Privacy Policy

1. Controller under data protection law

Radeberger Gruppe KGDarmstädter Landstr. 18560598 Frankfurt am MainGermany

2. Contact details of the data protection officer

Data Protection OfficerRadeberger Gruppe KGDarmstädter Landstr. 18560598 Frankfurt am MainGermany

E-mail: radeberger-gruppe@corporate-data-protection.com

3. Details of data processing

Server logging

Each time you access our websites, we record data from your terminal, which may also comprise personal data, in server log files. This applies to the following data:- Type/version of browser- Operating system- Name of provider- IP address- Date and time of visit- Websites visited and any search words- Site visited previously (referrer URL)The legal basis for the processing of these data is Art. 6(1)(f) of GDPR. Processing is required in order to ensure the functionality of the website and to carry out statistical evaluations in order to optimize and correctly display the contents of the website and, if necessary, to make the information required for prosecution available to the prosecuting authorities, e.g. in the event of a cyberattack. This is also the legitimate interest in data processing.The above-mentioned data will be deleted as soon as they are not required any more for achieving the aforementioned purposes, i.e. when the relevant visit to the website is finished. In the event that your IP address is processed, they will be deleted after 7 days at the latest.

Tracking and cookies

When you visit our website, tracking technologies such as cookies are used (hereinafter collectively referred to as “tracking”). Cookies contain information that can be stored and read on your terminal.We distinguish between the following purposes for tracking:- Essential functions- Analysis and personalization- Marketing/use of data by partners

Essential functionsWe use this type of tracking to improve the convenient use and performance of our website and to ensure its proper and smooth operation. In particular, this enables us to:- save your preferred language version of our website or similar settings for your next visit,- distribute requests to our website across different web servers (load balancing),- give multiple requests to our website a uniform context (session) and thus enable, for example, login-restricted areas of our website,- save your selection or settings regarding consent to tracking and control tracking technologies according to your choice,- offer you a wish-list function that allows you to "remember" products by adding them to a personalized list, so that you can place them in your shopping cart later if needed.The legal basis for this processing which is necessary to protect our legitimate interests is Art. 6(1)(f) of GDPR. Our legitimate interest consists in ensuring the trouble-free and convenient usability of our website and protecting it from misuse through automated requests.The implementation of essential functions also includes:

Use of UsercentricsTo obtain and document your consent to the use of tracking technologies, we use the consent management platform provided by Usercentrics. In this context, we engage Usercentrics GmbH, Rosental 4, 80331 Munich, as our data processor.If we use tracking technologies based on your consent, you can withdraw or adjust your consent at any time with effect for the future. To do so, you can access our tracking settings menu. You can also configure your browser settings regarding the use of cookies and similar technologies.

Protection against automated requests using captchasTo prevent automated, machine-driven requests, we use captcha queries and rely on Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee as our data processor. When captchas are used, the following data are transmitted and – also to improve functionality – stored for 30 days: - HTTP request header data (especially user agent, origin and referrer)- date/time of the request- version of the widget used- customer account ID of the client website- hash value of the incoming IP address- number of requests via (hashed) IP address per time period- response to the computational task solved by your terminal

Analysis [RR1.1]and personalizationIf you have given your consent, we analyse your behaviour on our website as part of analysis and personalization tracking and use the insights gained to optimize our website.During each interaction with our website, we process information about the terminal and web browser you use. This allows us to understand, for example, which language settings you use to access our website, whether you are using a smartphone or a desktop computer, and from which country you are accessing our website. Additionally, we learn where you were referred from, how long you use our website, how long you view the content of a specific page, how many pages you visit in total and the path you take through individual subpages. We also record whether you found our website via a search engine (and if so, which search term was used) or through an advertisement.The legal basis for this processing is your consent pursuant to Art. 6(1)(a) of GDPR. You may withdraw your consent at any time with effect for the future.We use the following products for analysis and personalization:

Google AnalyticsGoogle Analytics is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. Our configuration of Google Analytics does not allow Google to use the data collected via Google Analytics to improve Google products and services. Information about the cookies used in connection with Google Analytics and their duration can be found here. If Google transfers personal data to third countries, this is done either pursuant to Art. 45 of GDPR based on an adequacy decision by the European Commission or based on the EU standard data protection clauses in accordance with Art. 46(2)(c) of GDPR as amended from time to time, so that an adequate level of data protection is guaranteed.

