Privacy Policy

 

1.             Name and Address of Controller

We, WSQR Beverage UG, are controller for the purposes of data protection law within the meaning of Art. 4(7) of the General Data Protection Regulation ("GDPR") for the website of WOLF + WALD, available at https://www.wolfwald.com/ ("Website") and the associated processing of personal data. Our contact details are:

WSQR Beverage UG
PO BOX 440402
80753 Munich
GERMANY

Commercial register entry number: HRB 252041
Registration Court: Amtsgericht München (Munich Local Court)

E-mail address: service@wsqr.co

2.             Data protection officer

You can reach our Data Protection Officer using the following contact details:

FAO: Data Protection Officer
WSQR Beverage UG
PO BOX 440402
80753 Munich
GERMANY

E-mail address: legal@wsqr.co

3. Provision of the website and log files

3.1          Description and scope of the data processing

With every visit to our website, our system, i.e. our webserver, automatically records information from the system of your computer or device.

We collect the following data for these purposes:

  • information about the type of browser and the version used

3.2          Purposes of the data processing

The collection of your IP address by our system is necessary to enable you to use our website. For this purpose, we have to save your IP address for the duration of the browsing session. Your data is stored in the log files to ensure the functionality of our website. In addition, this data allows us to optimise the website and to ensure the security of our IT systems (e.g. recognition of attacks). The data is used for marketing purposes.

3.3          Legal basis for the data processing

The legal basis for the storage of this data is Art. 6(1)(f) GDPR (weighing of interests). Our legitimate interest is the provision of a functioning website.

3.4          Duration of the storage

The aforementioned data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. For the collection of data for the purposes of provision of the website, this is the case when the respective session has finished. For the storage of data in log files, this is at the latest the case after [24 Months]. Storage beyond this period is possible. In this case, your IP address will be erased or anonymised by us, so that determining the identity of the client visiting the website is no longer possible and the data contained no longer refers to an individual person.

4.             Contact via e-mail and contact forms

4.1          Description and scope of the data processing

You can contact us through our contact form and the e-mail address provided. In this case we process the personal data transferred with the contact request.

4.2          Purpose of the data processing

The processing of personal data from the contact form or e-mail solely serves the purpose of allowing us to handle your contact request and communicate with you.

4.3          Legal basis for the data processing

The legal basis for the processing of your personal data in the course of your contact request is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is the communication of our company with you as the person initiating contact. If the purpose of the contact request is to conclude a contract, Art. 6(1)(b) GDPR (performance of a contract and taking steps prior to entering into a contract) is the legal basis for the corresponding data processing.

4.4          Duration of the storage

The aforementioned data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. We erase the personal data which you have sent to us via e-mail or through the contact form when the issue to which the communication pertains has been fully resolved.

5.             Newsletter

5.1          Description and scope of the data processing

On our website you have the ability to subscribe to a newsletter to receive news and updates. When subscribing for the newsletter, the data you have entered into the input screen, inter alia, will be transferred to us.

5.2          Purpose of the data processing

This processing serves the purpose of delivering you the newsletter.

5.3          Legal basis for the data processing

The legal basis for the processing of your data is your consent, pursuant to Art. 6(1)(a) GDPR.

5.4          Duration of the storage

The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. Your e-mail address will be stored for as long as your newsletter subscription is active.

5.5          Ability to object and cancel

The subscription to the newsletter can be terminated by the user at any time. For this purpose there is a corresponding link in every newsletter.

6.             Use of Cookies

6.1          Description and scope of data processing

Our website uses cookies. Cookies are text files which are, for example, saved in your internet browser. This text file contains a characteristic sequence of characters, which enables the unequivocal identification of the browser during a session and upon visiting the website again, both for us and for third parties (for example, advertising agencies). Our website uses technically necessary cookies, cookies for analysis and measuring reach and advertising cookies.

6.2          Purpose of the data processing

The purpose of the use of technically necessary cookies is the functional provision of our website. For some functions of our website, it is necessary for your browser to be recognised again after changing page.

