Data protection

Data protection

Please click here for the data protection information for customers, suppliers and other data subjects.

PRIVACY POLICY OF BRAUEREI C. & A. VELTINS GMBH & CO. KG

This Privacy Policy applies to the following websites and their subpages as well as to our VELTINS app (hereinafter referred to as "App”)

https://www.veltins.de/
https://www.veltins.com/
https://www.grevensteiner.de/de
https://www.vplus.de/
http://www.veltins-fassbrause.de/
https://www.veltins-fan-aktionen.de/
https://www.veltins-megachance.de/
https://www.schuetzenstudie.de/
https://de-de.facebook.com/veltins.fassbrause/
https://www.facebook.com/veltins/
https://www.facebook.com/vplus/
https://www.facebook.com/Grevensteiner/
https://www.instagram.com/veltins/
https://www.instagram.com/veltins_vplus/
https://www.instagram.com/grevensteiner/

Insofar as not otherwise derived from another legal relationship, the responsibility lies with

Brauerei C. & A. Veltins GmbH & Co. KG
An der Streue
59872 Meschede-Grevenstein
Germany
Telephone: +49 2934 959 0
Fax: +49 2934 959 493
Email: veltinsinfo(at)veltins.de

GENERAL INFORMATION ON DATA PROTECTION

Brauerei C. & A. VELTINS GmbH & Co. KG, as the data controller defined by Art. 4 No. 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR”), takes the protection of your personal data very seriously and adheres strictly to the rules of the data protection regulations.

Personal data will only be processed on the websites of the data controller and within the scope of our entire business activity to the extent that is necessary for technical reasons. In no way will your data be made available to third parties without your consent or without a statutory or contractual basis.

We will give you an overview below concerning how we guarantee the protection of your personal data and which type of data are collected for which purposes.

The following applies as a brief summary:

We use – also through our service providers, which we obligate to comply with data protection as per contract– suitable technical and organisational security measures in order to protect your data against accidental or wilful manipulations, partial or full loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with the technological development.

Therefore, we reserve the right to change these security and data protection measures insofar as this is necessary owing to technical changes.

You can find our Privacy Policy, which is not connected with the visit to the websites and telemedia services that are subject to our (co-) responsibility and apply at the same time in addition to these notices, at:

https://www.veltins.de/datenschutzhinweise/

1. DATA PROCESSING ON OUR WEB PAGES AND WITHIN THE APP

Brauerei C. & A. VELTINS automatically processes information transmitted to us by the browser and other applications of your terminal device on the directly accessible Internet presences and services via the service providers commissioned by us. These are:

  • Browser type/ version / plug-ins
  • Operating system used
  • General system information (such as terminal device, End device ID, screen resolution, etc.)
  • Referrer URL (e.g. the page you visited previously)
  • Host name of the accessing terminal device (e.g. IP address)
  • Time of the server request
  • Geo- and location data
  • First name and last name
  • Email address
  • Device identification data of your terminal device
  • Recognition/identity data (e.g. photos)
  • Usage data

The data mentioned will be processed by us for the following purposes:

  • to guarantee a smooth connection set-up for our services,
  • to guarantee a comfortable use of our services,
  • to guarantee basic functionality of our services
  • to evaluate the system security and stability, as well as
  • for further administrative purposes.

The legal bases for the data processing for the use of our services are Art. 6 Para. 1 S. 1 a), b), c), e) and f) GDPR. We therefore use the corresponding data, because you have granted us a consent, we fulfil a contract or legal transactions with you similar to a contract, we are obligated to data processing for various reasons or we have a legitimate interest in the processing of your personal data and our interest is not outweighed by your interests, fundamental freedoms and basic rights. Our legitimate interest is, for example, derived from the purposes for data collection listed above. In no way will we use the collected data in order to draw conclusions about you as a person; this is also de facto impossible for us to a large extent. Principally, we cannot allocate these data to certain persons. We do not aggregate these data with other sources of data, the data are moreover erased after a statistical evaluation; this shall not apply if the data continue to be exclusively used for the purpose of support and upholding of the services requested by the user in line with the Terms of Use and this Privacy Policy.

We principally use the widespread SSL process (Secure Socket Layer) in conjunction with the respectively highest encryption level, which is supported by your browser, during the visit to the website and when using our services. As a rule, this concerns a 256-bit encryption. If your browser does not support any 256-bit encryption, we will instead resort to 128-bit v3 technology. You can recognise whether an individual page of our internet presence is transmitted encrypted by the closed presentation of the key or lock symbol in the status bar of your browser (software-dependent).

In addition, when our website is visited and with the use of our services, we use cookies as well as analysis services (e.g. pixel). You can obtain more detailed explanations in this respect under Subclauses 6, 7 and 8 of this Privacy Policy.

