Privacy Policy

Information about the collection of personal data and contact details of the controller
Data collection when visiting our website
Cookie policy
data processing for order processing
Data processing when opening a customer account and for contract processing
Contacting us
Use of your data for direct marketing purposes
Online marketing
web analysis services
retargeting/remarketing/recommendation advertising
Tools and Others
Rights of the data subject
Duration of storage of personal data

1. Information about the collection of personal data and contact details of the person responsible

1.1 Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

Brothers Josef and Matthäus Ziegler limited liability company
Hauptstrasse 26, Freudenberg am Main
Germany
Phone: +49 (0)9375 9288 0
Email: info@brennerei-ziegler.de

1.3 The controller has appointed the following data protection officer:

Contact details of the Data protection officer

PROLIANCE Ltd
www.datenschutzxperte.de
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschmerungxperte.de

When contacting the data protection officer, please specify the company to which your inquiry relates. Please refrain from attaching sensitive information such as a copy of your identification to your inquiry.

1.4 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TLS) via HTTPS.

2. Data collection when visiting our website

Every time our website is accessed, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following, for us technically required data are collected:

The website visited
Date and time of accessing the website
Volume of data transmitted in bytes
Source/reference from where you accessed the website
Operating system used.
Browser used
IP address used (possibly in anonymized form)

The legal basis for processing is Art. 6 para. 1 lit. f DSGVO due to our legitimate interest in improving the stability and maintaining the functionality of our website. A transfer or other use of the data does not take place. The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

We reserve the right to review server log files retrospectively should there be concrete indications of unlawful use. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended. In the case of data stored in log files, this is the case after a maximum of seven days. Storage beyond this period is possible. In this case, the users' IP addresses will be deleted or anonymized so that it is no longer possible to identify the requesting client.

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user visits a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f) GDPR lies in the aforementioned purposes.

In addition, our website uses cookies that allow an analysis of the surfing behavior of users (so-called third party cookies). Further information on scope, purpose, legal basis and possibilities of objection can be found in the respective sections of the relevant chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict, or delete the transmission of cookies. If you disable cookies for our website, you may no longer be able to use all of its functions to their full extent. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

You can find help for the settings in the respective help menu of your browser under the following links:

Some of the cookies used here are deleted after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our third party cookies company to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

4. Data processing for order processing

4.1 Orders in the webshop

If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.

Partly, we work with external service providers to handle your order. For this we have to pass on the necessary personal data.

If we commission transport companies with the delivery of your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of the payments, we will pass on your data to the commissioned bank as necessary. If we use payment service providers, you will also be informed about this below.
The legal basis for the transfer of your data is Art. 6 para. 1 lit. b DSGVO.

4.2 Disclosure of your personal data to shipping service providers

DPD

If your order is delivered by the shipping provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only share your name and delivery address with DPD for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with DPD before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or DPD.

GLS

If your goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein), we will only forward the recipient's name and delivery address to GLS for the purpose of delivery and to the extent necessary in accordance with Art. 6 Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we forward your email address to GLS before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider GLS.

UPS

If your goods are delivered by the shipping provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will only share the recipient's name and delivery address with UPS for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with UPS before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or UPS.

4.3 Use of payment service providers

ConCardis

When paying by credit card via ConCardis, payment is processed by ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn. We pass on your personal data along with the information about your order in accordance with Article 6 (1) (b) GDPR to ConCardis for the purpose of processing payments and where necessary. You can find details on the data protection provisions of ConCardis here: https://www.concardis.com/datenschutzerklaerung

PAYONE

When selecting a payment method from the payment service provider PAYONE, payment processing is handled by BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main (hereinafter referred to as "PAYONE"). We forward your personal data, along with information about your order, to PAYONE in accordance with Article 6 Paragraph 1 Letter b GDPR. Your data is transferred exclusively for the purpose of payment processing and only to the extent necessary.

PayPal

When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, payment processing is carried out via PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
We will transfer your personal data to PayPal in accordance with Article 6(1)(b) GDPR to the extent necessary. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal.
If necessary, your payment data will be processed in accordance with Art. 6 para. 1 lit. f DSGVO has been passed on to credit agencies on the basis of legitimate interest of PayPal in determining its solvency. The result of the credit check on the statistical probability of default is used by PayPal for the purpose of deciding on the provision of the respective payment method.
The credit information can contain probability values (so-called score values). Insofar as score values are included in the results of the credit rating, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data.
Which other data is collected by PayPal, results from the respective privacy policy of PayPal. This can be found at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data if this is necessary for the contractual payment process.

5. Data processing when opening a customer account and for the execution of the contract

When you open a customer account with us, personal data is collected and processed in accordance with Article 6 Paragraph 1 Letter b of the GDPR. The scope of the data is evident from the input form. The data you enter will be stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by a message to the address of the person in charge or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial retention periods and delete them after expiration of these periods. This can only be opposed to your consent to permanent storage or a legally permitted further use of data on our part.

