Data protection
I Responsible, scope
The person responsible within the meaning of the relevant data protection regulations is Beyond Drinks GmbH (hereinafter referred to as "provider"). Please refer to the imprint for details on the serviceable address and powers of representation.
For us, the protection of personal data has the highest priority. We would therefore like to inform you at this point about which data we collect when and how we handle your personal data. This data protection declaration describes the collection and use of personal data when visiting and using our website www. laori drinks. com (hereinafter: “website”).
II. General information on data processing
1. Scope of processing of personal data
We only process personal data of our users to the extent that this is necessary to provide a functional website and to carry out the services we offer. The processing of personal data of our users takes place regularly only with the consent of the user or on the basis of other legal provisions that allow data processing.
If we process your personal data based on your consent, you have the right to revoke your consent at any time with effect for the future without giving reasons.
We also process personal data for statistical and market analysis purposes. In this way, in anonymous form, e.g. Statistics on industry affiliation, location, market area of the website visitors created and evaluated. You can find details on this in the relevant sections of this data protection declaration.
For special services (e.g. The sending of newsletters) additional data protection notices may apply. We will inform you about this at the beginning of the usage process of the respective service.
2. Data erasure and retention period
Basically and unless otherwise stated, your personal data will only be stored until the purpose of collection and storage no longer applies. According to your consent, data can also be stored longer as long as you do not revoke your consent.
Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. The processing or deletion of the data is also restricted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
3. Use of processor
When performing the services we offer, we use external service providers who, among other things, also process your personal data exclusively on our behalf. This is e.g. B This is the case with payment service providers, fulfillment and shipping service providers, newsletter shipping service providers, as well as with CRM and hosting service providers. With all such processors, we have - if required by law - agreements on the processing of personal data on behalf of Art. kind 28 GDPR completed.
4. Transfer to third countries
Unless otherwise stated, all data processing operations take place within the EU or EEA countries.
Data processing operations carried out by third-party providers established outside the geographical area mentioned may be carried out in part or in full in the countries of the respective branch or in accordance with the respective data protection regulations.
A transfer of personal data outside of the EU or the EEA takes place exclusively on the basis of an adequacy decision by the European Commission, or in accordance with standard contractual clauses of the European Commission. A list of current adequacy decisions is available on the European Commission's website.
Information about the EU-US Privacy Shield, and in particular information about a specific company's participation, can be found on the website of the US Department of Commerce.
III. Data use in general form when providing the website and creating log files
When you visit our website, we automatically save usage-related data about the usage process. This includes in particular the IP address, the URLs visited, the length of stay, the operating system and browser used and the amount of data transferred.
We collect this data to ensure that our website is available to you. In addition, they are used to anonymously analyse, store and evaluate user behavior and to constantly improve and further develop the service. For more details on the systems used, see the sections on cookies and social media below.
We only store your IP address in the log files for a limited period of time, insofar as this is necessary for security purposes.
Our legitimate interest also lies in the stated purposes, which is the data processing acc. kind 6 pairs 1 lit. f) GDPR justified.
IV. Data processing for orders and when creating a user account
a. Placing an order
You can place an order as a guest on our website. In this case, we collect the following personal data during the ordering process: first name, last name, e-mail address, delivery address, billing address (if different), payment data. You can provide us with further information voluntarily.
This information is absolutely necessary in order to carry out the purchase contract concluded with you and the associated communication with you. Unfortunately, if you do not provide us with this data, we cannot enter into a contract with you.
Payment data is not collected and stored by us, but directly by the payment service provider you have chosen to carry out the payment. We only receive information from the payment service provider as to whether the payment was successful.
The basis for processing is Art. 6 para. 1 letter b) GDPR.
b. Credit check
In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact data and order data, to Klarna. In this way, Klarna can assess whether you can use the payment options offered via Klarna and adapt the payment options to your needs. You can find general information about Klarna here. Your personal information will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations.
c. Creation of a user account
On our website you have the option of creating a user account in order to place orders more quickly and easily and to save information on past orders. When registering an account, we collect the following data: first name, last name, email address and password. We need this data to ensure that the user account works as intended and can only be assigned to you. The collection and processing of personal data in this context is justified by the contract of use that we conclude with you. If you do not provide us with this data, we will unfortunately not be able to set up a customer account for you.
