Privacy Policy

1. Controller

2. General

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This policy informs you about the type, scope and purpose of the processing of personal data in the context of our online shop and our business processes.

3. Collection and storage of personal data

We process the following data:

(a) When visiting the website

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

This data is stored server-side in log files and serves technical stability and security. Legal basis: Art. 6 (1)(f) GDPR.

(b) When placing an order

• Name
• Address
• E-mail address
• Telephone number (optional)
• Order data
• Payment data (depending on the payment method)

Legal basis: Art. 6 (1)(b) GDPR (performance of the contract).

(c) Age verification

For the sale of alcoholic beverages we carry out an age check:

• DHL Ident-Check on delivery
• ID check on collection

Legal basis: Art. 6 (1)(c) GDPR (statutory obligation under the JuSchG).

(d) Contact requests

When you contact us by e-mail or via a form, we process:

• Name
• E-mail address
• Content of the message

Legal basis: Art. 6 (1)(b) GDPR.

4. Processing in the context of order handling

We use the following categories of service providers:

• Hosting provider (EU)
• Payment service providers (e.g. credit card, Sofort, PayPal – depending on your choice)
• Shipping provider (DHL)
• IT service provider for the shop system (WooCommerce / WordPress)

These service providers process data exclusively in accordance with Art. 28 GDPR (order processing).

5. Cookies

Our website uses cookies to technically enable the ordering process and to improve user-friendliness.

Legal basis:

• Art. 6 (1)(f) GDPR (technically necessary cookies)
• Art. 6 (1)(a) GDPR (consent for optional cookies, e.g. statistics/marketing)

6. Analysis tools

If used (e.g. Matomo or Google Analytics), processing only takes place after express consent in accordance with Art. 6 (1)(a) GDPR.

7. Disclosure of data

Data is only disclosed:

• to shipping providers (delivery address, age verification)
• to payment service providers (payment data)
• to technical service providers (hosting, shop system)

Data is not passed on to third parties for advertising purposes.

8. Data transfer to third countries

Transfer to countries outside the EU only takes place if the service provider guarantees a valid GDPR level of protection (e.g. EU standard contractual clauses).

9. Storage period

We store personal data:

• Order data: in accordance with tax and commercial law retention obligations (10 years)
• Log files: max. 30 days
• Contact requests: until final processing

10. Rights of the data subjects

You have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)

11. Security

We use SSL encryption and take technical and organizational measures in accordance with Art. 32 GDPR.

12. Social Media

Links to social media profiles (e.g. Instagram, Facebook) only lead to external pages. When clicking on them, the privacy policies of the respective provider apply.

13. Changes to the privacy policy

We reserve the right to adjust this privacy policy to adapt it to legal requirements or changes to our services.