2. DATA PROCESSING FOR REGISTRATION FOR OUR NEWSLETTER AND FURTHER INFORMATION

If you have explicitly consented according to Art. 6 Para. 1 S. 1 a) GDPR we will use your email address and data otherwise announced for this purpose to regularly send you our newsletter and further information, about us and our actions if your address is entered also by post. The entry of an email address is sufficient for the receipt of the newsletter, further data are voluntary. De-registration is possible at all times, e.g. via a link at the end of each newsletter. Alternatively, you are also welcome to send your de-registration request at all times to us by email to datenschutz(at)veltins.de or veltinsinfo(at)veltins.de .

Within the scope of the newsletter dispatch you will, of course, be informed separately in detail about your existing rights.

3. DATA PROCESSING WHEN USING OUR CONTACT FORM

If you have any questions or concerns of any kind we offer you the possibility to contact us via forms (contact masks) provided on the respective websites and within the App or other services. For this purpose, it is necessary to (at least) enter a valid email address as well as the first and last names so that we know from whom the request stems and in order to be able to answer this. You can provide further data voluntarily, which we will then use accordingly pursuant to your contact request.

The data processing for the purpose of contacting us is carried out according to Art. 6 Para. 1 S. 1 a) GDPR on the basis of your voluntarily granted consent as well as the thus associated interest shown by you in the reply, which legitimises us to the data processing, Art. 6 Para. 1 GDPR.

The personal data processed by us for the use of the contact form will be erased in full automatically after settlement of the request made by you and after the expiry of reasonable storage deadlines.

4. DATA PROCESSING OWING TO OTHER FUNCTIONS AND ACTIVITIES

We offer various activities and functions on our internet presences, within the App and, if applicable, on third party portals at various times, which render, or can render, a processing of personal data necessary.

The processing of the personal data is then based on the consent of the respective user according to Art. 6 Para. 1 a) GDPR or serves to fulfil a legal relationship according to Art. 6 Para. 1 b) GDPR. Legitimate interests of the data controller according to Art. 6 Para. f) GDPR can also give legitimisation for the data processing.

Insofar as the user takes part in the special functions or activities, the thus associated data processing is necessary with regard to the data collected for this purpose.

The special functions and activities can in particular concern:

  • Competitions,
  • Games,
  • Surveys (with or without a gift, remuneration or win),
  • Social media actions,
  • Special user activities,
  • etc.

The data types that are principally to be processed for these functions and activities in particular concern:

  • Form of address, sex
  • Last name, first name,
  • Email address,
  • Address data (place of residence),
  • Telephone number(s) [fixed-line and/or mobile network]
  • if applicable location data,
  • Date of birth,
  • if applicable bank account data

and, if applicable, further data types, to which reference is respectively made separately.

These separately processed data will only be used for the respective purpose in the form of the special function or activity and will be erased in line with the statutory stipulations.

5. DISCLOSURE OF YOUR DATA

Your data will principally only be transmitted if you have granted us your consent, if it is necessary for the establishment, execution or termination of a contractual obligation or an obligation similar to a legal transaction or it is necessary to safeguard legitimate interests of the responsible body and there is no reason to assume that your interests, which are worthy of protection, in the exclusion of the processing or use outweigh or there are statutory transmission obligations.

Insofar as we transmit data to companies commissioned by us or that cooperate with us or other third parties, we have reached agreements with these in compliance with the applicable law, in particular according to Art. 26 and 28 GDPR. Accordingly, the other data processing bodies undertake in a binding manner to also guarantee an adequate level of data protection.

Among others, agency, financial service and freight companies can be taken into consideration as such companies.

Please contact us for details in this respect; we will be pleased to satisfy your legitimate entitlements to information (cf. Subclause 12).

A transmission of your data to non-EU /non-EEA states (so-called "third countries"), in particular to receiving bodies, which cannot guarantee an adequate level of data protection, will principally not take place.

Insofar as this principle is deviated from, this exception is necessary for various reasons. The information listed below gives an overview with regard to these exceptions:

6. COOKIES

We use cookies on our websites. These concern small (text) files, which are automatically created by your browser and which are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our site and/or use our services. Cookies principally do not cause any damages on your terminal device and, according to our status of knowledge and our intention do not contain any viruses, Trojans or other malware.

Information is filed in cookies, which is respectively produced in connection with the specifically used terminal device. However, this does not mean that we directly gain knowledge of your identity hereby.

