Privacy policy

Privacy policy

1. general information and principles of data processing

We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, so-called personal data, when using our website is important to us.

 

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data for which no reference to your person can be established, for example through anonymization, is not personal data. Processing (e.g. collection, storage, retrieval, consultation, use, transmission, erasure or destruction) in accordance with Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must bedeleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.

Here you will find information on how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.

 

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please visit these websites directly to find out how handles your personal data.

 

  1. Responsible body

Black Label Coffee UG is responsible for the processing of personal data on this website:

 

  1. Provision and use of the website/server log files

    a) Type and scope of data processing

If you use this website without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, e.g:

  • IP address
  • Date and time of the request
  • Name and URL of the retrieved file
  • Website from which isaccessed (referrer URL)
  • Access status/HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system

 

b) Purpose and legal basis

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is nopossibility for the userto object to this aspect at . Further storage may take place in individual cases if this is required by law.

 

  1. Use of cookies

    a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that are sent by us to the browser of your end device and stored there when you visit our website.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your end device. They cannot execute programs or contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

Temporary cookies/session cookies

Our website uses so-called temporary cookies or session cookies , which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. As a result, various requests from your browser can be assigned to a common session and it is possible to recognize your end device on subsequent website visits.

Permanent cookies

So-called permanent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. These cookies can be used to track user behavior for advertising and targeted marketing purposes.

Social-Social media cookies make it possible to establish a connection to your social networks and share content from our website within your networks.

Configuration of the browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, please note that if you do this, may not beable to use all the functions of our website .

Youcan alsodelete cookies already stored in your browser via your browser settings . It is alsopossible to set your browser to notify you before cookies are stored. Since the various browsersmay differ in their respective functionalities , we ask you to consult the respective help menu of your browser for the corresponding configuration options .

Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently deletethis cookie , you will need to deactivate it again.

b) Legal basis

Due to the purposes of use described, the legal basis for is the processing of personal data using cookies Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legal basis is additionally Art. 6 para. 1 lit. a) GDPR.

 c)Storage period

As soon as the datatransmitted to via is no longer required for 1 the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

 

  1. Data collection for the implementation of pre-contractual measures and for contract fulfillment

    a) Type and scope of data processing

We collect personal data about you in the pre-contractual area and when the contract is concluded. This concerns, for example, your first and last name, address, e-mail address, telephone number or bank details.

 

b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of performing the contract or fulfilling pre-contractual obligations.

 

The legal basis for this is Art. 6 (1) lit. b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage period

The data will be deleted as soon as it is no longer required for the purpose of its processing.

 

In addition, there may be statutory retention obligations, for example commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

  1. Order form

An order form is available on our website, which can be used for electronic pre-orders.

 a) Type and scope of data processing

Our data collection is limited to the following data:

  • First and last name
  • Phone number
  • E-mail address
  • Account details
  • Name of the product

 

b) Purpose and legal basis

The purpose of data processing is to enable us to process your order properly.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of the data serves the fulfillment of a contract or is necessary for the implementation of a pre-contractual measure, which has taken place at the request of the data subject.

 c) Storage period

The data will be deleted as soon as it is no longer required for the purpose for which it was processed.

In addition, there may be statutory retention obligations, for example commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

  1. Registration option

    a) Type and scope of data processing

You can register on our website. When you register, we collect and store the data you enter in the input mask (e.g. surname, first name, e-mail address). This data is not passed on to third parties.

 

b) Purpose and legal basis of data processing

Your registration is required for the use of certain content and services on our website or for the fulfillment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the controller's database.

In the case of consent, the legal basis for processing is Art. 6 para. 1 lit. a)
GDPR. If your registration serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.

c) Storage period

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected. In addition, your registered personal data will be deleted if you

 

  1. Data transmission

We only pass on your personal data to third parties if:

a) you have given your express consent to this in accordance with Art. 6 para. 1lit. a) GDPR.

b) this is legally permissible and required pursuant to Art. 6 (1)lit. b) GDPR for the fulfillment of acontractual relationship with you or the implementation of pre-contractual measures.

c) pursuant to Art. 6 para. 1lit. c) GDPR there is a legal obligationfor the disclosure.