The use of cookies for analysis and measuring reach serves the purpose of continuously improving the user friendliness of our website.

The purpose of the use of advertising cookies is the financing of our website and to enable advertisement for our products or third party products.

6.3          Legal basis for the data processing

The legal basis for the processing of your personal data using technically necessary cookies is Art. 6(1)(f) GDPR. Our legitimate interest is the provision of a functional website.

The legal basis for the processing of your personal data using cookies for analysis and measuring reach is our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is the user-friendly design of our website.

The legal basis for the processing of your personal data using advertising cookies is your consent pursuant to Art. 6(1)(a) GDPR.

6.4          Ability to object and revoke

You can control the use of cookies. Through changing the settings in your internet browser, you can deactivate or limit the transmission of files through cookies. You can delete already stored cookies at any time. You can also change the settings in your browser to make the deletion of cookies occur automatically.

In addition to preventing the storage of cookies in your internet browser software, you can also prevent the recording of the personal data created by the cookie which is related to your usage of the website by clicking on the link in the table below and following the information provided therein.

If cookies are deactivated for our website, it is possible that not all functions of the website will be able to be used in their entirety.

6.5          Cookies used

6.5          Cookies used

Name of Provider: Facebook Custom Audiences and Facebook Pixel

This website uses the service “Facebook Custom Audiences”. For this service Facebook-Pixel is used. Operator of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland. This service enables us to show the user advertising related to their interests on the social network – Facebook.

For this purpose we have implemented the Facebook Remarketing Tag on our website. When you visit the website, this tag creates a direct link with Facebook’s servers. This gives Facebook information on the pages that you have visited our website. Facebook then compares this with your Facebook user account. The next time that you visit Facebook, you will be shown customized advertisements – Facebook Ads – related with your interests. You can find further information in Facebook’s data privacy instructions: https://www.facebook.com/about/privacy/.

The following data is collected and processed:

  • Facebook-User-ID

  • IP Addresses

  • Browser information

  • Non-sensitive custom data

  • Facebook cookie information

  • Referrer URL

  • Pixel specific data

  • Pixel ID

  • Social media friend network

  • Usage Data

  • Views and interactions with content and ads

  • Viewed content

  • Device information

  • Success of marketing campaigns

  • transaction information

  • Hardware/software type

  • Browser type

  • Device operating system

  • Location

  • Cookie ID

  • Information from third party sources

  • User agent

  • Conversion

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Facebook to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Facebook Ireland Limited :

  • Facebook Inc.

Data may be transferred to the USA as part of processing by Facebook. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Name of Provider: Google

Unless otherwise stated in the data privacy policy, the operator of all Google services mentioned here is Google Ireland Limited,Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

i. Google Maps

This website incorporates the API service “Google Maps” in order to be able to depict geographical information. The use of Google Maps makes it possible for Google to collect, process and use data on your use of the service.  By using Google Maps, information about the use of this website including your IP address and the (start) address entered in the route planner function can be transmitted to Google in the USA.  The map content is transmitted by Google directly to your browser and integrated by it into the website. WSQR has no influence on the scope of the data collected by Google in this way. WSQR also has no influence on the further processing and use of the data by Google. We have no influence and therefore cannot accept any responsibility for this.You can find further information on the processing of your data by Google at the Google data privacy information.

The following data is collected and processed:

  • IP addresses

  • Location information

  • Usage data

  • Date and time of visit

  • URLs

The legal basis for this data processing is your consent according to Art. 6 (1)(a) GDPR.If you do not want Google to collect, process or use data about you via our website, you can refuse your consent or withdraw it at any time with effect for the future. 

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

  • Google LLC.

  • Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Maps. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

ii. Google Tag Manager 

This website uses the service “Google Tag Manager”. The tag manager is a tool for managing so-called tags that are used during tracking in online marketing. In doing so, the tag manager does not process any personal data, since it merely serves to manage other services – e.g., Google Analytics, etc. 

