Privacy policy

Data protection information

of Monastic Distillery GmbH, Lindenstrasse 36, 06295 Lutherstadt Eisleben, as of January 2, 2019

Since May 25, 2018, the uniform requirements of the EU Data Protection Basic Regulation (DSGVO) have been in force throughout Europe in the area of data protection. In the following data protection information we inform you about the processing of personal data carried out by Monastic Distillery UG ("MD", "we" and/or "us") in the context of the use of our websites ("website(s)") accessible at www.monasticdrygin.de and our applications in accordance with the DSGVO and the German Federal Data Protection Act (BDSG).

Please read our data protection information carefully. If you have any questions or comments about our data protection information, please contact us at

datenschutzbeauftragter@monasticdrygin.de

1 Name and contact details of the controller

This privacy information applies to data processing by

Monastic Distillery GmbH, Lindenstrasse 36, 06295 Lutherstadt Eisleben

Phone: +49 (0) 177 697 50 90

Fax: +49 (0) 177 697 50 90

email address: info@monasticdrygin.de

MD is represented by its managing director Dr. Justinus C. Pech

2 Contact details of the data protection officer

You can reach our data protection officer at the following contact details:

Bernhard Blaschek

At Varenholt 9

44797 Bochum

Phone: 0234 / 77705-0

email: datenschutzbeauftragter@monasticdrygin.de

3 Purposes of data processing, legal bases and legitimate interests pursued by the data controller or a third party as well as categories of recipients and origin of the data

3.1 ACCESSING OUR WEBSITES/APPLICATIONS

3.1.1 LOG-FILES

Every time you access websites/applications, information is sent to the server of our website by the respective internet browser of your respective terminal device and temporarily stored in log files. The data records stored in this process contain the following data, which are stored until they are automatically deleted: Date and time of the request, name of the page accessed, IP address of the requesting device, referrer URL (the URL from which you came to our website), the amount of data transferred, loading time, as well as product and version information of the respective browser used, the operating system you are using and the name of your access provider.

The legal basis for the processing of the IP address is Art. 6 paragraph 1 letter f) DSGVO. Our legitimate interest results from the

Guarantee of a smooth connection establishment,

Ensuring a comfortable use of our website/application,

Evaluation of system security and stability.

A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. You can object to the processing of your personal data on the basis of our legitimate interests at any time, as explained in section 5.3.

The data will be stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

3.1.2 COOKIES, TRACKING, SOCIAL MEDIA PLUGINS

We use so-called cookies, tracking tools, targeting methods and social media plug-ins for our website. The exact nature of these methods and how your data is used for this purpose is explained in more detail in Section 3.4 below.

3.2 ESTABLISHMENT, EXECUTION AND/OR TERMINATION OF A CONTRACT
3.2.1 DATA PROCESSING UPON CONCLUSION OF THE CONTRACT
If you register with one of our websites and/or conclude another contract with us, we process the data required for the conclusion, implementation or termination of the contract with you. This includes:

first name, last name
Invoice and delivery address
e-mail address
Invoice and payment data
Phone number
Bank account data and
Date of birth.
The legal basis for this is Art. 6 paragraph 1 letter b) DSGVO, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. management of your customer/user account, processing of a sales contract) between you and us. For the processing of your e-mail address in the case of a purchase via our websites, we are also obliged by legal requirements in the German Civil Code (BGB) to send an electronic order confirmation (Art. 6 Paragraph 1 Letter c) DSGVO).
Insofar as we do not use your data for advertising purposes (see 3.3. below), we store the data collected for the processing of the contract for the duration of the contract and until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period we retain the information of the contractual relationship required by commercial and tax law for the legally determined periods. For this period, the data will be processed again solely in the event of a review by the tax authorities.
In order to process a purchase contract via our websites/applications, the following data processing is also required:
Your payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on information on your delivery address to logistics companies and shipping partners commissioned by us. In order to ensure that the goods are delivered according to your wishes, we transmit your e-mail address and, if necessary, your telephone number to the logistics company and/or shipping partner we have commissioned to handle the delivery. These partners may contact you in advance of the delivery in order to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purposes and deleted after delivery.