We are legally obliged to transmit data to state authorities, e.g. tax authorities, social insurance institutions, health insurance funds, supervisory authorities and law enforcement agencies.

d) the disclosure pursuant to Art. 6 para. 1lit. f) GDPR is necessary to safeguard legitimate company interests, as well as for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overridingworthy of protection interest in not disclosing your data.

e) in accordance with Art. 28 GDPR, we useexternal service providers processors who have been obliged to handle your data with care.

 

We use such service providers in the following areas:

  • IT
  • Logistics
  • Telecommunications

When transferring data to external bodies in third countries, i.e. outside the EU or the EEA, we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

  1. Opportunity to apply
    a) Type and scope of data processing

You can apply for a job on our website or by e-mail. When you apply, we collect and store the data that you enter in the input mask or that you send us by e-mail.

 b) Purpose and legal basis

We only process your data for the purpose of processing your application.

The data will not be passed on to third parties. The legal basis for the processing is Art. 88 para. 1 GDPR V.m. § Section 26 BDSG and additionally Art. 6 para. 1 lit. b) GDPR.

If you give us your consent to include you in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) GDPR.

 

c) Storage period

If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process in accordance with Section 61b (1) ArbGG in conjunction with Section 15 AGG. § SECTION 15 AGG. The start of the period is the receipt of the rejection letter.

 

If you have given us your consent to include you in our applicant pool, we will store your data for a maximum of two years.

 

d) Data transfer

Your data will only be received by the departments involved in the decision (responsible HR or specialist departments, management, works council).

In addition we are obliged to transmit your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

 

Other data recipients may be those bodies for which you have given us your consent to transfer data.

 

  1. Comment function

    a) Type and scope of data processing

You can comment on posts on our website. If you comment on a post, we collect and store the data you enter in the input mask. In addition to the comments you leave, details of the time you entered the comment and any user name (pseudonym) you have chosen will also be stored and published. The IP address assigned by the data subject's Internet service provider (ISP) is also stored. This information is not passed on to third parties.

 b) Purpose and legal basis

The data transmitted by you (e.g. the IP address) is used for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment.

This collected personal data will not be passed on to third parties unless such a transfer is required by law or serves the legal defense of the controller.

 

The legal basis for the processing of personal data transmitted when using the comment function is, if and insofar as you have given your consent, Art. 6 para. 1 lit. a) GDPR. You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Another legal basis is Art. 6 para. 1 lit. f) GDPR.

We have a legitimate interest in processing if the rights of third parties are violated or illegal content is posted. This is for security reasons if someone posts illegal content in comments and posts (insults, prohibited political propaganda, etc.)

 c) Storage period

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons.

  1. Contact form

    a) Type and scope of data processing

On our website, we offer you the opportunity to contact us at via a form provided at . As part of the submission process of your request via the contact form, reference is made to this privacy policy to obtain your consent.

 

If you make use of the contact form, will process the following personal data from youvia :

- Salutation

- First name

- Last name

- Title

- Company

- Industry

- Function

- Street

- Street number

- Postcode

- Place

- Country

- E-mail address

- Phone number

- Subject

- Content of the message

 b) Purpose and legal basis

The purpose of providing your e-mail address is to send you an e-mail reply toyour request at . When using the contact form, your personal data will not be passed on to third parties.

 

The legal basis for the processing is consent pursuant to Art. 6 (1) (a) GDPR on the basis of thedeclaration of consent voluntarily given by you below and revocable at any time for the future :

 c) Storage period

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request).

Mandatory statutory provisions - in particular retention periods in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected by this.

 

  1. Contact by e-mail

On our website, youcan contact us at by e-mail at .

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and to the personal data you provide to in the course of contacting us.

 b) Purpose and legal basis

The purpose of data processing is to be able to respond to your request appropriately. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in the processing of the above-mentioned personal data in order tobe able to process your request properly

 c) Storage period

The duration of the storage of the above-mentioned datadepends on the background of your contact. A deletion of your personal data takes place regularly if the purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from the processing of your request.

