top of page

Data protection

Table of contents

  • General information on data protection & Rights of those affected

    • §1 General information

    • §2 General overview of data and processing operations

    • §3 Your rights

    • §4 General legal bases

  • website

    • §5 Provisions for users of the website

    • §6 Third-party services

    • §7 Regulations for the web shop

    • §8 Provisions for the contact form and email contact

    • §9 Provisions for our Facebook fan page

      • a) Processing by Facebook

      • b) Joint responsibility, Art. 26 GDPR

      • c) Processing carried out by us

  • Status of the data protection declaration

 

General informationinformation on data protection & Rights of those affected

​

§1 General information

​

Data protection is an important issue. Below we provide information about the collection and processing of personal data. Personal data is all data that can be personally related to you.

Responsible person according to Art. 4 Para. 7 GDPR

​

SELVA NEGRA SPIRITS GMBH
Haeckerstrasse 12
70565 Stuttgart
info@selvanegraspirits.com


§2 General overview of data and processing operations

​

We want to give you the required clarity according to Art. 12 GDPR offer. Therefore the following overview of the processing:

​

Types of data processed:

​

  • Usage Data Communication data (when accessing a website, IP address, device information, access time and access time, etc.)

  • contact details when registering or entering data

  • Inventory data (name, company, address)

  • Communication data (if applicable meta data about calls, emails)

  • Content data(especially when sending emails)

 

In addition (internal) the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the areas of offers and contracts, service and marketing, direct advertising and customer care:

​

  • Contract data

  • Customer inventory data (CRM)

  • Supplier data

  • Payment details

  • Order data and invoice data

 

Affected people (categories)

​

  • Users of this website (also called visitors)

  • Customers

  • suppliers

 

purposes

​

  • Operating the website and providing the information

  • Ensuring the operation of the website and our systems (e.g. firewall)

  • Communication with our customers

  • Responding to inquiries

  • Optimization and analysis of the website

  • Providing information to our (potential) customers


§3 Your rightse

​

You have the following rights towards us regarding personal data relating to you:

​

Short:

​

  • right to information,

  • Right to rectification or deletion,

  • Right to restriction of processing,

  • Right to object to processing,

  • Right to data portability,

  • Right to complain to the data protection supervisory authority about our processing of your personal data.

 

Detailed rights:

​

  • in accordance with Art. 15 GDPRInformationto request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about its details;

  • in accordance with Art. 16 GDPR immediatelyCorrection to request that your personal data stored by us be incorrect or completed;

  • in accordance with Art. 17 GDPRdeletion to request your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

  • in accordance with Art. 18 GDPRLimitation to request the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;

  • In accordance with Art. 7 Para. 3 GDPR, you can give us your consent at any timewithdraw. This means that we are no longer allowed to continue the data processing based on this consent in the future

  • in accordance with Art. 77 GDPRto complain to the supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our office.

 

Exceptions:

​

There is no right to deletion if processing is necessary

  • to exercise the right to freedom of expression and information;

  • to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;

  • for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR;

  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Para. 1 GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or

  • to assert, exercise or defend legal claims


§4 General legal bases

​

When processing personal data relating toFulfillment of a contract6 paragraph 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are required to carry outpre-contractual measures required are.

​

Is the processing to protect alegitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.

​

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Letter c GDPR serves as the legal basis.

​

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

​

To the extent that we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.


website

​

§5 Provisions for users of the website

​

General data when accessing the page

​

If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server in order to show you our website and to ensure stability and security. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

​

Log files

 

The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that it is no longer possible to assign the calling client.

​

Cookies

 

In addition to the data mentioned above, cookies may be stored on your computer when you use our website. Cookies are small text files that allow us to receive certain information.

We use technically necessary cookies for the purposes of security and technical implementation of the website. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).
These cookies are usually deleted after logging out or when closing the browser.

We also use cookies to analyze user behavior or for marketing purposes.
These cookies are deleted after a specified period of time.
Unless otherwise stated in this data protection declaration, processing takes place on the basis of Article 6 Paragraph 1 Letter f of the GDPR (legitimate interest). Otherwise on the basis of consent in accordance with Article 6 Paragraph 1 Letter a GDPR

You can delete the cookies stored on your computer at any time in the browser settings.
You can also configure your browser so that it either deletes cookies when you close the browser or generally rejects cookies.
Please note that you may not be able to use some functions of our website properly without cookies.


