Data protection information
Below we inform you about the processing of personal data carried out by Whisky.de GmbH & Co KG ("Whisky.de"). This data protection information also applies in particular to the use of the online shops operated by Whisky.de on the domains whisky.de and whisky.com. Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 2.
Contents
2 Name and contact details of the controller and the company data protection officer
3.1 Accessing our website/application
3.2 Conclusion, execution or termination of a contract
3.3 Data processing for advertising purposes
3.4 Online presence and website optimisation
4 Transfer to recipients outside the EU
7 Changes to the data protection information
1 Overview
The following data protection information informs you about the type and scope of the processing of so-called personal data by Whisky.de GmbH & Co KG ("Whisky.de"). Personal data is information that is or can be directly or indirectly assigned to your person.
Data processing by Whisky.de can essentially be divided into two categories:
- For the purpose of contract processing when purchasing in the shop, all data required for the execution of a contract with Whisky.de is processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent necessary in each case.
- When you access the Whisky.de website and use the Whisky.de Community, various information is exchanged between your device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimise our website or to display advertising in the browser of your end device.
In accordance with the provisions of the GDPR, you have various rights that you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes.
If you have any questions about our data protection information, you are welcome to contact our company data protection officer at any time. You will find the contact details below.
2 Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by Whisky.de GmbH & Co KG, Am Grundwassersee 4, D-82402 Seeshaupt, BTW DE306436528, registration number HRA 105355, Munich Local Court ('Responsible Party'), and for the following websites and applications: and . Applications: www.whisky.de or www.whisky.com and all associated domains and subdomains (<>.Whisky.de/<> or <>.Whisky.com/<>).
Mrs Martina Demmel, Speer EDV GmbH, has been appointed as the company data protection officer of Whisky.de. The data protection officer can be contacted at the above address, for the attention of Mrs Martina Demmel, or at datenschutz@whisky.de.
3 Purposes of data processing, legal bases and legitimate interests of Whisky.de, as well as categories of recipients
This section explains the purposes of data processing, legal bases and legitimate interests pursued by Whisky.de and categories of recipients of your personal data.
3.1 Accessing our website/application
When you visit our website/application, the browser used on your device automatically sends information to the server of our website/application and temporarily stores it in a so-called log file. This happens via (and after) the placement of cookies (see below). We have no influence on this. The following information is also collected without your intervention and stored until it is automatically deleted
- the IP address of the requesting internet-enabled device,
- the date and time of access
- the name and URL of the retrieved file
- the website/application from which the access was made (referrer URL)
- the browser you are using and, if applicable, the operating system of your internet-enabled computer and the name of your access provider.
The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed below. At this point, please note that we are not able to draw any direct conclusions about your identity from the data collected, nor do we do so.
The IP address of your end device and the other data listed above are used by us for the following purposes
- Ensuring a smooth connection setup,
- Ensuring convenient use of our website/application,
- Analysing system security and stability,
- Provision to law enforcement authorities for prosecution in the event of cyberattacks or fraud.
The data is stored for a period of two months and then automatically deleted, unless it is subject to a statutory retention obligation. We also use cookies, analysis tools, targeting procedures and social media plug-ins for our website/application for purposes other than those mentioned above. The exact procedures involved and how your data is used for this purpose are explained in more detail in section 3.4 below.
If you have consented to geolocalisation in your browser, operating system or other settings on your device, we use this function to offer you individual services based on your current location. We process your location data processed in this way exclusively for this function. The data will be deleted when you stop using it.
