Source: http://private-brauereien.de/ebs-en/datenschutz/
Timestamp: 2019-04-19 18:48:05+00:00

Document:
Google Analytics is disabled for this website.
You can in principle use our websites www.private-brauereien.de , www.european-beer-star.de and www.european-beer-star.com (hereinafter “the Websites”) without providing any personal data. If any of your personal data is processed, you are the “data subject” within the meaning of the General Data Protection Regulation (= GDPR). If a user or a data subject wishes to use the services of our Association via our Websites and / or would like to visit the members' area, the processing of personal data may become necessary. If the processing of personal data is necessary and if there is no legal basis for such processing, then we obtain the consent of the data subject. The processing of personal data (for example, name, address, e-mail address of an affected person) is always in accordance with the GDPR and in accordance with the country-specific data protection regulations that apply to us.
In principle, we process personal data of our users only to the extent necessary to provide functioning Websites and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 (1) lit. a GDPR is the legal basis.
In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 (1) lit. b GDPR is the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation that our association is subject to, Art. 6 (1) lit. c GDPR is the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR is the legal basis.
If processing is necessary to safeguard the legitimate interests of our association or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR is the legal basis for processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a conclusion of contract or a fulfilment of the contract.
The data is stored in the log files of our system. Not concerned by this are the IP addresses of the user or other data that allow the assignment of the data to a user. A storage of this data together with other personal data of the user does not take place.
The temporary storage of the IP address by the system is necessary to allow delivery of the Websites to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the Websites. In addition, the data is used to optimize the Websites and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
In the stated purposes, our legitimate interest in the processing of data according to Art. 6 (1) lit. f GDPR. In no case will we use the data collected for the purpose of drawing conclusions about the data subject.
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the Websites, this is the case when the respective session is completed.
In the case of storing the data in log files, this is the case after seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of the data for the provision of the Websites and the storage of the data in log files is essential for the operation of the Websites. There is consequently no option of contradiction on the part of the user.
In the case of a login in the password-protected area only temporarily valid session cookies are used in the main memory of the browser, which are lost again after closing the browser. These session cookies do not contain an IP address, so tracing or identifying the visitors via these temporary session cookies is not possible.
To register in the password-protected area we need your name, first name and your e-mail address. The user data is stored on the web server. Access to the data is exclusively encrypted via https. After registration, you will be asked to confirm the registration by e-mail to the specified e-mail address. You can then go to the password-protected area for further information retrieve.
The setting of the cookie is necessary so that we can ensure that only authorized persons have access to the password-protected area, without us knowing which persons are accessing exactly. We need your data in order to check whether you are entitled to access the protected area, in particular, this area is intended only for commercial customers, especially for existing customers but also for interested parties.
For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 (1) lit. f GDPR.
Your data provided at registration will be deleted once the purpose has been achieved. This is the case if we assume that you no longer want to access a protected area.
Access to the protected area can be terminated by the data subject at any time. Please contact us for this under the contact details given in the imprint or under Section I. This also allows a withdrawal of the consent of the storage of the personal data collected during the registration process.
bb) If you purchase goods or services via our Websites and deposit your e-mail address here, this can subsequently be used by us for sending a newsletter. In such a case, the newsletter will only send direct mail for own similar goods or services.
cc) In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. These data are used exclusively for sending the newsletter.
aa) Legal basis for the processing of the data after the user has registered for the newsletter is the consent of the user pursuant to Art. 6 (1) lit. a GDPR.
bb) The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 (3) UWG (= Law against unfair competition).
The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data as part of the registration process is intended to prevent misuse of the services or the e-mail address used.
aa) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. The user's e-mail address will be saved as long as the subscription to the newsletter is active.
bb) If the newsletter is sent on the Websites due to the user's registration, the following also applies: The other personal data collected during the registration process are usually deleted after a period of seven days.
aa) Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter about the termination or deactivation.
bb) If the newsletter is sent on the basis of the user's registration on the Websites or on the basis of the use of a contact form, a revocation of the consent of the storage of the personal data collected during the registration process is also made possible.