§6 Third-party services

​

We use third-party services to make the Internet offering more user-friendly, effective and secure.
This also includes the use of analysis tools. We use analysis tools for the purpose of analyzing user behavior in order to optimize our website.
Unless otherwise stated in this data protection declaration, the use of analysis tools is based on the legal basis of legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR. This is particularly the case if the service only collects data pseudonymously and the respective service does not use the data for its own purposes.

​

Google services

​

On our website we use various services from the provider Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. A company incorporated and operating under Irish law (registration number: 368047).

​

The use of Google services only takes place with your informed consent on the basis of Article 6 (1) (a) GDPR.

​

In connection with the services and functions, Google uses cookies that can be stored on your device. The information generated by the cookies (e.g. about your use of the website) can be transferred to a server in the USA and stored there. This may also include your IP address. As a rule, your IP address is stored anonymously. When data is transferred to the USA, an adequate level of data protection cannot be guaranteed. In particular, access by US authorities cannot be ruled out. The transmission takes place on the basis of Art. 49 Para. 1 lit. a GDPR (consent).

​

We use the following services and functions from Google:

​

Google Analytics

​

We use Google Analytics to analyze the use of our website and to regularly improve it. We can use the statistics obtained to improve our offering and make it more interesting for you as a user.

​

We use Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in abbreviated form and any personal reference can be excluded. If the data collected about you is personally related, this will be excluded immediately and the personal data will be deleted immediately.

​

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.

​

Google Tag Manager

 

We use Google Tag Manager. This service is used to efficiently manage so-called “tags” (small code elements on the website). Through this service we can, among other things: Use other Google services more easily.

​

Google Maps

 

On this website we use Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website.
We have no influence on this data transfer.

​

Possible objections:

​

You have several options to object to or restrict Google's collection and processing of your data.

​

  • You can prevent the storage of cookies by setting your browser software accordingly (this may mean that not all functions of the website can be used).

  • You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link : https://tools.google.com/dlpage/gaoptout?hl=de. (Applies only to data collected and processed as part of Google Analytics)

  • You can revoke your consent to the processing of data by Google services at any time. You can do this by deleting your browser's cookies and not giving your consent the next time you visit our website.

  • If you have a Google account, you can go to the “Data & Personalization” settings for the type, scope and storage of data by Google.

  • ​

Further information on the purpose and scope of data collection and processing can be found in Google's data protection declaration(https://policies.google.com/privacy?hl=de&gl=de).

​

Facebook conversion pixel

 

We use the “conversion pixel” or visitor action pixel from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The integration and transfer of data to Facebook only takes place with your express and informed consent in accordance with Art. 6 Para. 1 lit. a GDPR. It is possible that data will be transferred to the USA. When data is transferred to the USA, an adequate level of data protection cannot be guaranteed. In particular, access by US authorities cannot be ruled out. The transmission takes place on the basis of Art. 49 Para. 1 lit. a GDPR (consent).

By calling up this pixel from your browser, Facebook can subsequently recognize whether a Facebook ad was successful, i.e. whether it led to an online purchase being made. We only receive statistical data from Facebook without reference to a specific person. This allows us to record the effectiveness of Facebook advertisements for statistical and market research purposes. In particular, if you are logged in to Facebook, we refer you to their data protection information on https://www.facebook.com/about/privacy/.

​

Social media

​

We are also present on social media. If you click on the icons of the corresponding portals, the usage and data protection regulations of the respective portals apply.

At no time is there an obligation to register with one of these portals for information purposes or to contact us (the provider). There are various options for contacting you (email, contact form).


§7 Regulations for the web shop

​

We offer a web shop on our website.

​

In addition to the processing mentioned in §5, we process further data for the purpose of carrying out orders. The processing on the basis of Article 6 Paragraph 1 Letter b of the GDPR (fulfillment of a contract or pre-contractual measures) may contain in particular the following personal data:

  • Surname

  • e-mail address

  • Billing and delivery address

  • Phone number (optional)

  • Billing and payment information

  • ​

Your data will be deleted unless it is no longer needed to fulfill legally required retention obligations or to defend legal claims. This is usually the case after 10 years.

​

Transfer of data (including recipients)

 

Your data will be made available in the necessary places within the responsible body.

​

If it is necessary to process your order, we will pass on your name, address and order details to the company responsible for the execution/delivery.

