1. Important Terms
2. Use of Cookies
3. Purpose and Legal Basis of Data Processing
4. When does Drinks & More use and process personal data?
5. Automated Decision-Making
6. Data Processing for Advertising Purposes
7. Objection to Advertising
8. Recipients of Personal Data
9. Duration of Data Storage
10. Data Subject Rights
11. Contacts: How can I exercise my rights set out above?
12. Withdrawal of Consent
13. Right to Object
14. Updates and Changes
15. Privacy Information for Business Partners
16. Privacy Notice for Drinks & More Promotions
The protection of your personal data is very important to Drinks & More. It goes without saying that we strictly comply with data protection regulations when processing your data.
The following privacy information applies to the use of the websites of Drinks & More GmbH, Hagener Straße 261, 57223 Kreuztal (hereinafter referred to as “Drinks & More”) at www.drinks-and-more.com.
Our information systems are protected by technical and organisational measures to ensure the data protection objectives of confidentiality, integrity, availability and resilience (Art. 24, 32 GDPR).
You can contact our Data Protection Officer at:
datenschutz@drinks-and-more.com
1. Important Terms
Cookies
Text files that the accessed web server places on the user's computer by means of the browser used. The stored cookie information may contain both an identifier (cookie ID) used for recognition and content-related information such as login status or information about websites visited. On subsequent new visits to this page, the browser sends the cookie information back to the web server with each request. Most browsers accept cookies automatically. You can manage cookies using the browser functions (usually under "Options" or "Settings"). This allows the storage of cookies to be deactivated, made dependent on your consent in individual cases, or otherwise restricted. You can also delete cookies at any time. We do not use IP addresses or cookies to personally identify you. If, in your registration / profile settings, you have selected the option to remain logged in automatically, a cookie with a longer duration is used to store an anonymised login token.
Browser
Computer program used to display websites (e.g. Chrome, Firefox, Safari).
GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), available at http://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.DEU
Personal Data
Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or another form of making available, alignment or combination, restriction, erasure or destruction.
2. Use of Cookies
For the duration of your visit to our website, cookies are stored on your hard drive and, depending on your browser program settings, are deleted again when you close the browser. The storage of cookies can be switched off or deactivated in your browser settings. Session cookies are automatically deleted when you close your browser. Persistent cookies remain after the browser has been closed.
A cookie is a data record generated by a web server and stored on your end device. These are necessary to enable the smooth and improved use of the website (in particular for purchases in the online shop).
Cookies are also used for anonymous statistical analysis for the duration of a session. The cookie does not contain any personal data and is not suitable for identifying you on third-party websites.
Local Storage
To enable you to adapt the Krombacher Media Library to your personal needs and use, we use, in addition to cookies, what is known as local storage technology (also called “local data” and “local storage”). In this process, data is stored locally in your browser's cache and may continue to exist and be read even after the browser window is closed or the program is exited, provided that you do not delete the cache.
Local Storage makes it possible for your preferences when using the Krombacher Media Library to be stored on your computer and used by you. The data from Local Storage is used, for example, to provide you with recommendations based on your anonymous use or to enable you to use a watchlist and subscription list. The following information is stored by the Krombacher Media Library as local data:
• the addresses of the Krombacher Media Library pages you have accessed,
• the addresses of the Krombacher Media Library pages that you have added to your watchlist
Third parties cannot access the data stored in Local Storage. It is not passed on to third parties and is not used for advertising purposes. We use these technologies on the basis of our legitimate interest in providing you with an attractive, fully functional offering on the basis of Article 6(1)(f) GDPR.
If you do not want online offerings to use cookies and local storage functions, you can control this in the settings of your respective browser, depending on the platform, in the operating system of the respective app. There you will also receive an overview of your stored cookies. You can delete cookies at any time or block them from the outset. You can manage Local Storage content in the browser via the settings for “History” or “Local Data”, depending on which browser you use. Please note that this may result in functional restrictions.
3. Purpose and Legal Basis of Data Processing
To the extent that this is necessary for the performance of contractual obligations, the provision of services or the handling of enquiries (Art. 6(1)(b) GDPR), and for our own advertising purposes.
No data is disclosed to any other third parties.
4. When does Drinks & More use and process personal data?
In some cases, we require personal data from you, namely:
• when participating in competitions
• when contacting us
To the extent necessary for the performance of these services or for the handling of enquiries, we collect and process the personal data received from you (in particular surname, first name, date of birth and email address).
We know that the careful handling of your personal data is very important to you. Data protection is of great importance to Drinks & More.
It goes without saying that, when collecting, processing and using your data, we strictly comply with the statutory provisions of the General Data Protection Regulation, the Federal Data Protection Act and the Digital Services Act. Your data helps us to tailor our service individually to you and to continuously improve it.
