Data protection declaration
Data protection is of great importance to Privatbrauerei ERDINGER Weißbräu Werner Brombach GmbH, Lange Zeile 1 + 3, 85435 Erding, Germany. For this reason, the processing of our customers' data is carried out exclusively in compliance with the applicable data protection regulations (e.g. GDPR, the new German Federal Data Protection Act BDSG-neu).
We collect and process personal data if you provide us with this data (e.g. by registering on our website, placing an order, participating in a competition, becoming a Club and / or Team member, ordering our newsletter) and we are entitled to collect, use and process it on the basis of your consent or a legal regulation.
If we receive personal data about you from other companies, you will be notified as soon as possible, at the latest upon first contact. These data are also only stored and processed in accordance with legal regulations.
Your personal data
Personal data are any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). We collect and process the following personal data:
Name, first name, home address, phone number, date of birth, IBAN, credit card details, order history, gender, e-mail address, password
The above mentioned personal data are processed by us for the following purposes
- Communicating with you on products, services, e.g. to process your inquiries or to send an order confirmation
- Planning, executing and administering the (contractual) business relationship between us and you, e.g. in order to process the order of products and services, collect payments, for accounting, invoicing and debt collection purposes and to carry out deliveries, or complaint handling, as well as for our customer service and inquiries
- Carrying out customer surveys, marketing campaigns, market analyses, raffles, competitions or similar campaigns and events, membership of the fan club or Team ERDINGER Alkoholfrei or participation in the ERDINGER Vorteilsprogramm, Erdinger Fanclub, Sommerfit Erdinger Alkoholfrei, Erdinger Tippspiel
- Providing a newsletter and advertising for new products
- Registering on the website to create an order account
- Creating pseudonymised usage profiles for the purpose of advertising, market research and improving our services
- Maintaining and protecting the security of our products, services and websites by preventing and detecting security risks, fraudulent activity or other criminal or malicious activities;
- Complying with legal requirements (e.g. tax and commercial law storage obligations) or existing obligations to carry out compliance screenings (to prevent economic crime or money laundering)
- Settling disputes, enforcing existing contracts and asserting, exercising and defending legal claims.
The processing of personal data is necessary to achieve the above-mentioned purposes, including the execution of the (contractual) business relationship with you. Unless explicitly stated otherwise, the legal basis for data processing is Article 6 (1)(b) and (f) of the General Data Protection Regulation (GDPR) or your explicit consent in accordance with Article 6 (1)(a) GDPR.
If the above data are to be processed for purposes other than the original purpose of collection, you will be informed of this before further processing. This way you have the possibility to object to the processing of your data for another purpose.
Disclosure of data
All data transferred to us will be treated confidentially. We will not sell or otherwise market your personal data to third parties.
Your data will generally not be made available to third parties for use unless you have given your consent or we are legally entitled and/or obliged to do so.
If legally permissible and necessary to comply with applicable law or to assert, exercise or defend legal claims, we transfer personal data to courts, tax authorities and supervisory authorities. We take all appropriate measures to ensure the protection of your personal data.
We will forward your personal data to the following companies for the above-mentioned purposes:
Mail order companies / logistic service providers, payment service providers, software service providers, financial service providers, banking institutions, sales agents, marketing event agencies, translation agencies, printing offices, broadcasting companies, newspapers, travel agencies, tour operators, travel companies, public sector bodies, e.g. the Federal Statistical Office, the Main Customs Office, chambers of commerce, insurance companies, central settlers, travel and transport companies such as Deutsche Bahn, airlines, coach companies
Duration of data storage
If there is no explicit storage duration stated during data collection (e.g. in the context of a declaration of consent), personal data will be deleted if it is no longer required for the purpose of storage, unless required otherwise by law (e.g. commercial and tax law storage obligations).
We take technical and organisational actions to protect your data stored and processed in our company against manipulation, loss of confidentiality, destruction and against access by unauthorised persons. Our company's security measures are continuously improved in accordance with technological developments.
Data subjects' rights: right to information, correction, deletion or limitation of the processing of your personal data, right of objection and right to data transferability
Upon request, we will inform you in writing, in accordance with the applicable law, whether and which personal data we store in our company database. If you are registered as a user, we offer you the possibility to view your data yourself and to change and delete them if necessary. If, despite our company's efforts to ensure data security and data accuracy, incorrect information has been stored, we will correct it upon your request.
