Privacy statement

We are happy that you are interested in our website. It is very important to us to protect your privacy. We have set out in detail below the ways in which we handle your data.

1. Name and contact details of the body responsible for processing data and the Data Protection Officer.

This data protection information applies to data processed by:
Responsible body: KRASO GmbH & Co. KG (hereinafter: KRASO), Baumannweg 1, 46414 Rhede, Deutschland, Email: datenschutz@kraso.de, Telephone: +49 (0) 2872 / 9535-595, Fax: +49 (0) 2872 / 9535-35.

The Data Protection Officer for KRASO can be contacted at the above address, or at datenschutz@kraso.de

2. Collection and storage of personal data and nature and purpose of its use

a) Visiting our website

When you access our website www.HopfenHöhle.de, information is automatically sent to our website’s server by the browser used by your terminal. This information is temporarily stored in a “logfile”. The following information is collected without any action on your part and stored until it is automatically deleted

IP address of the requesting computer,
Date and time of access,
Name and URL of the requested file,
Website from which access originates (Referrer-URL),
Browser used and operating system of your computer and name of your access provider, where required.

The specified data is processed by us for the following purposes:

To guarantee a trouble-free connection for the website
To evaluate the security and stability of the system an
For other administrative purposes.

The legal basis for data processing is Art. 6, Section 1, P. 1, lit. f GDPR. Our legitimate interest is based on the above-listed purposes for data collection. Under no circumstances do we use the data collected for the purposes of drawing conclusions about you as an individual.

In addition, we use cookies and analytical services when our website is visited. You can obtain more information about this in nos. 4 and 5 of our privacy statement.

b) Use of our contact form

If you have queries of any kind, we offer you the opportunity to contact us using the form on the website. We require a valid email address and details of your first name and surname for this, so we know the origin of the query in order to be able to respond to it. Further information may be provided on a voluntary basis.

Data for the purposes of contacting us will be processed according to Art. 6 Section 1, P. 1 lit. a GDPR on the basis of your consent which is voluntary. The legal basis for processing data which is transmitted when an email is sent is Art. 6 Section 1, lit. f GDPR. If the objective of the email contact is to conclude a contract, then the additional legal basis for data processing is Art. 6 Section 1 lit. b GDPR.

Personal data is only collected and processed if you use certain services (such as the contact form, customer account). You will be specifically referred to the relevant pages for this.

c) Opening a visitor or customer account

When you open a visitor or customer account, we collect your personal data to the extent specified there. Data is processed for the purposes of improving your customer experience and simplifying the processing of your order. Data is processed on the basis of Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time by informing us without impacting on the legality of processing your data with your consent until consent is withdrawn. Your personal data will then be deleted.

d) Data collection when using an evaluation form

When you evaluate a product, we collect your personal data (name, email address, comment) only to the extent provided by you. The purpose of processing this data is to enable a comment to be made and to display comments. Moreover, when the comment is submitted, your IP address is stored in order to prevent misuse of the comment function and to ensure the security of our technical information system. When you send the comment, you consent to the processing of the data transmitted. Data is processed on the basis of Art. 6 (1) lit. A GDPR with your consent. You may withdraw your consent at any time by informing us, without impacting on the legality of processing your data with your consent until consent is withdrawn. Your personal data will then be deleted.

e) Collection, processing and use of personal data for orders

When handling orders, we collect and use your personal data only to the extent that this is required to fulfil and process your order and to reply to your queries. The provision of data is required for concluding a contract. If data is not provided, then no contract may be concluded. Data is processed on the basis of Art. 6 (1) lit. B GDPR and is required to fulfil a contract. Your data will not be forwarded to third parties without your specific consent. The only exceptions to this are our service partners which we require to handle the contractual relationship or our service providers which we use to process orders. In addition to the recipients specified in the respective clauses of this privacy statement, recipients in the following categories are also included: shipping service providers, payment service providers, merchandise management providers, service providers for handling orders, web hosting services, IT service providers and drop shipping providers. In all cases we adhere strictly to legal provisions. The extent of the data transmission is limited to a minimum.

f) Use of PayPal

All PayPal transactions are subject to the PayPal privacy statement. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

3. Cookies

We use cookies on our website. These are small files collected automatically by your browser and stored on your terminal (e.g. laptop, tablet, smartphone) when you visit a page of our website. Cookies do not damage your terminal in any way, nor do they contain viruses, trojans or other malware. Information is stored in the cookie which is generated in conjunction with the specific terminal used. However, this does not mean that we have direct knowledge of your identity.

One of the functions of cookies is to enable us to make our service more pleasant for you to use. Thus, we use “session cookies” to indicate that you have visited individual pages of our website. These are automatically deleted when you leave the page.

Moreover, we also use temporary cookies which are stored for a specifically defined period on your terminal to optimise your customer experience. When you visit our page again to avail yourself of our services, it automatically recognises that you have already visited us and the entries and preferences which you have made so that you do not have to enter these again.