 

  1. Newsletter
    a) Type and scope of data processing

On our website you have the option of subscribing to a free regular e-mail newsletter . In order tobe able to send you the newsletterregularly , weneed your e-mail address.

 

For we use the so-called double opt-in procedure tosend the newsletter .

 

This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters from us by clicking on a corresponding link.

 

This is to ensure that only you, as the owner of the email address provided,can subscribe to the newsletter . Your confirmation must be sent promptly after receipt of the confirmation email , otherwise your newsletter registration will be automaticallydeleted from our database .

When you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g. surname, first name, e-mail address).

When you register for the newsletter, we also store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. In the confirmation e-mail sent for control purposes (double opt in the
e-mail), we also store the date and time of the click on the confirmation link and the IP address entered by the Internet service provider (ISP).

 b) Purpose and legal basis

The data collected by us when you register for the newsletter is used exclusively for the purpose of advertising by means of the newsletter.

The processing of your e-mail address for the newsletter mailing is based on thedeclaration of consent voluntarily given by you below and revocable at any time for the future in accordance with Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 no. 3 UWG.

In addition, the processing is based on Art. 6 para. 1 lit. f) GDPR due to our legitimate interests in documenting the proof of the required consent.

 c) Storage period

Your e-mail address will be stored at for as long as you subscribe to the newsletter . After you unsubscribe from the newsletter , your e-mail address will be deleted unless you have expressly consented to further use of your data.

 

  1. Tracking and analysis tools

You can find a detailed overview of the web analysis and social media tools we use:

Google Fonts

  1. a) Type and scope of data processing
    We use external fonts from Google on this website. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: [email protected] ("Google").

Through the interactive integration of Google Fonts, fonts can be used without having to upload them to your own server. We integrate Google Fonts locally in order to prevent the IP address of your end device from being transmitted to Google servers in the USA through the integration of Google Fonts and to prevent information about which of our Internet pages you have visited from being passed on.

b) Purpose and legal basis        

The purpose of using Google Fonts is the uniform presentation of fonts. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

c) Right to object
You have the right to object to the creation of these user profiles. This should be addressed to Google.

     15 WhatsApp Marketing

We process your personal data, in particular your telephone number, your name and title (if we have these), the content of your messages and metadata such as the date and time the message was sent, for the purpose of marketing and direct customer communication via the WhatsApp Business service. The legal basis for sending newsletters and marketing messages is your voluntarily given consent in accordance with Art. 6 para. 1 lit. a GDPR; if messages are required for contract fulfillment or pre-contractual measures (e.g. appointment confirmation), we rely on Art. 6 para. 1 lit. b GDPR. In addition to us as the controller, the recipients of your data are in particular WhatsApp Inc. (Meta Platforms, Inc., USA) as a technical service provider and our other processors who support us in providing and analyzing the service. The transfer to third countries, in particular to the USA, takes place on the basis of standard contractual clauses to ensure an adequate level of data protection. We store your data until you revoke your consent or request us to delete it; statutory retention obligations remain unaffected by this. You can revoke your consent at any time and informally via WhatsApp message, email to [email address] or via the unsubscribe link in our messages. You also have the rights to information, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, please contact us using the contact details provided above. We take technical and organizational measures to protect your data from unauthorized access, loss or misuse, including end-to-end encryption of messages.

 

    Doubleclick by Google

    On some of our websites, we use Doubleclick, a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Doubleclick uses cookies to show you personalized advertising. The cookies do not contain any personal information.

    The information generated by the cookies about your use of the website is usually transferred to a Google server in the USA and stored there.

     

    The data transmitted by your browser as part of Doubleclick will not be merged with other Google data.

    You can prevent the storage of cookies by selecting the appropriate settings in your browser software. You can deactivate the display of personalized advertising with the help of a browser plug-in. You can install this here:
    https://www.google.com/settings/ads/plugin

    You can also deactivate the display of personalized advertising here.

    The legal basis for the processing of data with the help of Double Click is Art. 6 para. 1 lit. f GDPR.

