Privacy Policy

1. CONTROLLER UNDER DATA PROTECTION LAW

Radeberger Gruppe KG
Darmstädter Landstr. 185
60598 Frankfurt am Main
Germany

Email: info@radeberger-gruppe.de

2. CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Data Protection Officer
Radeberger Gruppe KG
Darmstädter Landstr. 185
60598 Frankfurt am Main
Germany

Email: radeberger-gruppe@corporate-data-protection.com

3. DETAILS OF DATA PROCESSING

Server logging

Each time you access our websites, we record data from your terminal, which may also comprise personal data, in server log files. This applies to the following data:

- Type/version of browser
- Operating system
- Name of provider
- IP address
- Date and time of visit
- Websites visited and any search words
- Site visited previously (referrer URL)

The legal basis for the processing of these data is Art. 6(1)(f) of GDPR. Processing is required in order to ensure the functionality of the website and to carry out statistical evaluations in order to optimize and correctly display the contents of the website and, if necessary, to make the information required for prosecution available to the prosecuting authorities, e.g. in the event of a cyberattack. This is also the legitimate interest in data processing.

The above-mentioned data will be deleted as soon as they are not required any more for achieving the aforementioned purposes, i.e. when the relevant visit to the website is finished. In the event that your IP address is processed, they will be deleted after 7 days at the latest.

Tracking and cookies

When you visit our website, tracking technologies such as cookies are used (hereinafter collectively referred to as “tracking”). Cookies contain information that can be stored and read on your terminal.
We distinguish between the following purposes for tracking:

- Essential functions
- Analysis and personalization
- Marketing/use of data by partners

Essential functions

We use this type of tracking to improve the convenient use and performance of our website and to ensure its proper and smooth operation. In particular, this enables us to:

- save your preferred language version of our website or similar settings for your next visit,
- distribute requests to our website across different web servers (load balancing),
- give multiple requests to our website a uniform context (session) and thus enable, for example, login-restricted areas of our website,
- save your selection or settings regarding consent to tracking and control tracking technologies according to your choice,
- offer you a wish-list function that allows you to "remember" products by adding them to a personalized list, so that you can place them in your shopping cart later if needed.

The legal basis for this processing which is necessary to protect our legitimate interests is Art. 6(1)(f) of GDPR. Our legitimate interest consists in ensuring the trouble-free and convenient usability of our website and protecting it from misuse through automated requests.

The implementation of essential functions also includes:

• Use of Usercentrics
  
  To obtain and document your consent to the use of tracking technologies, we use the consent management platform provided by Usercentrics. In this context, we engage Usercentrics GmbH, Rosental 4, 80331 Munich, as our data processor.
  
  If we use tracking technologies based on your consent, you can withdraw or adjust your consent at any time with effect for the future. To do so, you can access our tracking settings menu. You can also configure your browser settings regarding the use of cookies and similar technologies.

• Protection against automated requests using captchas
  
  To prevent automated, machine-driven requests, we use captcha queries and rely on Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee as our data processor. When captchas are used, the following data are transmitted and – also to improve functionality – stored for 30 days:
  
  - HTTP request header data (especially user agent, origin and referrer)
  - date/time of the request
  - version of the widget used
  - customer account ID of the client website
  - hash value of the incoming IP address
  - number of requests via (hashed) IP address per time period
  - response to the computational task solved by your terminal

Analysis and personalization

If you have given your consent, we analyse your behaviour on our website as part of analysis and personalization tracking and use the insights gained to optimize our website.

During each interaction with our website, we process information about the terminal and web browser you use. This allows us to understand, for example, which language settings you use to access our website, whether you are using a smartphone or a desktop computer, and from which country you are accessing our website. Additionally, we learn where you were referred from, how long you use our website, how long you view the content of a specific page, how many pages you visit in total and the path you take through individual subpages. We also record whether you found our website via a search engine (and if so, which search term was used) or through an advertisement.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) of GDPR. You may withdraw your consent at any time with effect for the future.

We use the following products for analysis and personalization:

• Google Analytics
  
  Google Analytics is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. Our configuration of Google Analytics does not allow Google to use the data collected via Google Analytics to improve Google products and services. Information about the cookies used in connection with Google Analytics and their duration can be found here. If Google transfers personal data to third countries, this is done either pursuant to Art. 45 of GDPR based on an adequacy decision by the European Commission or based on the EU standard data protection clauses in accordance with Art. 46(2)(c) of GDPR as amended from time to time, so that an adequate level of data protection is guaranteed.

Marketing/use of data by partners

We also use tracking to evaluate the reach and interactions of our advertising campaigns and to understand how you use our website after becoming aware of it through our advertising campaigns. This allows us to determine, for example, what proportion of users actually visit our website after seeing an ad, view specific content defined by us and perform actions (for example, participate in a competition or download content). We also share this user behaviour information with our marketing partners. This helps us plan our advertising budget more effectively and use it more efficiently with the support of our marketing partners.

Furthermore, we use user data collected via tracking to create user groups (“audiences”) based on specific criteria (e.g. viewing certain article categories on our website). This enables us to target users in these audiences who then visit online platforms of our marketing partners through personalized advertising (re-marketing). For this purpose, we share the relevant tracking data with our marketing partners, who may also suggest similar audiences as addressees for advertising based on the user group criteria we define.

