Privacy Protection

Privacy Protection Statement

The safety of your personal data is important to us. We strictly adhere to the data protection laws when handling your personal data. In the following, we would like to inform you about how we use your personal information and what it means for you if you use our website http://www.warsteiner.com/. Responsible for the processing of personal data within the meaning of the applicable data protection regulations is the Warsteiner Brauerei Haus Cramer KG, Domring 4-10, 59581 Warstein, Germany (Email: datenschutz@warsteiner-gruppe.de Phone: +492902880)

1. What is personal data?

Personal data is any information that relates to an identified or identifiable natural person. This includes inventory data such as address, telephone number and email address as well as usage data such as username and password.
Non-personally identifiable are data that are unrelated to an identifiable person, such as e.g. anonymized data of usage and service processes.

2. Anonymous use and collection, processing and use of access and personal data

You can basically surf anonymously on the websites of www.warsteiner.com. If you do not provide us with such data ourselves, we will not collect and save during your visit to www.warsteiner.com any personal data. If you visit our website www.warsteiner.com, however, our web server stores certain technical data (so-called access data) in so-called log files, including

• Name of the retrieved file
• Date and time of the call
• IP address of the accessing computer
• Browser type and version
• Operating system used by the user
• URL of the last page previously retrieved by the user
• amount of transmitted data
• Status of the call (successful Yes/No)

The recorded IP addresses in our logfiles are exclusively used for the purposes of better analyzing and resolving incidents in the availability of the web pages provided on our servers, technically and editorially improving and optimizing the provided websites and for possibly necessary forensic analysis. No statistical evaluations and/or user profiles are created on the basis of the data stored in the log files.

When using the following services available on www.warsteiner.com, your personal data will be collected:

• For order processing in the Warsteiner Shop
• When registering for the individual customer area
• Subscribe/unsubscribe to newsletters
• When participating in sweepstakes
• When contacting via contact form

We only use the personal data collected if you provide us with these during your registration and/or order, or during the contractual relationship. The provision of your personal data is required for the respective conclusion of contract or for the execution of the respective contractual relationship. We collect and use the data provided by you insofar as they are necessary for the establishment, content or amendment of the contractual relationship within the framework of Article 6 (1) (b) GDPR, in particular for the processing of your orders and for billing purposes. Without the provision of your personal information, we cannot make you the aforementioned services available to you.

To register as a user, you must provide the following information:

• Name (possibly company name and authorized representative)
• Email address
• Zip code
• Date of birth

In the course of registering for certain services, Warsteiner may request further personal data in order to make the respective service available to the user (e. g.: email address for newsletters).

If you place orders within the framework of the Warsteiner shop, additional data may be requested in addition to the inventory data collected during the registration or as part of the ordering process, which may be required for payment processing. Such additional data will be used solely for the purpose of immediate payment processing and will not be stored permanently.

In addition, we will only use personal information that you have provided if and to the extent that you have consented to it or if a legal license exists to use it. As we ship beer, among other things, we need your date of birth for each order. Only then can we prevent the shipment to minors.

In addition, we use your email address with your consent or as far as permitted by law, to inform you about our offers and products or innovations in our online shop (for example in our newsletter). At any time, you can object to this use of your email address with effect for the future. All information regarding the revocation of your consent can be found in section 8 of this declaration. We will also list the possibility of cancellation in the individual emails.