6. contact

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and saved. The collected data can be found in the respective input mask. When contacting us by e-mail, only the data entered by you will be transmitted to us.
The data will be used solely to process the conversation and your request. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a) GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as they are no longer necessary for the achievement of the purpose of their collection and if no statutory storage requirements are in conflict. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified. The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

7. Use of your data for direct mail

7.1 Newsletter

You can subscribe to our free newsletter on our website. When you subscribe, the data you enter in the registration form is transmitted to us. The only required field is your email address. Any additional information you provide will only be used for personalized communication.

The legal basis for processing your data after subscribing to the newsletter is, if the user has given their consent, Article 6(1)(a) GDPR. We obtain this consent by sending you a confirmation email after you subscribe to the newsletter, which contains a confirmation link. By clicking this link, you simultaneously give your consent to receive the newsletter.
When sending the registration to the newsletter, we store your IP address as well as the date and time of registration. This storage is used to track a possible misuse of your e-mail address.

We use the data collected by us when registering for the newsletter exclusively for the purpose of sending out the newsletter.

Subscription to the newsletter may be terminated by you at any time. For this purpose, there is a corresponding link in each newsletter. This also allows a revocation of the consent of the storage of the personal data collected during the registration process.

7.2 Newsletter for existing customers

If you purchase goods or services on our website and deposit your e-mail address here, this can subsequently be used by us for sending a newsletter. In such a case, the newsletter will only send direct mail for your own similar goods or services.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG and Art. 6 para. 1 lit. f DSGVO. The data processing takes place solely on the basis of our legitimate interest in personalized direct mail.

If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you can also object to the use of your email address for the aforementioned advertising purpose at any time by notifying us. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Sendinblue

We send our newsletters via Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (hereinafter referred to as "Sendinblue").
We pass on the data you entered when registering for the newsletter to Newsletter2Go in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.
The data you enter when subscribing to our newsletter (e.g., your email address) is stored on Sendinblue's servers in Germany. Sendinblue uses your data on our behalf to send and statistically analyze the newsletters. For this purpose, the newsletter emails contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to track whether a newsletter email has been opened and which links within it have been clicked. This conversion tracking also allows us to see whether an action (such as purchasing an item from our shop) was taken after clicking a link in the newsletter. Technical information is also collected (e.g., the time of access, your IP address, browser type, and/or operating system). This data is collected exclusively in pseudonymized form and is not linked to your other personal data. If you do not wish to have your data analyzed as described here, you must unsubscribe from the newsletter. We have a data processing agreement with Newsletter2Go.

You can find details on data protection at Newsletter2GO at:
https://de.sendinblue.com/legal/privacypolicy/

7.4 advertising by letter

If you have left us your first name and surname, your postal address and possibly other personal data due to an order, we reserve the right to safeguard our legitimate interest in personalized direct mail according to Art. 6 para. 1 lit. f DSGVO to save this data and send you our offers by mail.

You can object to the storage and use of your data for this purpose at any time by a message to the person in charge.

8. Online marketing

Use Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Our offers are advertised on external websites with the help of advertising materials (so-called Google Adwords). Our legitimate interest lies in the display of advertising that is of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Article 6 (1) (a) GDPR, namely your express consent.

Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.

These cookies usually lose their validity after 30 days and are not used for personal identification. Every Google Ads customer receives a different cookie, which is why cookies cannot be tracked via the websites of Ads customers.

The information obtained in this way is used to create conversion statistics for Ads customers about the total number of users who clicked on their ad and were forwarded to a page provided with a conversion tracking tag.

It cannot be used to identify you personally.

If you want to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your internet browser under user settings.

You can find information about Google's data protection regulations here: http://www.google.de/policies/privacy/

You can permanently deactivate the conversion cookies by setting your browser accordingly or download and install the browser plug-in available under the following link:
http://www.google.com/settings/ads/plugin?hl=de

In this case, certain functions of this website may not be used or may only be used to a limited extent.

9. web analytics services

Google Analytics

We use the web analysis service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website.
Google Analytics uses cookies ". These are text files that are stored on your computer and that enable your use of the website to be analyzed.

The information generated about your use of this website (including the shortened IP address) will be transmitted to and stored by Google on a server, which may be transmitted to the United States.

We use Google Analytics with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and thus prevents direct identification of individuals. Therefore, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server, including in the USA, and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google uses this information to evaluate your website usage, to create reports on website activity and to provide us with other services related to website activity and internet usage. Your IP address collected in this context will not be merged with other Google data.

You can prevent the storage of cookies by the appropriate setting of your browser.

You may also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plug-in:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:
Disable Google Analytics

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

Google Privacy Policy:
https://support.google.com/analytics/answer/6004245?hl=de

10. Retargeting / Remarketing / Referral Advertising

Facebook Custom Audience using the pixel process

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, this allows us to track user behavior after they have seen or clicked on a Facebook ad. This process helps us evaluate the effectiveness of Facebook ads for statistical and market research purposes and can contribute to optimizing future advertising campaigns. The data collected is anonymous to us; we cannot draw any conclusions about the identity of individual users. However, Facebook stores and processes the data, making it possible to link it to the respective user profile and use the data for its own advertising purposes, in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can be stored on your device for these purposes. These processing operations are only carried out when express consent has been given in accordance with Article 6 (1) (a) GDPR. Consent to the use of the Facebook pixel may only be given by users who are older than 13 years old. If you are younger, please ask your legal guardian for permission. You can deactivate the use of cookies on your computer by setting your browser accordingly. However, this can mean that some functions on our website can no longer be used in full. You can also deactivate the use of cookies by third-party providers such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

11. Tools and Miscellaneous

11.1 Google reCAPTCHA

We use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") in accordance with Article 6 (1) (f) GDPR due to our legitimate interest in avoiding abuse and spam .
reCAPTCHA is a function intended to ensure that an input is made by a natural person.
The service will send your IP address and any additional data Google may need for the reCAPTCHA service to Google.

