Privacy policy
# 1. Privacy at a Glance
## General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy set out below.
## Data Collection on Our Website
### Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in this website’s legal notice.
### How do we collect your data?
Some data is collected when you provide it to us. This may, for example, include data that you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This primarily consists of technical data, such as your internet browser, operating system, or the time at which the page was accessed. This data is collected automatically as soon as you enter our website.
### What do we use your data for?
Some of the data is collected to ensure that the website functions properly. Other data may be used to analyse your user behaviour.
### What rights do you have regarding your data?
You have the right at any time and free of charge to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked, or deleted. You can contact us at any time using the address provided in the legal notice if you have further questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority.
Under certain circumstances, you also have the right to request that the processing of your personal data be restricted. For details, please refer to the section “Right to Restriction of Processing” in this privacy policy.
## Analytics and Third-Party Tools
When you visit our website, your browsing behaviour may be statistically evaluated. This is primarily done using cookies and analytics programs. Your browsing behaviour is generally analysed anonymously and cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.
You may object to this analysis. We will explain the available options for doing so in this privacy policy.
# 2. General Information and Mandatory Disclosures
## Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmitted via the internet, for example through email communication, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
## Information About the Controller
The controller responsible for data processing on this website is:
Rösterei VIER GmbH
Telephone: +49 (0) 211 17146031
Email: info@roesterei-vier.de
(If you have a data protection officer, their contact details must be entered here.)
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses, or similar information.
## Withdrawal of Your Consent to Data Processing
Many data-processing operations are only possible with your express consent. You may withdraw consent that you have already given at any time. An informal notification by email is sufficient. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.
## Right to Object to Data Collection in Specific Cases and to Direct Marketing (Article 21 GDPR)
If data processing is carried out on the basis of Article 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims (objection pursuant to Article 21(1) GDPR).
If your personal data is processed for direct-marketing purposes, you have the right at any time to object to the processing of personal data concerning you for such marketing. This also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct-marketing purposes (objection pursuant to Article 21(2) GDPR).
## Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
## Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only insofar as it is technically feasible.
## SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser’s address bar changes from “http://” to “https://” and a padlock symbol appears in your browser bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
## Encrypted Payment Transactions on This Website
If, after entering into a fee-based contract, you are required to provide us with your payment details, such as a bank account number for direct-debit authorisation, this data is required to process the payment.
Payment transactions using common payment methods, such as Visa/Mastercard or direct debit, are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection when the browser’s address bar changes from “http://” to “https://” and a padlock symbol appears in your browser bar.
When communication is encrypted, the payment details you transmit to us cannot be read by third parties.
## Access, Blocking, Deletion, and Correction
Within the scope of applicable statutory provisions, you have the right at any time and free of charge to obtain information about your stored personal data, its origin and recipients, and the purpose of data processing. Where applicable, you also have the right to have this data corrected, blocked, or deleted. You can contact us at any time using the address provided in the legal notice if you have further questions about personal data.
## Right to Restriction of Processing
You have the right to request that the processing of your personal data be restricted. You may contact us at any time using the address provided in the legal notice. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of the personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request that the processing of your personal data be restricted.
- If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of deletion.
- If we no longer require your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request the restriction of processing instead of deletion.
- If you have objected pursuant to Article 21(1) GDPR, your interests and ours must be weighed against one another. Until it has been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, this data may—apart from being stored—only be processed with your consent; for the establishment, exercise, or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest of the European Union or a Member State.
# 3. Data Collection on Our Website
## Cookies
Some of our web pages use cookies. Cookies do not damage your computer and do not contain viruses. Cookies help to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser when you next visit our website.
You can configure your browser to inform you when cookies are set, to allow cookies only in individual cases, to reject cookies in certain cases or in general, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.
Cookies that are required to carry out electronic communications or provide certain functions that you have requested, such as the shopping-cart function, are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Where other cookies, such as those used to analyse your browsing behaviour, are stored, they are addressed separately in this privacy policy.
## Server Log Files
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with data from other sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; server log files must be collected for this purpose.
## Contact Form
If you send us enquiries using the contact form, the information you provide in the form, including the contact details you enter there, will be stored by us for the purpose of processing your enquiry and in the event of follow-up questions. We do not share this data without your consent.
The data entered into the contact form is therefore processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time. An informal notification by email is sufficient. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.
The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, especially retention periods, remain unaffected.
## Registration on This Website
You can register on our website to use additional functions. We use the data entered during registration only for the purpose of using the particular offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, such as changes to the scope of our services or technically necessary changes, we use the email address provided during registration to inform you.
The data entered during registration is processed on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent that you have given at any time. An informal notification by email is sufficient. The lawfulness of data processing already carried out remains unaffected by the withdrawal.