3. Links to other websites, use of cookies, Google Analytics, social plug-ins

1. a) Hyperlinks
   Warsteiner.com links websites of other providers that not affiliated with us (third parties). If you click on these links, www.warsteiner.com no longer has any influence on the data collected and used by these providers. More detailed information on data collection and use can be found in the privacy policy of the respective provider. Since data collection and processing by third parties is naturally beyond our control, we cannot accept any responsibility for this.
2. b) Cookies
   We use cookies on our website to make them attractive and to enable the use of certain functions.
   Cookies are text files that are temporarily or permanently stored by the user's browser on his/her computer. Temporary cookies ensure the consistency of a communication process. Persistent cookies are used to recognize a user. For example, such a persistent cookie is used when the user selects the "stay logged in to this computer" feature. By means of a cookie, the website recognizes during a later call of the site that it is the same computer that is to be automatically logged in.
   You can decide for yourself if your browser uses cookies. All browser programs allow the deactivation or deletion of cookies. However, functions that require the computer to be recognized are then not available or only to a limited extent. The functionality of the website is therefore impaired if cookies are disabled; Among other things, the possibility of logging in as a user may be restricted.
3. c) Google Analytics
   We use the web analysis tool Google Analytics.
   Google Analytics is a web analytics service of Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, U.S.A. ("Google").Warsteiner.com uses Google Analytics only with the function "anonymizeIP". This function removes the last octet of the IP address. This prevents the logging of your full user IP address. An individual assignment is therefore excluded for this reason. Google Analytics uses cookies (for cookies see above letter b), which allows an analysis of the use of the website www.warsteiner.com by you. The analysis of your use of our website is based on an agreement between Warsteiner and Google about order data processing. The information generated by the cookie about your visit to www.warsteiner.com (time of visit and referring sources, details of system configurations and your provider, including your shortened IP address) will be transmitted to and stored by Google on servers in the United States , By using this website, you consent to the processing of data about you by Google and the type and manner of data processing described above as well as the stated purpose. You can prevent the storage of cookies by a corresponding setting of your browser software. We point out, however, that in this case you may not have all the features of our websites available.
   You may also prevent Google from collecting and processing this data by downloading and installing the browser plug-in available at the following link. http://tools.google.com/dlpage/gaoptout?hl=en.
   Likewise, the collection can be prevented by Google Analytics (especially for browsers on mobile devices) by using the following link. An opt-out cookie is set which prevents the future collection of your data when visiting our website:
   Disable Google Analytics
   Google will use this information to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Google will never associate your IP address with other Google data.
   For more information about Google Inc. and Google Analytics, please visit:
   (http://www.google.com). Google's privacy policy can be found at: http://www.google.com/intl/en/privacypolicy.html#information
   You can prevent the acceptance of new cookies by setting your browser accordingly (see above letter b). In addition, you may also object to the collection, storage and use of data by Google Analytics at any time. To object and thereby disable data collection by Google Analytics, you need a browser add-on. The add-on communicates to the JavaScript from Google Analytics that you do not want information about your website visit to be transmitted to Google Analytics. You need to download and install the add-on. For more information on how to disable Google Analytics and more information about downloading the add-on, visit http://tools.google.com/dlpage/gaoptout. The web analytics remains disabled as long as the Google's add-on is not disabled or deleted. Therefore, please do not delete the add-on, as long as the web analysis is not wanted. The add-on is set per browser and computer. If you access www.warsteiner.com with different browsers, you have to add the add-on separately.
4. d) Facebook
   Facebook is a social network of the American company Facebook, Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA). Facebook buttons are always marked with the Facebook logo. Depending on the type of button, additional information may be added (e.g., "Like" or "Recommend"). If you surf on www.warsteiner.com and access one of our web pages that contains a Facebook button, your browser establishes a direct connection to the Facebook servers and loads the button from there. The information is transmitted to Facebook that the corresponding www.warsteiner.com page was called.
   If you are logged in to Facebook as a Facebook user at the same time, the page view can be assigned to your profile. If you click on integrated Facebook buttons and then log in to Facebook (or are already logged in), the "liked" or "recommended" information in your profile will be published in short form. This way, Facebook can possibly collect and save further usage data. It is possible that user profiles can be created at Facebook that go beyond what you reveal yourself on Facebook.
   For more information about data collection and processing and your related rights, please refer to the Facebook Privacy Policy, which is available at http://www.facebook.com/policy.php.
5. e) Twitter
   Twitter is a microblogging service provided by the American company Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). If you surf on www.warsteiner.com and call up one of our web pages, which contains a Twitter button, your browser also establishes a direct connection to the servers of Twitter and loads the button from there. During this process, the information is transmitted to Twitter that the corresponding www.warsteiner.com page was called. Even if you are not logged in, Twitter can collect and save usage data as needed.
   If you click on the Twitter buttons on www.warsteiner.com and "tweet" information via the opening Twitter window, you send the "tweeted" information to Twitter. This information will then be published in your Twitter user profile.
   Further information on the collection, analysis and processing of your data by Twitter as well as your related rights can be found in the privacy policy of Twitter, which is available at http://twitter.com/privacy.