3.2 Conclusion, execution or termination of a contract
3.2.1 Data processing upon conclusion of a contract
The purpose of Whisky.de is the distance selling of goods and services, the retail trade within the scope of the authorisations granted by the authorities and the serial production of the goods offered for sale. In this context, we process the data required for the conclusion, execution or termination of a contract with you. This includes
- First name, surname
- Billing and delivery address(es)
- e-mail address
- Billing and payment details
- Date of birth for age verification
- Telephone number for queries, if applicable
The legal basis for this is Article 6(1)(b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us. We are also obliged to process your email address due to legal requirements to send an electronic order confirmation (Article 6(1)(c) GDPR). If we do not use your contact data for advertising purposes (see 3.3 below), we store the data collected for contract processing until the expiry of the statutory periods or possible contractual warranty and guarantee rights. After this period has expired, we retain the information required under commercial and tax law relating to the contractual relationship for the periods specified by law. For this period (generally ten years from the conclusion of the contract), the data will be processed again solely in the event of a review by the tax authorities.
The following data processing is also required to fulfil the purchase contract:
When you enter your address, we support you with suggestions and validate your entry using the service provider Loqate GBG to prevent incorrect data being entered and making it difficult for us to fulfil the contract.
If you have selected a payment method other than invoice, prepayment or cash on delivery, we will pass on the necessary payment data to a payment service provider commissioned by us.
The addresses entered when completing an order or creating a customer account in the Whisky.de shop are forwarded to an external service provider for address suggestions and address verification. The purpose of this is to ensure correct addresses for delivery in the course of contract fulfilment and to make the collection of addresses as convenient as possible for the user.
Furthermore, we pass on the necessary details of your order to a logistics company commissioned by us for the purpose of processing the purchase contract. In order to ensure that the goods are delivered in accordance with your wishes, we transmit your e-mail address and, if applicable, your telephone number to the logistics company commissioned by us. The logistics company may contact you in advance of the delivery in order to coordinate the details of the delivery with you. The data is transmitted solely for this purpose and deleted again after delivery. In addition, we guarantee that we have concluded the necessary order processing contracts with external providers.
3.2.2 Creditworthiness and transmission to credit agencies
When concluding an order and requesting a payment method that involves a credit risk for Whisky.de, we check your creditworthiness. For this purpose, we transmit your data to various credit agencies, depending on the country.
3.2.2.1 Credit check for address in Germany
If your address is in Germany, we transmit your data (name, address and date of birth) to infoscore Consumer Data GmbH (ICD), Rheinstr. 99, 76532 Baden-Baden, Germany, for the purpose of a credit check.
The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the GDPR. Transfers on the basis of these provisions may only take place insofar as this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests of the fundamental rights and freedoms of the data subject, which require the protection of personal data. Detailed information from ICD within the meaning of Art. 14 of the European General Data Protection Regulation, i.e. information on the business purpose, the purposes of data storage, the data recipients, the right of self-disclosure, the right to erasure or rectification, etc. can be found at the following link: https://www.experian.de/content/dam/marketing/emea/germany/de/assets/Informationsblatt-Art-14-2021-06-24-.pdf.
3.2.2.2 Credit check for address in Austria
If you have an address in Austria, we transmit your data (name, address and, if applicable, date of birth) to Experian Austria GmbH, Gumpendorfer Straße 21, 1060 Vienna, for the purpose of credit checks, obtaining information to assess the risk of non-payment on the basis of mathematical-statistical procedures using economic data and address data, whereby this data is not used for an automated decision, and to verify your address (check for deliverability).
The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the GDPR. Data may only be transferred on the basis of these provisions if this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests of the fundamental rights and freedoms of the data subjects, which require the protection of personal data. Our legitimate interest is to request information on the creditworthiness and address verification of our customers in order to better assess the risk associated with our advance payment for certain types of payment and the delivery of goods and documents to addresses. Detailed information on data processing by Experian Austria GmbH within the meaning of Art. 14 GDPR can be found on their website at https://www.experian.at/art-14-dsgvo-info.
3.2.2.3 Consequences of a negative credit check
If a credit assessment is negative based on the transmitted data, we reserve the right to restrict your payment methods before further processing your order.
For all automated processes of Whisky.de GmbH & Co KG, you will not suffer any immediate disadvantage (such as an automatic rejection of an order), but one of our employees will process your order if one or more checks fail.
