Privacy Policy in accordance with the information obligation pursuant to Art. 13/14 GDPR
- Introduction
With the following privacy notices, we inform you as the data subject about which personal data we collect about you when you visit our website and, where applicable, use our web services, and how we process your data.
- Controller responsible for data processing
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws
of the member states as well as other data protection regulations is:
Efes Deutschland GmbH
Jan-Wellem-Straße 1
51065 Cologne
Germany
Tel.: 0221 - 97 77 17 47
Fax: 0221 - 97 77 17 48
E-Mail: efes.deutschland@anadoluefes.com
Website: www.efes-pilsener.de - Data Protection Officer of the controller
The contact details of the company data protection officer are:
efes@sc-partner.de
- Controller responsible for data processing
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws
of the member states as well as other data protection regulations is:
- General information on data processing
- Scope and purpose of the processing of personal data We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Technical data (e.g. web browser, operating system, or time of page access) is automatically collected by our information technology systems as soon as you enter our website.
- Legal bases for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. - Recipients of the data or categories of recipients As a general rule, your personal data will not be passed on to third parties. However, for the operation of this website it may be necessary for technical service providers to gain knowledge of personal data. In these cases – where known – we indicate the scope of the data and the recipients.
- Transfer to third countries The web servers of our company are located within the European Union (EU) or the European Economic Area (EEA) and no data processing by us takes place outside the EU or the EEA.
- Duration of storage or criteria for determining the duration The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.
- Rights of the data subject
If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:
- The right to obtain information about your data processed by us in accordance with Art. 15 GDPR.
- The right to rectification of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR.
- The right to erasure of your personal data in accordance with Art. 17 GDPR, provided that the requirements for deletion are met.
- The right to restriction of processing in accordance with Art. 18 GDPR, provided that the requirements for this are met.
- The right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, provided that the requirements for data portability pursuant to Art. 20 GDPR are met.
- The right to object to the processing of personal data concerning you in accordance with Art. 21 GDPR, on grounds relating to your particular situation, provided that the data processing is based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
- The right to withdraw your consent granted in accordance with Art. 7 para. 3 GDPR
- Data processing in detail
- Transmission using SSL/TLS encryption For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. The encrypted connection is ensured via the Hypertext Transfer Protocol HTTPS (“https://”). In this case, the data transmitted to us by a user cannot be read by third parties.
- Provision of the website and creation of log files
- Description and scope of the processing of personal data
Each time our website is accessed, our system automatically collects data from the accessing device. The following data may be collected:
- Browser type and version used
- User’s operating system
- User’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website (referrer)
- Websites accessed by the user’s system via our website
- Legal basis for the processing of personal data The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
- Purpose of data processing
The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR. - Data recipients Recipients of the data may be technical service providers who are responsible for the operation and maintenance of our website.
- Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session has ended.
In the case of storage in log files, this is the case after seven days. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or anonymized so that the accessing client can no longer be assigned. - Obligation to provide data, possibility of objection/withdrawal and removal The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Therefore, there is no possibility for the user to object.
- Description and scope of the processing of personal data
Each time our website is accessed, our system automatically collects data from the accessing device. The following data may be collected:
- Use of cookies Our website uses a technically necessary session cookie. Cookies are text files that are stored in the browser or on the user’s computer when visiting a website. Session cookies are deleted as soon as the visitor closes the website. The cookie used by us, "csrf_https-contao_csrf_token", is used for security reasons and prevents hacker attacks through the so-called "Cross Site Request Forgery" method. No personal data is stored in the cookie; it only contains an individual string that enables unique identification of the browser during the website visit.
- Google Web Fonts (local)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers is established.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
- Final notes
You are requested to regularly inform yourself about the content of this privacy policy.
- Changes to the privacy notices We reserve the right to amend these privacy notices in order to adapt them to changes in the legal situation or in the event of changes to the services and data processing.
- Status of the privacy notices This privacy policy is currently dated 29.10.2018.