We are delighted that you are interested in our website. We attach a great deal of importance to protecting your privacy while you are visiting our website. Personal data is collected during your visit to this website, but only to the extent technically necessary. The data is not sold or passed on to third parties unless there are legal obligations to provide information. The following policy provides you with an overview of how we guarantee this protection, as well as which types of data are collected for what purpose. We comply with the legal regulations, particularly the EU General Data Protection Regulation (EU GDPR), the new German Federal Data Protection Act (new BDSG) and the German Telemedia Act (TMG).
Your personal data (e.g. name, address, email address, phone number, etc.) will be processed by us only in accordance with the provisions set down in German data protection legislation. Data is personal if it can be clearly assigned to a certain natural person.
1. Responsible authority
The responsible authority under the terms of the legal provisions is (Karlsberg Brauerei GmbH, Karlsbergstraße 62, 66424 Homburg, Germany), hereinafter also referred to as “Karlsberg”.
2. Collecting and processing personal data on this website
Generally speaking, you can visit our website without any need to log in. Personal information, such as your name, postal address, email address, phone number, fax number or mobile number, etc., are only collected if you provide us with the same voluntarily for the purpose of implementing a contract, fulfilling an order, or sending information material or a survey. Data which you transmit to us on our website will be saved, processed and used for the purposes of handling contracts and orders and for processing your enquiries.
For the implementation of a contract, such data regularly includes the following:
surname, first name, street, postcode, town / city, phone number, email address.
The length of time for which the data is saved is based on the legal provisions, or alternatively set when the intended purpose is achieved.
Visits to web pages are deleted after three months at the latest. Personal data which you have transmitted to us in the context of a contract will be deleted six years after the contract has ended at the latest, provided that there are no legal provisions which stipulate longer storage periods. Your email address which you have shared with us for the purpose of subscribing to a newsletter will be deleted three months after you have unsubscribed from the newsletter at the latest.
3. Saving access / usage data
During your visit to this website, our server collects and saves the data automatically generated by your browser and the downloaded files as log files. This technical data is automatically transmitted to us by your browser. This data includes:
For the purpose of designing and optimising this website as needed, the applicable server log files are evaluated in a pseudonymised form solely for statistical purposes. They will not be passed on to third parties for commercial or non-commercial purposes. This data will not be combined with other sources of data.
4. Passing data on to third parties
If you have shared personal data with us, it will not be passed on to third parties as a matter of principle.
It will only be passed on
We use social plugins and the option of registering and logging in using social logins on this website. Social plugins are web applications which connect this website to selected social networks. Social logins enable simple registration and/or login using a social network that you use. Your IP address and user data for the respective social network may be transmitted to the same through the social plugins or the use of the social login. Please refer to Section 6 for details of the social plugins and social logins used.
Using our website without cookies
We offer you the opportunity to register on our site. The data which you enter during the registration process and which is visible from the input screen of the registration form is only collected and saved for the purpose of using our website. When you register on our site, we will also save your IP address and the date and time of your registration. This is used as protection on our part should a third party misuse your data and use the same to register on our site without your knowledge. This data is not passed on to third parties. Neither do we compare the data collected in this way with data which may be collected by other components of our site.
We offer you the opportunity to subscribe to our newsletter on our site. We use this newsletter to inform you of our offers on a regular basis. You need a valid email address to be able to receive our newsletter. We will therefore check the email address you enter to ensure that you are actually the owner of the specified email address and that the owner of the email address is authorised to receive the newsletter. When you subscribe to our newsletter, we will also save your IP address and the date and time of your subscription. This is used as protection on our part should a third party misuse your email address and subscribe to our newsletter without your knowledge. We do not collect any more data. The data collected in this way is used exclusively for subscription to our newsletter. This data is not passed on to third parties. Neither do we compare the data collected in this way with data which may be collected by other components of our site. You can unsubscribe from this newsletter at any time. Please refer to the confirmation email or each individual newsletter for details on this matter.
We offer you the opportunity to contact us by email and/or using a contact form on our site. In this case, the information provided by the user is saved for the purposes of processing their contact. This data is not passed on to third parties. Neither do we compare the data collected in this way with data which may be collected by other components of our site.
We offer you the opportunity to leave comments on the individual posts on our site. The IP address of the author / subscriber is saved during this process. It is saved in the interests of our security, should the author violate rights of third parties and/or post illegal content through their comment. We therefore have a personal interest with respect to the author’s saved data, as we can be prosecuted for such legal violations under certain circumstances. This data is not passed on to third parties. Neither do we compare the data collected in this way with data which may be collected by other components of our site.