3.2.2.4 Delayed payment and debt collection
In the event of a delay in payment, we will transmit the necessary data to a company commissioned to enforce the claim if the other legal requirements are met. The legal bases for this are both Article 6(1)(b) and Article 6(1)(f) GDPR. The assertion of a contractual claim is to be regarded as a legitimate interest within the meaning of the second-mentioned provision.
3.3 Data processing for advertising purposes
The following explanations relate to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6(1)(f) as conceivable in principle and as a legitimate interest. The duration of data storage for advertising purposes is not based on rigid principles, but on our database of active, existing customers whose last order was placed no more than 3 years ago. At Whisky.de, we also follow the principle of deleting data for advertising use after 3 years without use. Please refer to section 3.3.2 for information on how to proceed in the event of your objection.
3.3.1 Advertising purposes of Whisky.de
If you have concluded a contract with us, we will treat you as an existing customer. In this case, we process your postal contact details outside the existence of a specific consent in order to send you information about new products and services in this way. We process your e-mail address in order to send you information about our own, similar products without your specific consent. This is in our legitimate interest.
3.3.2 Right to object
You can object to data processing for advertising purposes at any time free of charge, separately for the respective communication channel and with effect for the future. All you need to do is send an email or a letter by post to the contact details listed under 2
If you object, the contact address concerned will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection. Thank you for your understanding.
3.3.3 Newsletter dispatch
On our website, we offer you the opportunity to subscribe to our newsletter. In order to ensure that no errors have been made when entering the e-mail address, we use the so-called double opt-in procedure: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our mailing list.
You can revoke your consent at any time with effect for the future. To do so, simply unsubscribe from the newsletter using the link at the end of each newsletter sent or send a brief email to the email address given under 2.
When sending our newsletter, we use a product from an external provider to whom we transmit the data you provided when registering for the newsletter. The transfer takes place in accordance with Art. 6 para. 1 letter f) GDPR, as the transfer serves our legitimate interest in the use of a secure, effective and user-friendly system for sending newsletters. The provider commissioned by us uses the transferred data exclusively to send the newsletter and to statistically analyse the newsletter on our behalf. For evaluation purposes, the emails sent via our service provider contain so-called tracking pixels or web beacons, which can be used to determine whether a newsletter message has been opened and which links, if any, have been clicked on. The provider uses this data to compile non-personal statistics for us on the success of our newsletters and the response behaviour of our newsletter subscribers.
All servers of the service provider commissioned by us are located in selected data centres in Germany and are ISO 27001 certified. In addition, we have concluded the necessary order processing contract with the provider.
3.4 Online presence and website optimisation
3.4.1 Cookies - general information
We use cookies on our website. We use necessary cookies to optimise our website and to statistically record the use of our website and evaluate it for the purpose of optimisation. We base the processing of your data by the cookies and pixels used for the aforementioned technically necessary purposes in accordance with Art. 6 para. 1 sentence 1 letter f) GDPR on our legitimate interest, which is to be regarded as legitimate within the meaning of the aforementioned provision.
In addition, we also set other cookies (i.e. functional, analytical and/or marketing cookies) and process the data through the cookies used only on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 letter a) GDPR. You can revoke your consent at any time with effect for the future via our consent management tool. You can access the consent management tool again at any time via the button at the top of this website.
Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called (functional) session cookies to recognise that you have already visited individual pages of our website or that you have already logged into your customer account. These are automatically deleted when you leave our site or end your browser session. In addition, we also use temporary (functional) cookies for the purpose of user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
If you have a customer account or a community account at Whisky.de and are logged in or activate the "stay logged in" function, the information stored in cookies will be added to your account.
On the other hand, we use (analytical and/or marketing) cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you and to display information specifically tailored to you. These cookies enable us to automatically recognise that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. The storage duration of cookies depends on their intended use.
3.4.2 Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server enquiry,
may be transferred to a Google server in the USA and stored there (see our processing agreement with Google: https://business.safety.google/adsprocessorterms/sccs/eu-c2p/). The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that it is not possible to assign them (so-called IP masking).
