Data Processing

(As of: 05/2024)

Here we inform you about the processing of personal data when using our website www.hausberg-spirituosen.de and our social media profiles.

Personal data are all data that can be related to you personally, i.e. Name, address, email, IP address or user behavior.

Regarding the terms used, e.g. “Processing”, “responsible person” or “data subject” is referred to the definitions in Art. 4 GDPR. The following can be found there in particular:

“Personal data” is all information that relates to an identified or identifiable natural person (the “data subject” or the “data subject”); An identifiable person is a natural person who can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, the expression of the physical , physiological, genetic, psychological, economic, cultural or social identity of this natural person (Art. 4 No. 1 GDPR).

“Processing” is any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, collection, organization, organization, storage, adaptation or modification, reading, querying, etc. Use, disclosure by
Transmission, dissemination or another form of provision, comparison or linking, restriction, deletion or destruction (Art. 4 No. 2 GDPR).

"Responsible" (or "responsible body") is the natural or legal person, public authority, agency or other body that alone or together with others decides on the purposes and means of processing personal data (Art. 4 No. 7 GDPR) .

"Processor" is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible (Art. 4 No. 8 GDPR).

In particular, the terms "processing" and "personal data" are very extensive, so that almost every handling of data can be understood as such.

Content:
01. Who is the responsible body?

02. Is there a data protection officer?

03. Who is affected by data processing?

04. What data do we collect from you and for what purposes or on what legal basis do we process it?

05. Who do we transfer your data to?

06. Are your data transferred to locations outside the EU?

07. How long do we process your data?

08. What are your rights?

09. When and how can you object to data processing?

10. When and how can you withdraw your consent?

11. Where can you complain?

12. When and why is it necessary to provide your data?

13.Is there automated decision making (e.g. profiling)?

14. How can you contact us?

15. How do we secure our website?

16. How and what is your data used for in our web shop?

17. How and what is your data used for when registering on our website?

18.How and for what do we use Facebook pixels?

19. What are cookies and how do we use them?

20. How and why do we use Google Maps?

21. How and why do we use Klarna IMMEDIATELY?

22. What about our profiles on social networks?

01. Who is the responsible body?
We are responsible for the processing of your data:
Hausberg Spirituosen GmbH
represented by Mr. Jens Hartmann
Lichtenhainer Strasse 40
28205 Bremen
Fon: +49 151 46171857

Email: [email protected]

02. Is there a data protection officer?
We are not legally obliged to appoint a data protection officer.

03. Who is affected by data processing?
If you e.g. As an interested party, customer, supplier, service provider or other visitor visiting our website, your personal data will be processed in accordance with the statutory provisions or this declaration. All visitors to our website are summarized under the term "user".

04. Which data do we collect from you and for what purposes or on which
Legal basis do we process this?
If you visit our website without registering or transmitting information to us in any other way, only the personal data that the browser you are using will be transmitted to our server. To the best of our knowledge, Processes the data listed below, which is technically necessary to display our website and to ensure its stability and security:
- IP address of the requesting computer
- Date and time of the request
- Name and URL of the file accessed
- Access status / HTTP status code
- amount of data transferred
- Website from which the request comes (referrer URL)
- browser used
- Operating system

If you also transmit personal data to us, e.g. when registering or as part of an inquiry by email or via our contact form, we also process, among other things. possibly the following data:
- inventory data (e.g. name, address)
- Contact details (e.g. email address, telephone number)
- Content data (e.g. text input, photos, videos)
- Usage data (e.g. visited sites, access times)
- Communication / metadata (e.g. device information, IP addresses)

We also process the following personal data for the purpose of providing contractual services, service and customer care as well as marketing / advertising:
- Contract data (e.g. object of contract, term, customer number)
- Payment data (e.g. bank details, payment history)

We process your personal data when you visit our online presence for the following purposes:
- Providing the functions and content of our online offer
- Ensuring a smooth connection to our website
- Ensuring comfortable use of our website
- Evaluation and guarantee of system security and stability as well as general security measures
- Answer any contact inquiries or to communicate with you
- other administrative purposes
- Provision of contractual services
- Customer service
- Marketing & Advertising

 

Unless we provide a specific legal basis in the context of this data protection declaration, the following applies to the processing of your personal data: The legal basis for obtaining consent results from Art. 6 Para. 1 lit. a, Art. 7 GDPR. The legal basis for data processing to fulfill our services and implement (pre‐) contractual measures and to answer any inquiries is Art. 6 Para. 1 lit. b GDPR. For data processing to fulfill legal obligations, Art. 6 Para. 1 lit. c GDPR is the legal basis. If vital interests of the data subject or another natural person make data processing necessary, the legal basis results from Art. 6 Para. 1 lit. d GDPR. Data processing to safeguard our legitimate interests is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection mentioned above.