The use of cookies serves, on the one hand, to make the design for the use of our offer more convenient for you. We therefore use so-called session cookies in order to recognise that you have already visited individual pages of our website and so that you must not repeat the inputs that you have made once before already in another place. With the use of such tools, also e.g. log files, we also satisfy our documentation obligations. These files are erased automatically after you leave our site or after termination of use of the service. e.g. we use a so-called shopping basket cookie within the VELTINS-Online-Shop. This serves to also keep the goods entered in the shopping basket by you available during the payment process and for the initiation and processing of the contract and for the delivery on the website of the digital checkout ("Go to checkout"). Without this cookie the shopping basket function would simply not work. The use of this cookie is necessary in order to process your order. The legitimation basis for the use of these cookies and the thus associated processing of your personal data is consequently Art. 6 Para. 1 a), b) and f) GDPR.

On the other hand, we use tools in order to record the use of our website statistically and to evaluate it for the purpose of optimising our offer for you (see also Subclauses 8 and 9). These tools are furthermore used in order to display you personalised contents, suitable for your interests. The cookies set by the tools will be erased automatically after a respectively defined period of time.

The data processed by cookies are necessary for the stated purposes in order to safeguard our legitimate interests as well as of the third parties according to Art. 6 Para. 1 S. 1 lit. f GDPR. By a corresponding confirmation within so-called "cookie banners" you have either declared your consent to the use of these tools or – without setting a tick – you have not agreed to the use, Art. 6 Para. 1 lit. a GDPR.

If applicable, (third party) companies are also occupied with the setting of the cookies.

The majority of browsers and terminal devices accept cookies automatically. You can, however, configure your browser or your terminal device so that no cookies are stored on your terminal device or that an indication will always appear before a new cookie is created. The full deactivation of cookies can, however, lead to the fact that you cannot use all functions of our services.

7. WEB FONTS

Our websites and services use so-called web fonts. These are digital fonts, which are made available by third party providers.

For this purpose we use "fonts.com", "fonts.net" and "fast.fonts.net” as well as "myfonts.net", respectively font service of Linotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg ("fonts.com") or its umbrella organisation, Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA. Each time the websites are called or with each use of our services for the presentation of the texts in a certain font files are loaded from a "fonts.com" server or its associated servers. Your IP address or terminal device ID can be transmitted to a server of "fonts.com" hereby and be stored within the scope of the customary weblog. The further processing of this information is the responsibility of "fonts.com", for the corresponding terms, conditions and setting possibilities please refer to the privacy policy of "fonts.com" at:

https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy/

8. GOOGLE, GOOGLE-LOGIN AND GOOGLE-ANALYTICS, GOOGLE-VIDEO

Our websites and the App use services of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 USA ("Google").

We offer you among others the possibility to register for our service with a login via Google. An additional registration is then no longer necessary and no longer possible. For the registration you will be forwarded to the site of Google, from which you can register with your account data, for which of course it is necessary to enter your account data. Your Google profile and our service are linked hereby. Through the link we automatically receive the following information from Google LLC:

  • Last name, first name
  • Profile photo, consequently identifier / biometric data
  • Email address,
  • User-ID

We use these data for the login process and will not transmit any data to Google even for this purpose. These data are absolutely essential for the login respectively the conclusion of a contract and use of a service, which requires a login.

For further information regarding Google login and the data protection measures please refer to the privacy policy and Terms of Use of Google LLC at: https://www.google.de/intl/de/policies/

Furthermore, we use Google Analytics, a (web) analysis service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 USA ("Google"). Google Analytics uses among others so-called "cookies", thus small text files, which are stored on your terminal device and which enable an analysis of the use of our services by you, and Java-Script. The information generated by the cookie regarding your use of the respective website whether about the browser or the App, is as a rule transferred to a server of Google in the USA and stored there.

Within the App we use the product of Google LLC called Google Analytics for Firebase.

Google Firebase comprises various functions, which enable us an analysis of your In-App behaviour. This way we can for example analyse your screen calls, pressing of buttons, In-App-purchases or the effectiveness of advertising measures. Google Firebase stores for these purposes, among others the number and duration of the sessions, data of the operating system, device model, region of the access and a host of further data. You can find a more detailed overview of the data entered by Google Firebase at:

https://firebase.google.com/support/privacy

As, on our websites and within the App, the anonymisation of the IP addresses of the visitors is principally activated by means of the plug-In "_anonymizeIp()", your IP address will be previously abbreviated by Google, according to the information of Google, still within the respective scope of the law of the member states of the European Union or in other contracting states of the Treaty on the European Economic Area and therefore a reference to a person can be prevented. Only in exceptional cases will the full IP address be transferred to a server of Google in the USA and abbreviated there. By order of the operator of our websites and services Google will use this information in order to evaluate your use of the websites and services, in order to compile reports on the website and service activities and to provide further services associated with the website and service use and the internet use towards the service operator. The IP address or terminal device ID transmitted within the scope of Google Analytics from your browser or terminal device will, according to the information of Google, not be aggregated with other data of Google. You can prevent the storage of the cookies by a corresponding setting of your browser and terminal device software; however, we would like to point out to you that in this case you will, if applicable, not be able to use all functions of these services in full. You can in addition prevent the entry of the data generated by the cookie and, which refer to your use of the services (incl. your IP address) to Google as well as the processing of these data by Google by downloading and installing the plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the entry by Google Analytics by clicking on the following link. A so-called Opt-Out-Cookie is set which prevents the future entry of your data when visiting this website and with the services: javascript:gaOptout()