You may at any time request information about the data stored, the purpose of storage and possible recipients. Furthermore, in accordance with the statutory provisions, you have a right to rectification, blocking and erasure of personal data. You can submit such a request by written notification to Drinks & More GmbH & Co. KG, Hagener Straße 261, 57223 Kreuztal-Krombach or by email to datenschutz@drinks-and-more.com .
5. Automated Decision-Making
We currently do not use automated decision-making or profiling.
6. Data Processing for Advertising Purposes
We use your data only for our own advertising purposes. We would like to inform you about new products, our services and interesting events. We therefore also use your data to recommend certain products, services or events beyond your purchases that may be of interest to you.
You can object to your consent in the privacy settings at any time.
7. Objection to Advertising
You may object to the use of your data for advertising purposes without incurring any costs other than the transmission costs according to the basic rates. The following contact is available to you for this purpose:
Drinks & More GmbH & Co. KG
Service Center
Hagener Straße 261
57223 Kreuztal-Krombach
datenschutz@drinks-and-more.com
Tel. +492732 880-8864
Purpose and legal basis of data processing
To the extent that this is necessary for the performance of contractual obligations, the provision of services or the handling of enquiries (Art. 6(1)(b) GDPR), and for our own advertising purposes.
No data is disclosed to any other third parties.
8. Recipients of Personal Data
Within the scope of the statutory authorisations, your personal data will be disclosed to the following third parties within the EU:
• Postal service providers, freight forwarders, shipping service providers, file/data carrier disposal providers
• IT service providers in connection with maintenance and software support
• Service providers for credit checks, debt collection and dialogue marketing
9. Duration of Data Storage
We store your data for as long as required by the respective purpose. Corresponding erasure concepts are in place and are continuously adapted to the statutory and necessary circumstances.
Otherwise, the processing of the data is restricted.
10. Data Subject Rights
Your rights as a data subject are comprehensively guaranteed by Drinks & More GmbH & Co. KG.
Information obligations pursuant to Art. 13, 14 and 34
• Right to rectification, Art. 16
• Right to erasure, Art. 17
• Right to restriction of processing, Art.18
• Notification obligation pursuant to Art. 19
• Right to data portability pursuant to Art. 20
• Rights of objection of the data subject pursuant to Art. 21
• Right of access of the data subject pursuant to Art. 15
• Right to lodge a complaint with supervisory authorities pursuant to Art. 77
Right to lodge a complaint with the competent supervisory authority
In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state of North Rhine-Westphalia, where our company has its registered office. You can reach the authority via the following link: https://www.ldi.nrw.de
11. Contacts: How can I exercise my rights set out above?
To exercise your rights, you may contact the Data Protection Officer (see above) or the controller (see above).
We will process your enquiries promptly and free of charge in accordance with the statutory requirements and inform you of the measures we have taken.
12. Withdrawal of Consent
You have the right to withdraw consent to the processing of your data that you have given us at any time. The easiest way to withdraw consent you have given is to contact us by email using the contact details provided above. The withdrawal of consent does not affect the lawfulness of the processing of your data carried out before the withdrawal. Please note, however, that this may require you to provide your data again before making another purchase.
13. Right to Object
You have the right to object at any time to the processing of your personal data.
If you object, we will no longer process your personal data in this case unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Please send your objection to datenschutz@drinks-and-more.com
14. Updates and Changes
The privacy information must be adapted from time to time to reflect the actual circumstances and the legal situation. Please review the privacy information before using our offering so that you remain up to date with any possible changes or updates.
15. Privacy Information for Business Partners
1. General processing of business partner data
As part of the business relationship with our business partners (customers, suppliers, service providers, etc.), we process personal data such as names, address, email address, telephone/fax number, date of birth, VAT ID, GLN, bank details and, in the case of customers, where applicable also place of birth, nationality, identification data and creditworthiness data. Processing is carried out for the purposes of clearly identifying the business partner, as well as initiating, performing, managing and processing contracts, assessing creditworthiness and collateral, preparing invoices/credit notes, managing and enforcing claims, complying with statutory provisions, ensuring data security and in the interest of comprehensive customer support. For communication purposes, we also process the names and contact details of the contact persons at the business partner. In some cases, we use processors for the processing.
The legal basis for data processing is Art. 6(1)(b), (c) and (f) of the EU General Data Protection Regulation (GDPR).
2. Disclosure of customer and sales data
If this is necessary for the performance and processing of the contract with the customer, we provide the customer's address and contractual content data to the customer's beverage supplier, and the supplier subsequently regularly informs us of the beverages delivered to the customer's point of sale by type and quantity. This is done for the purpose of recording, invoicing and processing the agreements concluded between us and the customer in connection with beverage purchases.