When using the Google reCAPTCHA, it may also transfer your personal information to the servers of Google LLC. come in the US.

For details about Google reCAPTCHA and Google's privacy policy, please visit:
https://www.google.com/intl/de/policies/privacy/

11.2 Google Maps

We use "Google Maps" (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is used to display interactive maps and generate directions. By using Google Maps, information about your use of this website, including your IP address and the (starting) address entered in the route planner, may be transmitted to Google. When you access a page on our website that contains Google Maps, your browser establishes a direct connection to Google's servers. The map content is transmitted directly from Google to your browser and integrated into the website. Therefore, we have no control over the scope of the data collected by Google in this way. To the best of our knowledge, this includes at least the following data:
Date and time of the visit to the website in question

Internet address or URL of the accessed website

IP address, (starting) address entered as part of route planning

We have no influence over the further processing and use of data by Google and therefore cannot assume any responsibility for it. If you are logged into Google, your data will be directly associated with your Google account. If you do not want this association, you must log out of Google. Google stores your data (including that of users who are not logged in) as usage profiles and analyzes them. This analysis is carried out, in particular, pursuant to Article 6(1)(f) GDPR, on the basis of Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet user needs. You have the right to object to the creation of these user profiles, which you must assert directly with Google.
If you do not want Google to collect, process, or use data about you via our website, you can also disable JavaScript in your browser settings. However, in this case, you will not be able to use the map display. For information on the purpose and scope of data collection and the further processing and use of data by Google, as well as your related rights and privacy settings, please refer to Google's privacy policy (https://policies.google.com/privacy?hl=de).

The Google Terms of Use can be found here:
http://www.google.de/intl/de/policies/terms/regional.html
the terms of use for Google Maps can be found here:
https://www.google.com/intl/de_US/help/terms_maps.html
Further information on data protection can be found here:
http://www.google.de/intl/de/policies/privacy/

12. Rights of the person concerned

12.1 data subject rights

The effective data privacy law gives you comprehensive rights of the data subject (rights to access and intervention) towards the data controller with regard to the processing of your personal data. These are dealt with below:

Right to information according to Art. 15 GDPR

You can request confirmation from the data controller as to whether personal data concerning you is being processed by the data controller. Furthermore, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage, and the existence of other rights such as rectification of the data or the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR relating to the transfer of your data to third countries.

Right to rectification according to Art. 16 GDPR

You have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us; the correction or completion must be made immediately.

Right to restriction of processing according to Art. 18 GDPR

You have the right to request that your personal data be restricted as long as the accuracy of your data is disputed, if you refuse to delete your data for improper processing and instead request that your data be restricted when you process your information require us to assert, exercise or defend legal claims after we no longer require such data for purposes of our purpose or if you have filed an objection based on your particular situation, as long as it is not certain that our legitimate reasons prevail;
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted, you will be notified by the person responsible before the restriction is lifted.

Right to erasure according to Art. 17 GDPR

You have the right to the immediate deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right to erasure does not exist in particular - not conclusively - if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims

Right to information according to Art. 19 GDPR

If you have exercised your right to rectify, erase or limit processing, the controller is required to notify all recipients to whom your personal information has been disclosed this rectification or deletion of the data or limitation of processing, unless this is impossible or disproportionate Effort is connected. You also have the right to be informed about these recipients.

Right to data portability according to Art. 20 GDPR

You have the right to receive your personal data communicated to us in a structured, common and machine-readable format or to request the transmission to another person responsible, as far as this is technically possible;

Right to withdraw consent pursuant to Article 7(3) GDPR

You have the right at any time against the processing of personal data concerning you, which pursuant to Art. 6 para. 1 lit. e) or f) GDPR, objection is lodged; this also applies to profiling based on these provisions.
You also have the right to revoke your data protection declaration of consent at any time with effect for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to lodge a complaint pursuant to Article 77 GDPR

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of personal data concerning you is against the DSGVO violates.

12.2 right of objection

You have the right to object to the processing of your data at any time with effect for the future, if we process your data due to our overriding legitimate interest after a balance of interests.
If you make use of this right of objection, we will terminate the processing of your data unless it is demonstrable that there are overriding compelling legitimate reasons for the termination or if further processing serves to exercise or defend legal claims.

13. Duration of storage of personal data

The duration of the storage of personal data depends on statutory retention periods. After their expiry, we routinely delete the data if it is no longer required to complete or initiate a contract and / or if there is no legitimate interest in the re-storage.