Data protection provisions
Below, you will find the data protection provisions of MySpeidel, the online brewers’ network operated by Speidel Tank- und Behälterbau GmbH. Through these data protection provisions, we – Speidel Tank- und Behälterbau GmbH, Krummenstrasse 2 72131 Ofterdingen – want to inform you about what personal data concerning you we collect and how we process such data when you visit and use MySpeidel.
By furnishing the required consent to these data protection provisions when you register with us on MySpeidel, you are consenting to us collecting, processing and using your personal data in the form described below, which occurs in the context of justifying, implementing and handling your user relationship with MySpeidel.
»Personal data«, as defined in the General Data Protection Regulation (GDPR), relate to any information pertaining to an identified or identifiable natural person (hereinafter referred to as the »data subject«). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. To put it a different way, personal data are therefore information that relates to you or indicates something about you personally and can be connected with you either on its own or in combination with other information. For the sake of convenience and to make it easier to understand, we will simply refer to your personal data in these data protection provisions as »your data«.
Protecting your data is important to us. And doing so can only be ensured if you know what happens to your data on MySpeidel. For this reason, we would like you to spend some time carefully reading through these data protection provisions. We strictly comply with the applicable data protection regulations and employ technical and organisational measures to protect your data.
1. Minimum age for registering with MySpeidel
Registration and use of MySpeidel is solely permitted by persons who, under the laws applicable to them, are allowed to consume alcoholic beverages. No minors may register with or use the website.
2. Data we collect on you; nature, purpose and legal basis for their processing and use
- When you register with MySpeidel, you will first need to select a username and password and provide your e-mail address. Your password and e-mail address cannot be viewed by anyone else and we will not forward them to any third parties. We use your e-mail address in order to contact you. You may amend your password and e-mail address at any time, but not your username. These data are required in order to allow you to use the services provided by MySpeidel. The collection and processing of data is therefore founded on Point (b) of Article 6(1) GDPR. These data are stored for the time that you have an account with MySpeidel. As soon as you delete your account, your e-mail address will also cease to be stored.
- When registering – but also at a later juncture – you can add further details of your own free will (hereinafter: »voluntary information«). This could, for example, be information concerning your name, address, date of birth, favourite beers, etc. You can, at any time, amend or delete any voluntary information that you provide. The legal basis for collecting and processing your voluntary information is your consent.
- By concluding the registration process, you consent to a profile page being created under your username on which any voluntary information you may have provided will also be displayed, along with the e-mail address you have furnished.
- After completing your registration, you may post content on MySpeidel, such as images and brewing recipes. You furthermore consent to third parties being allowed to view any content that you post.
You may, at any time, delete content that you have posted on MySpeidel, such as status updates, images and brewing recipes on content from other users. The legal basis for collecting and processing your content-related personal data is your consent.
- Each time that you visit a web page, your browser will automatically transmit certain information to the website’s server where it will be stored in a so-called log file. Such data may, for example, be information concerning
- the type and version of browser you use,
- the operating system you use,
- the website from where you accessed the page you are currently on,
- the hostname (IP address) of your computer, and
- the time at which the visit occurred.
Unless statutory obligations exist to preserve the data concerned, we will erase or anonymise your IP address once you exit the MySpeidel website.
Notwithstanding this, we anonymise the information transmitted to our server from your browser – therefore making it impossible to make any associations with you – and use it to analyse and improve our services. This use allows us, for example, to detect or identify potential errors as well as the days and times when MySpeidel is particularly well frequented. Anonymised data are no longer personal data.
The legal basis for collecting and processing information stored in a log file is Point (b) of Article 6(1) GDPR.
