Data protection

I Responsible, scope

The person responsible within the meaning of the relevant data protection regulations is Beyond Drinks GmbH (hereinafter referred to as "provider"). For details on the summonable address and powers of representation, please refer to the imprint.

For us, the protection of personal data has the highest priority. We would therefore like to inform you at this point about which data we collect when and how we handle your personal data. This data protection declaration describes the collection and use of personal data when visiting and using our website www.laoridrinks.com (hereinafter: "website").

II. General information on data processing

1. Scope of processing of personal data

We only process our users' personal data to the extent that this is necessary to provide a functioning website and to carry out the services we offer. The processing of personal data of our users takes place regularly only with the consent of the user or on the basis of other legal provisions that permit data processing.

If we process your personal data based on your consent, you have the right to revoke your consent at any time with effect for the future without giving reasons.

We also process personal data for statistical and market analysis purposes. Statistics on the industry, location, market area of ​​the visitors to the website, for example, are created and evaluated in an anonymous form. You can find details on this in the relevant sections of this data protection declaration.

Additional data protection information may apply to special services (e.g. sending newsletters). We will inform you about this at the beginning of the usage process of the respective service.

2. Data erasure and retention period

Basically and unless otherwise stated, your personal data will only be stored until the purpose of collection and storage no longer applies. According to your consent, data can also be stored longer as long as you do not revoke your consent.

Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. The processing or deletion of the data will also be restricted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

3. Use of processor

When performing the services we offer, we use external service providers who, among other things, also process your personal data exclusively on our behalf. This is e.g. This is the case, for example, with payment service providers, fulfillment and shipping service providers, newsletter shipping service providers, as well as with CRM and hosting service providers. We have concluded agreements on the processing of personal data on behalf of all such processors - insofar as this is required by law - in accordance with Art. 28 GDPR.

4. Transfer to third countries

Unless otherwise stated, all data processing operations take place within the EU or EEA countries.

Data processing operations that are carried out by third-party providers located outside the geographical area mentioned may take place in part or in full in the countries of the respective subsidiary or in accordance with the respective data protection regulations.

A transfer of personal data outside of the EU or the EEA takes place exclusively on the basis of an adequacy decision by the European Commission, or in accordance with standard contractual clauses of the European Commission. A list of the current adequacy decisions is available on the website of the European Commission.

Information about the EU-US Privacy Shield, and in particular information about a specific company's participation, can be found on the website of the US Department of Commerce.

III. Data use in general form when providing the website and creating log files

When you visit our website, we automatically save usage-related data about the usage process. This includes in particular the IP address, the URLs visited, the length of stay, the operating system and browser used and the amount of data transferred.

We collect this data to ensure that our website is available to you. In addition, they are used to anonymously analyse, store and evaluate user behavior and to constantly improve and further develop the service. Further details on the systems used can be found in the sections on cookies and social media below.

We only store your IP address in the log files for a limited period of time, insofar as this is necessary for security purposes.

Our legitimate interest also lies in the stated purposes, which justifies data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.

IV. Data processing for orders and when creating a user account

a. Placing an order

You can place an order as a guest on our website. In this case, we collect the following personal data during the ordering process: first name, last name, e-mail address, delivery address, billing address (if different), payment data. You can provide us with further information voluntarily.

This information is absolutely necessary in order to carry out the purchase contract concluded with you and the associated communication with you. Unfortunately, if you do not provide us with this data, we cannot enter into a contract with you.

Payment data is not collected and stored by us, but directly by the payment service provider you have chosen to carry out the payment. We only receive information from the payment service provider as to whether the payment was successful.

The basis for processing is Art. 6 (1) b) GDPR.

b. Credit check

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact data and order data, to Klarna. In this way, Klarna can assess whether you can use the payment options offered via Klarna and adapt the payment options to your needs. You can find general information about Klarna here. Your personal information will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations .

c. Creation of a user account

On our website you have the option of creating a user account in order to place orders more quickly and easily and to save information on past orders. When registering an account, we collect the following data: first name, last name, email address and password. We need this data to ensure that the user account works as intended and can only be assigned to you.The collection and processing of personal data in this context is justified by the contract of use that we conclude with you. If you do not provide us with this data, we unfortunately cannot set up a customer account for you.

The basis for processing is Art. 6 (1) b) GDPR.

v Data transmission when using the evaluation function

Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any collected reviews as well as to offer Trusted Shops products to buyers after an order.

This serves to safeguard our overriding legitimate interests in optimal marketing by enabling secure shopping in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of an order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found in our Privacy Policy.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for analysis of security issues. The log files are automatically deleted no later than 90 days after creation.

Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered to use them. The contractual agreement made between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you are already registered as a buyer for product use is automatically checked using a neutral parameter, the e-mail address hashed using a cryptological one-way function. Before it is sent, the e-mail address is converted into this hash value, which Trusted Shops cannot decrypt. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services in accordance with Article 6 (1) sentence 1 lit. f GDPR. Further details, including objections, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.

The basis for processing is Art. 6 Para. 1 Letter f) GDPR.