You can find more detailed information regarding the Terms of Use and data protection on the part of Google Inc. at http://www.google.com/analytics/terms/de.html bzw. unter https://www.google.de/intl/de/policies/.

9. INDIVIDUAL EXTERNAL FUNCTION PROVIDERS, IN PARTICULAR SOCIAL MEDIA

9.1 Facebook

For the information services offered by us, e.g. in our Facebook-Fanpages and within the App (e.g. for the login via your Facebook account, so-called Facebook-Connect), we resort to the technical platforms and the services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland and if applicable Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

In order to draw attention, for example, to our services and to contact you as a visitor and user of our services, by safeguarding legitimate interests according to Art. 6 Para. 1 f) GDPR and in order to fulfil concrete legal transactions with you according to Art. 6 Para. 1 b) GDPR) we use services of Facebook and the Facebook Group (Instagram, WhatsApp).

The following generally applies:

In which manner Facebook uses the data from the visit to Facebook services for own purposes, to what extent activities on the Facebook services are allocated to individual users, how long Facebook stores these data and whether data from a use of the Facebook services are forwarded to third parties, is not conclusively and clearly named by Facebook and is not known to us. With the access to a Facebook service the IP address allocated to your terminal device is transmitted to Facebook. According to the information of Facebook this IP address (also terminal device identifiers) is allegedly anonymised (with "German" IP addresses) and erased after 90 days. Facebook additionally stores information about the terminal devices of its users (e.g. as part of the "login notification" function); if applicable Facebook is therefore able to allocate IP addresses to individual users. If you as a user are currently registered with Facebook, a cookie will be situated on your terminal device with your Facebook identifier. This way Facebook is in the position to track that you use this service and how you used this. This shall also apply to all other Facebook services.

Through Facebook buttons integrated into our services it is additionally possible for Facebook to enter your visits to these websites and use of the services and to allocate these to your Facebook profile. Based on these data, contents or advertising can be offered that is customized to your interests.

Incidentally, we refer to the information below and the declarations of Facebook and its affiliated companies which can be viewed.

We would like to point out to you that you use this Facebook site and its functions at your own responsibility. This shall in particular apply to the use of the interactive functions (e.g. commenting, sharing, assessing).

9.1.1 Facebook membership

If you are a member of the social network Facebook and its affiliated companies (Instagram, WhatsApp), then data about your visit and the use of our services will be automatically transmitted to Facebook; we have no ability whatsoever to influence this. For further information in this respect please refer to the privacy policy of Facebook at https://de-de.facebook.com/about/privacy.

You can find the full data guidelines made available by Facebook here: https://de-de.facebook.com/full_data_use_policy

Our services can use social plug-ins ("PlugIns") of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the supplement "Facebook Social PlugIn". If you call up a website of the data controller– thus us –or use our services, which contain such a plugin, by clicking on the icon a direct connection will be set up with the servers of Facebook. The content of the plugin is transmitted directly by Facebook to your browser respectively your terminal device and is integrated hereby. By the integration of the plugins Facebook receives the information that you have called up the corresponding page of our internet presence or have used our services. If you are logged into Facebook, Facebook can allocate the use of our services to your Facebook account. If you interact with the plugins, e.g. press the "Like" button or make a comment, the corresponding information will be transmitted directly from your terminal device to Facebook and stored there. For the purpose and extent of the data collection and the further processing and use of the data by Facebook as well as your rights and setting possibilities in this respect for the protection of your privacy please refer to the aforementioned privacy policy of Facebook. If you do not want Facebook to collect data about you via our internet presence, with the use of the plugin, you must log out of Facebook before your visit to our internet presence and deactivate the "stay logged in" function, delete the cookies available on your terminal device and close and restart your browser. Please pay attention to the following: If you access interactive functions of the site (Like, Comment, Share, Messages, etc.), a Facebook login screen will appear. After a possible (new) login you are recognisable for Facebook once again as a certain user.

Nevertheless, despite log-out or other counter-measures we cannot exclude that Facebook and possible further (third party) companies can allocate your data to your person and, if applicable, transmit these to further bodies, we request that this respectively be taken into consideration when visiting the websites.