 

If we disclose this to third parties as part of the processing of your personal data, transfer it to them or otherwise grant them access to the data, this is done exclusively on the basis of a legal permission, insofar as you have consented to it, we are legally obliged to do so or on the basis our legitimate interests. Legal permission exists in particular if the disclosure of the data is necessary to fulfill contractual obligations (e.g. with payment or shipping service providers). A legitimate interest can exist if we use data for direct advertising or to prevent fraud, or if you are a customer of ours. A legitimate interest, e.g. when using web or email hosts, cloud providers or similar Service providers exist. Such service providers often work as so-called processors on the basis of a corresponding contract. You are also obliged to comply with the data protection regulations and also to guarantee this contractually. The legal basis for such order processing relationships is Art. 28 GDPR.

05. Who do we transfer your data to?
Unless otherwise stated in the data protection declaration, we work regularly
especially with the following recipients:
- shipping service provider
- Email hoster
- Web hoster
- Bank
- Payment service provider

We carefully select the external service providers. In the case of order processing relationships (Art. 28 GDPR), these companies are contractually bound by our instructions and are regularly checked by us. Further information can be found in the following descriptions of the individual services. The legal basis for the transmission of your personal data is mentioned under point 04 above.

 

06. Are your data transferred to locations outside the EU?
A transmission of your personal data to third countries (i.e. outside the EU or the EEA) or to an international organization is only exceptionally provided in certain cases. Further information can be found in the following descriptions of the individual services. If we process your personal data in a third country or have it processed by a third party, this will only take place if it fulfills our (pre‐) contractual obligations
or on the basis of your consent, a legal obligation or our legitimate interests. Your personal data will only be processed in a third country if the special requirements of Art. 44 ff. GDPR are met, unless there are legal or contractual permits in individual cases. That means the
Data processing e.g. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the European Union (e.g. for the USA through the so-called "EU-US Privacy Shield") or compliance with special, recognized contractual obligations (especially the so-called "EU standard contractual clauses").

07. How long do we process your data?
The duration of the storage of your personal data is measured regularly based on existing statutory retention periods (e.g. according to commercial or tax law). Unless otherwise stated below, your personal data will be routinely deleted after a relevant period, if it no longer exists
to fulfill the contract or initiate a contract, we no longer have a legitimate interest in further storage and / or if you have not consented to further storage.
In Germany there are special retention periods e.g. in the following areas:
- acc. Commercial law (6 years e.g. for opening balance sheets, annual accounts, accounting documents or similar)
- acc. Tax law (10 years for all documents relevant to tax law)
- acc. AGG (6 months for documents of rejected applicants)

 

08. What are your rights?
You have the following rights with regard to the processing of your personal data:
- Right to information
- Right to rectification
- Right to cancellation
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent
- Right to complain

The last 3 rights are explained in more detail below. If you have any questions about your rights, do not hesitate to contact us. The contact details can be found above in the sections on the responsible body.

09. When and how can you object to data processing?
If your personal data is based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to object to the data processing at any time. This means that we will no longer be allowed to continue processing your personal data in the future, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the data processing of the assertion , Exercise or defense of legal claims. However, the right to object only applies if there are reasons for this that arise from your particular situation or if your objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation. If you would like to exercise your right of cancellation, a message to our postal address or an email is sufficient (see above under point 01).

10. When and how can you withdraw your consent?

You can withdraw your consent to us at any time. As a result, we are no longer allowed to continue processing your personal data based on this consent in the future.

If you would like to exercise your right of cancellation, a message to our postal address or an email is sufficient (see above under point 01).

11. Where can you complain?
With regard to the processing of your personal data by us, you have the right to complain to a data protection supervisory authority. A list with the state data protection supervisory authorities can be found at the following address: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links‐node.html

12. When and why is it necessary to provide your data?
As part of the registration, when shopping in the web shop, in the contact form or in the case of support requests, you provide us with your personal data (e.g. name, address or email address).

The provision of your personal data is partly required by law (e.g. through provisions of tax law). It can also be necessary to carry out (pre‐) contractual measures. Failure to provide your personal data would result in the contract not being concluded with you or your request not being able to be answered.

To carry out contracts or pre-contractual measures or to communicate with us, the provision of the following data is mandatory:
- First and Last Name
- Address
- E-mail address
- Payment data (depending on the payment method selected, e.g. bank details, PayPal data ...)
- Date of birth (as part of our age verification system to check your legal age)
- Telephone number (e.g. for inquiries or answering customer inquiries)

Unless otherwise stated in this data protection declaration, all others are
Information voluntarily.

13.Is there automated decision making (e.g. profiling)?
An automated decision including profiling does not take place.