     

    You can find more information on data protection at Google here: https://www.google.de/intl/de/policies/technologies/ads/

     

    Facebook
    If you visit our Facebook fan page, Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, collects, stores and processes your personal data in accordance with Facebook's privacy policy. You can find the privacy policy here:

    https://de-de.facebook.com/policy.php

    As part of the "Facebook Insights" function, Facebook may provide us with the following categories of data in anonymized / statistical form for the purpose of measuring performance and optimizing our Facebook presence:

     

    - Predefined interactions on our fan page

    - Timestamp

    - Country/city of the user

    - HTTP language code

    - Age/gender group

    - Previously visited website (so-called referral URL)

    - End device of the user

    - Facebook user ID (if logged in)


    With regard to the processing of Insights data, there is joint responsibility between Facebook and us, under which Facebook has assumed primary responsibility. This concerns the processing of Insights data and the implementation of data subjects' rights. Please therefore contact Facebook directly regarding all obligations under the GDPR with regard to the processing of Insights data. We will forward any requests we receive in this regard to Facebook. Further details on this are set out in the Joint Controller Addendum, which you can find here:

    www.facebook.com/legal/terms/page_controller_addendum

    You can find more information about Facebook Insights here:

    https://analytics.facebook.com/features/list#automated_insights

    www.facebook.com/legal/terms/information_about_page_insights_data

     

    Facebook Custom Audience / Facebook Pixel

    We use the visitor action pixel of the provider Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland ("Facebook") on our website. The remarketing tag or tracking pixel from Facebook has been implemented. Facebook and we are jointly responsible for data processing.

     

    The Facebook pixel enables Facebook to determine the visitors to our online offering as a target group for the display of ads (so-called "Facebook ads"). A user can also be tracked across several websites. We use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences").

     

    With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes ("Audience Insights") by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

     

    The Facebook pixel is a JavaScript code that sends the following data to Facebook:

    - HTTP header information: including IP address, web browser information, page location, document, website URL and end device of the web browser (computer, smartphone, tablet, other) as well as date and time of use

    - Pixel-specific data: Pixel ID and Facebook cookie data including your Facebook ID (this is used to link events to a specific Facebook advertising account and therefore associate them with a Facebook user)

    - Additional information about the visit and about standard and user-defined data events.

     

    Further information can be found here.

     

    We also use the additional function "automatic extended matching". Here, data such as first and last name, place of residence, email addresses, telephone numbers or Facebook IDs of users are transmitted to Facebook in encrypted form to form target groups ("Custom Audiences" or "Look Alike Audiences"). This also includes data from non-Facebook users and from users who are not logged into Facebook when they visit our website. This can also be used to identify website visitors who have deactivated the storage of third-party cookies.

     

    If no Facebook cookies are stored in your browser, you will not be assigned to one of the user groups referred to as "Custom Audience". However, if the Facebook ID contained in the Facebook cookie has been assigned to a Facebook user, Facebook assigns this user to a so-called "Custom Audience" based on the rules we have defined.

     

    According to the case law of the European Court of Justice, we are jointly responsible with Facebook for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Facebook provides the associated IT infrastructure and the website of the social network and is generally the primary point of contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network.

     

    If data is transferred outside the European Union (EU) or the contracting states to the Agreement on the European Economic Area (EEA), Facebook obliges the recipients (including the US company Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) to comply with an appropriate data protection standard on the basis of so-called EU standard contractual clauses. In addition, a transfer to a third country may also take place on the basis of the recognition of an adequate level of data protection by the European Commission.

     

    We use the Facebook pixel to display the "Facebook ads" placed by us to Facebook users who have shown an interest in our online offering or who have certain characteristics that we transmit to Facebook (so-called "custom audiences").

     

    The legal basis for the use of Facebook Custom Audience is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

     

    Further information on this can be found here and in Facebook's privacy policy.

     

    Google AdSense

    We use the online advertising service Google AdSense, through which you can be presented with advertising tailored to your interests. Google AdSense is a web analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

     

    We are interested in showing you advertising that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements can be recognized by the reference "Google ads" in the respective advertisement.