The basis for processing is Art. 6 para. 1 letter b) GDPR.
v. Data transmission when using the evaluation function
Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order.
This serves to protect our overriding legitimate interests in optimal marketing by enabling safe shopping in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of an order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found in our Privacy Policy.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for the analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation.
Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered to use them. The contractual agreement made between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you are already registered as a buyer for product use is automatically checked using a neutral parameter, the e-mail address hashed using a cryptological one-way function. Before it is sent, the e-mail address is converted into this hash value, which Trusted Shops cannot decrypt. After checking for a match, the parameter is automatically deleted.
This is for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services in accordance with kind 6 para. 1 p. 1 lit. f GDPR required. Further details, including objections, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.
The basis for processing is Art. 6 para. 1 letter f) GDPR
VI. Data transmission when using the contact form
If you write to us using the contact form on our website, we will receive the personal data that you voluntarily provide to us, i. H Name, e-mail address, content of the message. We only use this data to respond to your contact. No further processing takes place. If you do not provide us with this data, we will unfortunately not be able to process your request.
The basis for processing is Art. 6 para. 1 lit. b) GDPR.
VII. Google Maps
On our website we use Google Maps to visually display geographic information. Google Maps is an offer from Google Ireland Limited, a company incorporated and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www. google. de [http://www. google. en]). This serves to protect our overriding legitimate interests in an optimized presentation of our offer and easy accessibility of our locations in accordance with Art. 6 para. 1 p. 1 lit. f) GDPR
When using Google Maps, Google transmits or stores data about the use of the Maps functions by website visitors. processed, which may include in particular the IP address and location data. We have no influence on this data processing. Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be downloaded here [https://www. privacy shield. gov/list] can be viewed.
In order to deactivate the Google Maps service and thus prevent data transmission to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot only be used to a limited extent.
Further information about data processing by Google can be found in Google's data protection information [https://www. google. com/privacypolicy. html]. The terms of use for Google Maps [https://www. google. com/intl/de_de/help/terms_maps. html] contain detailed information about the map service.
The data processing takes place on the basis of an agreement between jointly responsible persons in accordance with Art. 26 GDPR, which you can find here [https://privacy. google. com/intl/de/businesses/mapscontrollerterms/].
VIII. Use of cookies and other trackers
a) Description and scope of data processing
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called. session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies).
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. You can also manually delete cookies from your end device at any time.
If cookies are not accepted, the functionality of our website may be restricted.
We set cookies in accordance with Art. 6 para. 1 letter c) GDPR, insofar as this is necessary to fulfill a legal obligation to which we are subject and, in accordance with Art. 6 para. 1 letter f) GDPR, to protect our overriding legitimate interests in an optimized presentation of our offer within the framework of a balancing of interests.
We only set additional cookies that allow us to monitor and evaluate user behavior for market analysis purposes if you consent to us in accordance with Art. kind 6 para. 1 letter a) GDPR have given your consent. These are third-party cookies that are used when you use our services. Please refer to the following sections for details.
GOOGLE ANALYTICS
We work with "Google Analytics". This is a web analysis service provided by Google Inc. The information generated by the Google Analytics cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. IP anonymization has been activated on our websites, so that the IP address of users is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the unabridged IP address be sent to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by making a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the data generated by the cookie and related to your use of the website (incl. your IP address) by Google and the processing of this data by installing the browser plug-in available under the following link: http://tools. google. com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link: Disable Google Analytics. An opt-out cookie is then set, which prevents future collection of your data when you visit this website.
For more information on how Google handles personal data, please refer to Google's privacy policy: https://policies. google. com/privacy?hl=de.
GOOGLE ADWORDS CONVERSION
We use Google AdWords to draw attention to our attractive offers on external websites. In relation to the advertising campaign data, we can determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, in making our website more interesting for you and in achieving a fair calculation of advertising costs.