14. How can you contact us?
You can contact us either by post, telephone or email. Our contact details can be found above under the information on the responsible body. If you e.g. by e-mail with us, we automatically save the personal data you voluntarily provided to us for the purpose of processing your request or contacting you. This data is not passed on to third parties.

 

15. How do we secure our website?

Taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing, as well as the different likelihood of occurrence and severity of the risk to the rights and freedoms of natural persons, we take suitable technical and organizational measures to ensure that Ensure a level of protection appropriate to the risk (Art. 32 GDPR). These measures include in particular ensuring the confidentiality, integrity and availability of data. In addition, we have set up business processes with us, which in particular ensure the protection of data subject rights, the deletion of data and also the reaction to data breaches. In addition, we observe the principles of data protection law, including Data protection through technology design and data protection-friendly default settings
(privacy by design and privacy by default, Art. 25 GDPR).

For security reasons and to protect the transmission of your personal data and other confidential content, we use an encrypted transmission on our website using an SSL certificate. You can recognize this by the fact that "https" (instead of "http") as well as a lock symbol and another color display appear in the address line of your browser.

Below we inform you about the technologies used on our website and special processing processes:

16. How and what is your data used for in our web shop?
If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data that we need to process your order (e.g. name, address, email address or payment details). The information required to process contracts is marked separately as a mandatory field, other information is voluntary. We process your personal data to process your order
and to fulfill our corresponding contractual obligations. For this purpose, we can pass on your payment details to our house bank or your name and address to the shipping service provider. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR. You can create a customer account on a voluntary basis, through which we can save your data for later purchases. When you create a customer account, the data you provide will be stored revocably. In your customer area, you have the option of viewing your data, correcting or deleting them if necessary.

We can also process the data you provide to inform you about our products or to send you emails with technical information.

Due to commercial and tax regulations, we are obliged to store your personal data for up to 10 years.

To prevent unauthorized access by third parties to your data, we have encrypted the data transmission via our website using an SSL certificate.

 

17. How and what is your data used for when registering on our website?
You have the option of registering on our website by providing your personal data. Which form of personal data is transmitted to us can be found in the form used for registration. The personal data you enter will only be used for
processed internally by us and for our own purposes. We can pass it on to one or more processors, e.g. a shipping service provider, who also uses your personal data exclusively for internal use that is attributable to us.

By registering on our website, your IP address, the date and the time of registration are also saved. This data is stored to prevent misuse of our services. Because this data enables us, if necessary, to investigate crimes committed. In this respect, the storage of this data is necessary for our security. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on is used for criminal prosecution.

The personal data you provide during registration serve us to offer you certain content or services that, due to the nature of the matter, can only be offered to registered users. You have the option to view, change or delete your data at any time.

 

18.How and for what do we use Facebook pixels?

On our website, we use the so-called "Facebook pixel" (provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or for EU citizens: Facebook Ireland Ltd., 4 Grand Canal Square , Grand Canal Harbor, Dublin 2, Ireland). This serves our legitimate interests for the purposes of analysis, optimization and the economic operation of our website.

The Facebook pixel enables the provider to determine you as a visitor to our website as the target group for the display of advertisements (the so-called "Facebook ads"). We therefore use the Facebook pixel to only display the Facebook ads we have commissioned to those Facebook users who have shown an interest in our website or who have certain features (such as interest in certain topics or products). . We transmit this information to Facebook (so-called "Custom Audiences"). By using the Facebook pixel, we particularly want to ensure that the Facebook ads we have commissioned correspond to your potential interest and are therefore not a nuisance. The effectiveness of Facebook ads
we can understand for statistical or market research purposes. Because we e.g. also recognize whether you were forwarded to our website after clicking on a Facebook ad (so-called "conversion").

The processing of the data by the provider takes place within the framework of the Facebook data usage guideline, which can be found at the following address: www.facebook.com/policy.php. Further information on the Facebook pixel and its functions can be found in the Facebook help area at the following address:
www.facebook.com/business/help/651294705016616.

You have the option to object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To do this, you can call up the website specially set up by Facebook for this and follow the instructions on the settings for usage-based advertising: www.facebook.com/settings?tab=ads. The settings you make here are platform-independent, i.e. they apply to all end devices.

You also have the option to object to the use of cookies for advertising or range measurement purposes. You can do this via the deactivation page of the network advertising initiative (optout.networkadvertising.org/) or via the American website (www.aboutads.info/choices) or via the European website (www.youronlinechoices.com/uk/your‐ad‐choices/ ) achieve.

The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f GDPR.

