be stored on the user’s device (comparable technologies may also be used instead of cookies). The cookies can be placed by various domains including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file contains information about the websites visited by the user, the contents he/she is interested in and the offers he/she clicked on, as well as technical information relating to the browser and operating system, the referrer websites, the visit time and other details regarding the use of the online offer. The user’s IP address is also logged; please note that with regard to Google Analytics, IP addresses within member states of the European Union or in other signatory states to the Agreement on the European Economic Area are truncated, and that, only in exceptional cases, is a complete IP address transmitted to a Google server in the USA before being truncated there. The user’s IP address is not combined with the user’s data within other Google services. Google may combine the information mentioned above with such information from other sources. When the user subsequently visits other websites, he/she can be shown ads which are tailored to his/her interests.
- The user’s data is processed within Google Marketing Services using pseudonyms. This means Google does not store and process the user’s name nor the e-mail address, but instead processes the relevant data within pseudonymous user profiles using cookies. This means, from Google’s point of view, that the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected by Google Marketing Services regarding users is sent to Google and stored on Google servers in the USA.
- One of the Google Marketing Services we use is the online advertising program “Google AdWords”. With Google AdWords, each AdWords customer receives a different “conversion cookie”. Therefore, cookies cannot be traced through the websites of AdWords customers. The information collected by means of the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers only get to know the total number of visitors who clicked on the advertisement and were forwarded to a site which includes a conversion tracking tag. However, they do not receive any information that personally identifies users.
- We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website.
- If you wish to object to interest-based advertising by Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
- Facebook Social Plugins
- Within our online offer, we are able to use social plugins (“plugins”) of the Facebook social network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer) . These plugins are recognisable through the Facebook logo (white “f” on blue tile) or the “Like” button (a “thumbs-up” sign) or are marked with the addition “Facebook”. A list showing the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
- When a user calls up a function of this online offer containing such a plugin, his/her device establishes a direct connection to the Facebook servers. The content of the plugin is transferred from Facebook directly to the user’s device, which integrates it into the online offer. Usage profiles of users can thereby be created from the processed data. As the operator of this website, we point out we have no influence on the extent of the data that Facebook collects or uses with the help of this plugin.
- Through integration of the plugin, Facebook receives information that a user has called up a particular page of the online offer. If the user is logged in to Facebook, the visit can be assigned to their Facebook account. If a user interacts with the plugin by using the Facebook “Like” button or making a comment, for example, the corresponding information is transferred from their device directly to Facebook and stored there. If a user is not a member of Facebook, the latter may still find out and store the user’s IP address. According to Facebook, in Germany only an anonymised IP address is stored.
- The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the rights and settings for the protection of the privacy of the users, can be found in Facebook’s privacy statement: https://www.facebook.com/about/privacy/.
- If a user is a Facebook member and does not want Facebook to collect data about him through this online offer, and to link his or her member data stored on Facebook, he/she must log out of Facebook before using our online offer and delete his cookies. Further settings and opt-outs on the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are independent of the platform, that is, they are used for all devices, such as desktop computers or mobile devices.
- Facebook Remarketing
- Within our online offer, we are able to use so-called Facebook Pixels of the Facebook social network operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 USA or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on the grounds of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer). With the help of Facebook Pixel, Facebook is able to determine the visitors to our offer as a target group for the display of ads, so-called “Facebook Ads”. Accordingly, we use Facebook Pixel to display our Facebook ads only to those Facebook users who have also shown interest in our Internet offer. That is, with the help of the Facebook pixel, we want to ensure our Facebook ads match the potential interests of users and are irritating. With the help of the Facebook pixel, we can also examine the efficacy of Facebook promotional ads for statistical and market research purposes, by seeing whether users have been redirected to our website after clicking on a Facebook ad.
- You can opt out of the recording and use of your data by the Facebook Pixel to show Facebook ads. To do this, you can visit the Facebook page and follow the advice about settings for user-based advertising: https://www.facebook.com/settings?tab=ads or the opt-out via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are independent of the platform, that is, they are used for all devices, such as desktop computers or mobile devices.
- Integration of third-part services and contents
- Within the context of our online offer and on the basis of our legitimate interests (i.e. interests in the analysis, optimisation and commercial provision of our online offer) we rely on content-based or service offerings from third-party providers in order to integrate their contents and services, such as videos and fonts, for example (hereinafter referred to as “contents”). A precondition for this is always that the third-party providers of these contents can identify the IP address of users, since they are unable to transmit the contents to their browsers without the IP address. The IP address is therefore necessary in order to display these contents. We endeavour to use only such contents where the respective providers use the IP address solely to deliver the contents. Third-party Providers may also use so-called pixel tags (invisible graphic files, also referred to as “web beacons”) for statistical analyses or marketing purposes. Pixel tags allow information such as user traffic on the pages of this website to be analysed. This pseudonymised information may also be stored in cookies installed on users’ devices and include, inter alia, technical information about the browser and the operating system, referral websites, time on site and other information about the use of our online offer and may also be combined with other such information from other sources.
- User rights and erasure of data
- Users have the right, on request, to receive information free of charge about their personal data stored by us. In addition, users have the right to insist that any incorrect personal data about them are rectified, that the processing of these data is restricted, that these are erased, where applicable, to assert their right to data portability and, if they assume that their data have been processed unlawfully, to lodge a complaint to the competent supervisory authority. Users may also revoke their consents, generally restricted to the future.
- Data stored by us erased as soon as they are no longer required for their intended purpose and provided that their erasure is not contradicted by any mandatory data storage obligations.
- Right of objectionIn accordance with the relevant legal stipulations, users may object to the future processing of their personalised data at any time. This objection can apply, in particular, to data processing for direct marketing purposes.
As of: 23.5.2018