You also have the right to demand that our company restricts the processing of your personal data. In addition, you can request that the data you provide to our company be delivered in a structured, common and machine-readable format. You may also object to the processing of personal data by our company.
Furthermore, you have the right to demand the deletion of your personal data, provided that there are no conflicting legal retention periods. We delete the data if we no longer need them for the purpose for which we have collected and processed them, or if you revoke your consent and there is no other legal basis for the further processing of your data. In addition, we will delete this data if its processing was illegal for reasons unknown to us or if you have filed an objection against the processing and there are no primary legitimate interests for the processing. Your data will be deleted if we are legally obliged to do so. Our company has also implemented technical measures to inform all recipients of your data about your request for deletion or correction. This only applies if we have disclosed this data or made it public. All links, copies and replications of your personal data are to be deleted.
If you have consented to the processing of your personal data, you are entitled to revoke your consent at any time with effect for the future. Revoking your consent does not make the data processing of the past unlawful.
The transfer of data to our company is voluntary. However, these data are necessary for the further conclusion of the contract or to answer your enquiries. If you do not wish to disclose your data, the contract may not be valid or your enquiries may not be answered. The provision of data is required for the conclusion of the contract.
The contact details of our company's Data Protection Officer are:
You also have the right to complain to the competent supervisory authority about the processing of data by our company.
The data protection authority responsible for our company is:
Landesamt für Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, Germany
When signing up for our company's newsletter, the data you provide are used exclusively for this purpose.
We require your name and a valid e-mail address for effective registration. In order to verify that a registration is actually carried out by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose, the order of the newsletter, the sending of a confirmation mail and the receipt of the requested reply are logged. The data are only used for sending the newsletter and are not passed on to third parties.
You can revoke your consent to the storage of your data and its use for sending newsletters at any time. Each newsletter contains either a corresponding unsubscribe link or a separate unsubscribe option.
Data of minors
Personal data of children are not collected knowingly without explicitly pointing out that such data may only be transmitted with the consent of the parents. Our company only uses or discloses the personal data of children, where permitted by law, for the purpose of obtaining the legally required parental consent or for the protection of children. The applicable national statutory provisions are taken into account when using the term "child/children".
For technical reasons, when you access our company's website, your Internet browser automatically transfers the following data (hereinafter referred to as "log data") to our company's web server, which our company records in log files:
- Date of access, time and duration of access, URL of the referring web page, retrieved file, amount of data transferred, browser type and version, operating system, domain name of your Internet access provider
This is exclusively information that does not allow conclusions to be drawn about the natural person. This information is technically necessary in order to display the website content you have requested correctly and is mandatory when using Internet offers. The log data are evaluated purely for statistical purposes in order to optimise our company's website and the technology behind it and are then deleted.
The log data are stored separately from other data collected by our company during use.
Which data do we process when you visit our website?
Like many other websites, our company uses so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. As a result, our company automatically receives certain data regarding your visit to our website. The cookies used by ERDINGER do not store any personal data. The cookies we use are therefore not assigned to a specific person and therefore not to you.
Pseudonymized user profiles
Our company creates and stores these user profiles exclusively in a pseudonymised form. They are not merged with your personal data.
We distinguish between cookies that are essential for the technical functions of the website, and optional cookies.
To help you tailor your desired data protection settings for our website as precisely as possible, we give you the opportunity below to set your preferences with regard to the categories of operational necessity, statistics, comfort and personalisation.
1. Category “Necessary”
Cookies that are absolutely necessary are required for you to navigate the ERDINGER website and use the basic functions of the website, such as the allocation of anonymous session IDs to pool several related queries on a server.
2. Category “Statistics”
In order to further improve our offer and our website, we collect anonymised data for statistical and analytical purposes. Performance cookies collect information about how our website is used, e.g. the Internet browser and operating system used, the number of visits, the average time spent on the site, the pages viewed. With the aid of these cookies, we can determine the effect of certain pages on our website and optimise our content.
3. Category “Marketing”
These cookies for marketing purposes are used to offer content that is more relevant to users and adapted to their interests. They are also used to limit the frequency with which an ad appears and to measure and control the effectiveness of advertising campaigns. They register whether you have visited a website or not, as well as which content was used. This information may be shared with third parties, such as advertisers. These cookies are often linked to third party website functionalities. You can reject the use of such cookies by means of individual opt-out cookies.