 

19. What are cookies and how do we use them?

We use cookies on our website. These are small text files that are saved by your browser and stored on your device. The so-called transient (or also temporary) cookies are automatically deleted when you close your browser. This particularly includes session cookies. These store a certain identifier (the so-called session ID), which means that your end device can be recognized when you return to our website. This can e.g. the content of the virtual shopping cart of an online shop or the login status are saved. The session cookies
are deleted when you log out or close the browser.

The so-called persistent (or permanent) cookies are automatically deleted after a certain period of time; the duration of storage differs depending on the cookie. This can e.g. User information for range measurement or for marketing purposes or a login status can be stored for a long time.

So-called first-party cookies and third-party cookies have to be differentiated for both temporary and permanent cookies. The former are set by the responsible body, the others by third parties.

You can delete cookies at any time using the security settings in your browser or e.g. also refuse to accept third-party cookies. If you generally want to object to the use of cookies used for online marketing purposes, you can do so with various services or providers, e.g. via the American website www.aboutads.info/choices or via the European website www.youronlinechoices.com. Please note that you may not be able to use all functions of our website.

On our website we can use temporary or permanent cookies as well as first and third party cookies, e.g. to be able to identify you for subsequent visits if you have an account with us (otherwise you would have to log in again for each visit). You will receive further information about this below in the context of our data protection declaration.

We also use so-called flash cookies. These are not recorded by your browser, but by additional software, the so-called flash plugin, which may also be available on your device. We also use HTML5 storage objects that are stored on your device. These objects store the required data regardless of the browser you use and do not have an automatic expiry date. If you do not want the flash cookies to be processed, you must install a corresponding browser addon, e.g. B. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. You can also regularly delete your cookies and browser history manually in your browser.

The legal basis for the use of cookies is Art. 6 Para. 1 S. 1 lit. f GDPR.

20. How and why we use Google Maps

We use content from Google Maps on our website to display maps and to create directions (provider: Google LLC, Amphitheater Parkway Mountain View, CA 94043, USA). The legal basis for the use of Google Maps is Art. 6 Abs. 1 S. 1 lit. f GDPR.

When you visit our website, Google receives the information that you have accessed the corresponding subpage of our online presence. In addition, certain data are transmitted, e.g. Your IP address. This takes place regardless of whether you have a Google user account or are logged in there. If you are logged into your Google user account, your data will be assigned directly to your account. If you do not want such an assignment, you must log out of your Google user account. Google processes your data for the purposes of advertising, market research and / or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. You have a right to object to this type of data processing. If you want to exercise your right to object, please contact Google directly.

The terms of use for Google Maps can be found under "Terms of use for Google Maps" (www.google.com/intl/de_de/help/terms_maps.html). You can find detailed information in Google's data protection center "Transparency and options" (www.google.de/intl/de/privacy) and in the section "Data protection regulations" (www.google.de/intl/de/policies/privacy/ ).

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield (www.privacyshield.gov/EU‐US framework).

 

21. How and why do we use PAYPAL?

We have integrated components from a payment service provider on our website. The provider is: PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxemburg

Paypal offers the possibility to make payments online using the Paypal app. If you select Paypal as a payment option during the ordering process, your personal data will be automatically transmitted to Paypal. This includes the following data in particular: first and last name, address, email address, IP address, possibly also telephone or mobile number or other data that may be required to process the purchase on account. In addition, in order to process the purchase contract, such personal data is necessary that are related to your order from us.

After you have selected Paypal as a payment option, you will be redirected to the Paypal website. There you will be asked to enter the access data for your bank account and to authorize the payment process. You exchange this data with Paypal, which in turn forwards it to your bank for processing the payment. We have no access to this data and do not save it. Paypal automatically sends us electronic information that the payment has been successfully made. After making the payment, you can decide whether you want to be redirected to our website.

The transmission of your data is used in particular for identity verification, payment administration and fraud prevention. We transmit your data to Paypal based on our legitimate interests. Paypal transmits the personal data exchanged between Paypal and the data controller to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.

Paypal also passes on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data is to be processed in the order.

We use Paypal as part of fulfilling contracts in accordance with Art. 6 para. 1 lit. b GDPR. For the rest, the use of external payment service providers also corresponds to our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR. This enables us to offer our website visitors effective and secure payment options.

You have the option to revoke your consent to the handling of your personal data from Paypal at any time. A revocation does not affect personal data that must be processed for (contractual) payment processing.

Klarna's data protection regulations can be viewed at the following address: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

 

22. What about our profiles on social networks?
We operate the profiles listed below in social networks in order to get in touch with the active users and to inform them about our services. When calling up the respective networks, the respective terms and conditions and the data protection information of the respective operators apply. Unless otherwise stated in our privacy policy, users' data will only be processed if they contact us within social networks, e.g. Write posts on our profile pages or send us messages.
Our social media profile:

- Facebook

- Instagram

- Youtube