Privacy statement

The person responsible for data processing is:
Jonas Hald
Stuttgarter Strasse 147
70806 Kornwestheim
hey@private-drinking-affairs.de

1. Access data and hosting

You can visit our websites without giving any information about yourself. Each time you access a website, the web server simply automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to protect our prevailing legitimate interests in the correct presentation of our offer in accordance with Article 6 (1) (f) GDPR. All access data will be deleted no later than seven days after the end of your page visit.

hosting

Some of the services for hosting and displaying the website are provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. Data processing for the purpose of shipping processing

In order to fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping service provider responsible for delivery, insofar as this is necessary to deliver ordered goods.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle shipping for us (drop shipping). These are considered shipping service providers within the meaning of this privacy policy.

Transfer of data to shipping service providers for the purpose of shipping notification

If you have given us your express consent to do so during or after your order, we will forward your e-mail address and telephone number to the selected shipping service provider on the basis of this in accordance with Article 6 (1) (a) GDPR so that they can contact you before delivery for the purpose of announcing or coordinating delivery.
The consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that is permitted by law and which we will inform you of in this statement.

DHL Parcel GmbH
Straßchensweg 10
53113 Bonn
germany

3. Data processing for payment processing

When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

3.1 Data processing for transaction processing
Depending on the payment method selected, we pass on the data necessary to process the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves to fulfill the contract in accordance with Art. 6 (1) (b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, e.g. on their own website or through technical integration into the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment processing partners and the basis for our cooperation with them, please contact us using the contact option described in this privacy policy.

3.2 Data processing for the purpose of fraud prevention and optimization of our payment processes
We may provide our service providers with additional data, which they use together with the data necessary to process the payment as our contract processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, processing of disputed payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves to protect our prevailing legitimate interests in our protection against fraud and in efficient payment management.

4. Cookies and other technologies

4.1 General information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).
We use such technologies that are absolutely necessary to use certain functions of our website (e.g. shopping cart function). These technologies collect and process your IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the content of the shopping cart). As part of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 (1) (f) GDPR.
We also use technologies to fulfill legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) and for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy. We may also use technologies that are not individually listed in this privacy statement.
The cookie settings for your browser can be found under the following links: Microsoft Edge™/Safari™/Chrome™/Firefox™/Opera™
If you have consented to the use of technologies in accordance with Article 6 (1) (a) GDPR, you can withdraw your consent at any time by sending a message to the contact option described in the privacy policy.


4.2 Use of live chat tool WhatsApp
For the purpose of customer communication, we use the live chat tool from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”). This serves to protect our prevailing legitimate interests in effective and improved customer communication in accordance with Art. 6 (1) (f) GDPR. WhatsApp works for us on our behalf. The telephone numbers we store on our mobile device are automatically processed on Meta Unternehmen servers headquartered in 1601 Willow Road, Menlo Park, California 94025, USA. Only telephone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and data protection are stored. Our service providers are located and/or use servers in the following countries for which the European Commission has decided to have an adequate level of data protection: USA, Israel, United Kingdom. There is a decision by the European Commission on an appropriate level of data protection for the USA as a basis for a transfer to third countries, provided that the respective service provider is certified. A certification is available. Our service providers are based and/or use servers in these countries: Singapore. There is no adequacy decision from the European Commission for these countries. Our cooperation with you is based on these guarantees: European Commission standard data protection clauses.

5. Use of cookies and other technologies for web analysis and advertising purposes

Insofar as you have given your consent in accordance with Article 6 (1) (a) GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose ceases to exist and the use of the respective technology by us has ended, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. You can find more information about your opt-out options in the “Cookies and other technologies” section. For more information, including the basis of our cooperation with the individual providers, see the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

5.1 Use of Google services

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses issued by the European Commission. If your IP address is collected using Google technologies, it will be abbreviated before being stored on Google's servers by activating IP anonymization. Only in exceptional cases is the full IP address transmitted to a Google server and abbreviated there. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers for the respective technology in accordance with Article 26 GDPR. Further information about data processing by Google can be found in Google's privacy policy.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. As a matter of principle, your IP address is not combined with other data from Google. Data processing is carried out on the basis of an order processing agreement by Google.
For the purpose of optimizing the marketing of our website, we have activated the data sharing settings for “Google products and services.” This allows Google to access the data collected and processed by Google Analytics and then use it to improve Google services. Data is released to Google as part of these data sharing settings on the basis of an additional agreement between responsible parties. We have no influence on subsequent data processing by Google.
For web analysis and advertising purposes, the extension function of Google Analytics, the so-called DoubleClick cookie, enables your browser to be recognized when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

Google Ads

For advertising purposes in Google search results and on third-party websites, when you visit our website, the so-called Google Remarketing Cookie is set, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and using a pseudonymous CookieID and based on the pages you visit. Any further data processing will only take place if you have activated the “personalized advertising” setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
Google Maps
To visually represent geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and then processes it by Google. We have no influence on this subsequent data processing.

