Privacy Policy

This privacy policy explains the scope of our processing of your personal data (hereinafter “data”).

1. Controller responsible for data processing

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Katharina Kunnert Knattadrum

Vorfeldweg 16

38536 Meinersen

Web: www.uwesenmerch.de

Email: info@uwesenmerch.de

2. General information on data processing

We process data as part of our business and website operations.

This also includes disclosure by transfer to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data outside the EU or EEA, we have indicated this below.

3. Data processing

The specific data involved, purposes of processing, legal bases, recipients and, where applicable, transfers to third countries are listed below:

a) Log file when visiting the website

We log your visit to our website. We process the following data:

name(s) of the website(s) accessed,

date and time of access,

amount of data transferred,

browser type and version,

operating system you use,

referrer URL (the website you visited previously),

your IP address,

the requesting service provider.

The legal basis for processing is our overriding legitimate interest in ensuring the continued availability and security of our website, pursuant to Art. 6(1)(f) GDPR.

The log file is deleted after seven days unless it is needed to establish or investigate specific legal violations that became known during the retention period.

b) Hosting

To make our website available, we use web hosting providers who process on our behalf the data listed above and all data processed in connection with operating this website (log file when visiting the website).

The legal basis for processing is our overriding legitimate interest in making our website available, pursuant to Art. 6(1)(f) GDPR.

c) Hosting via Ionos.de

To make our website available, we use the services of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. IONOS SE processes on our behalf the data listed above and all data processed in connection with operating this website (log file when visiting the website). When displaying the content concerned, data, including your IP address and location, is transmitted to and stored on IONOS SE servers.

The legal basis for processing is our overriding legitimate interest in making our website available and marketing our services optimally, pursuant to Art. 6(1)(f) GDPR.

Further information about data processing is available at: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

d) Contact

When you contact us, we process the following data to handle and respond to your enquiry: your name, contact details (if provided) and your message.

The legal basis for processing is our obligation to perform a contract and/or take steps before entering into a contract under Art. 6(1)(b) GDPR and/or our overriding legitimate interest in handling your enquiry under Art. 6(1)(f) GDPR.

e) Contract processing

We process your order data to fulfil the contract between you and us.

The legal basis for processing is the performance of our contractual obligations under Art. 6(1)(b) GDPR and, where applicable, compliance with our legal obligations under Art. 6(1)(c) GDPR.

We provide your address details to the company responsible for delivery. If necessary to fulfil the contract, we also provide your email address or telephone number to coordinate a delivery time with the delivery company.

We provide your transaction data (name, order date, payment method, shipping and/or receipt date, amount and payee, and, where applicable, bank details or credit card details) to the payment service provider responsible for processing the payment.

f) Shop system and customer data management using Salesforce

We use systems provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, to run our shop system and manage customer data. The data we process when providing your customer account and handling purchases is therefore processed in Salesforce systems.

We do not process your data using IONOS systems for any additional purposes. The legal basis for processing is therefore the relevant legal basis stated above in sections B. g) and h).

We will provide you with a copy of the data processing agreement on request. Please contact info@uwesenmerch.de.

g) Shipping status notifications

If you would like to receive shipment status updates from the carrier (DHL, Hermes, DPD), we will share your email address and telephone number with the carrier you selected. The legal basis for this processing is your consent under Art. 6(1)(a) GDPR.

h) Newsletter

We offer an email newsletter to provide you regularly with information about our company and offers. When you sign up for the newsletter, we process the information you enter during registration (email address and any other details you choose to provide). To prevent misuse, we will send you an email after you sign up asking you to confirm your subscription (double opt-in). We log your registration to provide proof of a lawful sign-up. This includes the time of registration and confirmation, as well as your IP address.

The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR. We process data relating to the confirmation email and the associated logging under Art. 6(1)(f) GDPR, based on our legitimate interest in proving that you subscribed correctly.

If you give us your consent, we also track whether you have opened our newsletters and how you scroll and click within them. This allows us to tailor our newsletter to your interests and improve its content. The legal basis for newsletter analytics is your consent under Art. 6(1)(a) GDPR.

We use service providers to send the newsletter and share the data listed above with them.

i) Direct marketing by email to existing customers

Unless you have objected, we will send you direct marketing relating to the goods and services you have purchased, to offer you similar goods and services. We use the email address you provided when entering into the contract.

You can object to this use at any time, without incurring any costs other than the standard transmission charges.

The legal basis for sending this direct marketing is Section 7(3) of the German Act Against Unfair Competition (UWG) in conjunction with Art. 95 GDPR. We use service providers to send the newsletter and share the data listed above with them.

j) Customer account

When you create and use a customer account, we process your account details (name, address, email address, bank details) and usage data (username, password). This allows you to manage your orders and enables us to identify you as a customer. The legal basis for this processing is your consent under Art. 6(1)(a) GDPR.

k) Use of functional cookies

We use cookies on our website. Cookies are small text files stored on your device (PC, smartphone, tablet, etc.) and saved by your browser.

We use only technically necessary session cookies on our website.

l) Use of cookies

We use cookies on our website. Cookies are small text files stored on your device (PC, smartphone, tablet, etc.) and saved by your browser.

You can find information about the specific cookies we use, their providers and purposes in our consent banner. There you can give or withdraw your consent to individual services or change your settings later.

Our consent banner

We use a consent banner to record your choices about certain data processing activities and meet our data protection obligations. When you visit our website, a banner asks for your cookie preferences. We then set a cookie that stores information about consents given or withdrawn. This processing is necessary for us to meet our legal obligations under Art. 6(1)(c) GDPR.

m) Analytics / Marketing

aa) Facebook Custom Audiences (Pixel/Cookies)

We use a so-called tracking pixel on our website provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. We use the Facebook Pixel to track the performance of our Facebook ad campaigns and optimise the delivery of Facebook ads to interested audiences.