These advertising media are delivered by Google via so-called "ad servers". To do this, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user does not wants to be addressed more) is saved.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the user based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and are therefore informing you according to our current level of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website accessed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google If you have not logged in, there is a possibility that the provider will find out and save your IP address.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by deactivating cookies for conversion tracking by setting your browser so that cookies from the domain “www. googleadservices. com" to be blocked, https://www. google. de/settings/ads, whereby these settings will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers who are part of the self-regulation campaign "About Ads" via the link http://www. aboutads. info/choices, which will be deleted if you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www. google. com/settings/ads/ plugin. We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.
You can find more information about data protection at Google here: http://www. google. com/intl/de/policies/privacy and https://services. google. com/sitestats/de. html.
GOOGLE REMARKETING
Google Ads is an offer from Google Ireland Limited, a company incorporated and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www. google. de [http://www. google. en]).
As described above, we use Google Ads to advertise our offer in Google search results and on third-party websites. If you have given us your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR, when you visit our website, the so-called Remarketing cookie set by Google, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. After the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.
Any additional data processing will only take place if you have given your consent to Google linking your web and app browser history to your Google account and using information from your Google account to personalize ads that see them on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be downloaded here [https://www. privacy shield. gov/list] can be viewed. You can revoke your consent at any time with effect for the future by using the remarketing cookie via this link [https://adssettings. google. com/authenticated?hl=nl]. You can also register with the Digital Advertising Alliance [https://www. aboutads. info/] about the setting of cookies and make settings for this.
FACEBOOK CUSTOM AUDIENCES RETARGETING
We also use Facebook Inc.'s "Custom Audiences" remarketing function on our website. ("Facebook"). This means that users of the website can be shown interest-based advertisements (“Facebook Ads”) when they visit the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and are therefore informing you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have visited the corresponding website of ours accessed our website or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or If you have not logged in, there is a possibility that the provider will find out and store your IP address and other identifiers.
The "Facebook Custom Audiences" function can be deactivated via this link and for logged-in users at https://www. Facebook. com/settings/?tab=ads#_possible.
The legal basis for processing your data is Art. 6 para. 1 letter f) GDPR Further information on data processing by Facebook can be found at https://www. Facebook. com/about/privacy.
HOTJAR
Hotjar is an offer from Hotjar ltd. , Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. We use this service to better understand the needs of our users and to optimize the offer on this website. This technology allows us to better understand our users' experiences (eg. B how much time users spend on which pages, which links they click, what they like and dislike, etc. ) and this helps us to tailor our offer to the feedback from our users. This service works with cookies and other technologies to collect information about the behavior of our users and their devices (in particular the IP address of the device (is only recorded and stored in an anonymous form), screen size, device type (unique device identifiers), information about browser used, location (country only), preferred language used to view our website). This information is stored in a pseudonymised user profile. The information is neither used by the service itself nor by us to identify individual users or merged with other data about individual users. For more information, see Hotjar's privacy policy: https://www. hotjar. com/legal/policies/privacy
You can object to the storage of a user profile and information about your visit to our website by these services, as well as the setting of tracking cookies on other websites via these links:
https://www. hotjar. com/legal/compliance/opt-out
INTERCOM
Intercom is a service of R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin (Ireland). With the Intercom service, we offer users on our website the opportunity to communicate directly with us via a chat function. If you use the chat function, Intercom collects data from you on our behalf (esp. IP address) to recognize you as an individual user on our website. Cross-site tracking does not take place. It is also not possible for us or Intercom to determine your identity based on the IP address or the unique identifier issued by Intercom.
For more information about Intercom's handling of personal data, please refer to the relevant data protection declaration: https://www. intercom. com/legal/privacy#personal-data-collected-by-intercom
The basis of the processing is Art. 6 para. 1 letter b) GDPR if the processing of personal data via Intercom takes place within the framework of the fulfillment of the contract.
