Privacy protection information
We look forward to your visit to our site. Privacy and data protection for our customers and users is a top priority for us. We comply with privacy protection regulations, in particular the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG), and the Telemedia Act (Telemediengesetz - TMG).
This privacy protection information explains what information (including personal data) we process during your visit and your use of the above internet content ("website").
I. Who is responsible for data processing?
In terms of privacy protection, the responsible instance for processing personal data and the service provider as defined in the TMG is the Bitburger Braugruppe GmbH, Römermauer 3, 54634 Bitburg; Tel. 06561 14-0, Fax 06561 14-2289, firstname.lastname@example.org. Whenever this privacy protection information uses the term "we" or "us", this refers to the company specified above.
Out Privacy Protection Officer can be reached via the above contact information as well as at email@example.com.
II. What principles do we follow?
In adherence to privacy protection regulations, we only process your personal data if this is permitted by the legal regulations or if you have provided your consent. This also applies to the processing of personal data for advertising and marketing purposes.
On this website we may also collect information which in itself does not permit us to make direct inferences about your person. In certain cases – in particular in combination with other data – this information may also be considered "personal data" in the privacy protection sense. Furthermore, we may also collect information based on which we cannot identify you directly or indirectly; this is the case, for instance, for the summarized information about all users of this website.
III. What data do we process?
You can access our website without stating any personal data directly (such as your name, address, or e-mail address). In this case we still have to collect and store certain information in order to make it possible for you to access our website.
1. Log files:
When you visit this website, our web server automatically saves the domain name / IP address of the requesting computer (generally your internet access provider) including date, time, and duration of your visit, the sub-pages/URLs you visit, and information about the applications and devices you use to view our pages.
3. Website analysis via etracker:
Our website uses a solution of the etracker GmbH (Erste Brunnestraße 1, 20459 Hamburg, www.etracker.com). It collects and saves data for marketing and optimization purposes. Using cookies, this data can be used to create user profiles under a pseudonym. Without your explicit consent, we will not use the data processed via etracker to identify your person. We will also not combine this data with other personal data we have collected in order to identify you. You can object to the processing of the above data at any time effective for the future. Please download the opt-out cookie "cntcookie" at this link [http://www.etracker.de/privacy?et=V23Jbb]. Please do not delete this cookie if you want to maintain your objection. For further information, please consult the privacy protection information of the etracker [https://www.etracker.com/dataschutz/].
4. Website analysis via Google Analytics:
Our site also employs Google Analytics, a web analysis service of the Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to help continually improve our website. Google Analytics also uses "cookies" that are stored on your computer and facilitate the analysis of website usage. The information about your use of this website generated by the cookie is generally sent to a Google server in Europe (or a member state of the Treaty of the European Economic Area) to anonymize the IP address in order to prevent any inference to individual persons. Only after anonymization of the IP address, the abbreviated IP address is sent to a Google server in the US and saved there. Only in exceptions is the full IP address transferred to a Google server in the US and then abbreviated there. On this website, Google Analytics is used with an extension for the anonymous capture of IP addresses (so-called IP masking). At our behest, Google uses this information in order to analyze your use of the web site, create reports about website activity, and to provide other services to us connected to website and internet use. The IP address transferred from your browser as part of Google Analytics is not joined with other data of Google. You can prevent the cookies being saved on your computer by changing the settings of your browser accordingly. However, we would like to point out to you that this may prevent you from using all functions of this website to the full extent. In addition, you may also prevent the collection of the data created by the cookie that refers to your use of the web site (incl. your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. It places an opt-out cookie which will prevent the future collection of your data when visiting this website. You can find more information on privacy protection at Google Analytics here:[http://www.google.com/analytics/terms/de.html] and here [http://www.google.com/intl/de/analytics/privacyoverview.html].
5. Facebook social plugins
Our pages integrate buttons of the social network Facebook (1601 South California Avenue, Palo Alto, CA 94304, USA - www.facebook.com). You can recognize facebook buttons by the facebook logo or the "Like" button.
In order to prevent the automatic transfer of information to Facebook when opening our website, we have implemented the so-called "two-click solution": Next to the Facebook there is another button that looks like a switch. Only if you click on this switch and then on the Facebook button is information (like the address of our website and your username) transferred to Facebook.
In this case, too, as operators of this website we are not informed of the contents of the transferred data or their use by facebook. We do not find out when you have clicked what button. You can find more information on data use by Facebook in the privacy protection declaration of Facebook: [http://de-de.facebook.com/policy.php#].
6. Newsletter registration
If you would like to receive our newsletter, we require a valid e-mail address from you. In order to verify whether you are the owner of the stated e-mail address and/or whether its owner consents to receiving the newsletter, we send an automated e-mail to the stated e-mail address after the first registration step. Only after confirming the newsletter registration via a link contained in the confirmation e-mail do we add the stated e-mail address to our newsletter list. We do not collect data other than the e-mail address and confirmation information for the registration. You can withdraw your consent to storage of your data, e-mail address, and their use for sending the newsletter at any time effective for the future.
7. Registration / customer account
When registering as a registered user – in particular when creating a customer account - we collect personal data from the registration form on our website. We may request the re-entry of data already collected during registration (in particular for your identification) and collect further personal data if you wish to use certain content on our website or place an order.
8. Customer communication
In order to be able to ensure communication with our customers and users, we process all information you have provided when you initiated contact and/or which we collected from you (e.g. your name, address, and other contact data); in addition, we store the reason for which you contacted us.
IV. For what purposes and based on what legal basis do we process your data?
1. Any personal data contained in the log files is processed to make it possible for you to use our website; this is based on § 15 Para. 1 TMG.
2. The data and pseudonymous user profiles collected by cookies (including web analysis services etracker and Google Analytics) are processed for purposes of advertising, market research, and customized design of our website based on § 15 Para. 3 TMG.
3. The newsletter data is processed for purposes of registration for the newsletter and its distribution as part of your consent based on Article 6 Para. 1 c) GDPR. Please note that you may withdraw your consent at any time effective for the future, e.g. by clicking on the corresponding link in each of our newsletters or by notification per mail, fax, or e-mail via one of the contacts provided on the first page of this privacy protection information
4. If you have placed an order through our website or have registered as a user / for a customer account on our website, we process the data collected in this connection to implement the contracts concluded with you based on Art. 6 Para. 1 b) GDPR.
5. We may also process the data stored in connection with the use our website and for the purpose of customer and consumer communication to meet any legal requirements to which we are subject; this is based on Art. 6 Para. 1 c) GDPR.
6. If necessary, we also process your data beyond the above purposes in order to protect our justified interests or the interests of third parties; this is based on Art. 6 Para. 1 f) GDPR. Our justified interests include in particular
a) assertion of legal claims and defense in case of legal disputes;
b) ensuring consumer-friendly communication in the cases of III.9;
c) prevention and investigation of criminal activities;
d) control and development of our business activities including risk management.
V. Am I obligated to provide data?
The information necessary for registration for our newsletter, implementation of online orders, ensuring consumer-friendly communication, or registration as user / creation of customer account are labeled as mandatory information in the corresponding area of the website (e.g. an online form); we cannot provide the respective functionalities without this mandatory information. In order to ensure consumer-friendly communication, we need at least your name and your mailing address.
If we collect any additional personal data from you, we inform you at the time of collection whether the provision of this information is legally or contractually required or necessary to conclude a contract. We generally mark the information which is voluntary and not due to one of the obligations listed above or is not necessary to conclude a contract.
VI. Who receives my data?
Your personal data is generally processed within our company. Depending on the type of the personal data, only specific departments / organizational units have access to your personal data. This includes in particular the specialized departments tasked with the provision of our digital content (e.g. websites) and our IT department. We use a role and authorization concept to restrict access within our company to those functions and that extent that is required for the respective processing purpose.
We may also transfer your personal data to third parties outside of our company to the extent permitted by law. These external recipients may include in particular
affiliated companies within the Bitburger Braugruppe, to which we transfer personal data for internal administrative purposes;
service providers we use to provide services for us on a separate contractual basis, which may include the processing of personal data, as well as any sub-contractors or service providers hired with our consent;
non-public and public instances, if we are legally required to transfer your personal data.
VII. Do you use automated decision-making?
In connection with the operation of our website we generally do not employ automated decision-making (including profiling) as defined in Art. 22 GDPR. If we do use such processes in individual cases, you will be informed about this as intended by the law.
VIII. Is data transferred to countries outside of the EU / EEA?
Your personal data is generally processed within the EU / EEA.
Only in connection with the use of service providers providing web analysis services may information be transferred to so-called "non-EU countries". "Non-EU countries" are countries located outside of the European Union or the treaty for the European Economic Area, in which one cannot assume a privacy protection level that is comparable to that of the European Union.
If the transferred information also contains personal data, before transmitting any such data we ensure that the respective non-European country or the recipients in the non-European country are subject to a suitable level of privacy protection. This may be defined in particular in a so-called "Suitability Resolution" of the European Commission, which determines a suitable overall level of privacy protection for a certain non-European country. As an alternative, we may also base the data transfer on a so-called "EU Standard Contract Clauses" agreed with a recipients or – in case of recipients in the US – on adherence to the principles of the so-called "EU-US Privacy Shield". Upon request, we will be glad to provide you with more information on suitable and appropriate guarantees of adherence to a suitable level of privacy protection; you can find the contact data at the beginning of this privacy protection information. You can also find information about the participants of the EU-US Privacy Shield here: www.privacyshield.gov/list.
IX. How long is my data stored?
We generally store your personal data for as long as we have a justified interest in this storage and your interests in the discontinuation of storage do not exceed ours.
We may also continue to store data even without justified interest, if we are legally obligated to do so (e.g. meeting archiving duties). We also delete your personal data without your intervention as soon as it is no longer necessary for meeting the purposes of the processing or if storage is otherwise legally not permissible.
log data is deleted after seven days, unless continued storage is necessary for legal purposes such as the investigation of abuse and the detection and repair of technical problems;
data processed in connection with an order or with consumer communication is deleted at the latest after the expiration of the legal archiving terms; and
data processed in connection with a registration as user or a customer account is deleted after the end of the registration or with the deletion of the customer account. The personal data that we need to store to meet archiving requirements are stored until the expiration of the respective archiving obligation. If we store personal data exclusively to meet archiving obligations, they are generally locked, so that they can only be accessed if this is necessary in terms of the purpose of the archiving obligation.
X. What are my rights?
As Data Subject you have the right
to receive information about personal data about that is stored, Art. 15 GDPR;
to correct any incorrect or incomplete data, Art. 16 GDPR;
to delete personal data, Art. 17 GDPR;
to limit the processing, Art. 18 GDPR; - to data portability, Art. 20 GDPR, and
to object to the processing of your personal data, Art. 21 GDPR.
In order to assert these rights you can contact us at any time – e.g. via the contact means provided at the beginning of this privacy protection information.
In case of questions about the processing of your data you can also contact our Privacy Protection Officer.
You also have the right to file a complaint at a regulatory agency for privacy protection, Art. 77 GDPR.