Google processes the information on our behalf to analyse the use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. We have concluded an order processing contract with Google for the use of Google Analytics (see https://business.safety.google/adsprocessorterms/). Through this contract, Google ensures that it processes the data in accordance with the GDPR and guarantees the protection of the rights of the data subject.
The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 sentence 1 letter a) GDPR. In this case, you also consent to the transfer of your data to the USA in accordance with Art. 49 (1) (a) GDPR in the knowledge of the risks described.
You can prevent the installation of cookies for Google Analytics by setting your browser software accordingly and not agreeing to the installation of the associated cookies in our Consent Management Tool (see above); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the following link: Deactivate Google Analytics
An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.
3.4.3 Microsoft Clarity
We use the "Microsoft Clarity" service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter "Microsoft") on our website. Microsoft Clarity enables us to analyse the usage behaviour of visitors to our website. In particular, user interactions (e.g. mouse movements, scrolling behaviour, clicks), heat maps and session recordings are evaluated for this purpose. The information obtained is used to improve our online offering, make it more user-friendly and optimise our products and services.
For this purpose, Microsoft Clarity uses cookies and comparable tracking technologies that enable us to analyse the use of our website. The data collected may include IP addresses, device information, browser information, length of stay and interactions on the website. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR, provided that you have given your consent via our consent management tool. You can revoke your consent at any time with effect for the future.
Microsoft may also process the data collected for its own purposes (e.g. to improve its own products or for advertising purposes) and may link it to other data that Microsoft already has about you (e.g. through the use of a Microsoft account). Please note that a transfer of personal data to the USA cannot be ruled out. There is currently no adequacy decision by the EU Commission for the USA. The data transfer therefore takes place on the basis of the EU standard contractual clauses implemented by Microsoft in accordance with Art. 46 GDPR.
Further information about data processing by Microsoft can be found in Microsoft's privacy policy: https://www.microsoft.com/de-de/privacy/privacystatement
3.4.4 Targeting procedure
The targeting procedures listed below and used by us are carried out on the basis of Article 6(1)(f) GDPR. Through the targeting measures used, we want to ensure that you only see adverts on your devices that are based on your actual or perceived interests. It is in both your and our interests not to bother you with adverts that are of no interest to you.
3.4.4.1 Use of Google AdWords
We use the Google AdWords service to advertise our website by displaying adverts relevant to your interests. Google AdWords is a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google AdWords allows advertisers to place adverts in Google's search engine results and in the Google advertising network. For this purpose, certain keywords are defined in advance by the advertiser. If a user retrieves a keyword-relevant search result in the Google search engine, the adverts are filtered accordingly. Similarly, adverts in the Google advertising network are placed on relevant websites using an automatic algorithm, taking into account the defined keywords.
If a data subject reaches a Whisky.de website via a Google AdWords advert, a conversion cookie is stored on the data subject's system by Google. Such a conversion cookie loses its validity after thirty days and is not used to identify the data subject, but to check whether certain subpages of Whisky.de (e.g. the shopping basket) are accessed during this period and thus to make the success of advertising via AdWords measurable. The information collected by Google can be used statistically by Whisky.de. However, it is not possible for Whisky.de or other Google AdWords advertising customers to identify the persons concerned.
Google's conversion cookie stores personal data, e.g. the websites you have visited. Each time Whisky.de is visited, personal data, including the IP address of the Internet connection used by the data subject, is therefore transmitted to Google in the USA and stored there. Google may pass this personal data on to third parties.
You can find further information and details on Google's data protection provisions under this link.
Whisky.de and Google are jointly responsible for the processing of data resulting from the use of adverts. The relevant agreements can be viewed here: https://business.safety.google/adscontrollerterms/. This agreement provides that each data controller, namely Google and Whisky.de, will process the data subject's requests in relation to the part of the processing for which they are each responsible.