4. Disclosure of personal data

A transfer of your personal data takes place only if this is listed in this privacy statement, the purpose of the contract this requires (Article 6 (1) (b) GDPR), you have given your express consent (Article 6 (1) (a) GDPR) and/or a legal permission exists for this (Article 6 (1) (c) GDPR). For example, we will pass your data on to the shipping company responsible for the delivery, insofar as this is necessary for the delivery. If necessary, we will pass on your data to the commissioned credit institution or the engaged payment service provider for payment processing.

5. Data security

We use technical and organizational security measures to ensure that the users' personal information is protected against loss, inaccuracies or unauthorized access by third parties. In any case, on our side, only authorized persons have access to your personal data, and only to the extent that it is necessary for the aforementioned purposes. The transmission of certain sensitive data is encrypted. We use the so-called "Secure Socket Layer" (SSL) transmission for this purpose. All information transmitted using this secure method is encrypted before being sent to us. By converting to a code, your personal information such as name or address is encrypted by the security server software. In this way, this data cannot be read by unauthorized persons during transmission on the Internet. Most newer browsers already support this secure transmission technology. All employees of the Warsteiner Brewery and their vicarious agents are, insofar as they deal with personal data, committed to data secrecy.

6. Duration of storage

Upon termination and complete execution of the contract, your data will be blocked for further use and deleted after expiry of any applicable tax and commercial regulations, unless you have given consent to the further use of your data.

7. Rights of the persons concerned

Within the scope of the statutory provisions, you have different rights when the Warsteiner Brewery processes your personal data. According to the legal terminology, persons whose personal data are processed are referred to as "data subjects".

1. a) Right to confirmation
   You have the right to ask the Warsteiner Brewery for confirmation if personal data about you is being processed.
2. b) Right to information
   If personal data about you is processed by the Warsteiner Brewery, you may receive information about the personal data stored about you and a copy of this information, provided that this right to receive a copy does not affect the rights and freedoms of others. Furthermore, you are entitled to receive information about the following information:
3. the processing purposes;
   the categories of personal data being processed;
   the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
   if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration;
   the right of rectification or erasure of personal data concerning you or restriction of processing by Warsteiner or a right of objection to such processing;
   the existence of a right of appeal to a supervisory authority;
   if personal data has not been collected from you as the data subject, all available information about the source of the data;
   the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR, and - at least in these cases - meaningful information about the logic involved as well as the scope and intended impact of such processing on you.
4. In addition, if data are transmitted to a third country or to an international organization, you have the right to receive information about the appropriate guarantees in connection with the transfer.
5. c) Right to rectification
   You have the right to request the Warsteiner Brewery to rectify your personal data in case of inaccuracy without delay. In addition, in consideration of the purposes of processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
6. d) Right to cancellation (right to be forgotten)
   You also have the right to request from the Warsteiner Brewery that the personal data concerning you be deleted without undue delay if one of the following reasons applies and if processing is not required:
7. The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary;
   You revoke your consent, on which the processing was based according to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is a lack of any other legal basis for processing;
   In accordance with Article 21 (1) GDPR, you object to the processing and there are no legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR;
   Personal data has been processed unlawfully;
   The deletion of personal data is required to fulfill a legal obligation under EU law or the law of the Federal Republic of Germany;
   The personal data was collected in relation to the services of the information society offered pursuant to Article 8 (1) GDPR.
8. If one of the above reasons is correct and an affected person wishes to initiate the deletion of personal data stored at the Warsteiner Brewery, they may at any time contact our Data Protection Officer or another employee of the Warsteiner Brewery. Our Data Protection Officer or another employee will arrange that the deletion request be fulfilled without delay.
9. If the personal data have been made public by the Warsteiner Brewery and if our company is responsible for deleting personal data pursuant to Article 17 (1) GDPR, we shall take appropriate measures, including technical ones, taking into account the available technologies and implementation costs, for the deletion of personal data, to inform those responsible for processing the published personal data, that the data subject has requested from those responsible for data processing the deletion of all links to such personal data or copies or replications of such personal data, as far as the processing is not required. The Data Protection Officer of the Warsteiner Brewery or another employee will initiate the necessary measures in individual cases.
10. e) Right to restriction of processing
    If your personal data has been processed by the Warsteiner Brewery, you also have the right to demand that we restrict the processing if one of the following conditions applies:

• The accuracy of your personal data is contested by you for a period of time that allows us to verify the accuracy of your personal information;
• The processing is unlawful. You refuse the deletion of personal data and instead require the restriction of the use of personal data;
• The Warsteiner Brewery no longer needs your personal information for processing purposes, but you need it to enforce, exercise or defend your rights;
• You have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of Warsteiner are greater than those of the person concerned, i.e. you.

1. If one of the above conditions is met and you wish to request the restriction of personal data stored at the Warsteiner Brewery, you can contact our Data Protection Officer or another employee at any time
2. f) Data transferability
   You have the right to receive personally identifiable information, that you provide to a responsible person, in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible person without hindrance by the responsible person to whom the personal data was provided, provided that the processing is based on the consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on the basis of a contract pursuant to Article 6 (1) (b) GDPR and the processing occurs by means of automated procedures, unless the processing is necessary for performance of a task carried out in the public interest or in the exercise of official authority vested in the Warsteiner Brewery.
   Furthermore, in exercising your right to data portability pursuant to Article 20 (1) GDPR, you have the right to obtain that the personal data is transmitted directly from one responsible person to another, insofar as this is technically feasible and to the extent that this does not confer rights and other persons’ freedoms.
3. g) Right to refusal
   You have the right, for reasons arising from your particular situation, at any time to object to the processing of personal data concerning you pursuant to Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
   In the event of an objection, the Warsteiner Brewery will no longer process personal data unless we can prove that there are compelling legitimate reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.
4. If the Warsteiner Brewery processes personal data in order to pursue direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct marketing. If you object to the Warsteiner Brewery processing for direct marketing purposes, we will no longer process the personal data for these purposes.
5. In addition, you have the right, for reasons that arise from your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary to fulfill a public interest task.
   In order to exercise the right to object, the data subject may directly contact the Data Protection Officer of the Warsteiner Brewery or another employee.
6. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58/EC, to exercise his/her right of objection by means of automated procedures using technical specifications.
7. h) Automated decisions in individual cases including profiling
   You have the right not to be subject to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you significantly in a similar manner, unless the decision (1) is required for the purpose of concluding or fulfilling a contract between you and us, or (2) is permitted by law of the European Union or the Federal Republic of Germany, and this legislation contains reasonable measures to safeguard the rights and freedoms as well as your legitimate interests, or (3) with your express consent. If the decision (1) is required to conclude or fulfill a contract between you and us or (2) with your express consent, we shall take reasonable measures to uphold your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his/her own position and to challenge the decision.
8. If you wish to enforce any rights related to automated decisions, you may contact our Data Privacy Officer or another employee at any time.
9. i) Right to revoke a data protection consent
   You also have the right to revoke your consent to the processing of personal data at any time. If you would like to assert your right to revoke your consent, you can contact our Data Protection Officer or another employee at any time. Further information can be found under section 8 of this privacy policy.

8. Revocation of your consent / Data Protection Officer

Insofar as you have consented to the use of your personal data, you may revoke your consent to us at any time with future effect.
Please contact our Data Protection Officer if you have any questions or requests for information or in the case of a revocation of your consent:

Warsteiner Brauerei Haus Cramer KG
Datenschutzbeauftragter (Data Protection Officer)
Domring 4-10
59581 Warstein
Germany

E-Mail: datenschutz@warsteiner.de

Privacy Protection Statement Version 2.0 Status: April 2018