Marketing/use of data by partnersWe also use tracking to evaluate the reach and interactions of our advertising campaigns and to understand how you use our website after becoming aware of it through our advertising campaigns. This allows us to determine, for example, what proportion of users actually visit our website after seeing an ad, view specific content defined by us and perform actions (for example, participate in a competition or download content). We also share this user behaviour information with our marketing partners. This helps us plan our advertising budget more effectively and use it more efficiently with the support of our marketing partners. Furthermore, we use user data collected via tracking to create user groups (“audiences”) based on specific criteria (e.g. viewing certain article categories on our website). This enables us to target users in these audiences who then visit online platforms of our marketing partners through personalized advertising (re-marketing). For this purpose, we share the relevant tracking data with our marketing partners, who may also suggest similar audiences as addressees for advertising based on the user group criteria we define.The legal basis for processing your tracking data for marketing purposes is your consent, Art. 6(1)(a) of GDPR.Our marketing partners may also use the tracking data received from us for their own purposes, such as further personalizing your profile on their online platform. Under data protection law, they themselves are responsible in this regard.We use the following products and work with the following marketing partners for (re-)marketing and data exchange with third parties:

Google AdsWe use Google Ads and have entered into a data processing agreement with the service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If Google transfers personal data to third countries in this context, this is done either pursuant to Art. 45 of GDPR based on an adequacy decision by the European Commission or based on the EU standard data protection clauses in accordance with Art. 46(2)(c) of GDPR as amended from time to time, so that an adequate level of data protection is guaranteed. More information about the cookies set by Google can be found here.

Campaigns: competitions/loyalty campaigns/promotional campaigns etc.

If you take part in a competition, loyalty campaign or other promotional campaign (e.g. receiving a purchase price refund for products purchased in retail shops), we will use the data you provide in this connection solely in order to carry out the relevant campaign and document it, unless you have given us your consent to a greater extent (e.g. to the sending of newsletters). As a matter of principle, data will only be transmitted to third parties if this is required for processing or implementation (e.g. to service providers for the purpose of sending the prizes or the like).The legal basis for data processing is Art. 6(1)(b) of GDPR. You will also find detailed information on data processing in connection with competitions and similar campaigns in the conditions of participation of the campaign in question.

Pictures taken at events

At our events, we may take photographs/videos (“images”) of visitors and other parties. These images feature people either individually or as part of a group. The images are used and published for reporting and documentation purposes as well as for communication and advertising purposes in connection with the event, especially on the corresponding brand website and social media pages for the brand concerned and, in some cases, on the company website www.radeberger-gruppe.de and in the employee and customer magazine. The images are archived by us. The legal basis is Art. 6(1)(a) and (f) of GDPR.

Contacting/feedback

If you contact us by e-mail, social media, contact form or in any other manner (e.g. in connection with an inquiry, complaint or the like), we will process the personal data you provide. Processing takes place to deal with the inquiry/complaint or the like and to document it. Data will only be transmitted to third parties if this is required for processing or implementation (e.g. to the organizer in the case of registrations for an event). The legal basis for data processing is Art. 6(1)(b) and (f) of GDPR.

4. Storage period and data deletion

We store your personal data for as long as it is necessary for the processing purposes described above. Detailed information about the purposes of processing and the specific storage period can also be found in the relevant descriptions of individual processing activities in section 3 (“Details of data processing”).

5. Automated decision-making/profiling

No decisions are made solely on the basis of automated processes, including profiling.

6. Further information

In some cases, the provision of personal data is required by law (due to commercial and tax regulations, for example) or contractually stipulated or necessary for the conclusion of a contract. Failure to provide personal data in these cases would mean that we would not provide our services or fulfil our commitments and be unable to conclude the contract with you.

7. Your rights

If the processing of your data is based on our legitimate interests (Art. 6(1)(f) of GDPR), you have the right to object to such processing at any time, provided there are reasons arising from your particular situation (Art. 21 of GDPR).In addition, and subject to the legal requirements, you have the following rights regarding your personal data:- Right of access (Art. 15 of GDPR)- Right to rectification (Art. 16 of GDPR)- Right to erasure (Art. 17 of GDPR)- Right to restriction of processing (Art. 18 of GDPR)- Right to data portability (Art. 20 of GDPR)- Right to lodge a complaint with a data protection supervisory authority (Art. 77 of GDPR)If the processing of your data is based on your consent (Art. 6(1)(a) of GDPR), you also have the right to withdraw your consent at any time with effect for the future (Art. 7(3) of GDPR). To do so, you can use the contact details provided for the data controller or, where applicable, the options described in the context of the relevant processing. The same applies to exercising your right to object.

Legal Notice (Data Protection)