We store the data collected during registration for as long as you remain registered on our website, after which it will be deleted. Statutory retention periods remain unaffected.
## Processing of Data (Customer and Contract Data)
We collect, process, and use personal data only insofar as it is necessary to establish, define the content of, or modify the legal relationship (master data). This is carried out on the basis of Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract. We collect, process, and use personal data concerning the use of our website (usage data) only insofar as this is necessary to enable the user to make use of the service or for billing purposes.
The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
## Data Transfer When Entering into a Contract for Online Shops, Retailers, and the Shipment of Goods
We transfer personal data to third parties only when this is necessary for contract processing, for example to companies entrusted with delivering the goods or to the financial institution responsible for processing payment. No further transfer of data will take place unless you have expressly consented to the transfer. Your data will not be shared with third parties without your express consent, for example for advertising purposes.
The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract.
# 4. Social Media
## Facebook Plugins (Like & Share Button)
Plugins from the Facebook social network, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our website. An overview of Facebook plugins is available here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our website using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link content from our website to your Facebook profile. This allows Facebook to associate your visit to our website with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the transmitted data or how Facebook uses it. Further information can be found in Facebook’s privacy policy at: https://www.facebook.com/privacy/explanation.
You can also disable the “Custom Audiences” remarketing function in the advertising settings at https://www.facebook.com/ads/preferences/?entry_pr.... You must be logged into Facebook to do this.
Facebook plugins are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the broadest possible visibility on social media.
## Twitter Plugin
Functions of the Twitter service are integrated into our pages. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. Please note that, as the provider of this website, we have no knowledge of the content of the transmitted data or how Twitter uses it. Further information can be found in Twitter’s privacy policy at: https://twitter.com/privacy.
The Twitter plugin is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the broadest possible visibility on social media.
You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.
## Instagram Plugin
Functions of the Instagram service are integrated into our pages. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link content from our website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the transmitted data or how Instagram uses it.
The Instagram plugin is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the broadest possible visibility on social media.
Further information can be found in Instagram’s privacy policy at: https://instagram.com/about/legal/privacy/.
# 5. Analytics and Advertising
## Google Analytics
This website uses functions of the Google Analytics web analytics service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies”. These are text files stored on your computer that enable an analysis of how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.
Google Analytics cookies are stored and this analytics tool is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
### IP Anonymisation
We have activated the IP anonymisation function on this website. As a result, Google shortens your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
### Browser Plugin
You can prevent cookies from being stored by selecting the appropriate settings in your browser. Please note, however, that if you do so, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website, including your IP address, and from processing this data by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de.
### Objection to Data Collection
You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set that prevents your data from being collected during future visits to this website: Disable Google Analytics.
Further information about how Google Analytics handles user data can be found in Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.
### Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
### Demographic Features in Google Analytics
This website uses Google Analytics’ “demographic features” function. This allows reports to be created containing information about the age, gender, and interests of website visitors. This data comes from Google’s interest-based advertising and visitor data from third-party providers. This data cannot be attributed to a specific person. You can disable this function at any time via the advertising settings in your Google account or generally prohibit Google Analytics from collecting your data as described under “Objection to Data Collection”.
## Facebook Pixel
Our website uses the Facebook visitor action pixel for conversion measurement, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This allows the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market-research purposes and future advertising measures to be optimised.
The data collected is anonymous to us as the operator of this website, and we cannot draw any conclusions about users’ identities. However, Facebook stores and processes the data, meaning that it may be linked to the respective user profile and that Facebook may use the data for its own advertising purposes in accordance with Facebook’s data usage policy. This allows Facebook to display advertisements on Facebook pages and outside Facebook. We, as the website operator, have no influence over this use of the data.
The Facebook Pixel is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including through social media.
Further information about protecting your privacy can be found in Facebook’s privacy information at: https://www.facebook.com/about/privacy/.
You can also disable the “Custom Audiences” remarketing function in the advertising settings at https://www.facebook.com/ads/preferences/?entry_pr.... You must be logged into Facebook to do this.
If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website at: http://www.youronlinechoices.com/de/praferenzmanagement/.
# 6. Plugins and Tools
## Google Maps
This website uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the Google Maps functions, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the USA. The provider of this website has no influence over this data transfer.
Google Maps is used in the interest of presenting our online services attractively and making it easy to find the locations specified on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Further information about how user data is handled can be found in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.
# 7. Payment Providers
## PayPal
On our website, we offer payment via PayPal, among other methods. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you select payment via PayPal, the payment details you enter will be transmitted to PayPal.
Your data is transmitted to PayPal on the basis of Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. A withdrawal does not affect the validity of data-processing operations carried out in the past.