Datenschutzerklärung

 

This Privacy Policy explains how personal data is processed when you visit or buy from alternativebrewingx.shop, contact us, create or use an account, subscribe to communications, or otherwise interact with the shop. “Personal data” means information relating to an identified or identifiable natural person.

1. Controller and contact

The controller is the legal operator trading as Alternative Brewing X. Privacy enquiries and data-subject requests may be sent to info@alternativebrewingx.shop. German and EU transparency rules also require the controller’s full legal name and physical address. These operator facts must be added before publication because they were not supplied and cannot be invented.

2. Data we process

• Identity and contact data: name, billing and delivery address, email address, telephone number where provided, and account details.
• Order and transaction data: products, order value, currency, discounts, fulfilment, returns, refunds and correspondence. Payment providers process card or account credentials; we normally receive transaction references and status rather than full card data.
• Device and usage data: IP address, browser and device information, timestamps, pages viewed, referring information, language, approximate location and security logs.
• Preference and marketing data: consent choices, subscriptions, interests inferred from shop interactions, campaign engagement and opt-out records.
• Support content: messages, attachments, reviews or other information voluntarily supplied to us.

We generally collect data directly from you, automatically from your device, and from service providers involved in payments, fraud prevention, hosting, analytics, delivery and customer support.

3. Purposes and legal bases

• Contract performance and pre-contract steps: to operate checkout, process payment, confirm and fulfil orders, deliver goods, handle returns and provide requested support (GDPR Article 6(1)(b)).
• Legal obligations: to keep tax and accounting records, respond to lawful requests, provide consumer documentation and comply with product-safety or other obligations (Article 6(1)(c)).
• Legitimate interests: to secure the shop, prevent fraud, manage claims, improve operations, maintain records, understand aggregated performance and defend legal rights, after balancing those interests against your rights (Article 6(1)(f)).
• Consent: for non-essential cookies or similar technologies, and for electronic direct marketing where consent is legally required (Article 6(1)(a)). Consent may be withdrawn at any time without affecting earlier lawful processing.

Where information is needed to enter into or perform a contract, failure to provide it may prevent checkout, payment or delivery. Optional fields will be identified by context.

4. Cookies and similar technologies

Strictly necessary technologies may be used to provide requested functions, maintain a basket, secure checkout, balance traffic and remember privacy choices. Analytics, advertising, personalisation or other non-essential technologies are used only after any consent required by German and EU law. A consent tool should identify each non-essential provider, purpose, duration and category and allow refusal as easily as acceptance. You can withdraw or change consent through the shop’s privacy or cookie settings.

5. Recipients

We disclose personal data only as necessary to service providers and recipients such as the e-commerce hosting platform, payment processors, banks, fraud-prevention providers, fulfilment partners, warehouses, carriers, customer-support providers, IT and security vendors, professional advisers, analytics or marketing providers used with appropriate consent, and public authorities where required by law. Providers acting as processors are bound by data-protection obligations. Some recipients, especially payment providers, may act as independent controllers for their own regulated activities.

6. International transfers

Some providers may process data outside Germany or the European Economic Area. Where the destination does not benefit from an EU adequacy decision, transfers will rely on an authorised safeguard such as the European Commission’s standard contractual clauses, together with supplementary measures where necessary. Information about relevant safeguards may be requested using the contact email above.

7. Retention

We retain data only for as long as necessary for the purpose collected, including order fulfilment, support, security, legal claims and statutory recordkeeping. Order, invoice and tax data may be retained for the period required by German commercial and tax law. Account data is kept while the account is active and for a reasonable period afterwards where needed for claims or compliance. Marketing data is kept until consent is withdrawn or an objection is made, subject to retaining a minimal suppression record. Security logs and cookie data are retained for proportionate periods determined by their purpose. Data is then deleted or anonymised unless continued retention is legally required.

8. Your rights

Subject to the GDPR’s conditions and exceptions, you may request access to your personal data, rectification, erasure, restriction of processing, and data portability. You may object at any time to direct marketing, including related profiling. You may also object, on grounds relating to your situation, to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a competent data-protection supervisory authority, particularly in the Member State of your habitual residence, workplace or the alleged infringement.

To exercise a right, contact info@alternativebrewingx.shop. We may request proportionate information to verify identity. Requests are handled without undue delay and ordinarily within one month, subject to lawful extensions.

9. Automated decisions, children and security

We do not make decisions producing legal or similarly significant effects based solely on automated processing unless this is disclosed at the relevant time and legally permitted. The shop is not directed to children, and we do not knowingly solicit orders from persons unable to enter a binding purchase contract. We use appropriate technical and organisational safeguards proportionate to risk, but no online system can be guaranteed completely secure.

10. Changes

We may update this policy to reflect legal, technical or operational changes. The current version and revision date will remain available on the shop. Material changes will be communicated where required by law.