3.4.4.2 Onsite targeting
Information is collected and evaluated on our website using cookies to optimise advertising displays. Your prior consent is obtained for the setting of these cookies. This information includes, for example, details of which of our products you have shown an interest in. The collection and analysis is exclusively pseudonymised and does not enable us to identify you. In particular, the information is not merged with personal data about you. We can use the information to show you offers on our website that are specifically tailored to your interests, as they result from your previous user behaviour. The cookie is automatically deleted after 30 days.
3.4.4.3 Objection/opt-out option
You can prevent the targeting technologies described above by making the appropriate cookie settings in your browser (see also 3.4.1) and deleting existing cookies on the end device via the Internet browser settings or with the help of other software. You also have the option of deactivating preference-based advertising for various providers using the preference manager available here. Personalised advertising by Google can be deactivated on this page .
3.4.5 Use of Google Maps
Whisky.de uses the Google Maps API in some places to visualise geographical information. The Google Maps service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland - ('Google'). When Google Maps is used, Google also collects, processes and utilises data about the use of the map functions by visitors to our website.
Further information about data processing by Google can be found in the terms of use and privacy policy of Google Maps.
3.4.6 Use of Google reCaptcha
We use the "Google reCaptcha" service (hereinafter referred to as "reCaptcha") at certain points on our website and in the event of conspicuous access to protect against misuse by automated programmes (bots), spam or cyberattacks against our online presence. The provider of eCAPTCHAaptcha is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland - ('Google').
With the help of reCaptcha, we try to check whether the respective data entry on our websites (e.g. in the contact form, during registration) is made by a human or by a bot. For this purpose, reCaptcha analyses the behaviour of a visitor based on various characteristics. For this analysis, reCaptcha evaluates various information (e.g. IP address, behaviour on the respective page). The data collected in the process is forwarded to Google.
Data processing through the use of Google reCaptcha is carried out on the basis of Article 6(1)(f) GDPR (legitimate interest). Whisky.de has a legitimate interest in protecting the website from misuse, cyberattacks and SPAM. Last but not least, this also serves to protect the data stored on Whisky.de from criminal access.
Further information about Google reCaptcha can be found in Google's privacy policy and terms of use.
3.4.7 YouTube videos on Whisky.de/Whisky.com
We use components (videos) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "YouTube"), a Google company, on our website. The implementation is based on your consent in accordance with Art. 6 para. 1 sentence 1 letter a) GDPR. By loading the videos on our website, data is forwarded to Google. In particular, Google is informed which of our websites you have visited as well as device-specific information including the IP address.
Whisky.de integrates videos from YouTube exclusively in the so-called "extended data protection mode", whereby, according to YouTube, no information about the users on Whisky.de is stored if the video is not watched. Nevertheless, when you call up a website with an embedded YouTube video, your browser establishes a connection to the YouTube servers in order to display a preview of the video. This tells YouTube/Google which page of Whisky.de you are visiting.
When you start an embedded video, Google also uses cookies, which collect information about your user behaviour. If you wish to prevent this, you must generally block the storage of cookies in your browser. You can also completely prevent the loading of Google plug-ins with add-ons for your browser, e.g. with the script blocker "NoScript".
If you are currently logged in to YouTube with your YouTube or Google account, YouTube/Google can assign your surfing behaviour to you personally. You can prevent this by logging out of your Google or YouTube account beforehand.
Further information on data protection at YouTube can be found in Google's privacy policy at and in the YouTube Privacy and Security Centre.
3.4.8 Instagram content on Whisky.de/Whisky.com
The websites of Whisky.de integrate content from the social network Instagram via corresponding plug-ins. The operator of the embedded plug-ins is Metaplatforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ('Meta'). This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of this content and/or subscribe to posts by the authors of this content and/or our posts. The content can be recognised by the "Instagram symbol".
When you access a website with embedded Instagram content, your browser establishes a connection to Instagram's servers to generate a preview of the content. If you are registered as a user on the Instagram social network and are logged in to Instagram with the browser you are using at the time you access the page, the pages you visit can be assigned to your account by Instagram.