​

In the course of a request for information from a credit agency, the reporting of a payment default, in the course of tax advice or the defense of rights, the data may be passed on to third parties for appropriate purposes.

​

Payment provider

​

We process payment data for the purposes of billing and the payment process. Unless otherwise stated in this data protection declaration, the processing of payment data takes place on the  Legal basis for contract fulfillment in accordance with Article 6 Paragraph 1 Letter b GDPR.

​

Paypal

​

The PayPal payment method is operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose to pay via PayPal, the payment details you entered will be transmitted to PayPal. Your data will be transmitted to PayPal on the basis of Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract or pre-contractual measures) and Article 6 Paragraph 1 Letter f GDPR (Legitimate Interest).

​

Klarna, instant transfer

​

The Klarna payment method is processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you choose to pay via Klarna, the payment details you entered will be transmitted to Klarna.

Your data will be transmitted to Klarna on the basis of Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract or pre-contractual measures) and Article 6 Paragraph 1 Letter f GDPR (Legitimate Interest).


§8 Provisions for the contact form and email contact

​

There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:

​

  • Name (optional)

  • e-mail address

  • Regarding

  • News

 

At the time the message is sent, the following data is also stored:

​

  • The user's IP address

  • Date and time of registration

 

Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.

​

We process the respective personal data for the purpose of processing the conversation (contact, response) on the basis of the legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR or on the basis of Art. 6 Para. 1 lit. b GDPR ( fulfillment of the contract or pre-contractual measures).

​

The data will be deleted if it is no longer needed to fulfill the processing purpose.


§9 Regulations for our Facebookook fan page

​

We operate a so-called fan page on the social media platform Facebook under joint responsibility with Facebook. The following information applies to the processing on our fan page (https://www.facebook.com/selvanegraspirits).

​

Responsible person according to Art. 4 Para. 7 GDPR

​

We are partly responsible for the collection and processing of personal data

SELVA NEGRA SPIRITS GmbH
Haeckerstrasse 12
70565 Stuttgart
info@selvanegraspirits.com

​

and partly the platform operator Facebook Ireland Ltd. (“Facebook”).

​

a) Processing by Facebook

 

Facebook collects and processes some of your personal data as an independent controller. We have no influence on these processing operations.

 

Further information and contact details can be found in Facebook's data policy: https://www.facebook.com/privacy/explanation.

​

b) Joint responsibility, Art. 26 GDPR

 

We have worked with Facebook Ireland Ltd. concluded a contract for joint responsibility in accordance with Art. 26 GDPR.

​

Facebook creates so-called “page insights” for fan page operators. Page insights are information about how users use or interact with our fan page. There is joint responsibility for this processing.

​

The processing is carried out for the purpose of optimizing the fan page on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest).

​

Information about the recipients or the categories of recipients, the storage period or the criteria for determining the storage period, as well as the possibility of exercising your rights can be found in Facebook's data policy (https://www.facebook.com/privacy/explanation).

​

c) Processing carried out by us

​

Processing purposes:

​

We process your personal data for the following purposes:

  • Operating the fan page

  • Providing information (e.g. about products, services, etc.)

  • Communication with our customers

  • Responding to inquiries

  • Optimization and analysis of the fan page

 

Legal basis:

 

The processing for the above-mentioned purposes is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR (legitimate interest) or Article 6 Paragraph 1 Letter b of the GDPR (fulfillment of a contract or pre-contractual measures).

​

Recipients / categories of recipients:

​

Your data will be processed and made available at the necessary points within the responsible body.

​

Furthermore, depending on how you interact with our fan page, some data may be published on Facebook (e.g. comments, “likes”, images, videos, etc.). This data may be visible to other users of our fan page.

​

Storage period:

 

Data that you have published on Facebook (e.g. comments, “likes”, images, videos, etc.) will remain indefinitely unless you or we delete this data. We reserve the right to delete public content if this is necessary (e.g. in the case of illegal content).

All further data will be deleted unless it is no longer required to fulfill the processing purposes for which it was collected.

We have no influence on the deletion of data by Facebook. For more information, see Facebook's data policy (https://www.facebook.com/privacy/explanation).


Status of the data protection declaration

​

The privacy policy is occasionally adjusted to reflect changes in business processes and legal aspects. You can always find the most current status on the website.

​

As of: January 2023

bottom of page