After you click a Facebook ad or visit our website, the pixel stores a cookie on your device. The cookie processes data about whether you reached our website through a Facebook ad and allows us to analyse user behaviour up to the point of purchase. This lets us track the success of our Facebook ad campaigns. The pixel also processes data showing that you visited our website, allowing us to tailor the ads displayed on Facebook to your interests.

When you visit our website, the Facebook Pixel integrated into it establishes a direct connection to Facebook’s servers. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA.

The EU Commission has not issued an adequacy decision for data transfers to the USA. Facebook ensures an adequate level of data protection through the EU Standard Contractual Clauses. A copy of the contractual clauses is available on request. Please contact info@finest-bbq.de.

The data collected is anonymous to us and does not allow us to identify you. If you are registered with Facebook, Facebook may associate the information collected with your account. Facebook may also process and store your IP address and other identifying information even if you do not have a Facebook account or are not logged in when visiting our website.

You can withdraw your consent to Facebook Pixel processing for our website domain at any time, with effect for the future, by changing your preferences in our consent banner.

The legal basis for processing is your consent under Art. 6(1)(a) GDPR.

bb) Facebook Conversion API

We use the Facebook Conversion API tracking tool provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

This is a data interface through which we send Facebook information about your behaviour on our website for analysis. This allows us to show you ads tailored to your behaviour on our website.

We use the following data in connection with the Conversion API:

Email address

Phone number

Gender

Date of birth

First and last name

City, state and country

Postal code

User IDs

IP address

Client User Agent (the browser and operating system you use)

Click IDs

Browser ID

Product IDs

Ad ID

Facebook Login ID

We send this data to Facebook, including to Facebook in the USA.

The legal basis for processing is your consent under Art. 6(1)(a) GDPR.

You can withdraw your consent to Facebook Pixel processing for our website domain at any time, with effect for the future, by changing your preferences in our consent banner.

n) External content

We use dynamic content (“Content”) from third parties to optimise the presentation and features of our website. When you visit our website, an interface automatically sends a request to the server of the relevant content provider, transmitting certain log data (e.g. users’ IP addresses). The dynamic content is then sent to and displayed on our website.

We use external content for the following features:

aa) Embedded YouTube videos

We have embedded videos from YouTube, a service of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”), on our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing by YouTube. However, when you play videos, log data is transmitted to YouTube servers in the USA.

The legal basis for processing is our overriding legitimate interest in optimally marketing our online services under Art. 6(1)(f) GDPR.

The EU Commission has not issued an adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection through the EU Standard Contractual Clauses. A copy of the relevant EU Standard Contractual Clause is available on request. Please contact info@finest-bbq.de.

bb) Google Fonts

To make your visit to our website more appealing, we use external fonts from Google Fonts. These are loaded from servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) when you visit the site. Google does not store cookies in your browser. However, to the best of our knowledge, your device’s IP address is transmitted to and stored by Google. This processing is based on our overriding legitimate interest in optimally marketing our services under Art. 6(1)(f) GDPR.

It cannot be ruled out that data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

cc) Adobe Fonts

To make your visit to our website more appealing, we use external fonts from Adobe Fonts. These are loaded from servers operated by Adobe Systems Inc., San Jose, California, USA (“Adobe”) when you visit the site. Adobe does not store cookies in your browser. However, to the best of our knowledge, your device’s IP address is transmitted to and stored by Adobe.

The legal basis for processing is our overriding legitimate interest in optimally marketing our online services under Art. 6(1)(f) GDPR.

The EU Commission has not issued an adequacy decision for data transfers to the USA. Adobe ensures an adequate level of data protection through the EU Standard Contractual Clauses. A copy of the relevant EU Standard Contractual Clause is available on request. Please contact info@finest-bbq.de.

4) How long we store your data

We store personal data only for as long as necessary for the purposes for which it is processed, or until you withdraw your consent. Where statutory retention requirements apply, certain data may be stored for up to 10 years regardless of the purposes for which it is processed.

5) Your rights as a data subject

a) Right of access

On request, you can obtain free information at any time about all personal data we hold about you.

b) Rectification, erasure, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data, or if it is inaccurate, we will arrange for your data to be erased or blocked, or make the necessary corrections, upon your instructions (where permitted by applicable law). The same applies if you want us to restrict the processing of your data in future. You have a right to object in particular where your data is necessary for performing a task carried out in the public interest, or where processing is based on our legitimate interest, including profiling based on that interest. You also have the right to object when your data is processed for direct marketing purposes.

c) Right to withdraw consent with effect for the future

You can withdraw any consent you have given at any time, with effect for the future. Your withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

d) Data portability

If data is processed on the basis of a contract, pre-contractual discussions, consent or automated procedures, you have the right to data portability. On request, we will provide your data in a commonly used, structured and machine-readable format so that you can, if you wish, transfer it to another controller.

e) Restriction of processing

The rights set out above do not apply to data that does not allow us to identify the data subject, for example where data has been anonymised for analysis. You may be able to access, erase, block, correct or transfer such data to another company if you provide us with additional information that allows us to identify you.

f) Exercising your data subject rights and right to lodge a complaint

If you have questions about how we process your personal data, or wish to request access, rectification, blocking, objection or erasure, or to have your data transferred to another company, please contact info@uwesenmerch.de

You may also lodge a complaint with a supervisory authority about your data subject rights.