- Cookies are tiny text files used by websites and stored on your computer by your browser. So-called session cookies are temporarily saved on your computer’s memory and automatically deleted when you close the browser. So-called permanent cookies are stored on your computer’s hard drive for a defined, longer period of time; they are automatically deleted when the pre-defined period of time elapses. Cookies above all help to make using a website easier, more effective and securer. We use cookies to be able to identify you for the full duration of your session after you have logged on to MySpeidel. The corresponding session cookie automatically expires at the end of your session. You can change your browser settings to prevent any cookies being allowed at all or only to allow them if you specifically confirm their use. To find out how this works, simply go to the help feature provided by your browser. If you have set your browser to deny the use of cookies, you may find that you are unable to use some or all of the features of MySpeidel.
3. Transfer or forwarding of your data to third parties
- We never transfer your data to third parties without your consent. Data may be forwarded for technical reasons, however, if and to the extent that this is necessary in order to operate MySpeidel or for other reasons that are required in order to justify, implement and handle your user relationship with us. This may be the case, for example, if MySpeidel is hosted by an external service provider, i.e. an external provider running the MySpeidel servers. With the exception of processors, our legitimate interest in forwarding the data is founded on Point (b) of Article 6(1) GDPR.
- In addition to the above, we may – in specific cases – be legally bound to forward data by order of an incumbent agency or authority if and to the extent that such action be required in order to pursue criminal prosecution, to enable the police force in the respective federal state to avert danger, and to comply with the statutorily mandated duties of the Office for the Protection of the Constitution at federal and state level, the German intelligence service or the military counter-intelligence service, or the Federal Criminal Police Force in executing its duty to avert the dangers of international terrorism, or to assert rights to intellectual property.
4. Use of Google Analytics
- This website uses Google Analytics, a web analytics service provided by Google, Inc. (»Google«). Google Analytics uses »cookies«, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of our website is transmitted to and stored on Google’s servers in the USA. However, if IP anonymisation is activated on this website, Google will truncate your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide the website operator with further services associated with website and Internet use.
- The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
- You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do so you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available under tools.google.com/dlpage/gaoptout?hl=en-GB.
- This website uses Google Analytics with the extension »_anonymizeIp()«. The IP addresses thus collected are truncated so as to eliminate any direct reference to a specific individual. To the extent that the data collected personally relate to you, such a relation will be excluded without undue delay and the personal data will be deleted immediately.
- We use Google Analytics to analyse and regularly improve the use of our website. Using the acquired statistics, we can improve our offer to you and make the website more interesting for you as a user. As regards the exceptional cases when personal data are transferred to the USA, Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Point (f) of Article 6(1)(1) GDPR.
- Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: www.google.com/analytics/terms/gb.html; privacy overview: www.google.com/intl/en/analytics/learn/privacy.html; and privacy policy: www.google.de/intl/en/policies/privacy.
- This website furthermore uses Google Analytics to analyse across all devices the visitor flows that are carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account at »My data«, »Personal data«.
5. Use of Google Adwords Conversion
- We use the advertising media service Google Adwords to draw attention on external websites to our attractive offers. By referencing the advertising campaign data, we can determine the success of individual advertising measures. In doing so, our interest lies in showing you advertising which is of interest to you in making the design of our website more interesting to you, and in arriving at a fair calculation of advertising costs.
- These means of advertising are supplied by Google through so-called »ad servers«. To this end, we use ad server cookies through which certain performance metrics, such as flash advertising or clicks by users, can be measured. Should you access our website via a Google advert, Google Adwords will store a cookie on your PC. These cookies typically expire after 30 days and are not intended to serve to identify you personally. Linked to this cookie, a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), as well as opt-out information (a note that the user does not want to be addressed any longer) are typically saved.
- These cookies enable Google to recognise your Internet browser. Should a user visit certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to the page in question. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We ourselves do not collect and/or process any personal data during the aforementioned advertising measures. We merely receive statistical evaluations provided by Google. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media and, in particular, we cannot identify the users on the basis of this information.