We must point out that the content of the transmitted data and its use by Instagram is beyond our knowledge. Further information on data protection at Instagram can be found in Instagram's privacy policy.
Whisky.de and Meta are jointly responsible for data processing. The agreements made in this regard can be found here: https://www.facebook.com/legal/controller_addendum. This agreement states that Meta will process all requests from data subjects regarding personal data and/or rights in accordance with Articles 15-20 of the GDPR. The information that Meta is required to provide as joint data controller pursuant to Article 13(1)(a) and (b) of the GDPR is contained in Meta's privacy policy, which can be found at the following link: https://www.facebook.com/about/privacy. This statement contains information about the legal basis for (data) processing by Meta and how you can exercise your rights.
3.4.9 Use of the Meta Pixel
This website uses Meta's visitor action pixel to measure conversions. The service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the data collected may also be transferred to the USA and other third countries.
The pixel can be used to track the behaviour of visitors who reach the Whisky.de/Whisky.com website via a Meta ad, e.g. on the Meta platforms Instagram or Facebook. This allows the effectiveness of these advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous to us as the operator of this website and does not allow any conclusions to be drawn about the identity of the user. However, the data is stored and processed by Meta so that it can be linked to the respective user profile and Facebook can use the data for its own advertising purposes in accordance with its data usage policy. This enables Facebook to place adverts on Facebook pages and outside of Facebook. As the website operator, we have no influence on this use of the data. Further details on the use and utilisation of the meta pixel can be found here on the manufacturer's website: https://de-de.facebook.com/business/tools/meta-pixel.
The meta pixel is used on the basis of Article 6(1)(f) GDPR. As the website operator, we have a legitimate interest in effective advertising measures, including the use of social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 letter a) GDPR; consent can be revoked at any time.
The transfer of data to the USA takes place on the basis of the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Further information on protecting your privacy can be found in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.
You can also deactivate the remarketing function "Custom Audiences" in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
Whisky.de and Meta are jointly responsible for data processing. The agreements made in this regard can be found here: https://www.facebook.com/legal/controller_addendum.
3.5 Customer account
In order to provide you with the greatest possible convenience during your purchase, your personal data will be permanently stored in a password-protected customer account. The creation of the customer account is voluntary and is based on your consent within the meaning of Article 6 (1) (a) GDPR. Once a customer account has been set up, it is not necessary to enter your data again. You can also view and change the data stored about you in your customer account at any time.
In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorised third parties. We cannot accept any liability for misused passwords unless we are responsible for the misuse. Please note that you will automatically remain logged in even after leaving our website, unless you actively log out. You have the option of deleting your customer account at any time. To do so, please use the contact details listed under 2.
If you do not wish to create a customer account with Whisky.de, please use the option of ordering by telephone from Whisky.de.
3.5.1 Registration via third parties (Facebook, Google, Apple, PayPal)
To make it easier for you to register in the Whisky.de shop, you can also voluntarily register with Whisky.de using your own Facebook, Google, Apple or PayPal account. You can recognise these by the respective button with the name & logo of the provider on the registration pages or login pages in the shop under the input fields for user name and password. It is also possible to subsequently link existing Whisky.de customer accounts with the services of these third-party providers. In both cases, it is then possible to log in to the Whisky.de shop by logging in to the websites/services of the third parties instead of entering the user name and password at Whisky.de.
If you click on the respective button, you will be redirected to the pages of the third-party provider to log in. If you successfully log in there, you will be asked to explicitly release the following data, depending on the provider:
- Facebook:
- Email address
- your name
- Google:
- Email address
- Your name
- Apple:
- Email address
- Apple name
- Your address
- Country
This data will be used by Whisky.de to create your new customer account or to log in to your linked Whisky.de account and will not be made accessible to third parties. The transmission of the data is encrypted. The processing of this data is based on your consent within the meaning of Article 6 (1) (a) GDPR or, in the case of an order, also within the meaning of Article 6 (1) (b) GDPR.