     

    When you visit our website, Google receives the information that you have accessed our website. Google uses a web beacon to set a cookie on your computer. If you are logged in with your Google account, your data can be directly assigned to it. If you do not wish to be associated with your Google profile, you must log out. It is possible that this data may be passed on to Google's contractual partners, third parties and authorities. This website has also activated Google AdSense ads from third-party providers. The aforementioned data may be transferred to these third-party providers (named at https://support.google.com/dfp_sb/answer/94149).

     

    You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also deactivate the interest-based ads on Google via the link: www.google.de/ads/preferences

    Please note that this setting will be deleted if you delete your cookies. You can also permanently deactivate interest-based advertising in Firefox, Chrome and Internet Explorer browsers by downloading and installing the browser plug-in available at the following link:

    www.google.com/settings/ads/plugin

    Contact details from Google:

    Google Dublin, Google Ireland Ltd.

    Gordon House, 4 Barrow Street

    Dublin Ireland

    Phone: +353 (1) 436 1000

    Fax: +353 (1) 436 1001

     

    Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy

    Data protection conditions for advertising:

    www.google.de/intl/de/policies/technologies/ads

     

     

    Google Ads conversion tracking

    We use Google Ads to show you advertising on Google and other third-party websites. Google Ads is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

     

    Conversion tracking allows us to determine how successful the individual advertising measures are. The purpose of this is to show you advertising that is of interest to you and to make our website more interesting for you. The advertising is delivered by Google via so-called "ad servers". For this purpose, we use cookies that can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

     

    These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the website of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

    Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our state of knowledge: Through the integration of AdWords conversion tracking, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

    You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

    http://www.google.com/settings/ads/plugin

    Contact details from Google:

    Google Dublin, Google Ireland Ltd.

    Gordon House, 4 Barrow Street

    Dublin Ireland

    Phone: +353 (1) 436 1000

    Fax: +353 (1) 436 1001

    Further information on data protection at Google can be found here: https://business.safety.google/gdpr/

     

    Google Ads Remarketing

    We use Google Ads Remarketing. Google Ads Remarketing is a web analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

    This application can be used to show you advertisements from us on other websites after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. This allows Google to determine your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.

    The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

    Contact details from Google:

    Google Dublin, Google Ireland Ltd.
    Gordon House, 4 Barrow Street
    Dublin Ireland
    Phone: +353 (1) 436 1000
    Fax: +353 (1) 436 1001

    Further information on data protection at Google can be found here: https://business.safety.google/gdpr/

     

    Google Fonts

    We use Google Fonts on some of our websites. This allows us to integrate certain fonts into our website. These fonts are provided by Google via servers in the USA. When accessing our website, the visitor's web browser establishes a direct connection to these servers. Among other things, the visitor's IP address is transmitted to Google and stored there.

     

    Further information about Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

    Further information on data protection at Google:

    https://www.google.com/policies/privacy/

     

    Google reCAPTCHA

    In order to ensure sufficient data security when submitting forms, we use the reCAPTCHA service in certain cases, a service provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

    This allows us to distinguish whether the input is made by a human or abusively by automated computer programs (bots). By using reCAPTCHA, the user's IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. The data protection provisions of Google LLC apply to this.

    The legal basis for the use of reCAPTCHA is Art. 6 para. 1 lit. f GDPR. The verification of form entries as to whether they were created by a human constitutes a legitimate interest of the website operator.

     

    European contact details of Google:

    Google Dublin, Google Ireland Ltd.

    Gordon House, 4 Barrow Street

    Dublin D04 E5W5

    Ireland
    Phone: +353 1 543 1004

    Further information on the data protection guidelines of Google LLC. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/

     

    Instagram

    If you visit our Instagram channel, personal data will be stored and processed by Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as the provider of Instagram, in accordance with Instagram's privacy policy. You can find the privacy policy here:

    https://help.instagram.com/519522125107875

    We use the statistics service Instagram Insights for the purpose of needs-based design and continuous optimization of our pages. This service records your activity on our site and makes it available to us in anonymized statistics. This provides us with information about, among other things, the interactions of our fan page visitors, the views of our page, the reach of posts, information about the activity of our subscribers and information about the countries and locations from which our visitors come, as well as statistics about the gender ratios of our visitors. It is not possible for us to draw conclusions about individual users or access individual user profiles.