The legal basis for processing your tracking data for marketing purposes is your consent, Art. 6(1)(a) of GDPR.

Our marketing partners may also use the tracking data received from us for their own purposes, such as further personalizing your profile on their online platform. Under data protection law, they themselves are responsible in this regard.

We use the following products and work with the following marketing partners for (re-)marketing and data exchange with third parties:

• Google Ads
  
  We use Google Ads and have entered into a data processing agreement with the service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If Google transfers personal data to third countries in this context, this is done either pursuant to Art. 45 of GDPR based on an adequacy decision by the European Commission or based on the EU standard data protection clauses in accordance with Art. 46(2)(c) of GDPR as amended from time to time, so that an adequate level of data protection is guaranteed. More information about the cookies set by Google can be found here.

Newsletter

You have the option of registering for email newsletters on our websites in particular. For this purpose, we collect the data provided by you on the registration form and send you a confirmation link to the email address provided for authentication. Only after activating this confirmation link will the registration be completed. Otherwise, i.e. after 72 hours at the latest, we will delete the data.

In the event of registration, we will process your personal data in order to send the newsletter. The newsletters are to inform you about our brands and any news associated with them, product information, competitions and campaigns etc., unless stated otherwise in the newsletter description on the registration form. If you are asked to provide details regarding form of address, date of birth and postal code, then these are usually given on a voluntary basis. We analyse and use them for statistical purposes or in order to give you specific, personalized newsletter information. Where appropriate, we will analyse which of these emails you open at what time in order to optimize the content and sending of our newsletter and to tailor it even better to the interests of our customers.

Subscribers to the newsletter can be informed by email if this is necessary for the operation of the newsletter service, as might be the case in the event of any changes to the newsletter service or to the technical conditions.

The legal basis for data processing is Art. 6(1)(f) of GDPR, in so far as analysis for statistical purposes and an individualized approach is concerned. Our legitimate interest consists in enabling the sending of individualized newsletters and – especially depending on age and region – doing so in a targeted manner. Otherwise, the legal basis is your consent (Art. 6(1)(a) of GDPR). You can withdraw your consent at any time with effect for the future, e.g. by clicking on the “unsubscribe” link at the end of each newsletter.

Campaigns: competitions/loyalty campaigns/promotional campaigns etc.

If you take part in a competition, loyalty campaign or other promotional campaign (e.g. receiving a purchase price refund for products purchased in retail shops), we will use the data you provide in this connection solely in order to carry out the relevant campaign and document it, unless you have given us your consent to a greater extent (e.g. to the sending of newsletters). As a matter of principle, data will only be transmitted to third parties if this is required for processing or implementation (e.g. to service providers for the purpose of sending the prizes or the like).

The legal basis for data processing is Art. 6(1)(b) of GDPR. You will also find detailed information on data processing in connection with competitions and similar campaigns in the conditions of participation of the campaign in question.

Pictures taken at events

At our events, we may take photographs/videos (“images”) of visitors and other parties. These images feature people either individually or as part of a group. The images are used and published for reporting and documentation purposes as well as for communication and advertising purposes in connection with the event, especially on the corresponding brand website and social media pages for the brand concerned and, in some cases, on the company website www.radeberger-gruppe.de and in the employee and customer magazine. The images are archived by us. The legal basis is Art. 6(1)(a) and (f) of GDPR.

Contacting/feedback

If you contact us by email, social media, contact form or in any other manner (e.g. in connection with an inquiry, complaint or the like), we will process the personal data you provide. Processing takes place to deal with the inquiry/complaint or the like and to document it. Data will only be transmitted to third parties if this is required for processing or implementation (e.g. to the organizer in the case of registrations for an event). The legal basis for data processing is Art. 6(1)(b) and (f) of GDPR.

4. STORAGE PERIOD AND DATA DELETION

We store your personal data for as long as it is necessary for the processing purposes described above. Detailed information about the purposes of processing and the specific storage period can also be found in the relevant descriptions of individual processing activities in section 3 (“Details of data processing”).

5. AUTOMATED DECISION-MAKING/PROFILING

No decisions are made solely on the basis of automated processes, including profiling.

6. FURTHER INFORMATION

In some cases, the provision of personal data is required by law (due to commercial and tax regulations, for example) or contractually stipulated or necessary for the conclusion of a contract. Failure to provide personal data in these cases would mean that we would not provide our services or fulfil our commitments and be unable to conclude the contract with you.

7. YOUR RIGHTS

If the processing of your data is based on our legitimate interests (Art. 6(1)(f) of GDPR), you have the right to object to such processing at any time, provided there are reasons arising from your particular situation (Art. 21 of GDPR).

In addition, and subject to the legal requirements, you have the following rights regarding your personal data:
- Right of access (Art. 15 of GDPR)
- Right to rectification (Art. 16 of GDPR)
- Right to erasure (Art. 17 of GDPR)
- Right to restriction of processing (Art. 18 of GDPR)
- Right to data portability (Art. 20 of GDPR)
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 of GDPR)

If the processing of your data is based on your consent (Art. 6(1)(a) of GDPR), you also have the right to withdraw your consent at any time with effect for the future (Art. 7(3) of GDPR). To do so, you can use the contact details provided for the data controller or, where applicable, the options described in the context of the relevant processing. The same applies to exercising your right to object.