We offer you the possibility to also register for our services with Facebook-Connect . An additional registration is then no longer necessary and, if applicable, no longer possible. For the registration you will be forwarded to the site of Facebook, from which you can register with your account data. Your Facebook profile and our service are linked hereby. Through the link we automatically receive the following information from Facebook Inc.:

  • Last name, first name
  • Profile photo, consequently identifier data
  • Email address,
  • User-ID

We use these data for the login process and will not transmit any data to Facebook even for this purpose. These data are absolutely essential for the login respectively the conclusion of a contract and use of a service, which requires a login.

For further information regarding Facebook-Connect and the data protection measures please refer to the privacy policy (https://de-de.facebook.com/about/privacy) and Terms of Use (https://www.facebook.com/legal/terms ) of Facebook Inc.

9.1.2 Facebook Insights

When visiting our Facebook site and using of our services, Facebook enters among other things your IP address as well as further information, which is available, or may be available, in the form of cookies on your terminal device. This information is used in order to make statistical information about the use of the Facebook services available to us as the operator of the Facebook sites.

Facebook makes more detailed information available in this respect via the following link:
https://de-de.facebook.com/help/pages/insights

Statistical data of various categories can also be called up by us via these so-called Insights of Facebook. These statistics are generated and made available by Facebook, irrespective of whether you are a member of Facebook- or are logged in or out.

We as operator of the site have no influence on the generation and presentation. We cannot switch this function off or cannot prevent the collection and further processing of the data. The following data are made available to us by Facebook for a selectable period of time as well as respectively for the categories fan, subscribers, reached persons and interacting persons with reference to our Facebook sites:

  • Total number of site calls,
  • "Like" details,
  • Site activities,
  • Contribution interactions,
  • Range,
  • Video views,
  • Contribution range,
  • Comments,
  • Shared contents,
  • Answers,
  • Share of men and women,
  • Age,
  • Origin with reference to country and town,
  • Language,
  • Calls and clicks in the shop,
  • Clicks on route planner,
  • Clicks on telephone numbers,
  • Type of used terminal devices.

Data are also made available this way relating to the Facebook groups linked with our Facebook sites. This is carried out within the scope of a joint responsibility in the opinion of Facebook (Joint Controllership within the meaning of Art. 26 GDPR) between us and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, although we have no influence on the data processing at Facebook, in particular on the means and purposes upon which the data processing is based.

The corresponding agreement according to Art. 26 GDPR can be viewed at the status of the creation of this Privacy Policy at

https://www.facebook.com/legal/terms/page_controller_addendum

By the constant further development of Facebook, the availability and the processing of the data change so that for further details in this respect we refer to the already aforementioned privacy policy of Facebook in the respective current form. We use these data available in an aggregated (i.e. anonymised) form in order to make our contributions and activities on our Facebook sites more attractive for the users. Thus, we use for example distributions according to age and sex for an adjusted address and the preferred visiting times of the users for a time optimised planning of our contributions. Information about the type of the used terminal devices of visitors of our Facebook sites help us to adjust the contributions hereto in an optically creative manner. In line with the Facebook Terms of Use, which each user has agreed to within the scope of the creation of a Facebook profile, we can identify the subscribers and fans of the site and view their profiles as well as further shared information from them.

9.1.3. Facebook Pixel

We use within the information services offered by us the so-called "Facebook-Pixel" and thus resort to the corresponding service of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland and if applicable Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

With the use of this service we track for marketing purposes, in particular the renewed address of users of our services, the already previously used services of us (so-called retargeting). We use the Facebook pixel in order to primarily only display the (Facebook-) ads placed by us to those (Facebook) users, who have also shown an interest in our online offer or who show certain features (e.g. interests in certain topics or products, which are determined based on the visited websites), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel we would also like to ensure that our (Facebook-) ads correspond with the potential interest of the users and do not have a disturbing effect. With the help of the Facebook pixel we can further make the effectiveness of the (Facebook) advertisements more understandable for statistical and market research purposes, by the fact that we see whether users after the click on a (Facebook) advertisement were forwarded to our website (so-called "Conversion").

In order to enable the use of the service, your Facebook-ID, thus a number combination, which can be clearly allocated to you and your possibly existing Facebook profile, will be transmitted by us to Facebook including the data about the use of our services. We do not share any clear names, your Facebook profile name or other personal data with Facebook.

With the declaration submitted within the scope of the pop-up to the consent of the use of such tools (so-called "cookie banner") before using our services you have, if applicable, consented to the use of this service by us, Art. 6 Para. 1 a) GDPR.