VI. Data transmission when using the contact form

If you write to us using the contact form on our website, we will receive the personal data that you voluntarily provide to us, i.e. name, e-mail address, content of the message. We only use this data to respond to your contact. No further processing takes place. If you do not provide us with this data, we will unfortunately not be able to process your request.

The basis for processing is Art. 6 (1) (b) GDPR.

VII. Google Maps

On our website we use Google Maps for the visual representation of geographic information.Google Maps is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (wwwgoogle.de [http://www.google.de]). This serves to protect our overriding legitimate interests in an optimized presentation of our offer and easy accessibility of our locations in accordance with Article 6 Paragraph 1 Sentence 1 lit. f) GDPR.

When using Google Maps, Google transmits or processes data about the use of the Maps functions by website visitors, which may include in particular the IP address and location data. We have no influence on this data processing. Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here [https://www.privacyshield.gov/list].

In order to deactivate the Google Maps service and thus prevent data transmission to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or only to a limited extent.

Further information about data processing by Google can be found in Google's privacy policy [https://www.google.com/privacypolicy.html]. The terms of use for Google Maps [https://www.google.com/intl/de_de/help/terms_maps.html] contain detailed information on the map service.

Data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here [https://privacy.google.com/intl/de/businesses/mapscontrollerterms/].

VIII. Use of cookies and other trackers

a) Description and scope of data processing

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies).

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. You can also manually delete cookies from your end device at any time.

If cookies are not accepted, the functionality of our website may be restricted.

We set cookies in accordance with Art. 6 Para. 1 Letter c) GDPR, insofar as this is necessary to fulfill a legal obligation to which we are subject and, in accordance with Art. 6 Para. 1 Letter f) GDPR, for compliance our overriding legitimate interests in an optimized presentation of our offer within the framework of a weighing of interests.

Other cookies that allow us to monitor and evaluate user behavior for market analysis purposes are only set if you have given us your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. These are third-party cookies that are used when you use our services. Please refer to the following sections for details.

GOOGLE ANALYTICS

We work with "Google Analytics". This is a web analysis service provided by Google Inc.The information generated by the Google Analytics cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. IP anonymisation has been activated on our website, so that the IP address of Google users is within previously abbreviated by member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the unabridged IP address be sent to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by making a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by installing the browser plug-in available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link: Disable Google Analytics. An opt-out cookie is then set, which prevents the future collection of your data when you visit this website.

For more information on how Google handles personal data, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de.

GOOGLE ADWORDS CONVERSION

We use Google AdWords to draw attention to our attractive offers on external websites. In relation to the advertising campaign data, we can determine how successful the individual advertising measures are. We are interested in showing you advertising that is of interest to you, in making our website more interesting for you and in achieving a fair calculation of advertising costs.

These advertising media are delivered by Google via so-called "ad servers". To do this, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user does not wants to be addressed more) saved.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google.Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and are therefore informing you according to our state of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website viewed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular the suppression of third-party cookies means that you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/ads, whereby this setting deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers who are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/ plugin . We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

You can find more information about data protection at Google here: http://www.google.com/intl/de/policies/privacy und https://services.google.com/sitestats/de.html.

GOOGLE REMARKETING

Google Ads is an offer from Google Ireland Limited, a company incorporated and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de [http://www.google.de ]).

As described above, we use Google Ads to advertise our offer in Google search results and on third-party websites. If you have given us your consent to this in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR, the so-called remarketing cookie will be set by Google when you visit our website, which will automatically be sent using a pseudonymous cookie ID and based on the data you provide visited sites enables interest-based advertising. After the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.

Any additional data processing will only take place if you have given your consent to Google linking your web and app browser history to your Google account and using information from your Google account to personalize ads that see them on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups.

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be found here [https://www.privacyshield.gov/list ] can be viewed. You can revoke your consent at any time with effect for the future by deactivating the remarketing cookie via this link [https://adssettings.google.com/authenticated?hl=nl]. You can also find out more about the setting of cookies and make settings for this at the Digital Advertising Alliance [https://www.aboutads.info/].

FACEBOOK CUSTOM AUDIENCES RETARGETING

We also use the "Custom Audiences" remarketing function of Facebook Inc. ("Facebook") on our website. As a result, users of the website can be shown interest-based advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. We are interested in showing you advertising that is of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and are therefore informing you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have visited the corresponding website of ours accessed our website or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifiers.

The "Facebook Custom Audiences" function can be deactivated via this link and for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

The legal basis for the processing of your data is Art. 6 Para. 1 Letter f) GDPR. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.