The basis of the processing, however, is Art. 6 para. 1 letter f) GDPR if the processing of personal data via Intercom does not serve to fulfill the contract, but to safeguard our legitimate interests in offering you a functional and appealing website and providing you with a simple and direct means of contacting us.
TALKABLE
Talkable is a service of Curebit Inc. , 2370 Market St, Suite 103 San Francisco, CA 94114, USA. We offer you the opportunity to receive benefits and discounts in return for your recommendation. For this purpose, we collect your name and email address via Talkable. If you log in using your existing Facebook or Google account, we pull this data from the corresponding accounts. Talkable processes this data on our behalf in order to ensure the implementation of the recommendation campaigns and to provide us with information on the effect of the same. Further information on how Talkable handles personal data can be found in Curebit's data protection declaration: https://www. talkable. com/privacy
b) Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
IX. Newsletter
You can register to receive our newsletter by entering your e-mail address in the mask provided. You can also provide your first and last name, gender and place of residence on a voluntary basis. You will then receive an automatic confirmation e-mail containing a link to the address provided. The registration process is only complete when you access this link.
If you consent to receiving our newsletter, we will use your email address to send advertising and offers of interest to you regarding our own services and those of partner companies. In addition, we can track how often a specific newsletter message was opened and the links contained therein were clicked. In order to achieve this, we collect information about the time of retrieval, IP address, browser type and operating system. This enables us to better assess which of our products you are most interested in and to personalize and improve our offering accordingly. The data will not be passed on to third parties.
You can withdraw your consent to receiving newsletters at any time without giving reasons by sending us a corresponding message to the contact details mentioned under "Contact" or "Imprint", or by following the instructions contained in each newsletter for the revocation of consent follow.
We will inform you about the right to object when the email address is collected and in the respective newsletter.
X. Social Media Plugins
We use social media plugins from various providers on our website in order to improve our offer and make it more attractive for you. The basis for the associated processing of personal data is therefore Art. 6 para. 1 lit. f GDPR.
We currently use the following social media plug-ins:
Facebook, LinkedIn, Instagram
We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by the marking on the box above its initials or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the under III. data referred to in this declaration. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. With the plug-ins we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and e.g. B. link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
The purpose and scope of the data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your rights in this regard and setting options for protecting your privacy can be found in the data protection notices of the providers.
https://www. Facebook. com/policy. php
https://help. instagram. com/155833707900388
http://www. linkedin. com/legal/privacy-policy
XI. Your rights
If your personal data is processed, you are the data subject i. S i.e GDPR and you have the following rights vis-à-vis the person responsible:
Right to information - You have the right to request information about the personal data processed or stored by us.
Right to rectification - You have the right to request that we correct or supplement incorrect or incorrect information. incomplete data concerning you.
Right to Erasure - You have the right to request that we erase your data in certain circumstances.
Right to restriction of processing - You have the right to ask us to restrict the processing of your data in certain circumstances.
Right to object - You have the right to object to the processing of your personal data in certain circumstances.
Right to data portability - You have the right to request that we transfer or transfer your personal data to another controller or to you in certain circumstances. release.
Your right to lodge a complaint - You can also lodge a complaint with a data protection authority.
If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising without giving reasons; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
XII. Changes to this Privacy Policy
Due to the dynamic development of the Internet, new technologies and opportunities are constantly developing. So that we can also let you enjoy these opportunities and technologies, we reserve the right to change this data protection declaration for the future when introducing new or additional services or when changing or expanding existing services or service elements.
Insofar as the change in the data protection declaration only affects the use of data in general and/or the use of data for orders and not also the use of data in the context of a user account, the new data protection declaration applies from the date of its update on the website.
A change in the data protection declaration, which refers to the use of the data already collected and stored for sending newsletters, will only be made if this is reasonable for you. If and to the extent that changes to the data protection declaration relate to the use of the data already collected and used for sending newsletters, we will notify you in good time by e-mail, on our website or in another form. If no objection is raised within the specified period, the amended data protection declaration is deemed to have been accepted by you. In the notification, we will inform you of your right to object and the importance of the objection period.