6. Social plugins / social login
On our website, you will find links to the social networks Facebook, Google+, Twitter, etc. The following privacy policies apply in this regard:
This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses “cookies”, which are text files that are saved on your computer and enable analysis of your use of this website.
The information generated by the cookie about your use of this website (such as the time, location and frequency of your visit(s) to the website, including your IP address) is generally transmitted to and saved on a Google server in the United States.
If IP anonymisation is activated on this website, Google will, however, truncate your IP address beforehand within Member States of the European Union or other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be truncated there.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of this website, compiling reports on website activities and providing the website operator with other services relating to website and Internet use.
Google will also transmit this information to third parties, if doing so is stipulated by law or if third parties process this data on Google’s behalf.
According to its own information, Google will not associate the IP address transmitted by your browser in the context of Google Analytics with any other data held by Google. You can prevent the storage of cookies by changing the relevant setting in your browser software; however, please note that if you do so, you may not be able to use all the functions of this website.
Furthermore, you can prevent Google’s collection and processing of the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=de.
We would like to point out that Google Analytics has been expanded to include the code “gat._anonymizeIp();” on this website, so as to guarantee anonymised collection of IP addresses (“IP masking”).
Use of Google AdWords
We also use “Google AdWords”, Google’s advertising tool, to advertise our website. In this regard, we use the “Conversion Tracking” analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), on our website. If you access our website via a Google ad, a cookie is stored on your computer. Cookies are small text files that your Internet browser stores and saves on your computer. These “conversion cookies” will cease to be valid after 30 days and are not used for personal identification purposes. If you visit certain pages on our website and the cookie has not expired yet, both we and Google can detect that you as a user have clicked on an ad placed by Google and been forwarded to our site.
The information collected using “conversion cookies” is used by Google to create visit statistics for our website. These statistics tell us how many users in total clicked on our ad and also which pages on our website were accessed by users afterwards. However, we or other parties advertising using “Google AdWords” do not receive any information which can be used to personally identify users.
You can prevent the installation of “conversion cookies” by changing the relevant setting in your browser, e.g. by setting your browser to categorically disable the automatic setting of cookies, or specifically to block only cookies from the “googleadservices.com” domain.
We use “social plugins”
The plugins are recognisable due to the specific logo. These plugins are disabled (note: is this also the case on our website?), so no direct connection is established with the third-party providers’ servers. Only when you enable these buttons yourself will data be transmitted to the pages in question. When you enable the plugins, the third-party provider (Facebook, Google+) is informed that your browser has accessed the relevant page on our website – even if you don’t have a Facebook account or aren’t logged into Facebook at that moment in time. This information, including your IP address, is transmitted by your browser directly to a Facebook server in the USA and saved there.
If you are logged into Facebook, Facebook can directly assign your visit to the website to your Facebook account using the plugin. If you click on the “Like” button, the relevant information is also directly transmitted to a Facebook server and, from there, saved to your profile according to use, interests and relationships, and published on Facebook and shown to your Facebook friends. Facebook will also provide other services with this data.
External tools which can be used to block Facebook social plugins with add-ons for all common browsers are also available on the market: http://webgraph.com/resources/facebookblocker/
You will find an overview of the Facebook plugins at https://developers.facebook.com/docs/plugins/
If you don’t want these third-party social network providers to assign the data collected through our website to your Facebook profile, you can either disable the plugins or you have to log out of Facebook before visiting our website.
We would like to expressly point out that we as the operator of this website are not aware of the content of the data transmitted, or the purposes for which it is used by Instagram.
We have integrated “plugins” of the social network facebook.com (hereinafter referred to as “Facebook”) on our website. Facebook is a social network run by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
Each time a page on our website featuring a Facebook plugin is accessed, the plugin makes the browser you are using load and show the visual representation of the plugin from the Facebook server. During this process, the Facebook server is made aware of the specific page on our website which you are visiting at that moment in time. If you are a Facebook user and are logged into Facebook when you visit our website, due to the information sent by the plugin Facebook detects which specific page on our website you are visiting at that specific moment in time and assigns it to your personal user account on Facebook. If you now click on one of the plugins, such as the “Like” button, or if you post a comment, this is now sent to your personal user account on Facebook and saved there. Also, the information that you have visited our website is transmitted to Facebook regardless of whether or not you click on one of the plugins. To prevent Facebook from transmitting and saving data about you and your surfing habits, you must log out of Facebook before visiting our website.
We have no influence over the amount of data that Facebook collects in this way. As far as we are aware at present, the data collected by Facebook is as follows:
7. Use of PayPal as a payment method
If you choose to make payment with PayPal, the online payment service provider, in the context of an order process, your contact details are transmitted to PayPal as part of the order triggered in this way. PayPal is a service provided by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. During this process, PayPal assumes the role of an online payment service provider and the role of a custodian, and it offers buyer protection services.