You can find further information on the tag manager at: https://www.google.com/intl/de/tagmanager/use-policy.html

iii. Google Analytics

This website uses the service “Google Analytics”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics is a web analysis service, and, by placement of cookies and the information acquired by this, it enables us to make inferences about user behavior on our website.  The information generated by the cookies is sent to a Google server in the USA and stored there. Our website uses the service Google Analytics on an exclusively pseudonymous basis. Your IP address is only recorded in abbreviated form and is hence anonymized.

The following data is collected and processed:

  • IP-Addresses (anonymized)

  • Usage data

  • Click path

  • App updates

  • Browser information

  • Device information

  • JavaScript support

  • Pages visited

  • Referrer URL

  • Downloads

  • Flash-version

  • Location information

  • Purchase activity

  • Widget interactions

  • Date and time of visit

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR.. If you do not want Google Analytics to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

  • Google LLC.

  • Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Analytics. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

iv. Google Audiences / Remarketing

This website uses the service “Google Audiences/Remarketing”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is to display advertising to users based on their interests. This requires conducting an analysis of website use, which is carried out using cookies. In this process, the cookies store anonymized or pseudonymized data regarding the use of the website.  If you visit additional websites that also use these services, then you will be shown advertising that matches your previous interests. You can find more information at https://www.google.com/privacy/ads/

The following data is collected and processed:

  • Pages visited

  • IP Addresses

  • Duration of visit

  • Other data on use of websites

  • Content user is interested in

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Audiences to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

  • Google LLC.

  • Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Audiences. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

v. Google Ads (formerly GoogleAdwords) and Google Ads Conversion Tracking

This website uses the service “Google AdWords”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is so-called conversion tracking, i.e., we can detect what happened after you clicked on our advertisements. Cookies are placed for this purpose, but they are only valid for a limited time.

The following data is collected and processed:

  • Cookie-ID

  • Visited Pages

  • IP Addresses

  • Duration of visit

  • Usage data

  • Content user is interested in

  • Clicked Ads

  • Web requests

  • Cookie information

  • Referrer URL

  • Browser language

  • Browser type

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

  • Google LLC.

  • Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Ads. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Name of provider/application: HubSpot
Purpose: This website we use HubSpot for different purposes. HubSpot is a software company from the USA with a branch office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500.

Hubspot is an integrated software solution that we use to cover different aspects of our online marketing. This includes, among others:

Email marketing, social media publishing & reporting, reporting, contact management (e.g., user segmentation & CRM), landing pages and contact forms. 

Our registration service enables visitors to our website to find out more about our company, to download contents and to provide their contact information, together with further demographic information. This information, together with the contents of our website are stored on the servers of our software partner HubSpot. We can use it to make contact with visitors to our website and to determine which of our company’s services are interesting for them. All information collected by us is subject to this data privacy policy. We use all information collected exclusively for optimizing our marketing measures. 

More information about the Privacy Policy can be found here.
More information about Hubspots  regarding the EU-Data Protection Regulations can be found here.

More Information about HubSpots Cookies can be found here and here.
As part of the optimization of our marketing activities, Hubspot may collect and process the following data:

  • Geographical position

  • Browser type

  • Navigation information

  • Reference URL

  • Performance data

  • Information about how often the application is used

  • Mobile apps data

  • HubSpot subscription service credentials

  • Files that are displayed on site

  • Domain names

  • Viewed pages

  • Aggregated use

  • Version of the operating system

  • Internet service provider

  • IP address

  • Device identification

  • Duration of the visit

  • Where the application was downloaded from

  • Operating system

  • Events that occur within the application

  • Access times

  • Clickstream data

  • Device model and version

We also use HubSpot’s contact forms. More information about this can be found at 4. of this Privacy Policy

 

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

Data may be transferred to the USA as part of processing by Hubspot. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, Art. 49 (1)(a) GDPR can serve as a legal basis. 

Name of provider/application: BingAds
Purpose: This website uses the service “BingAds”. BingAds is a conversion and tracking service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft places cookies in the users’ devices that analyze the user behavior on our website. This presupposes that the user has reached our website through a BingAds advertisement. This only serves to provide use with information on the total number of users who have clicked on this type of advertisement. In this process, no IP addresses are stored, and no personal information on our users’ identity is shared. You can find further information in Microsoft’s data privacy statement in: https://privacy.microsoft.com/de-de/privacystatement.