3.2.2 USE OF DATA FOR FRAUD PREVENTION
The data you provide when placing an order can be used to check whether an atypical order process exists (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). We have a legitimate interest in carrying out such a check. The legal basis for the processing is Art. 6 paragraph 1 letter f) DSGVO. Our legitimate interest results from the possibility of avoiding attempts at fraud at our expense and thus preventing economic disadvantages for us.
3.2.3 TRANSMISSION OF DATA TO TRANSPORT SERVICE PROVIDERS
For the purpose of delivery of ordered goods we work together with logistics service providers/transport companies and/or shipping partners: The following data can be transmitted to these for the purpose of delivering the ordered goods or for announcing them: First name, last name, postal address, e-mail address, telephone number (e.g. for shipping announcements).
The legal basis of the processing is art. 6 paragraph 1 letter b) DSGVO.

3.3 DATA PROCESSING FOR ADVERTISING PURPOSES
3.3.1 POSTAL ADVERTISING (INCLUDING ONLINE ADVERTISING)
In principle, we have a legitimate interest in using your data for marketing purposes. We process the following data for our own marketing purposes as well as for marketing purposes of third parties: first name, last name, postal address, year of birth, if applicable.
We are also entitled to store additional personal data collected about you in compliance with the legal requirements for our own marketing purposes and for marketing purposes of third parties. The aim is to provide you with advertising that is oriented solely to your actual or supposed needs and to avoid bothering you with unnecessary advertising.
The stored data will not be transferred to third parties. Furthermore, MD pseudonymizes / anonymizes personal data collected about you for the purpose of using the pseudonymized / anonymized data for its own marketing purposes as well as for marketing purposes of third parties (advertisers).
The pseudonymized / anonymized data can also be used to advertise you individually online, whereby advertising can be delivered by third party service providers and/or agencies. The legal basis for the use of personal data for marketing purposes is Art. 6 paragraph 1 letter f) DSGVO. Our legitimate interest is to be able to send you suitable advertising and thus present our company in a way that is tailored to your personal preferences.
Reference to the right of objection
You can object to the use of your personal data for the aforementioned marketing purposes at any time free of charge with future effect at info@monasticdrygin.de.
If you object, your data will be blocked for further commercial data processing. We would like to point out that in exceptional cases, even after receipt of your objection, advertising material may still be sent temporarily. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.
3.3.2 PRODUCT RECOMMENDATIONS BY E-MAIL
As an existing customer of our online store you will receive regular product recommendations from us by e-mail. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. We use the e-mail address you provide during the purchase process to promote our own goods and/or services that are similar to those you have already purchased from us. The legal basis for this data processing is Art. 6 para. 1 letter f) DSGVO.
Note right of objection
You can contradict our product recommendations at any time with effect for the future by sending a message to info@monasticdrygin.de.
3.4 ONLINE PRESENCE AND WEBSITE OPTIMIZATION
3.4.1 COOKIES - GENERAL INFORMATION
We use cookies on various pages to make the visit to our website attractive and to enable the use of certain functions as well as to record the use of our website statistically. Cookies are small text files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity.
Most of the cookies we use are deleted after the browser session ends (so-called session cookies). These enable us to provide you with a cross-page shopping cart display, for example, where you can see how many items are currently in your shopping cart and what your current purchase value is. Other cookies remain on your computer and enable us to recognize your computer during your next visit (so-called permanent or session-spanning cookies). Especially these cookies serve to make our offer user-friendly, more effective and safer. Thanks to these files, it is possible, for example, that you receive information on the site that is specially tailored to your interests.

Of course you can set up your browser so that it does not store our cookies on your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser inform you when you receive a new cookie or how to delete all cookies you have already received and block them for all others.
Please proceed as follows:
3.4.1.1 ON THE INTERNET EXPLORER
Select "Internet Options" from the "Tools" menu.
Click on the "Privacy" tab.
Now you can make the security settings for the Internet zone. Here you set whether and which cookies should be accepted or rejected.
Click "OK" to confirm your settings.
3.4.1.2 IN FIREFOX:
In the menu "Tools" select the item Settings.
Click on "Privacy".
In the drop-down menu, select the entry "Create according to user-defined settings".
Now you can set whether to accept cookies, how long you want to keep them and add exceptions to which websites you always or never want to allow cookies to be used.
Click "OK" to confirm your settings.
3.4.1.3 IN GOOGLE CHROME:
Click on the Chrome menu in the browser toolbar.
Now select "Settings".
Click on "Show advanced settings".
Under "Privacy" click on "Content Settings".
Under "Cookies", you can make the following settings for cookies:
Delete Cookies
Block cookies by default
Delete cookies and web page data by default after closing the browser
Allow exceptions for cookies from certain websites or domains
However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Insofar as these cookies and/or the information they contain are personal data, the legal basis for data processing is Art. 6 Paragraph 1 Letter f) DSGVO. Our interest in optimizing our website is considered justified in the sense of the aforementioned regulation.
3.4.2 GOOGLE ANALYTICS
For the purpose of designing and continuously optimizing our pages in line with requirements, we will use Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and which enable an analysis of your use of the website. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
Time of the server request
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