How can I deactivate cookies?
We have compiled several links below that give you detailed information on how to deactivate cookies in the most common browsers:
Usage-based online advertising with third parties
In order to provide advertisements that are relevant to you and tailored to your current interests, we try to derive your current interest on the basis of ERDINGER and third-party websites you visit, as well as from your surfing behaviour.
For the purpose of retargeting and remarketing website visitors, as well as for the purpose of conversion measurement, we use third-party cookies and create pseudonymised user profiles. We can evaluate these for advertising and monitoring purposes. It is not possible for us to draw direct conclusions about persons in this way.
We use advertising cookies, for example, for the following purposes:
- 1. to store your website visits in order to determine your interests
- 2. to check whether you have clicked on an advertisement
- 3. to monitor the number of visitors clicking on an advertisement
- 4. to use third-party services to display advertisements tailored to your needs, interests or preferences
- 5. to determine which advertisements, or advertising tools, are efficient for us
- 6. to display advertisements of products that you have previously clicked on or searched for
- 7. to measure the number of advertisements shown so as not to always present the same advertisements
- 8. to show other interesting advertisements based on your use of the ERDINGER website pages
- 9. to evaluate which advertisements you clicked on before buying products
- 10. to measure the number of orders placed on the basis of advertising and their monetary value
Description of third-party cookies used
Usage-based online advertising: We use various re-marketing and tracking technologies on our websites. These enable us to recognize our visitors on the websites of our advertising partners and to address them with interest-related information.
The following companies are responsible for data collection used to deliver usage-based online advertising: Google (Adwords (Remarketing)), Facebook. Usage-based online advertising is provided by the same contractors.
The "Necessary" category includes:
Google Web Fonts Our website uses so-called web fonts to display the font. These are provided by Google Inc. (http://www.google.com/webfonts/). The web fonts are transferred to the browser's cache when the page is accessed so they can be used for display. This means that information about which of our website pages you visited is transmitted to a Google server, usually a Google server in the USA. Google also stores the IP address of the browser of the terminal device used by the visitor of these website pages. If your browser does not support Google Web Fonts or does not allow access, text is displayed in a default font.
You can set your browser so that the fonts are not loaded by the Google servers (e.g. by installing add-ons like NoScript or Ghostery for Firefox).
General information on data protection can be found in the Google Privacy Center at: http://www.google.com/intl/de-DE/privacy/
The "Statistics" category includes:
Google is certified under the Privacy Shield Agreement, providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Activey).
Google uses this information on our behalf to analyze the use of our online services by users, to compile reports on activities within this online service, and to provide us with other services associated with the use of this online offer and the Internet. Pseudonymized profiles of the users may be created from the processed data.
We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.
The IP address transmitted by the user's browser is not merged with other Google data. Users may refuse the storage of cookies by selecting the appropriate browser settings; in addition, users can prevent Google from collecting the data generated by the cookie and related to their use of the online service and prevent Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The personal data of users are deleted or anonymized after 14 months.
The "Marketing" category includes:
Google Adwords Conversion Tracking We use the service of Google Adwords to draw attention to our offers by displaying advertising media (so-called Google Adwords) on external websites. Based on the data of the advertising campaigns, we can measure the success of the advertising media. This allows us to display advertisements that are of interest to you and to make our website more interesting.
The advertising media are submitted by Google via "ad servers" that run using cookies and are used to measure the success, such as display of the advertising measure and clicks of the users. If you access our website via a Google ad, Google stores a cookie on your computer, which generally expires after 30 days. There is no personal identification, only the recognition of your Internet browser.
If a user has visited certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer may recognize that the user clicked on the ad and was redirected to that page. Each Adwords customer is assigned a different cookie. Cookies can not be tracked via the websites of the Adwords customer. We do not collect and process any personal data ourselves via the aforementioned advertising measures. We only receive statistical evaluations from Google that help us identify which advertising media are effective. This does not allow any identification of the users.
Due to the marketing tool used, your browser automatically establishes a direct connection with the Google server. We have no control over the extent and the further use of the data collected by Google by using this tool and can therefore only inform you according to our level of knowledge: the integration of AdWords Conversion informs Google that you have visited the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a chance that the provider can identify and store your IP address.
