Source: https://www.splendid-drinks.com/en/data-protection.html
Timestamp: 2019-04-23 21:54:26+00:00

Document:
We process personal data as part of contract initiations and fulfilment of the contract concluded between you and us. The data are processed for the purpose of fulfilling contractually agreed services, such as completion of the purchase and the delivery of beverages. Art. 6 Para.1 lit. b) GDPR serves as legal basis in this regard. As part of the fulfilment and execution of a contract, we process the data you communicated to use when concluding the contract or during the contractual relationship. That includes your master data (first and last name, date of birth, address, e-mail address) as well as your payment information (account information, bank).
If necessary, we will process your data to safeguard our reasonable interests or the interest of a third party. This kind of processing also includes requests to credit agencies (SCHUFA -General Credit Protection Agency) to determine credit and default risks, assertion of legal claims or ensuring IT security.
In case we specify our reasonable interest or the reasonable interest of a third party as legal basis, you have the right to object as per Art. 21 GDPR. More information is available in the section “Right to object”.
We are obligated to comply with legal provisions requiring the processing of your data. For example, we must comply with retention periods as per Commercial Code (HGB) and Fiscal Code (AO), some of which require data to be stored for a period of up to 10 years. We are also subject to tax-related reporting obligations.
If you have given consent for your data to be processed, we will process such data for the purpose specified as part of the consent. You may withdraw your consent at any time. More information is available in the section “Right to withdraw.
Within our company or group of companies, the only employees with access to your data are those who require such access to fulfil their contractual or legal obligations. Furthermore, service providers in our employment may receive data for such purposes.
We process and store your personal data for the duration of the contract. If the data are no longer required for the fulfilment of contractual or legal obligations, we regularly delete data while complying with the legal retention periods (esp. § 257 HGB and § 147 AO). Retention periods may be up to 10 years.
If data are to be stored to safeguard the assertion of legal claims, the retention periods may be as long as 30 years, with the regular period of limitation being three years.
Every person whose personal data we process generally has the following rights: Right to information (Art. 15 GDPR), right to rectification, (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 DSGVO), right to data portability (Art. 20 GDPR) as well as the right to object (Art. 21 GDPR).
As per Art. 21 GDPR, the data subject has the right to object to the processing of personal data at any time. In that case, we will no longer process the data for the purposes of direct advertising or associated profiling. After an objection, we will no longer process your personal data for any other purposes, unless we are able to prove compelling reasons worthy of protection for processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. In such a case, you must present reasons for the objection which arise from your special situation.
The data subject has the right to withdraw given consent at any time. The withdrawal does not affect the legal basis of the processing executed on the basis of consent until the withdrawal.
You have the possibility to contact our company, the Data Protection Officer specified above or a supervisory authority to lodge a complaint.
In the context of our contractual relationship, you must provide the personal data required for execution and fulfilment of the contract. The same applies for data we are legally obligated to process. Not providing such data would result in us regularly not being capable of concluding contracts with you.
No automated individual decisions including profiling are made.
Welcome to our website! We attach great importance to the protection of your data and the protection of your privacy. We would like to take the opportunity below to explain what data we process, when and for what purpose, and on what legal basis. We would like to explain to you how our services work and how we guarantee the protection of your personal data in the process.
According to Art. 4(1) GDPR, personal data is all information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified directly or indirectly. Additional information regarding this definition can be found in Art. 4(1) GDPR as well as other sources.
To object to the processing of your personal data at any time. In that case, we will no longer process the data for the purposes of direct advertising or associated profiling.
After an objection, we will no longer process your personal data for any other purposes, unless we are able to prove compelling reasons worthy of protection for processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (cf. e.g. Art. 21 (1) GDPR, “limited right to object”). In such a case, you must present reasons for the objection which arise from your special situation.
In cases where your personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, you may also object to processing of personal data concerning you on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest. (cf. Art. 21(6) GDPR).
We will also note your right object separately in the individual sections below (e.g. by stating: “You have the right to object”) provided that this right applies. Additional information on how to exercise your right to object will be provided in these instances.
IP address for your computer.
The purpose of this processing is to make our website accessible from your device and to enable our website to be displayed correctly on your device or in your browser. Furthermore, the data aids us in optimizing our website and to ensure the security of our systems. This data is not analysed for marketing purposes.