Please note that if you use this option voluntarily, the respective third party may be able to trace the use of our website based on the request of your data by Whisky.de. Likewise, after linking your customer account, the third-party providers will be contacted once each time you log in via this link in order to verify your identity. These processes may be logged by the third-party providers. For more information, please refer to the privacy policy and terms of use of the respective third-party provider.
3.6 Community account
We operate an online community for whisky lovers and connoisseurs. This includes the use of the so-called whisky/bottle database (https://www.Whisky.de/flaschen-db/<...>), the Whisky.de forum & the Whisky.de blog (https://www.Whisky.de/tfg/<...>). A community account is required to use the community; the creation of the community account is voluntary and is based on your consent within the meaning of Article 6 (1) (a) GDPR. To create a user account, you need an email address and a user name of your choice. Your e-mail address is not visible to other members. The provision of further information (e.g. picture, first name, surname) is optional and voluntary.
3.6.1 Registration via third parties
To make it easier for you to log in to the Whisky.de Community, Whisky.de also offers a login via your own Facebook account ("Log in with facebook") or your own Google/YouTube account ("Log in with Google/YouTube"). This makes it possible to log in to the Whisky.de community using the data stored with the respective third party. When using this function, Whisky.de requests the following data from the third parties mentioned: ID, e-mail address, first name, surname and profile picture. The data will only be used to create the account and subsequent logins and will not be made accessible to third parties. The transmission of the data is encrypted.
Please note that if you voluntarily use this option, the respective third party may be able to track and, if necessary, process the use of our website based on the request of your data by Whisky.de.
3.6.2 Deleting the community account
You have the option of deleting your community account at any time. This will delete your data stored in the background (e-mail address, first and last name, interests, profile picture). Please note, however, that this will not simultaneously delete your past activities in the community and that these will continue to be displayed under an anonymised user name ("[Gelöschter Benutzer]").
3.7 Contacting Whisky.de
3.7.1 Making contact
The online presence of Whisky.de offers you a contact form and contact by e-mail for easy contact. If you contact Whisky.de by e-mail or via the contact form, your transmitted personal data will be stored automatically. We use the information you provide via the contact form (mandatory information is marked with an asterisk) exclusively for the purpose of processing your request. The legal basis for this is both your consent within the meaning of Article 6(1)(a) GDPR and Article 6(1)(f) GDPR. The proper processing of your request is to be regarded as a legitimate interest within the meaning of the GDPR. If you contact us in connection with a contractual relationship between you and us, Article 6(1)(b) GDPR, i.e. this contractual relationship, is also the legal basis for data processing. You can revoke your consent to the above-mentioned use of data at any time with effect for the future free of charge by sending a short message to the contact details given under 1. The legality of the processing based on your consent up to the time of your revocation is not affected by this. However, we would like to point out that it will no longer be possible to process your request from the time of any revocation. You can find out how we proceed in the event of exercising data subject rights below.
3.7.2 Use of the Zammad ticketing system
We use the "Zammad" ticketing solution from Zammad GmbH, Marienstraße 11, 10117 Berlin, Germany, to process and respond to your enquiries as quickly, reliably and in a documented manner as possible in our internal processes and thus process your personal data. This data includes, in particular, the fields shown in the contact form or, if you contact us by email at info@whisky.com, the email address you use and any other data you provide when you contact us. This data is only used for the purpose of processing and responding to your enquiry. With the help of Zammad, we can keep a better eye on open support enquiries and optimise our support processes - with the aim of processing all open customer enquiries quickly and reliably.
Data processing by Zammad is carried out on the basis of Art. 6 (1) (b) GDPR for the fulfilment and execution of contracts with you or our contractual obligations (e.g. in the event of a complaint or cancellation). Furthermore, the use is based on Art. 6 para. 1 letter f) GDPR (legitimate interest). Whisky.de has a legitimate interest in being able to process your request with high speed and efficiency through the use of modern, secure technology.