You can revoke this consent at all times by using the granted Opt-Out option via the following link:

www.facebook.com/pixel/opt-out

You can find further details regarding the pixel that we use in the help zone of Facebook here:

https://www.facebook.com/business/help/651294705016616

Furthermore, the principle data use policy of Facebook provides information about more specific details, which you can find here:

https://www.facebook.com/policy.php

Incidentally, the already named notices for the Facebook integration within this section shall apply accordingly.

9.2 Instagram

For the information services offered by us on our Instagram presences we resort to the technical platforms and the services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland and if applicable Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

As Instagram belongs to the Facebook group and Facebook Ireland respectively Facebook Inc. are (also) the data controllers within the meaning of the data protection law, the information stated under the above bullet point relating to Facebook shall apply.

You can find the Instagram- privacy policy here:

https://help.instagram.com/519522125107875

Plugins of the social network Instagram are additionally used on our web pages. Instagram is operated by Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA and if you visit Facebook sites within the EU/EEA Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If you visit web pages, which are fitted with such an Instagram plugin, your data are transmitted to the servicers used by Facebook, which of our web pages you have visited.

The notices stated under 8.1 relating to Facebook shall also apply here analogue.

9.3 WhatsApp

In order to fulfil several services, in particular for the distribution of our WhatsApp newsletter within the scope of our VELTINS fan offers we use the technical platforms and services of WhatsApp.

These services are made available by WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as a subsidiary of WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025/USA, which since 2014 have been part of Facebook Inc. .

WhatsApp processes the data transmitted by you itself as an independent data controller within the meaning of the data protection law.

We receive, for example, your contact data deposited therein– mostly your mobile number– from WhatsApp only in order to fulfil the agreements reached with you and are then on the other hand an independent data controller with regard to the processing of your personal data (besides) WhatsApp, cf. Art. 26 GDPR.

Incidentally, our notices relating to Facebook shall apply analogue here.

For further information we refer to the legal disclaimer and data protection notices published by WhatsApp, that can be called up at:
https://www.whatsapp.com/legal/
https://www.whatsapp.com/legal/?eea=1#privacy-policy

9.4. YouTube

For the information services offered by us on our websites, in particular the YouTube plugin we resort to the technical platforms and the services of YouTube LLC, San Bruno, California, USA, a subsidiary of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 USA ("Google"), which operates in Europe under Google Ireland Limited ("Google"), a company registered and operated according to Irish law (register number: 368047) with the registered seat in Gordon House, Barrow Street, Dublin 4, Ireland.

In order, for example, to draw attention to our services and to contact you as a visitor and user of our internet presence, by safeguarding legitimate interests according to Art. 6 Para. 1 f) GDPR, and in order to fulfil concrete legal transactions with you according to Art. 6 Para. 1 b) GDPR), we use services of Google and of the Google Group (YouTube).

The following generally applies:

In which manner Google uses the data from the visit to Google sites for own purposes, to what extent activities on the Google site are allocated to individual users, how long Google stores these data and whether data from a visit to the Google site and its companies are forwarded to third parties, is not conclusively and clearly stated by Google and is not known to us. With the access to a site that belongs to Google, the IP address allocated to your terminal devices is transmitted to Google, Google additionally stores information about the terminal devices of its users (e.g. as part of the "login notification" function); if applicable it is thus possible for Google to allocate IP addresses to individual users. If you, as a user, are currently registered with Google services, a cookie will be situated on your terminal device with your Google identifier. This way Google is in the position to track that you have visited this site and how you have used it. This shall also apply to all other Google sites or sites of the affiliated companies.

Via YouTube buttons integrated into websites it is additionally possible for Google to enter your visits to these websites and to allocate these to your Google profile. Based on these data, contents or advertising can be customized to suit your interests.

Incidentally, we refer to the information below and the declarations of Google and its affiliated companies which can be viewed:

https://policies.google.com/privacy?hl=de&gl=de

We would like to point out to you that you use this Facebook site and its functions at your own responsibility. This shall in particular apply to the use of the interactive functions (e.g. commenting, sharing, assessing).

If you are a member of Google and its affiliated companies (YouTube, Dialogflow), then data about your visit to our website is automatically transmitted to Google; we have no ability whatsoever to influence this. For further information in this respect please refer to the privacy policy of Google at https://policies.google.com/privacy?hl=de&gl=de.