The following data is collected and processed:

  • Engagement metrics

  • Number of visits

  • Bounce rates

  • Microsoft Click ID

  • Digital signature

  • UET ID tag

  • URLs

  • Referrer URL

  • Page title

  • Conversions

  • Screen height

  • Screen width

  • Browser language setting

  • Duration of visit

  • Screen color depth

  • Page response times

  • Clicked Advertisement

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Microsoft to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

Data may be transferred to the USA as part of processing by Microsoft. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

7.             Registration and log-in area

7.1          Description and scope of the data processing

We offer you the opportunity to register on our website. For this purpose, your personal data is collected. This data is not passed on to third parties.

7.2          Purpose of the data processing

The registration and log-in serve the purpose of providing an online function in an area which is only accessible to registered users.

7.3          Legal basis for the data processing

The legal basis for the processing of the data is Art. 6(1)(b) GDPR (performance of a contract), as the registration and the log-in area are necessary for the performance of the contract or taking steps prior to entering into a contract.

7.4          Duration of the storage

Your aforementioned data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. This is the case for data during the registration process for the fulfilment of a contract or for taking steps prior to entering into a contract if your data are no longer required for the performance of the contract. Even after termination of the contract, it may be necessary to store your personal data in order to comply with contractual or statutory obligations (e.g. retention periods for tax purposes).

The log files for the log-in will be saved for 90 for security purposes and erased thereafter.

7.5          Ability to object

As a registered user you have the ability to terminate the registration at any time. The data stored relating to you can be modified by you at any time. For this purpose, please contact in this regard the following address [e.g. legal@wsqr.co].

8.             Order form

8.1          Description and scope of the data processing

On our website, after successfully registering, we offer you the opportunity to purchase our products using an order form from our online shop.

8.2          Purpose of the data processing

The order form serves the purpose of concluding a contract with you or for you to send a production request. The data processing in the order form therefore is for the purpose of the conclusion, performance or termination of a contract with you.

8.3          Legal basis for the data processing

The legal basis for this is Art. 6(1)(b) GDPR (performance of a contract).

8.4          Duration of the storage

We store your data which is collected for the execution of the contract for the duration of the contract, as well as until the end of the statutory retention periods or the expiry of any applicable contractual warranties or guarantees. These time periods are, in general, 2 years long. After the end of these time periods, we keep your information on the contractual relationship which is required by trade and tax laws for the legally required time periods. During this period of time, your data will only be processed again in the event of an audit by the tax authorities.

9.             Data Subject Rights

If your personal data is processed, you are a "data subject" within the meaning of the GDPR. You have the following rights in relation to us.

9.1          Your general rights

You have the right to receive information about the personal data which we have stored relating to you (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR) and to restriction of the processing of your personal data (Art. 18 GDPR). In addition, you are entitled to exercise your right to data portability (Art. 20 GDPR) and to object to the processing of your personal data (Art. 21 GDPR).

9.2          Right to revoke consent for the purposes of data protection law

You have the right to revoke any declaration of consent given by you at any time. The legality of the processing which has taken place up until the revocation of the consent remains unaffected by the revocation of consent (Art. 7(3) GDPR).

9.3          Right to object

You have the right to object to the processing of the personal data relating to you which occurs pursuant to Art. 6(1)(e) or (f) GDPR at any time. Providing we are not legally obliged or entitled to continue processing your personal data, we will no longer process your personal data (Art. 21(1) GDPR).

If you object to the usage of your data for the purposes of direct marketing, we will no longer process the personal data relating to you for these purposes (Art. 21(2) GDPR).

9.4          Notice of the right to complain to a supervisory authority irrespective of any other administrative or judicial remedies, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, of work, or of the place of the alleged breach if you are of the view that the processing of your personal data by us breaches the GDPR.