The legal basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in presenting you a website that is optimized for your browser and in permitting communications between our server and your device. The latter requires the processing of your IP address in particular.
The information subject to processing is only stored for as long as it is necessary or legally required for the intended purpose.
The recipient of this data is our server host - who acts on our behalf within the scope of a contract data processing agreement.
The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information means that you may not be able to use our website at all or not to its full extent.
Cookies that contain a randomly generated, specific identification number which makes you or your device identifiable during your visit to our website. These cookies are automatically deleted at the end of your visit.
Cookies that contain a randomly generated, specific identification number which makes you or your device identifiable on our website. These cookies are used, for example, to store your consent to the cookie banner. These cookies are automatically deleted after one year.
The legal basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in presenting you with a website that stores your personal settings and facilitates your visit to our website.
You can restrict or completely prevent cookies from being saved using your browser settings. You can also have cookies deleted automatically when you close your browser window.
We also offer you the opportunity to apply for job offers on our website and send us your application by e-mail.
If you take advantage of these options to contact us, we will process your e-mail address and any information included in the text of any message you send us as well as your application materials.
The purpose of processing your e-mail address is to process your application and to be able to contact you in order to discuss your application with us. The purpose of the processing of the personal data taken from application materials sent by you is to be able to identify suitable candidates.
The legal basis for processing your e-mail address is Art. 6(1)(f) GDPR. We have a legitimate interest in offering you the opportunity to contact us at any time and to answer any questions you may have. The legal basis for the processing of personal data taken from your application is Art. 6(1)(b), Art. 88(1) GDPR, section 26(1) Federal Data Protection Act (BDSG) (revised version).
The application e-mail and any documents sent will be kept until a decision has been made for or against the applicant concerned and will be deleted thereafter.
Our website includes a contact form that you can use to contact us electronically. If you contact us via the contact form, we will process data you have entered in the input fields.
We treat mandatory information and voluntary information in the same manner. Mandatory data is necessary to contact you and to process your inquiry.
The purpose of processing personal data designated as mandatory information, along with voluntary information, is to process your contact request and to be able to contact you in order to respond to your request. Other personal data processed during sending (IP address, date and time when sent) serve to prevent misuse of our contact form.
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. We have a legitimate interest in offering you the opportunity to contact us at any time so that we can answer any questions you may have.
The information you provide is only stored for as long as it is necessary or legally required for the intended purpose.
Additional data (in particular your IP address) will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information means that you may not be able to use our contact form at all or not to its full extent.
You have the ability to contact us by phone or e-mail.
If you take advantage of these options to contact us, we will process your telephone number or your e-mail address and any information included in the text of any message you send us.
The purpose of processing your telephone number or your e-mail address is to process your contact request and to be able to contact you in order to respond to your request.
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. We have a legitimate interest in offering you the opportunity to contact us at any time and to answer any questions you may have.
Personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
In addition to this website, we also maintain a presence on various social media which you may access via the corresponding buttons on our website. If you visit any of our social media presences, personal data may be transmitted to the provider of the respective social network. In addition to storing data you have entered in the social media concerned, other information may also be processed by the social network provider.
In addition, the social network provider may process essential information about the computer system from which you have visited the social network concerned - such as your IP address, processor type and browser version used, including plug-ins.
If you are logged in with your personal user account from the respective network while visiting such a website, this network can associate the visit with your account.
Please note that our website contains further links to external third-party websites, whereby we have no control over the processing of data on these third-party websites.
We protect our website and other systems against loss, destruction, access, modification or distribution of your data by unauthorized persons using technical and organizational measures. However, despite regular checks, complete protection from all risks is not possible.
You have the right to revoke consent once given with effect for the future at any time without affecting the lawfulness of processing carried out on the basis of your consent prior to revocation.
Please contact datenschutz@splendid-drinks.com to make any requests concerning the foregoing rights. Please note that we must ensure that such requests are actually made by the data subject concerned.
Please note that, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.
We do not employ automated decision-making on our website.

References: Art. 6
 Art. 21
 § 257
 § 147
 Art. 21
 Art. 4
 Art. 4
 Art. 21
 Art. 89
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 88
 Art. 6
 Art. 6