Google reCAPTCHA

To protect against misuse of our web forms and against spam caused by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and information about your use of our website) and uses so-called JavaScript and cookies to analyze your use of our website. In addition, other cookies stored in your browser by Google services are evaluated. Personal data is not read or saved from the input fields of the respective form.

Google Fonts

In order to consistently display the content on our website, the “Google Fonts” script code collects data (IP address, time of visit, device and browser information), transmits it to Google and then processes it by Google. We have no influence on this subsequent data processing.
YouTube video plugin
To integrate third-party content, the YouTube video plugin collects data (IP address, time of visit, device and browser information) in the extended data protection mode we use, transmits it to Google and then processes it by Google, only when you play a video.
5.2 Use of Facebook services

Use of Facebook Pixel

We use Facebook Pixel as part of the technologies shown below from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The Facebook pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which user profiles are created using pseudonyms. As part of the so-called extended data reconciliation, information is also collected and stored in hashed form for reconciliation purposes, which can be used to identify individuals (e.g. names, e-mail addresses and telephone numbers). For this purpose, when you visit our website, the Facebook pixel automatically sets a cookie which automatically uses a pseudonymous CookieID to recognize your browser when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies about your use of our website is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. If the transfer of data to the USA is our responsibility, our cooperation is based on standard data protection clauses issued by the European Commission. Further information about data processing by Facebook can be found in Facebook's privacy policy.

Typeform

We use Typeform from TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 Barcelona Spain (Typeform) for surveys and our return & complaint form. This enables us to provide you with an easy contact option.
For this purpose, we share the following personal data with Typeform:
email address
First name
surname
phone number
Mandatory fields are marked with an *.
Typeform is the recipient of your personal data and acts as an order processor for us. The processing of the data provided under this section is not required by law or contract. Without your consent and the transmission of your personal data, we cannot provide you with a contact form. However, you can contact us at the email address given above. The data is stored exclusively for the purpose of transmitting inquiries and answering them. The mandatory information is used to identify and answer your request.
In addition, Typeform collects the following personal data using cookies: Information about your device (IP address, device information, operating system, browser settings). In addition, usage data is collected, such as the date and time when you used the contact form. Typeform needs this data to ensure the presentation of the contact form and functionality. This corresponds to Typeform's legitimate interest (in accordance with Art. 6 para. 1 lit. f DSGVO) and serves to execute the contract (in accordance with Art. 6 para. 1 lit. b GDPR). For more information, visit the provider's website
The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR. You can withdraw your consent to the processing of your personal data at any time. The revocation can be made via the contact options provided. Your data will be processed as long as you have given your consent. By declaring the revocation, the lawfulness of the processing carried out so far is not affected.

Calendly

When you access some parts of our website, additional personal data is processed. Data categories processed in the process: contact details such as name or email address. Purpose of processing: Display and selection of appointments. The legal basis for processing: the need to fulfill an agreement or pre-contractual measures at your request (Art. 6 (1) b GDPR). Data is transmitted: to the processor Calendly, Inc., 115 E Main St., Ste. A1B, Bufort, GA 30518, USA represented by DPO Centre Europe, Friedrichstraße 88, 10117 Berlin, Germany, eurep@calendly.com. This may also mean a transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission's adequacy decision C (2023) 4745, as the data recipient has committed himself to compliance with the data processing principles of the Data Pricacy Framework (DPF).

Order processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

6. Social media

Our online presence on Facebook

Insofar as you have given your consent to the respective social media operator in accordance with Article 6 (1) (a) GDPR, when you visit our online presences on the social media mentioned above, your data is automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably match your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your related rights and settings options to protect your privacy, please refer to the providers' privacy policies linked below. Should you still need help with this, you can contact us.
Facebook is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on standard data protection clauses issued by the European Commission. Data processing when you visit a Facebook fan page is based on an agreement between joint controllers in accordance with Article 26 GDPR. For more information (information about insights data), please here.

7. Contact options and your rights

As a data subject, you have the following rights:
- in accordance with Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified there;
- in accordance with Article 16 GDPR, the right to immediately request the correction of incorrect or completed personal data stored by us;
- in accordance with Article 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required:
-to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
-for reasons of public interest, or
is necessary to assert, exercise or defend legal claims;

- in accordance with Article 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
-the accuracy of the data is disputed by you;
-the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
you have lodged an objection to processing in accordance with Article 21 GDPR;

- in accordance with Article 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request transmission to another person responsible;
- in accordance with Article 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data, and revocation of any consent you may have given or objection to a specific use of data, please contact our company data protection officer.


Data Protection Officer:
Jonas Hald
Stuttgarter Strasse 147
70806 Kornwestheim
hey@private-drinking-affairs.de

Right to object

Insofar as we process personal data as explained above in order to protect our legitimate interests that prevail in the context of a balance of interests, you can object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes, unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose