Privacy Policy

 

We explain how we handle your personal data in this privacy policy. The applicable data protection law, in particular the General Data Protection Regulation (GDPR), applies. With the exception of the service providers and third-party service providers that we name in this Privacy Policy, we do not share any data with third parties. If you have any questions, please do not hesitate to contact us.

 

Content

 

Person in charge

The person responsible for data processing is

best bottle club GbR
Neuhaußstraße 360323 Frankfurt am Main

 

General information

Provision of data

As a rule, it is not required by law or contract to provide personal data for the use of our website. Insofar as the provision of data is necessary for the conclusion of a contract or the user is obliged to provide personal data, we inform you of this circumstance and the consequences of not providing it in this privacy policy.

Transfer of data to third countries

We may use service providers and third-party service providers located in countries outside the European Union and the European Economic Area. The transfer of personal data to such third countries, unless the user has consented to the data transfer, is carried out on the basis of an adequacy decision of the European Commission (Art. 45 GDPR) or we have provided appropriate safeguards to ensure data protection (Art. 46 GDPR). Insofar as there is an adequacy decision of the European Commission for the transfer of data to a third country, we refer to this in this privacy policy. In addition, users can obtain a copy of the appropriate guarantees from us, insofar as this is not already contained in the privacy policies of the service providers or third-party providers.

Automated decision-making

If we carry out automated decision-making, including profiling, we will inform you in this privacy policy about this circumstance, the logic involved, as well as the scope and intended effects of such processing. Otherwise, automated decision-making does not take place.

Processing for other purposes

As a matter of principle, data is only processed for the purposes for which it was collected. If, by way of exception, it is to be further processed for other purposes, we will inform you about these other purposes and provide all other relevant information prior to this further processing (Art. 13 para. 3 GDPR).

 

Website Hosting

Each time our website is accessed, the user's browser transmits various data. For the duration of the visit to the website, the following data will be processed:

  • Browser type and version used
  • Operating system
  • Retrieved Pages and Files
  • Amount of data transferred
  • Date and time of retrieval
  • User's provider
  • IP address
  • Referrer URL

The processing of this data is necessary in order to deliver the website to the user and to optimize it for his or her device. We do not store any personal data in log files.The legal basis for the processing is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is in the provision of the website.

 

Cookies, Web Beacons and Mobile Identifiers

On our website, we use technology to recognise the device you are using. These may include cookies, web beacons and/or mobile identifiers.

In principle, the recognition of a device can be carried out for different purposes. It may be necessary to provide features of our website, for example, to provide a shopping cart. In addition, these technologies may be used to track the behavior of users on the site, for example for advertising purposes. We describe which technologies we use in detail and for what purposes in this privacy policy.

For a better understanding, we explain below in general terms how cookies, web beacons and mobile identifiers work:

  • Cookies are small text files that contain certain information and are stored on the user's device. In most cases, it is an identification number that is assigned to a device (cookie ID).
  • A tracking pixel is a transparent graphic file that is embedded on a page and enables log file analysis.
  • A mobile identifier is a unique number (mobile ID) that is stored on a mobile device and can be read by a website.

Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is to provide the functions of our website.

We use cookies that are not necessary for the operation of our website in order to make our offer more user-friendly or to be able to track the use of our website. The legal basis here depends on whether the user's consent is to be obtained or whether we can rely on a legitimate interest. The user can revoke consent at any time, among other things, by changing the settings in his browser.

The user can prevent and object to the processing of data with the help of cookies by means of appropriate settings in his browser. In the event of an objection, it is possible that not all functions of our website are available. We provide separate information about further options for objecting to the processing of personal data by cookies in this privacy policy. If necessary, we will provide links that can be used to declare an objection. These are labeled "Opt-Out".

 

Contact

In the event of contact, we process the user's details, date and time for the purpose of processing the request, including any queries.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is to respond to our users' requests. The additional legal basis is Art. 6 para. 1 subpara. 1 letter b) GDPR, if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.

The data will be deleted as soon as the enquiry, including any queries, has been answered. We check at regular intervals, but at least every two years, whether data generated in connection with contact needs to be deleted.

 

Sweepstakes

We offer our users the opportunity to participate in competitions. It is possible that we refer to a separate privacy policy for the processing of the data. Where this is not the case, we process the data provided by the user (e.g. name, e-mail address). This is done in order to be able to carry out the competition, in particular to determine the winner and, if necessary, to notify him. The legal basis for the processing is Art. 6 para. 1 subpara. 1 letter b) GDPR. The data will not be further processed for other purposes and will be deleted three months after the winner has been determined.

 

Affiliate-Links

We participate in affiliate programs. This means that we set links to partner companies. If a user clicks on such an affiliate link, we may receive a commission. In this case, it is necessary to assign the user's activities on the partner company's website to our offer. This is done through the link or in other ways, for example through cookies. The resulting data will be processed exclusively for this purpose.