Communication and data transfer with the ticketing system is always encrypted and the data is stored exclusively in German data centres. Data is not transferred to third countries. In addition, the necessary order processing contract has been concluded with Zammad GmbH.
Data recorded in the ticketing system is automatically deleted after 24 months at the latest, unless it is subject to statutory retention obligations.
If you do not wish your personal data to be processed via the ticketing system, please use the option to contact us by telephone and inform our employees accordingly.
4 Transfer to recipients outside the EU
With the exception of some of the processing described under 3.4 (online presence and website optimisation), we do not pass on your data to recipients based outside the European Union or the European Economic Area.
The processing mentioned under 3.4 may include the transfer of data to the servers and/or partners of third parties commissioned by us, which are located in the EEA for analysis and targeting technologies. These servers may be located in the USA, among other places. Data is transferred in accordance with the principles of the Privacy Shield and on the basis of the EU Commission's standard contractual clauses (see above for details and links to the relevant SCCs).
For orders with a place of delivery in Switzerland, we transmit your necessary data to a Swiss shipping company commissioned by us for the purpose of contract fulfilment. If you use a Swiss payment method for delivery in Switzerland, we will transmit the necessary data to this payment service provider for the purpose of contract fulfilment.
5 Your rights
5.1 Overview
In addition to the right to withdraw the consent you have given us, you have the following additional rights if the relevant legal requirements are met:
- Right to information about your personal data stored by us in accordance with Art. 15 GDPR; in particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you,
- Right to rectification of inaccurate data or completion of correct data in accordance with Art. 16 GDPR,
- Right to erasure of your data stored by us in accordance with Art. 17 GDPR, insofar as no statutory or contractual retention periods or other statutory obligations or rights to further storage are to be complied with,
- Right to restrict the processing of your data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it; the controller no longer needs the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR,
- Right to data portability pursuant to Art. 20 GDPR, i.e. the right to receive selected data stored by us about you in a commonly used, machine-readable format or to request transmission to another controller.
- Right to lodge a complaint with a supervisory authority: If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can lodge a complaint with the competent supervisory authority. This is the Bavarian State Office for Data Protection Supervision, Promenade 27, D-91522 Ansbach, Germany.
5.2 Right to object
Under the conditions of Art. 21 para. 1 GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.
The above general right to object applies to all processing purposes described in this data protection information that are processed on the basis of Article 6(1)(f) GDPR. In contrast to the special right to object to data processing for advertising purposes (see 3.3 above), we are only obliged under the GDPR to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). You also have the option of contacting the data protection officer responsible for Whisky.de or the competent supervisory authority. This is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.
6 Data security measures
All data transmitted by you personally, including your payment data, is transmitted using the generally used and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used, for example, in online banking. You can recognise a secure SSL connection by the s appended to http (i.e. https://...) in the address bar of your browser or by the lock symbol at the top or bottom of your browser.
To further protect the personal data of our customers (e.g. name, address, telephone number and e-mail address), we use an external control system. Here we work together with AC Süppmayer GmbH - a leading provider of professional address control systems in Germany. With the help of this system, we can - in addition to our other technical IT security measures - determine whether customer data is being used without authorisation or has been lost. In this way, our customers are protected, for example, from unwanted e-mail advertising and annoying telephone advertising, as the checks are not limited to postal addresses, but also extend to e-mail addresses and telephone numbers. Further information on this co-operation can be found under this link.
We also use suitable technical and organisational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments by us and by the service providers commissioned by us.
7 Changes to the data protection information
We reserve the right to change the data protection information from time to time in order to adapt it to changed legal situations, changes in data processing or updated services. Changes that affect your contractual relationship with Whisky.de or for which your consent as a user is required will only be made with the consent of the user.
Customers, interested parties and users of Whisky.de are requested to inform themselves regularly about the current content of the data protection information.
Status: 24.10.2024