We also use cookies to obtain statistical information about website use and for the purposes of evaluating and optimising our services (see no. 5). When you visit our website, these cookies enable us to recognise that you have already visited us. These cookies are automatically deleted after a specifically defined period.

The data processed using cookies is required for the purposes specified to maintain our legitimate interests and those of third parties according to Art. 6, Section1, P.1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or to always notify you before a new cookie is stored. However, if cookies are completely deactivated this may result in your being unable to use all the functions of our website.

4. Analysis tools

a) Tracking tools

The tracking measures specified and used by us are implemented on the basis of Art. 5 Section 1 P. 1 lit. f GDPR. We use these tracking measures to ensure that our website is adapted to individual needs and for its ongoing optimisation. One use of our tracking measures is to record statistical information about our website use and to evaluate and optimise our services for you. These interests are considered to be legitimate according to the previous provision.

The respective data processing purposes and data categories are to be taken from the relevant tracking tools.

b) Google Analytics

To ensure that our webpages are adapted to individual needs and for their ongoing optimisation, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google“). In conjunction with this, anonymised user profiles are issued and cookies are used (see no. 4). The information generated by the cookie regarding your use of the website such as

browser type/version,
operating system used,
referrer URL (the previously visited webpage),
hosting name of the requesting computer (IP address),
time of the server request

is transmitted to a Google server in the USA and stored there. The information is used to evaluate use of the website, to compile reports on website activity and to fulfil other services associated with website use and internet use for the purposes of market research and to adapt these internet pages better to your needs. This information is also transmitted to third parties to the extent that this is legally required or in so far as third parties process the data on behalf of Google. Under no circumstances is your IP address linked with other data from Google. The IP addresses are anonymised so that no attribution is possible (IP masking).

You can prevent installation of cookies by using a relevant setting of the browser software; however it should be noted that in this event, not all functions of this website can be fully utilised.

You can also prevent the recording of data generated by the cookie and associated with your use of the website (including your IP address) and the processing of this data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially with browsers with mobile terminals, you can also prevent  recording by Google Analytics by clicking on this Link. An opt-out cookie is used which prevents future collection of your data when you visit this website. The opt-out cookie only applies to this browser and to our website and is stored on your terminal. If you delete the cookies in this browser, you need to set the opt-out cookie again.

Further information on data protection in conjunction with Google Analytics can be found in the Google Analytics Support (https://support.google.com/analytics/answer/6004245?hl=de).

c) Google Adwords Conversion Tracking

In order to record statistical information about use of our website and for the  purposes of evaluating website optimisation for you, we also use Google Conversion Tracking. A cookie is set by Google Adwords (see no. 4) on your computer, if you are directed to our website by a Google advertisement.

These cookies cease to be valid after 30 days and are not intended to identify individuals personally. If a user visits certain webpages of the Adword customer, and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the advertisement and was directed to this webpage.

Each Adwords customer has a different cookie. Thus cookies cannot be tracked via the websites of Adwords customers. The information obtained via the conversion cookies serves to compile conversion statistics for Adwords customers who have chosen conversion tracking. The Adwords customers learn the total number of users who have clicked on their advertisement and were directed to a page with a conversion tracking tag. However, they do not receive any information with which users may be personally identified. Google’s privacy notice on conversion tracking can be found here (https://services.google.com/sitestats/de.html).

5. Social Media Plug-ins

We use social media plug-ins from the social networks Facebook, Instagram, Twitter and YouTube on our website on the basis of Art. 6 Section 1 P. 1 lit. f GDPR to make our companies better known. The advertising purpose of this is considered a legitimate interest according to GDPR. Responsibility for operation in compliance with data protection is guaranteed by the respective service providers. These plug-ins are integrated by us by using the “two click method” in order to provide optimum protection for visitors to our website.

a) Facebook

Social media Plug-ins from Facebook are used on our website to provide a more personal experience for our users. We use the “LIKE” or “SHARE” buttons. This is a Facebook service.

If you access a page of our website which contains such a plug-in, your browser makes a direct connection with the Facebook servers. The content of the plug-in is transmitted directly by Facebook to your browser and integrated into the website by it.

By integrating the plug-in, Facebook obtains the information that your browser has accessed the relevant page of our website even if you do not have a Facebook account or are not logged into Facebook.  This information, (including your IP address) is transmitted directly by your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can allocate the visit to our website directly to your Facebook account. When you interact with the Plug-ins, for example, click the “LIKE” or “SHARE” button, the relevant information will also be transmitted directly to a Facebook server and stored there. The information is also posted on Facebook and shown to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and personalised design of the Facebook pages. Profiles of use, interests and relationships are thus created, for example, to evaluate your use of our website with regard to advertisements inserted on Facebook for you, to inform other Facebook users about your activities on our website and to fulfil other services associated with Facebook use.

If you do not wish Facebook to allocate data collected via our website to your Facebook account, you need to log out of Facebook before visiting our website.