Insofar as we obtain the user's consent, Art. 6 para. 1 subpara. 1 letter a) GDPR is the legal basis for the processing. In all other respects, the legal basis is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest lies in the financing of our offer.

The processed data will be deleted as soon as it is no longer required to settle the commission.

 

Newsletter

Users have the option to sign up for newsletters on our site. In doing so, we process the data entered during registration in order to be able to send a confirmation email to the user's e-mail address. After confirmation, we process the data in order to be able to send newsletters. For the purpose of personalization, we may also process the user's name, if the user has provided it.

With the registration, the date and time as well as the IP address of the user are stored in order to be able to prove registration. We continue to process this data for verification purposes after unsubscribing and delete it at the end of the year after three years.

To improve our content, we measure how successful our newsletters are, such as how often they have been opened by users and which links have been clicked. For this purpose, e-mails contain a tracking pixel. We do not track the activities of individual users.

The legal basis for the processing is the user's consent pursuant to Art. 6 para. 1 subpara. 1 (a) GDPR. In all other respects, the processing is carried out in accordance with Art. 6 para. 1 subpara. 1 (f) GDPR. Legitimate interests on our part are the sending of newsletters, the personalized approach to the user and the proof that the user has registered for the newsletter.

Brevo

We use Brevo to send newsletters. Provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin.

Brevo's Privacy Policy

 

Acquisition of existing customers

If the user has provided his e-mail address when purchasing goods or services, we reserve the right to use it for direct advertising in connection with similar goods or services in accordance with § 7 para. 3 UWG. This does not apply if the user has objected to the use.

The legal basis for the processing is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is the promotion of our sales. The user can object to the use of his e-mail address for the acquisition of existing customers at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic tariffs.

 

Orders and payment processing

When placing an order in our online shop, we process the data provided at the time of ordering, such as name, bank details or payment data, to process the order. We only pass on payment data to our payment service providers insofar as this is necessary to process the payment.

The legal basis for the processing of order data is Art. 6 para. 1 subpara. 1 letter b) GDPR. If the user stores his order data in a user account, Art. 6 para. 1 subpara. 1 (a) GDPR is the legal basis. In all other respects, the processing is based on Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is to process repayments and pursue claims.

Order and payment data will be deleted as soon as they are no longer required for the processing of the order, including a reversal of payment (e.g. due to a revocation or withdrawal from the contract) and the processing of warranty cases, and there are no statutory retention obligations. In the event that the user has stored his order data for a second order in his user account, the data will be deleted together with the user account if it is not required for the processing of a specific order.

PayPal

When paying via PayPal, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Privacy Policy of PayPal

 

Other third-party services

Google reCAPTCHA

To increase the security and availability of our website, we use the reCAPTCHA service. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

With queries, we want to ensure that actions on our side are not triggered by bots. For this purpose, it is technically necessary to transmit the user's IP address to Google.

The legal basis for the processing is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest is to ensure website security and to protect against spam and abuse.

Privacy Policy of reCAPTCHA

Google Fonts

We use Google Fonts on our website. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Fonts are loaded from Google's server. In order to establish a connection to the server, it is technically necessary to transmit the user's IP address.

The legal basis for the processing is Art. 6 para. 1 subpara. 1 (f) GDPR. Our legitimate interest consists in shortening loading times and a uniform display on different end devices.

Privacy Policy of Google Fonts

 

Profiles on social networks

We are present on one or more social networks. Specifically, these are: Facebook or Instagram. When you contact us, we process personal data as described above under Contact.

The providers of social networks process data in accordance with their privacy policies, which can be accessed here:

If a user is logged in with his account, the activities on our profile in the respective social network can be assigned to him/her. This can be done across devices and, if necessary, without logging in, for example using cookies or mobile identifiers. The providers of social networks use the collected data to create pseudonymised user profiles, which they can use to display personalised advertising in particular.

 

Rights of data subjects

If the user's personal data is processed, he or she is a data subject within the meaning of the GDPR. Data subjects have the following rights:

Right of access: The data subject has the right to obtain confirmation as to whether personal data concerning him or her is being processed. If personal data is processed, the data subject has the right to receive information free of charge and to obtain a copy of the personal data that is the subject of processing.

Right to rectification: The data subject has the right to request the rectification without undue delay of inaccurate or incomplete personal data.

Right to erasure: The data subject has the right to request the erasure of personal data concerning him or her without undue delay, in accordance with the provisions of law.

Right to restriction of processing: The data subject has the right to request the restriction of the processing of personal data concerning him/her, in accordance with the law.

Right to data portability: The data subject has the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

Right to object: the data subject has the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If personal data is processed for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

Right to withdraw: The data subject has the right to withdraw their consent at any time.

Right to lodge a complaint: The data subject has the right to lodge a complaint with a supervisory authority.

 

Status of the Privacy Policy: 08 March 2024

 

This privacy policy has been created with the generator of Einfach Abmahnsicher in cooperation with PRIGGE Recht.