     

    LinkedIn

    On our LinkedIn page we inform you about career prospects with us and you can contact us directly.

     

    Personal user data is processed by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

     

    We use the analytics functions provided by LinkedIn to optimize the performance of our LinkedIn page. LinkedIn provides us with a statically prepared - i.e. anonymized - compilation of certain data. This includes the following data categories, among others Conversions (achievement of certain targets such as registrations for events, leads), user actions (e.g. clicks, views of certain ads) and target groups (e.g. professional position, industry). It is not possible for us to draw conclusions about individual users or access individual user profiles.

     

    You can find more information about LinkedIn's analytics functions at:

    https://business.linkedin.com/de-de/marketing-solutions/reporting-analytics

     

    We can also search for suitable candidates for vacant positions based on certain characteristics (e.g. current position, skills, professional experience, salary expectations). In this way, we can be shown specific LinkedIn profiles that we can contact directly.

     

    You can find LinkedIn's privacy policy at:

    https://www.linkedin.com/legal/privacy-policy

     

    Paypal

    We offer the option of processing the payment transaction via the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

    When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered

    - "Purchase on account" via PayPal, we pass on your payment data to PayPal as part of the payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values.

    Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

     

    Pinterest

    On our website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA ("Pinterest"). When you visit a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

    Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy can be found in Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy

     

    Shopify

    We host our website at Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, and we use Shopify on the basis of processing on our behalf.

    When you visit our website, Shopify collects your IP address and information about the device you are using and your browser. Shopify also analyzes user behavior and creates user statistics. When you make a purchase via our website, Shopify collects your name, e-mail address, delivery and billing addresses, payment data and other data related to the purchase (e.g. telephone number, amount of sales made, etc.). Shopify stores cookies in your browser for analysis purposes.

    All data collected on our website is processed on Shopify's servers. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

     

    Shopify Payments

    We use the payment service provider "Shopify Payments", If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process.

    The transfer of your data to Stripe is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past. All data required for payment processing is used exclusively for the execution of payments and transmitted via the "SSL" procedure. Stripe is certified according to PCI DSS.

    Stripe may transfer, process and store personal data outside the EU. In this case, Stripe has agreed EU standard contractual clauses for the transfer of data outside the EU/EEA, which ensure a level of data protection comparable to the GDPR.

    You can find more information about Shopify Payments' data protection at the following Internet address: https://www.shopify.com/legal/privacy.

    You can find more information about Stripe's data protection at: https://stripe.com/de/privacy.

     

    Stripe

    We offer the option of payment via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When paying via Stripe, we will pass on the information you provide during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Stripe's data protection at: https://stripe.com/de/privacy#translation.

     

    Tik Tok

    On our TikTok channel we present our services in short form and inform you about current promotions.

     

    The user's personal data is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). You can find TikTok's privacy policy at

    https://www.tiktok.com/legal/privacy-policy?lang=de-DE

     

    With the help of TikTok's analytics functions, we can measure the performance of our channel. For this purpose, TikTok provides us with the following information in statistical form: Audiences (e.g. characteristics of target groups for the delivery of advertisements such as age, gender and country), interactions (e.g. likes, duration of video playback), referral information (e.g. from where the users came to the video), conclusions about individual users and access to individual user profiles by us are not possible.

     

    You can find more information about TikTok's analytics functions at:

    https://ads.tiktok.com/marketing_api/docs?rid=bfu8bedbv2c&id=100509

     

    YouTube videos

    On our YouTube channel, you can find videos or helpful tips about our range. The customer service team also professionally answers users' questions and comments on YouTube.

    Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland ("Google"), as the operator of YouTube, in accordance with Google's privacy policy. You can find the privacy policy here: https://policies.google.com/privacy?hl=de&gl=de

     

    With the help of YouTube's analytics functions, we are able to carry out certain statistical evaluations to optimize our channel. This includes, in particular, details of the most popular videos (e.g. time spent by users, ranking of videos), target groups (e.g. countries, language settings, age and gender, activity times) and the reach of our channel (e.g. where users were redirected to a video from) and impressions (e.g. how many users have seen a particular ad). It is not possible for us to draw conclusions about individual users or access individual user profiles.