HOTJAR

Hotjar is an offer from Hotjar ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. We use this service to better understand the needs of our users and to optimize the offer on this website. This technology gives us a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to tailor our offer to our users' feedback. This service uses cookies and other technologies to collect information about the behavior of our users and their devices (in particular the IP address of the device (is only recorded and stored in an anonymous form), screen size, device type (unique device identifiers), information about browser used, location (country only), preferred language used to view our website). This information is stored in a pseudonymised user profile. The information is neither used by the service itself nor by us to identify individual users or merged with other data about individual users. For more information, see Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy

You can object to the storage of a user profile and information about your visit to our website by these services, as well as the setting of tracking cookies on other websites via these links:

https://wwwhotjar.com/legal/compliance/opt-out

INTERCOM

Intercom is a service of R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin (Ireland). Through the Intercom service, we offer users on our website the opportunity to communicate directly with us via a chat function. If you use the chat function, Intercom collects data from you (especially IP address) on our behalf in order to recognize you as an individual user on our website. Cross-site tracking does not take place. It is also not possible for us or Intercom to determine your identity based on the IP address or the unique identifier issued by Intercom.

For more information about Intercom's handling of personal data, please refer to the relevant data protection declaration: https://www.intercom.com/legal/privacy#personal-data-collected-by -intercom

The basis of the processing is Article 6 Paragraph 1 Letter b) GDPR if the processing of personal data taking place via Intercom takes place within the framework of the fulfillment of the contract.

The basis of the processing, however, is Art. 6 Para. 1 Letter f) GDPR if the processing of personal data taking place via Intercom is not for the fulfillment of the contract, but for the protection of our legitimate interests in offering you a functional and appealing website and you to provide a simple and direct way of contacting us serves.

TALKABLE

Talkable is a service of Curebit Inc., 2370 Market St, Suite 103 San Francisco, CA 94114, USA. We offer you the opportunity to receive benefits and discounts in return for your recommendation. For this purpose, we collect your name and email address via Talkable. If you log in using your existing Facebook or Google account, we pull this data from the corresponding accounts. Talkable processes this data on our behalf in order to ensure the implementation of the recommendation campaigns and to provide us with information on the effect of the same. For more information on how Talkable handles personal data, see Curebit's privacy policy: https://www.talkable.com/privacy

b) Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

IX. Newsletter

You can register to receive our newsletter by entering your e-mail address in the mask provided. You can also provide your first and last name, gender and place of residence on a voluntary basis. You will then receive an automatic confirmation e-mail containing a link to the address provided. The registration process is only complete when you access this link.

If you consent to receiving our newsletter, we will use your email address to send advertising and offers of interest to you about our own services and those of partner companies. In addition, we can track how often a specific newsletter message is opened and the messages contained therein links were clicked. In order to achieve this, we collect information about the time of retrieval, IP address, browser type and operating system. This enables us to better assess which of our products you are most interested in and to personalize and improve our offering accordingly. The data will not be passed on to third parties.

You can withdraw your consent to receive newsletters at any time without giving reasons by sending us a message to the contact details mentioned under "Contact" or "Imprint", or by following the instructions contained in each newsletter for the Revocation of consent follow.

We will inform you about the right to object when the email address is collected and in the respective newsletter.

X. Social Media Plugins

We use social media plugins from various providers on our website in order to improve our offer and make it more attractive for you. The basis for the associated processing of personal data is therefore Article 6 (1) (f) GDPR.

We currently use the following social media plug-ins:

Facebook, LinkedIn, Instagram

We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by the marking on the box above its initials or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider be informed that you have accessed the corresponding website of our online offer. In addition, the under III. data referred to in this declaration. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.

We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. With the plug-ins we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect will be sent directly to your plug-in provider. Provider assigned to existing account. If you press the activated button and e.g. B. link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your rights and setting options to protect your privacy can be found in the data protection information of the providers.

https://www.facebook.com/policy.php

https://help.instagram.com/155833707900388

http://www.linkedin.com/legal/privacy-policy

XI. Your rights

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information - You have the right to request information about the personal data processed or stored by us.

Right to rectification - You have the right to request us to correct or supplement incorrect or incomplete data concerning you.

Right to Erasure - You have the right to request that we erase your data in certain circumstances.

Right to restriction of processing - You have the right to ask us to restrict the processing of your data in certain circumstances.

Right to object - You have the right to object to the processing of your personal data in certain circumstances.

Right to data portability - You have the right to request that we transfer or release your personal data to another controller or to you in certain circumstances.

Your right to complain - You can also lodge a complaint with a data protection authority.

If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising, without giving reasons; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

XII. Changes to this Privacy Policy

Due to the dynamic development of the Internet, new technologies and opportunities are constantly developing. So that we can also let you enjoy these opportunities and technologies, we reserve the right to change this data protection declaration for the future when introducing new or additional services or when changing or expanding existing services or service elements.

Insofar as the change in the data protection declaration only affects the use of data in general and/or the use of data for orders and not also the use of data in the context of a user account, the new data protection declaration applies from the date of its update on the website.

A change in the data protection declaration, which relates to the use of the data already collected and stored for sending newsletters, will only take place if this is reasonable for you If and to the extent that changes to the data protection declaration relate to the use of the data already collected and receive data used for sending newsletters, we will notify you in good time by email, on our website or in another form. If no objection is raised within the specified period, the amended data protection declaration is deemed to have been accepted by you. We will inform you of your right to object and the importance of the objection period in the notification.

.