You can prevent participation in this tracking process in a variety of ways: e.g. by setting your browser software to suppress cookies or disabling the conversion tracking cookies so that cookies from the domain www.googleadservices.com are blocked, https://www.google.com/settings/ads. By disabling interest-based ads from providers that are part of the “About Ads” self-regulatory campaign is possible through http://www.aboutads.info/choices or by permanently deactivating them in your Firefox, Internet Explorer or Chrome browsers (http://www.google.com/settings/ads/plugin). Kindly be aware that in this case you may not be able to use all features of this offer to their full extent.
Our website continues to use the remarketing feature Custom Audiences provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With this feature, we can track users' actions after they have seen or clicked on a Facebook ad. Our purpose of using this feature is to show you advertisements that are of interest to you and as well in order to make our website more interesting to you.
Due to the marketing tools applied, your browser automatically establishes a direct connection to the Facebook server. We have no control over the extent and the further use of the data, which are raised by the use of this tool by Facebook and inform you therefore according to our knowledge level: by integrating Facebook Custom Audiences, Facebook receives the information that you have visited the website of our company, or have clicked on one of our ads. If you are registered with a service of Facebook, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a chance that the provider will find out and store your IP address and other identifying features.
Disabling the Facebook Custom Audiences feature is available here: https://www.facebook.com/settings/?tab=ads#_. In order to disable the feature, you must be logged in to Facebook. The legal basis for the processing of your data is Art. 6 (1) sentence 1 (f) GDPR. For more information about data processing by Facebook, please visit https://www.facebook.com/about/privacy/.
Use of social plug-ins within the framework of social media
Our company uses social plug-ins ("plug-ins") of the social network Facebook.com operated by Facebook Inc., Palo Alto, USA ("Facebook"). The plug-ins are marked with a Facebook logo or the addition "Facebook" or "Like" or "Share".
If you access a page of our company's website that contains such plug-ins, they are initially deactivated. The plug-ins will only be activated when you click on the respective button. With this activation, you establish the link to Facebook and give your consent to the transmission of data to Facebook. If you are logged in to Facebook, Facebook can assign the visit to your local account. If you click on the respective button, the corresponding information is transmitted directly from your browser to Facebook and stored there.
The purpose and scope of the data collection, further processing and use of the data by Facebook as well as the corresponding rights and settings for the protection of your privacy can be found in Facebook's data protection policy (http://www.facebook.com/policy.php).
If you do not want Facebook to collect information about you through our company's website, you must log out of your Facebook profile before visiting our company's website.Youtube
Our company uses the video sharing platform YouTube, which is operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA. YouTube is a platform that enables the playback of audio and video files.
Our company uses social plugins ("plugins") of the Instagram social network, which is owned by Instagram LLC, 1601 Willow Rd Menlo Park, CA 94025, United States ("Instagram"). The plugins are marked with an Instagram logo or the addition "Share".
If ERDINGER Weißbräu refers directly or indirectly to external websites ("links"), ERDINGER Weißbräu is only liable if it has precise knowledge of the contents and if it is technically possible and reasonable to prevent their use in the case of illegal content. ERDINGER Weißbräu hereby expressly declares that at the time of linking, the linked pages did not contain any illegal content. ERDINGER Weißbräu has no influence on the current and future design of the linked sites. ERDINGER Weißbräu hereby expressly dissociates itself from all changes in content that are made after the links have been set on the linked pages. This also applies to entries in the guest books, discussion forums and mailing lists provided by ERDINGER Weißbräu.
Werner Brombach GmbH is not responsible for the content, availability, correctness and accuracy of linked sites, their offers, links or advertisements. ERDINGER Weißbräu is not liable for illegal, incorrect or incomplete content and in particular for damage resulting from the use or non-use of the information offered on the linked pages.Google Maps
To make it easier for you to find us, we have integrated maps of the Google Maps service from Google LLC into our website via an API. In order to display the content in your browser, Google must receive your IP address, otherwise Google could not provide you with this integrated content.
The legal basis for this data processing is Art. 6 (1) (b) GDPR, as the IP address is required in order to be able to provide you with the contents. For this processing, our cooperation with Google is based on a joint responsibility agreement pursuant to Art. 26 GDPR, which can be accessed here.