The legal basis for data processing is Art. 6(1)(b) GDPR. Furthermore, we process customer and sales data (type and quantity of the products delivered in the relevant period) to assess the profitability of the business relationship and for the purposes of improved market development, distribution analyses, sales management, decisions on marketing/sales measures and, where applicable, support for the customer, the creation of availability information for end consumers, plausibility checks of total sales reports, market research and, where applicable, the review and settlement of conditions with the beverage wholesale specialist.
3. Guarantors and other collateral providers
If a third party assumes a guarantee in our favour or provides other collateral, we also process the above-mentioned data relating to that party. This is done for the purpose of assessing the value of the collateral as well as for its management and, where applicable, realisation.
The legal basis is Art. 6(1)(b) GDPR.
4. Deliveries/Services
As part of customer support and the provision of services, we disclose, where necessary, the required customer data (name, address, telephone/fax number, email address) to third parties that we use to provide the services (e.g. warehouse operators, delivery partners/freight forwarders, dispensing technicians, central settlement providers/billing companies and other service providers, etc.). This is done for the purpose of providing the agreed service or enabling it to be carried out more quickly and easily.
The legal basis is Art. 6(1)(b) GDPR.
5. Payment information
We pass on certain personal data of the customer (name and address) as well as an assessment of their payment behaviour to companies affiliated with us. In addition, in the event of payment defaults, such disclosure is also made to any collateral providers and, where applicable, to credit agencies (e.g. Schufa). This is done in our interest for the purposes of internal administration of shared customers and to avoid payment defaults.
The legal basis is Art. 6(1)(b) and (f) GDPR.
6. Duration of data processing
We store the data for the duration of the business relationship with the customer and until the expiry of limitation periods for any claims resulting from it and statutory retention obligations. GEDAT and the partner companies store the data for a maximum of 10 years after the last recorded sales report for the point of sale or likewise according to the aforementioned criteria.
7. Transfer to third countries
Your data is processed exclusively in countries of the European Union or the European Economic Area; no transfer to third countries takes place.
8. Rights of business partners
See "Data Subject Rights"
16. Privacy Notice for Drinks & More Promotions
Privacy notice for Drinks & More promotions
This privacy notice is provided in connection with participation in promotions (competition, in-store promotion, prize fulfilment, etc.) of Drinks & More GmbH & Co. KG.
Controller pursuant to the GDPR:
Drinks & More GmbH & Co. KG
Hagener Straße 261
57223 Kreuztal
Data Protection Officer:
Hans Peter Fries
Hagener Straße 261
57223 Kreuztal
Email: datenschutz@drinks-and-more.com
Legal basis and purposes of processing
The personal data of the participant (data subject) provided in the context of the promotion is processed for the purpose of conducting the promotion and, where applicable, determining the winner.
The data is processed pursuant to Art. 6(1)(a) GDPR on the basis of the
consent of the respective participant. Art. 6(1) lit.
b) GDPR is the legal basis for processing for the performance of our services and for responding to enquiries. Processing for the protection of our legitimate
interests is carried out on the basis of Art. 6(1)(f) GDPR.
Processing of personal data
Contact and communication data is processed as part of participation.
Further personal data may be required depending on the type and format of the promotion.
This will then be set out in the context of the relevant promotion.
Personal data is not disclosed to third parties. The personal data transmitted in the context
of participation in the competition is processed
exclusively for conducting the promotion and is erased or blocked after its completion. This does not apply where, among other things, statutory retention periods prevent immediate erasure (cf. Art. 17(3) GDPR) and/or another case of Art. 17(3) GDPR applies and/or another purpose justifies further processing.
Rights pursuant to the General Data Protection Regulation (GDPR)
Participants may withdraw their consent to the processing of their personal
data at any time without stating reasons with effect for the future (Art. 7(3) GDPR). An informal email to datenschutz@drinks-and-more.com is sufficient for this purpose.
In the event of withdrawal, the participant's personal data will be erased without undue delay. If the withdrawal takes place before the promotion has been completed, further participation in it is excluded, since it will then not be possible to carry it out.
The participant has the right to request information about the use of their
personal data (Art. 15 GDPR). Upon request, complete information will be provided at any time and free of charge regarding the stored data status, insofar as it concerns the participant. An informal email to datenschutz@drinks-and-more.com is sufficient.
In the same way, the participant may also arrange for inaccurate personal data to be rectified or for their stored personal data to be completed (Art. 16 GDPR)
.
Pursuant to Art. 17 GDPR, you may request the erasure of your data stored by us under the conditions set out therein.
The participant may also request restriction of data processing, provided that
one or more of the requirements pursuant to Art. 18(1) GDPR lit. a)
to d) are met.
The participant has the right to request that the data concerning them which they have provided to us be received in accordance with Art. 20 GDPR and to request its transmission to other controllers.
Without prejudice to any other administrative or judicial remedy, the participant also has the right to lodge a complaint with the competent
supervisory authority (Art. 77 GDPR) if they consider that the
processing of their data violates data protection regulations.
Status: August 2024