- Through the marketing tools used, your browser automatically establishes a direct connection to the Google server. As we have no control over the extent and the further use of the data which are collected by Google through the employment of this tool, the information that follows is based on our level of knowledge as it stands: By incorporating AdWords conversion, Google receives the information that you visited the respective part of our website or clicked on one of our adverts. Provided that you are registered with a service provided by Google, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will learn and store your IP address.
- There are several ways for you to prevent participation in this tracking process:
- by adjusting your browser software accordingly; in particular, by suppressing third-party cookies, you will not receive any third-party adverts;
- by disabling the conversion-tracking cookies by setting your browser to block cookies from the domain »www.googleadservices.com«,www.google.com/settings/ads, which will result in this setting being deleted when you delete your cookies;
- by deactivating the interest-based advertisements of the providers, who are part of the »About Ads« self-regulation campaign, by going to the link www.aboutads.info/choices, though this setting will be deleted if you delete your cookies;
- by permanently disabling cookies in your Firefox, Internet Explorer or Google Chrome browser by going to the link www.google.com/settings/ads/plugin. We wish to point out that doing so may result in you being unable to use all of the features of this offer, however.
- The legal basis for the processing of your data is Point (f) of Art. 6(1)(1) GDPR. Further information on data privacy at Google can be found at: policies.google.com/privacy?hl=en and services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
6. Remarketing
In addition to Adwords Conversion, we use the Google Remarketing application. This is a process through which we aim to address you again. The application allows you to see our adverts after visiting our website as you continue to use the Internet. This is done through cookies stored in your browser through which your usage behaviour when visiting various websites is recorded and evaluated by Google. In this way, Google is able to detect your previous visit to our website. According to Google, none of the personal data concerning you that is collected during the remarketing process, and which may potentially be stored by Google, is merged with other data. In particular, pseudonymisation is used in remarketing, according to Google.
7. DoubleClick by Google
- This website also uses DoubleClick, an online marketing tool provided by Google. DoubleClick uses cookies in order to place advertisements of relevance to users, to improve reports on advertising campaign performance, or to avoid a user seeing the same advertisements multiple times. Using a cookie ID, Google records which advertisements are placed in what browser and can thus prevent these being shown on multiple occasions. With the help of cookie IDs, DoubleClick can, moreover, record so-called conversions in relation to the inquiries generated by an advertisement. This occurs, for example, if a user sees a DoubleClick advertisement and later uses the same browser when visiting the advertiser’s website and purchases something there. DoubleClick cookies do not contain any personal data, according to Google.
- Through the marketing tools used, your browser automatically establishes a direct connection to the Google server. As we have no control over the extent and the further use of the data which are collected by Google through the employment of this tool, the information that follows is based on our level of knowledge as it stands; By incorporating DoubleClick, Google receives the information that you visited the respective part of our website or clicked on one of our adverts. If you are registered with a service provided by Google, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will learn and store your IP address.
-
There are several ways for you to prevent participation in this tracking process:
- by adjusting your browser software accordingly; in particular, by suppressing third-party cookies, you will not receive any third-party adverts;
- by disabling the cookies for conversion-tracking by setting your browser to block cookies from the domain »www.googleadservices.com«, www.google.com/settings/ads, though this setting will be deleted if you delete your cookies;
- by deactivating the interest-based advertisements of the providers, who have signed up to the »About Ads« self-regulation campaign, by going to the link www.aboutads.info/choices, though this setting will be deleted if you delete your cookies;
- by permanently disabling cookies in your Firefox, Internet Explorer or Google Chrome browser by going to the link www.google.com/settings/ads/plugin. We wish to point out that doing so may result in you being unable to use all of the features of this offer, however.
- The legal basis for the processing of your data is Point (f) of Art. 6(1)(1) GDPR. Further information on DoubleClick by Google can be found at www.google.com/doubleclick and support.google.com/adsense/answer/2839090, and on Google’s privacy policy in general at www.google.com/intl/en/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
8. Protecting your data
In order to protect your data from, e.g. manipulation, loss or unauthorised access by third parties, we carry out technical and organisational measures so as to ensure an appropriate level of security for your personal data. These measures include the use of firewalls and antivirus programs as well as manual security arrangements. We monitor and improve our security measures on an ongoing basis in keeping with the best available technology.