The plugins of the YouTube information service are marked with a YouTube logo or the supplement "YouTube PlugIn" or similar. If you call up a website of the data controller– thus us –or use our services, which contain such a plugin, by clicking on the icon a direct connection will be set up with the servers of Google. The content of the plugin is transmitted from there directly to your browser and integrated into the website by it. By the integration of the plugins Google, will receive among other things, the information that you have called up the corresponding site of our internet presence. If you are, for example, logged into YouTube or Google, Google can allocate the visit to your personal account. If you interact with the plugins, for example press an assess button or make a comment, the corresponding information will be transmitted directly by your browser to Google and stored there. For the purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights and setting possibilities in this respect for the protection of your privacy please refer to the aforementioned privacy policy of Google. If you do not want Google to collect data about you via our internet presence, with the use of the plugin, you must log out of Google before your visit to our internet presence and deactivate the "stay logged in" function, delete the cookies available on your terminal device and close and restart your browser. Please pay attention to the following: If you access interactive functions of the site, a Google login screen may appear again. After a possible (new) login, you are recognisable for Google once again as a certain user.

We cannot describe whether and to what extent an allocation to your person is otherwise carried out by Google in all details. We refer insofar once again to the privacy policy and statements of Google.

This shall also apply with regard to YouTube image (ytimg.com).

9.5. CleverPush (push messages)

Within the App we use the service (push message service) of CleverPush GmbH, Nagelsweg 22, 20097 Hamburg (CleverPush) in order to send you push messages, insofar as you have agreed to their reception by granting the corresponding authorisation. With the registration and use of the service, CleverPush receives the following information: a so-called Push-ID, with which messages can be addressed to the terminal device, as well as the IP address of the terminal device, with which this calls the server of CleverPush. The IP address is used reduced by the last three digits in order to carry out an approximate geolocation (location data) of the terminal device and is incidentally not stored. The following are furthermore processed: details regarding the type of the used terminal device, the language as well as the version of the operating system of the terminal device and the time zone, which is set on the terminal device. These data are used in order to be able to transmit the requested push messages, in order to determine the language of the push messages and the time when they are sent as well as to determine which type of messages the terminal device can present from a technical point of view.
You can find the data protection information and further information of CleverPush at:

https://cleverpush.com/de/privacy

We integrate for the push functions of this company, because it facilitates our service and enables the push messages in a financially useful manner. The legal basis for the data processing for these purposes is Art. 6 (1) lit. a and f GDPR.

If you open our App for the first time you will be asked whether you would like to receive push messages from us. This serves for example to send you automatic messages, to report news or to display other special features.

The General Business Terms and Conditions (German abbreviation: AGB) shall apply for the use of the push message service of CleverPush GmbH separately and irrespective of our General Business Terms and Conditions or this privacy policy.

A necessary data processing contract with CleverPush was concluded formally. CleverPush guarantees an adequate level of data protection with regard to the processing of your personal data.

CleverPush also separately satisfies the information obligations applicable to it according to Art. 12 ff. GDPR.

You can permit or not permit the receipt of push messages in your device settings at all times.

10. GOOGLE MAPS

The websites of Brauerei C. & A. VELTINS GmbH & Co. KG use the Google Maps API in order to present geographical information visually. With the use of Google Maps, data are also collected, processed and used by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, 94043) regarding the use of the Maps functions by visitors to the websites. For more detailed information about the data processing by Google please refer to the privacy policy of Google, which you can call up at www.google.com/privacypolicy.html.

11. PAYMENT/FINANCIAL SERVICES

On several of our internet presences and within our services, in particular in the VELTINS-Shop (https://www.veltins-shop.de/) we use online payment services, insofar as you choose this payment method.

Within the scope of the respective transactions for fulfilment of the contract according to Art. 6 Para. 1 b) DSGVO, your personal data that are necessary for this purpose are therefore transmitted to the respective independent data controller.

Thus far we have used the online payment service PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg, which within the European Union as a financial service institution (bank) is subject to the supervision of the supervisory authority that is responsible for it, the Luxembourg banking supervision CSSF (Commission de Surveillance du Secteur Financier).

In order to be able to use this service you have to have created an account there. With regard to the processing of your personal data the company PayPal is therefore the data controller within the meaning of data protection law. Consequently, the contractual terms and conditions and privacy policy there shall apply.

By the use of this payment portal also via our telemedia service, you agree both to the respective processing of your personal data and their transmission to the respectively involved companies.