3.4.3 MICROSOFT
Our online services also use conversion tracking from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads will set a cookie on your computer if you came to our website via a Microsoft Bing ad. Microsoft Bing and we can thus recognize that someone has clicked on an ad, been redirected to our site, and reached a predetermined destination page (conversion page). We only know the total number of users who clicked on an ad and were redirected to a conversion page. No personal information about the identity of the user is disclosed. If you do not wish to participate in the tracking process, you can refuse to accept cookies - for example, by changing your browser setting to disable automatic cookies. For more information about Microsoft Bing's privacy policy and the use of cookies, please visit the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.
The legal basis for this data processing is Art. 6 paragraph 1 f) DSGVO.
3.5 CUSTOMER ACCOUNT/ USER ACCOUNT
To provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer account / user account.
The creation of the customer account is basically voluntary. If you create a customer account, the processing of your data collected here is based on Art. 6 paragraph 1 letter b) DSGVO. After creating a customer account no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.
Only if you want to place orders via our website/application, the opening of a customer account is mandatory for the processing of the contract.
In addition to the data requested when placing an order, you must enter a self-chosen password to create a customer account. Together with your e-mail address, this password will be used to access your customer account. Please treat your personal access data confidentially and do not make them available to unauthorized third parties. Please note that even after leaving our website you will remain logged in automatically unless you actively log out.
You have the possibility to delete your customer account at any time. Please note, however, that this does not mean that the data visible in the customer account will be deleted once you have placed an order with us. Your data will be deleted after the expiration of our commercial and tax retention obligations. The legal basis for this further data processing is Art. 6 paragraph 1 letter c) DSGVO as well as Art. 6 paragraph 1 letter f) DSGVO, whereby our legitimate interest is to retain the data for any legitimate reasons for retention.
3.6 CONTACT
You have the possibility to get in contact with us in several ways. By e-mail, by phone, by contact form or by mail. If you contact us, we use the personal data that you voluntarily provide us with in this context solely for the purpose of contacting you and processing your request.
The legal basis for this data processing is art. 6 paragraph 1 letter a), art. 6 paragraph 1 letter b), art. 6 paragraph 1 letter c) DSGVO as well as art. 6 paragraph 1 letter f) DSGVO. In the case of data processing on the basis of Art. 6 paragraph 1 letter f), our necessary legitimate interest in answering your inquiry is to be able to present our company in a positive light and to achieve a high level of customer/interested party satisfaction.
4 RECIPIENTS INSIDE AND OUTSIDE THE EUROPEAN UNIO
Your personal data may also be passed on to certain recipients. In this case, your data may be transferred to the following parties, without prejudice to other information about recipients in this privacy policy:

Public bodies to which the data must be transferred by law (e.g. financial and supervisory authorities)
Internal bodies involved in the execution of tasks (e.g. sales, IT, IT security)
Contractor (e.g. IT service provider)
Our data protection officer

With the exception of the following processing operations, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The aforementioned processing involves data transfer to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA.
5 Your rights
5.1 OVERVIEW
You can assert the rights to which you are entitled against us in this section 5 either directly against us or also against our data protection officer. You will find the respective contact details in Sections 1 and 2.
In addition to the right to revoke the consent you have given us, you are entitled to the following further rights if the respective legal requirements are met:

the right to obtain information about your personal data stored by us (Art. 15 DSGVO), in particular you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you;
the right to have incorrect data corrected or correct data completed (Art. 16 DSGVO),
the right to delete your data stored with us (Art. 17 DSGVO), as long as no legal or contractual retention periods or other legal obligations or rights for further storage have to be observed by us,
the right to restrict the processing of your data (Art. 18 DSGVO) if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it; if we no longer need the data but you need it to assert, exercise or defend legal claims or if you have lodged an objection to the processing in accordance with Art. 21 DSGVO,
the right to data transferability in accordance with Art. 20 DSGVO, i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to demand that it be transferred to another responsible party
the right to appeal to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
5.2 RIGHT OF OBJECTION
Under the conditions of Art. 21 paragraph 1 FADP, data processing may be objected to for reasons arising from the specific situation of the data subject.
The above general right of objection applies to all processing purposes described in this data protection information which are processed on the basis of Art. 6 paragraph 1 letter f) DSGVO. In contrast to the special right of objection aimed at data processing for advertising purposes, we are only obliged under the DSGVO to implement such a general right of objection if you give us reasons of overriding importance (e.g. a possible danger to life or health).

5.3 RIGHT OF REVOCATION
Insofar as we process data on the basis of a consent granted by you, you have the right to revoke the consent given at any time. The revocation of consent does not result in the data processing that was carried out on the basis of the consent up to the time of revocation becoming ineffective.
6 Automated decision-making, including profiling (Art. 22 DSGVO)
The personal data processed by you will not be used for automated decision-making, which has a legal effect on you or affects you in a similar way.
However, the personal data processed by you will be used to provide you with personal recommendations on our website via pseudonymized user profiles. If you agree to this, such personalization can also be done in our newsletters.
7 No obligation to provide your data
There is no obligation to provide us with your data. However, it is possible that we may need your data to execute a contract, e.g. if you wish to purchase one or more products on our website. If you do not provide us with the personal data required for this purpose and requested by us, about which you will be informed within the scope of this data protection declaration, we may not be able to enter into a contract with you or to fulfil a contract already concluded.
Furthermore, if you prevent us from receiving data required for the use of our website, e.g. through technical measures (see in particular item 3.4), it is possible that you may not be able to use our website or not use it in full.
In other cases, too, where you do not provide us with the required data (e.g. when contacting us or participating in a competition), we are unfortunately unable to offer you the corresponding service.


Notes on data processing in connection with Google Analytics
This website uses Google Analytics, a web analysis service of Google Ireland Limited. If the person responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".

Google Analytics uses "cookies", which are text files placed on the visitor's computer, to help the website analyze how the visitor uses the site. The information generated by the cookie about the use of the website by the visitor (including the abbreviated IP address) is usually transferred to a Google server and stored there.

Google Analytics is only used with the extension "_anonymizeIp()" on this website. This extension ensures that the IP address is made anonymous by shortening it and excludes the possibility of direct personal reference. The extension shortens the IP address of Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by the corresponding browser within the scope of Google Analytics is not merged with other data from Google.

On behalf of the site operator, Google will use the information collected to evaluate the use of the website, to compile reports on the website activities and to provide further services to the site operator in connection with the use of the website and the Internet (Art. 6 para. 1 lit. f DSGVO). The legitimate interest in the data processing lies in the optimization of this website, the analysis of the use of the website and the adaptation of the contents. The interests of the users are sufficiently protected by the pseudonymization.

Google LLC. is certified according to the so-called Privacy Shield (list entry here) and guarantees on this basis an adequate level of data protection. The data sent and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 50 months. Data whose retention period has been reached is automatically deleted once a month.

The collection by Google Analytics can be prevented by adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be refused at any time with effect for the future. The corresponding browser plugin can be downloaded and installed under the following link: https://tools.google.com/dlpage/gaoptout.

The visitor can prevent the collection by Google Analytics on this website by clicking on the following link. An opt-out cookie is set to prevent future collection of data when visiting this website.

Further information on the use of data by Google, setting and objection options, can be found in the privacy policy of Google (https://policies.google.com/privacy) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
reCAPTCHA
In order to protect your requests via Internet form, we use the service reCAPTCHA of the company Google LLC (Google). The query serves to distinguish whether the input is made by a human being or abusively by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose, your input will be transmitted to Google and used there. Your IP address will, however, be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before being used. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCaptcha is not combined with other data from Google. For these data the deviating data protection regulations of the enterprise Google apply. You can find further information on Google's privacy policy at: https://policies.google.com/privacy?hl=de