Privacy Policy

1. Controller

copacking – Craftbeerland brand
Represented by Managing Director Rick Bluett
Hauptstr. 62
16348 Wandlitz
Germany

Email: [email protected]
Register court: Local Court of Frankfurt (Oder)
Commercial register number: HRB 17525
VAT identification number: DE232163631

2. General information on data processing

We process personal data only to the extent necessary to operate our online shop, respond to enquiries, fulfil orders or comply with legal obligations. Where required by law, processing for analytics or marketing purposes takes place only with your consent.

The relevant legal bases include, in particular, Art. 6(1)(a) GDPR for consent, Art. 6(1)(b) GDPR for pre-contractual measures and contracts, Art. 6(1)(c) GDPR for legal obligations and Art. 6(1)(f) GDPR for legitimate interests.

3. Provision of the website and server logs

When you access our website, technically necessary information is processed. This may include your IP address, the date and time of access, the page accessed, the volume of data transferred, the referrer URL, browser type, operating system, device information and technical status messages.

This processing enables us to provide the shop securely and reliably, analyse errors and prevent improper access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and effective operation of our online service.

4. Cookies and similar technologies

We use technically necessary cookies and similar technologies so that essential shop functions such as the shopping basket, login, language selection, ordering process and security work correctly. These technologies are used without consent only to the extent permitted by law.

Analytics, marketing or tracking technologies are used only where the necessary consent has been obtained. In this case, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw or change your consent at any time with effect for the future via the cookie settings.

5. Customer account, shopping basket and orders

When you create a customer account, use the shopping basket or place an order, we process, in particular:

• your name and billing and delivery addresses,
• your email address and, where provided, telephone number,
• customer account, shopping basket and order data,
• the selected payment and shipping methods and payment status,
• communications relating to the order.

This processing is carried out to take pre-contractual measures and perform the purchase contract in accordance with Art. 6(1)(b) GDPR. We also process and retain data relevant for tax and commercial-law purposes to comply with legal obligations pursuant to Art. 6(1)(c) GDPR.

6. Payment processing

Depending on availability at checkout, you may pay by PayPal, PayPal Pay Later, credit or debit card, Google Pay or advance payment by bank transfer.

For electronic payment methods, the data required to process the payment is transmitted to the selected payment service provider. This may include your name, billing address, email address, order amount, currency, order number, payment status and technical transaction data. The payment service provider processes the payment data required for the selected payment method; our shop receives, in particular, the information needed to match the payment to your order and confirm the payment.

For payments made available through PrestaShop Checkout, PayPal and the banks, card issuers or wallet providers involved in the relevant payment method may, in particular, process data under their own responsibility. If you pay by bank transfer, we process the payment data transmitted to us in order to match and process your order.

The legal basis is Art. 6(1)(b) GDPR. Further information can be found in PayPal's Privacy Statement and in the information provided by the payment service provider you select.

7. Shipping with DHL and GLS

To deliver your order, we transmit the required recipient data to the relevant shipping provider:

• DHL for deliveries within Germany,
• GLS for international deliveries to the destination countries enabled by us.

The data transmitted includes, in particular, your name, delivery address and shipment-related information as well as, where required for delivery notifications or delivery itself, your email address and telephone number. The legal basis is Art. 6(1)(b) GDPR.

8. Contacting us

If you contact us by email or through a contact form, we process the information you provide in order to handle your enquiry. If your enquiry relates to a contract or order, the legal basis is Art. 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in appropriate communication pursuant to Art. 6(1)(f) GDPR.

9. Newsletter and Mailchimp

If you subscribe to our newsletter, we process your email address and any additional information you provide voluntarily in order to send you news, product information and offers from Craftbeerland. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

We use Mailchimp, a service provided by Intuit Inc., to send and manage the newsletter. Where you have consented, opens and clicks may be analysed to improve the newsletter's reach and content. Data may be processed outside the European Economic Area. Any such transfer takes place only in accordance with the applicable data protection requirements.

You may withdraw your consent at any time with effect for the future by using the unsubscribe link in any newsletter email or by contacting us. Further information can be found in the Intuit/Mailchimp Privacy Statement.

10. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us understand how our online shop is used and what content could be improved.

Google Analytics may process, in particular, device and browser information, your IP address, technical identifiers, pages viewed, interactions and approximate location information. Where the User-ID function is used, we use a pseudonymous identifier for this purpose and do not transmit directly identifying information such as your name or email address as the User ID.

This service is used only on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Data may be processed by Google companies outside the European Economic Area. Further information can be found in Google's Privacy Policy.

11. Google reCAPTCHA

We use Google reCAPTCHA to protect contact, registration and newsletter forms against automated submissions and misuse. Data including your IP address, browser and device information, time spent on the page, user interactions and technical verification data may be transmitted to Google.

This processing protects our shop and forms against spam and attacks. The legal basis is Art. 6(1)(f) GDPR; where consent is required by law, the service is used on the basis of Art. 6(1)(a) GDPR. Further information can be found in Google's Privacy Policy.

12. Google Fonts

Our shop may load fonts from Google Fonts. When content is retrieved from the provider's servers, your IP address in particular is necessarily processed for technical reasons. The provider is Google Ireland Limited. Where the fonts are not hosted locally and consent is required, processing takes place on the basis of Art. 6(1)(a) GDPR. Further information can be found in Google's Privacy Policy.

13. Recipients and transfers to third countries

We disclose personal data only where this is permitted for the performance of a contract, to comply with a legal obligation, on the basis of a legitimate interest or with your consent. Recipients may include, in particular, hosting and IT service providers, payment providers, banks, shipping companies, newsletter service providers, analytics and security providers, authorities and advisers.

Where data is processed outside the European Economic Area, we ensure that the legal requirements are met, for example through an adequacy decision, appropriate safeguards or another permitted basis. Further details can also be found in the privacy information provided by the respective provider.

14. Retention period

We retain personal data only for as long as necessary for the relevant purpose. We then delete or anonymise the data unless statutory retention obligations, ongoing contractual relationships, warranty cases or legitimate interests in continued retention prevent us from doing so.

15. Your data protection rights

Where the legal requirements are met, you have the right of access, rectification, erasure, restriction of processing and data portability. You may also object to processing based on Art. 6(1)(e) or (f) GDPR.

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before consent was withdrawn remains unaffected. To exercise your rights, simply contact us at [email protected].

16. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The following authority, in particular, is responsible for the region in which we are established:

The State Commissioner for Data Protection and Access to Information of Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
Email: [email protected]

17. Data security and updates

We take appropriate technical and organisational measures to protect personal data. Data transmitted between your browser and our shop is encrypted.

We update this Privacy Policy whenever legal requirements, the services used or our data-processing activities change.