The purpose and scope of data collection and further processing and use of data by Facebook and your rights and configuration options associated with this to protect your privacy can be found in Facebook’s privacy statement (https://www.facebook.com/about/privacy/).

b) Twitter

Plug-ins from the short message network, Twitter Inc. (Twitter) are integrated into our internet pages. The Twitter plug-ins (tweet button) can be recognised by the Twitter logo on our page. You can find an overview regarding tweet buttons here (https://about.twitter.com/resources/buttons).

When you access a page of our website which contains such a plug-in, a direct connection is established between your browser and the Twitter server. Thus, Twitter can obtain the information that you have visited  our webpage with your IP address. When you click on the tweet button while you are logged in to your Twitter account, you can link the contents of our pages on your Twitter profile. Thus, Twitter can allocate visits to our website to your user account. Please note that as providers of the pages we have no knowledge of the content of the data transmitted and of the way in which it is used by Twitter.

If you do not wish Twitter to allocate visits to our webpages, please log out of your Twitter user account.

You can find more information about this in Twitter’s privacy statement (https://twitter.com/privacy).

c) Instagram

Instagram Social Plug-ins (“plugins”) are also used on our website. These are operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram“)

The plug-ins can be identified by an Instagram logo, for example, in the form of an Instagram camera.

When you access a page of our website which contains such a plug-in, your browser makes a direct connection with the Instagram servers. The content of the plug-in is transmitted directly by Instagram to your browser and integrated into the webpage. This enables Instagram to obtain the information that your browser has accessed the relevant page of our website even if you do not have an Instagram profile or are not even logged into Instagram.

This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can allocate the visit to our website directly to your Instagram account. When you interact with the plug-ins, for example, click the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.

The information is also posted on your Instagram account and shown to your contacts.

If you do not wish Instagram to allocate the data collected via our website to your Instagram account, you need to log out of Instagram before visiting our website.

Further information can be found in Instagram’s privacy statement (https://help.instagram.com/155833707900388).

d) YouTube

This internet page contains at least one plug-in from YouTube, part of Google Inc., with its head office in San Bruno/California, USA. When you visit pages of our website with a YouTube plug-in, a connection is established with the YouTube servers. Thus, the YouTube server is notified of the specific page of our internet site you have visited. If you are logged in to your YouTube account, this will enable YouTube to allocate your surfing behaviour directly to your personal profile. You can deactivate this allocation option by logging out of your account in advance. Further information regarding collection and use of your data by YouTube can be found in the information on data protection at www.youtube.com.

6. Rights of persons affected

You have the right:

According to Art. 15 GDPR, to request information regarding your personal data processed by us. You can specifically request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data was or is being disclosed, the planned duration of storage, the existence of the right to correction, deletion, restriction or objection to processing, the existence of a right of complaint, the origin of your data if it was not collected by us, and regarding the existence of automated decision making including profiling and details of significant information, where required;
According to Art. 16 GDPR, to request the immediate correction or completion of inaccurate personal data relating to you which is stored by us;
According to Art. 17 GDPR, to request deletion of your personal data stored by us, in so far as its processing is not required to exercise the right to freedom of expression and information, to fulfil a legal obligation in the public interest or for the assertion, exercise or defence of legal claims;
According to Art. 18 GDPR, to request the restriction of processing of your personal data if the accuracy of the data is disputed by you, its processing is unlawful but you reject its deletion and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have objected to its processing according to Art. 21 GDPR;
According to Art. 20 GDPR, to request your personal data which you have provided for us in a structured, up-to-date and machine-readable format or its transmission to another responsible party;
According to Art. 7 Section 3 GDPR, to withdraw your consent at any time once it has been granted. The result of this will be that in future we will no longer be allowed to continue to process the data which relates to this consent and
According to Art. 77 GDPR, to complain to a supervisory authority. In general, you may complain to the supervisory authority of your usual place of residence or place of employment or our company head office.

7. Right of objection

If your personal data is processed on the basis of legitimate interests according to Art. 6 Section 1 P.1 lit. f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, if there are reasons resulting from your specific situation or the objection is based on direct advertising. In the latter case, you have a general right of objection which is exercised by us without stating a specific situation.

If you wish to assert your right to withdrawal or objection, you merely need to send an email to datenschutz@kraso.de.

8. Data security

When you visit our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption which is supported by your browser. This is generally a 256-bit encryption. If your browser does not support a 256-bit encryption, we will use 128-bit v3 technology. You can find out if an individual page of our website is encrypted by the locked depiction of a key or a lock symbol in the lower status bar of your browser.

In addition, we use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continually being improved in line with technological development.

9. Currency of and changes to privacy statement

This privacy statement is currently valid as of May 2018.

As a result of further development of our website and services or due to changes in legal or official provisions, it may be necessary to amend this privacy notice. The current relevant privacy statement can be accessed on our website and printed out at any time at www.HopfenHöhle.de.