For more detailed information regarding the data processing by PayPal please refer to the privacy policy of PayPal at

https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

12. DATA PROTECTION OFFICERS

In case of questions and requests for information, for the assertion of the rights to which you are entitled (Subclause 13) or in the event of a revocation of a possibly submitted consent to the data use please contact our data protection officers:

Email: datenschutz@veltins.de

You can, of course, also contact our data protection officers via the following contact data:

Brauerei C. & A. Veltins GmbH & Co. KG
An der Streue
59872 Meschede-Grevenstein
Germany
Telephone: +49 2934 959 0
Fax: +49 2934 959 493
E-Mail: veltinsinfo(at)veltins.de

13. YOUR RIGHTS

You have the rights:

  • pursuant to Art. 15 GDPR to request information about your personal data processed by us. You can in particular request information about the purposes of the processing, the category of personal data, the categories of recipients, towards whom your data were or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, limitation of the processing or to object, the existence of a right to lodge a complaint, the origin of your data, insofar as these were not collected in our company, as well as about the existence of an automated decision-making including profiling and if applicable feasible information pertaining to their details;
  • pursuant to Art. 16 GDPR to request without delay the rectification of incorrect or completion of your personal data stored in our company;
  • pursuant to Art. 17 GDPR to request the erasure of your personal data stored in our company, insofar as the processing is not necessary to exercise the right to express a free opinion and to information, in order to fulfil a legal obligation, for reasons of public interest or for the assertion, exercising or defence of legal claims;
  • pursuant to Art. 18 GDPR to request the limitation of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, however you refuse their erasure and we no longer require the data, however you require these for the assertion, exercising or defence of legal claims or pursuant to Art. 21 GDPR you have filed an objection to the processing;
  • pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request the transmission to another data controller;
  • pursuant to Art. 22 GDPR the right to not be subjected to a decision exclusively based on an automated processing– including profiling –, which is legally effective towards you or substantially impairs you in a similar manner, insofar as the decision
    • is not necessary for the conclusion or the fulfilment of a contract between you and us or
    • is permissible owing to legal regulations of the Union or the member states, which we have to comply with, and these legal regulations include adequate measures for safeguarding your rights and freedoms as well as your legitimate interests or
    • is carried out with your explicit consent.

    If the decision

    • is necessary for the conclusion or the fulfilment of a contract between you and us or
    • it is carried out with your explicit consent, we will take adequate measures in order to safeguard your rights and freedoms as well as your legitimate interests, which shall at least include the right to achieve the intervention of a person on our part, to presentation of the own point of view and to contestation of the decision; we would like to point out that we do not use any profiling or automated decision-making ;
  • pursuant to Art. 7 Para. 3 GDPR to revoke your once granted consent towards us at all times. This will result in the fact that we may no longer continue the data processing, which is based on this consent, for the future and
  • pursuant to Art. 77 GDPR to lodge a complaint at a supervisory authority. As a rule, you can contact the supervisory authority of your customary place of abode or workplace or of our registered seat for this purpose. The following supervisory authority is responsible for the data controller:

State Commissioner for Data Protection and Freedom of Information
(Landesbeauftragte für Datenschutz und Informationsfreiheit) North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Germany
Telephone: +49 (0)211/38424-0
Fax: +49 (0)211/38424-10
E-Mail: poststelle@ldi.nrw.de
https://www.ldi.nrw.de/

For more detailed information regarding the respective responsibilities, activities and the data processing by the supervisory authority please refer to its information in this respect, e.g. at https://www.ldi.nrw.de/.

14. UPDATE AND AMENDMENT OF THIS PRIVACY POLICY

This Privacy Policy is currently valid and has the status February 2020.

Due to the further development of our website and offers through this site or owing to changed statutory respectively official stipulations it may be necessary to amend this Privacy Policy. The respective current Privacy Policy can be called up by you at all times on the website at

https://www.veltins.de/datenschutz/

and it can be printed out.

If requested, we will also make this Privacy Policy available to you digitally as a pdf-document. For this purpose, please contact our data protection officers.

INFORMATION ABOUT YOUR RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR

INDIVIDUAL RIGHT TO OBJECT

You have the right, for reasons which arise from your particular situation, to object at all times to the processing of personal details relating to you, which shall be carried out owing to Art. 6 Para. 1 e) or f) GDPR, this shall also apply to a profiling supported on these provisions.

If we use personal data in order to conduct direct marketing, you shall have the right to object at all times to the processing of personal data relating to you for the purpose of such marketing; this shall also apply to the profiling, insofar as it is associated with such direct marketing.

If you object to the processing for the purpose of the direct marketing then the personal data will no longer be processed for these purposes.

If you file an objection, we will no longer process your personal data, unless we can prove essential legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercising or defence of legal claims.

RECIPIENT OF AN OBJECTION

The objection can be carried out informally by stating your names, your address and your date of birth and should be sent to:

Brauerei C. & A. VELTINS GmbH & Co. KG
An der Streue
59872 Meschede-Grevenstein
Germany
Telephone: +49 (0)2934-959-0
Fax: +49 (0)2934-959-493
E-Mail: veltinsinfo@veltins.de

(for the attention of our data protection officer, if applicable).

In the event of a revocation of your declaration of consent, we also ask you to contact us using the contact details just mentioned.