9. Current version and amendments to these data protection provisions
This is version 2.0 of the MySpeidel data protection provisions. We are constantly enhancing MySpeidel in order to provide you with an ever-better service. We will keep these data protection provisions up to date at all times and amend them accordingly if and when this should become necessary.
Needless to say, we will inform you whenever changes are made to these data protection provisions. This will be done by sending you an e-mail to the e-mail address you have provided us with, and also through a notification that automatically appears on MySpeidel the first time you log on after these data protection provisions have been updated. Whenever your consent to how we handle your data is required, we will, of course, contact you to obtain this prior to the amendments coming into effect.
The latest version of the MySpeidel data protection provisions can be viewed at any time by going to www.myspeidel.com/register/privacy.
10. Your rights
- As a first step, you have the right to request information from us as to whether personal data concerning you are being processed. If this is the case, you have the right to obtain access to these personal data as well as other information. The aforementioned information includes the purposes of processing, the categories of personal data, the recipients or categories of recipients and, where applicable, the envisaged processing period or, failing this, at a minimum the criteria for determining such a processing period. You are also entitled to be informed that you have a right to missing or erroneous data being rectified, personal data concerning you being erased, the scale of the processing being restricted, as well as a right to object to the processing of your data and to lodge a complaint with a supervisory authority. Should we not collect personal data directly from you, you have the right to obtain access to all information available as to the origin of the data. We will be happy to furnish you with a copy of the personal data concerning you that we process. Should you request further copies, a reasonable fee in the amount of the administrative costs will be charged.
- Any consent provided by you to us by agreeing to the terms of these data protection provisions, thereby allowing us to collect, process or use your personal data, can be withdrawn in whole or in part with future effect. The same applies in the case of any additional consent that you subsequently give us to collect, process or use your personal data. The withdrawal of such consent may mean you can no longer use MySpeidel, or can only use it to a limited extent.
- You can also request, at any time, that inaccurate data be rectified, which, in the context of the purposes of processing that data, also includes completing incomplete data. You furthermore have the right to require that your data be erased or the processing of data be restricted. To have your data erased, you can e-mail us your corresponding instructions to [e-mail address].
- In addition, you have a right to data portability. This means that, upon your request, we will make your personal data available to you in a structured, commonly used and machine-readable form. You have the right to the unobstructed transfer of these data to another controller. In addition to the above-mentioned personal data your recipes and your device list are assigned to your account.
- You are entitled to object to your data being processed and to lodge a complaint with a supervisory authority.
- You can contact us at any time, e.g. by e-mail at datenschutz@speidel-behaelter.de, by fax at +49 (0)7473 9462-99 or by post at Speidel Tank- und Behälterbau, Krummenstr. 2m 72131 Ofterdingen. Please note that we may require proof of identity before further pursuing your matter. This is in the interest of protecting your data from manipulation or being erased by third parties.
- However, if and to the extent that statutory rights and duties exist concerning the preservation of data, we will block the data in question from being used further.
11. Controller, data protection officer, contact
- The »controller« within the meaning of these data protection provisions is Speidel Tank- und Behälterbau GmbH. Extensive information on Speidel Tank- und Behälterbau GmbH, such as the address or details pertaining to the commercial register can be obtained from our imprint under www.myspeidel.com/register/impressum.
- Should you have any questions concerning these data protection provisions or the collection, processing or use of your data, please contact us via e-mail at datenschutz@speidel-behaelter.de, by fax at +49 (0)7473 9462-99, or by post at Speidel Tank- und Behälterbau, Krummenstr. 2, 72131 Ofterdingen.