On our Websites, we offer users, if applicable, the option of registering for a business partner area. Your data will in such a case be entered in a form on the Websites and sent to us online and then stored. Disclosure of the data to third parties will only take place exceptionally (see Sections IX and X).
As part of the registration process, the consent of the user to process the data is obtained.
aa) Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 (1) lit. a GDPR.
bb) If the registration serves to fulfil a contract of which the user is a party or if it serves the purpose of implementing pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.
aa) A registration of the user's data may be required for the provision of certain content and services on our Websites, for example in order to identify the user during subsequent visits to the Websites and to submit personalized offers to him.
If the registration does not conclude a contract with the user, then this is the case for the data collected during the registration process, if the registration on our Websites is cancelled or changed.
If the registration serves to conclude a contract with the user, then this is the case for the data collected during the registration process for the execution of a contract or for the performance of pre-contractual measures, when the data is no longer necessary for the execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to be able to fulfil contractual or legal obligations. Continuing obligations require the storage of personal data during the contract period. For purchase contracts, warranty periods must be observed. In addition, the storage of data also serves for tax purposes. The retention periods to be adhered to here can not be determined on a flat-rate basis, but must be determined on a case-by-case basis for the respective contracts and contractual parties.
As a user, you have the option of cancelling the registration on our Websites at any time. The personal data stored about you can be changed at any time. Follow the instructions on the Websites during the deletion process.
If the registration is used to conclude a contract with the user and if the data is required to fulfil a contract or to carry out pre-contractual measures, the data can only be deleted prematurely, provided that there are no contractual or legal obligations to cancel the deletion.
An email address will be provided on our Websites and possibly a contact form is available. Both can be used for electronic contact.
If the user contacts us via the provided e-mail address, the user's personal data transmitted by e-mail will be stored.
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 (1) lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
The additional personal data collected during the sending process will be deleted after a period of seven days.
The user has the opportunity to withdraw his consent to the processing of personal data at any time.
In the event of a revocation or an objection, follow the instructions on the Websites.
A transfer of your personal data from us to third parties is made to Payment Services commissioned in the context of the contract with the payment matter. In this case, the disclosure of your personal data is limited to the required minimum. The legal basis for the transfer is Art. 6 (1) sentence 1 lit. b GDPR.
If you choose a payment via PayPal, credit card, EC card, Sofortüberweisung (instant transfer) etc., we will pass on your payment data as part of the payment process to the payment service.
A transfer of your personal data to a payment service for a purpose other than the fulfilment of their liabilities does not take place.
A transfer of personal data to third countries outside the EU for the purpose of order processing (Art. 28 GDPR) takes place exclusively on the basis of suitable guarantees.
We use social plugins (plugins) from various social networks. These plugins are recognizable by the respective logos.
If any of your personal data is processed, you are the “data subject” within the meaning of the GDPR and you have the rights described above and below towards the controller.
The data subject can exercise his rights via the contact details according to Section I.
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Where processing has been restricted under Art. 18 (1) GDPR, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have the right of rectification, erasure or restriction of the processing to the controller, he / she is obliged to notify all recipients to whom the personal data concerning you have been corrected or deleted or processing restricted, unless this proves to be impossible or involves a disproportionate effort.
In exercising your right to data portability pursuant to Art. 20 (1) GDPR, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
The right referred to in Art. 20 (1) GDPR shall not adversely affect the rights and freedoms of others.
You shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions.
You shall have the right to withdraw your consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
The Decisions referred to shall not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless point (a) or (g) of Art. 9(2) GDPR applies and suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place.
In the cases referred to in points (1) and (3) the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 18
 Art. 20
 Art. 20
 Art. 6
 Art. 9
 Art. 9