In most cases, the personal data transmitted to PayPal is as follows: first name, surname, address, phone number, IP address, email address, or other data required for order processing, as well as data associated with the order, such as the number of items, the item numbers, the invoice amount and taxes as percentages, invoice information, etc.
This transfer is necessary to process your order with your selected payment method, and particularly to confirm your identity and to manage your payment and the customer relationship.
However, please note: PayPal may also pass personal data on to service providers, subcontractors or other affiliates insofar as doing so is necessary to fulfil the contractual obligations resulting from your order or if such parties process personal data on PayPal’s behalf.
8. Use of Sofortüberweisung as a payment method
If you choose to make payment with Sofortüberweisung, the online payment service provider, in the context of an order process, your contact details are transmitted to Sofortüberweisung as part of the order triggered in this way. Sofortüberweisung is a service provided by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. During this process, Sofortüberweisung assumes the role of an online payment service provider which enables cashless payment for products and services over the Internet.
In most cases, the personal data transmitted to Sofortüberweisung is as follows: first name, surname, address, phone number, IP address, email address, or other data required for order processing, as well as data associated with the order, such as the number of items, the item numbers, the invoice amount and taxes as percentages, invoice information, etc.
This transfer is necessary to process your order with your selected payment method, and particularly to confirm your identity and to manage your payment and the customer relationship.
However, please note: Sofortüberweisung may also pass personal data on to service providers, subcontractors or other affiliates insofar as doing so is necessary to fulfil the contractual obligations resulting from your order or if such parties process personal data on Sofortüberweisung’s behalf.
Under certain circumstances, Sofortüberweisung may transmit the personal data transmitted to it to credit agencies. Such transmission serves to check your identity and creditworthiness in relation to the order you placed.
If you have further questions concerning the use of your personal data, you can contact Sofortüberweisung by email (firstname.lastname@example.org) or in writing (SOFORT GmbH, Datenschutz, Theresienhöhe 12, 80339 Munich).
9. Right to information and to correction, deletion, restriction, revocation and transmission of your personal data
Due to the BDSG-new, (bzw) DS-GVO you can contact us at no cost if you have any questions concerning the collection, processing or use of your personal data and the correction, blocking or deletion of the same, or the revocation of the consent you granted. We would like to point out that, in accordance with the legal provisions, you have the right to correct, block and delete your personal data, as well as to restrict the processing and transmission of the same.
We will provide you with information on the personal data we have saved about you if you submit a written request. Please address your request to the company mentioned in the legal information.
We would like to point out that data transmission over the Internet is vulnerable to security issues, so complete protection against third-party access is impossible.
10. Hyperlinks to other web pages / websites
This website may contain hyperlinks to other web pages which do not belong to our company. If you visit such web pages, our company can no longer accept responsibility for the confidential handling of your data or for the content of the external web page. External links which were expressly accepted by us are marked as such. We have no influence over the content of such web pages or their compliance with data protection regulations. We recommend that you find out about the valid guidelines when visiting other websites. We would like to point out that your data is transmitted over the Internet in unencrypted form if no cryptographic methods are used. The possibility of unauthorised access by third parties during transmission cannot, therefore, be excluded entirely.
11. Integration of third-party services and contents
Third-party content – such as YouTube videos, Google Maps map data, RSS feeds or graphics from other websites – may be integrated in this website. This always requires the provider of such content (hereinafter referred to as the “third-party provider”) to record the user’s IP address. This is because they would be unable to send the content to the respective user’s browser without the IP address. The IP address is therefore required to show this content. We strive to only use content from such providers who only use the IP address to deliver content. However, we have no control over whether third-party providers save the IP address for statistical purposes, for example. We shall inform users to this effect as soon as we become aware of such practices.
12. Security of the data transmitted
We take technical and organisational security measures to protect your data, which is managed by us, against accidental or wilful manipulation, loss and destruction or against access by unauthorised individuals. Our security measures are continuously improved in line with technological developments. We cannot guarantee complete data security for communication by email.
Your personal data will be transmitted in encrypted form. We use the “SSL” (Secure Socket Layer) security system in conjunction with 256-bit encryption for any and all instances of data transfer.
This technology offers maximum security and is also used by banks to protect data in the case of online banking for this very reason.
13. Right to lodge a complaint with a supervisory authority (from 25 May 2018)
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority for data protection, particularly in the member state where your place of residence, your workplace or the place of the suspected violation is located if you believe that the processing of the personal data concerning you is in violation of the GDPR.
If you have any questions or suggestions on the topic of “Data Protection” at Karlsberg Brauerei GmbH, please send them to email@example.com