     

    You can find more information about YouTube's analytics functions at:

    https://support.google.com/youtube/answer/9002587?hl=de

     

    eTracker

    The provider of this website uses services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyze usage data. We do not use cookies for web analysis by default. If we use analysis and optimization cookies, we will obtain your express consent separately beforehand. If this is the case and you consent, cookies are used to enable a statistical reach analysis of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that enables a user to be identified.

    The data generated by etracker on behalf of the provider of this website is processed and stored by etracker exclusively in Germany and is therefore subject to strict German and European data protection laws and standards. etracker has been independently audited and certified in this respect and has been awarded the ePrivacyseal data protection seal of approval.

    Data processing is carried out on the basis of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest lies in the optimization of our online offering and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. No other use, merging with other data or forwarding to third parties is carried out by etracker.

     

    1. Data security and security measures

    We undertake toprotect your privacy at and to treat your personal data confidentially. To this end, we take extensive technical and organizational security precautions, which are regularlyreviewed and adapted to technological progress.

    Thisincludes the use of recognized encryption methods (SSL or TLS). Data disclosedunencrypted , for example by unencrypted e-mail, may be read by third parties. We have no influence over this. It is the responsibility of the respective user toprotect the data provided by him/her to against misuse by means of encryption or in any other way .

     

    1. Changes to the privacy policy

    We reserve the right to update this declaration at any time if necessary.

     

    1. Your rights

    Here you will find your rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact the controller in this regard (Section 2).

     

    Right to withdraw your consent under data protection law in accordance with Art. 7 para. 3 sentence 1 GDPR

    You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the point of withdrawal.

    a)Right to information pursuant to Art. 15 GDPR

    You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

    b)Right to rectification and completion pursuant to Art. 16 GDPR

    You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

    c)Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

    You have the right to erasure if the processing is not necessary.
    This is the case, for example, if your data is no longer necessary for the original purposes, if you have withdrawn your declaration of consent under data protection law or if the data has been processed unlawfully.

    d)Right to restriction of processing pursuant to Art. 18 GDPR

    You have a right to restriction of processing, e.g. if you believe that the personal data is incorrect.

    e)Right to data portability pursuant to Art. 20 GDPR

    You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

    f)Right to object pursuant to Art. 21 GDPR

    You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.

    In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

     

    g)Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR

      You have the right not to be subject to a decision based solely on automated processing - including profiling - except in the exceptional circumstances mentioned in Art. 22 GDPR.

       

      No decision-making based solely on automated processing - including profiling - takes place.

       

      h)Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR

        You can also lodge a complaint with a data protection supervisory authority at any time, for example if you are of the opinion that the data processing does not comply with data protection regulations.

         

        OpenAI AI chatbot

         

        1. introduction We use an AI-supported chatbot on our website to offer you improved customer service. Personal data is processed when you use the chatbot. In the following, we will inform you about what data is collected, how it is used and what rights you have.

        2. responsible person

        Black Label Coffee UG (limited liability)

        [email protected]

        +49 (0) 7731-9398320

        3. purpose of the data processing The chatbot is used for the automated response to customer inquiries, support with orders and the provision of information about our products and services. Its use is voluntary.

        4 What data is processed? When using the chatbot, the following data may be collected and processed:

        • Texts entered by the user (chat history)

        • Technical information such as IP address, browser type, time of the request

        • Other personal data provided voluntarily (e.g. name, e-mail address, order information)

        5. transfer of data to third parties (OpenAI) We use the technology of OpenAI (OpenAI, L.L.C., USA) to provide the chatbot. The data entered is forwarded to OpenAI to answer the queries. OpenAI processes this data in accordance with its own privacy policy (available at https://openai.com/privacy).

        As OpenAI is a company based in the USA, data may be transferred to a third country. We have taken appropriate protective measures with OpenAI (e.g. standard contractual clauses of the EU Commission) to ensure an adequate level of data protection.

        6. legal basis of the processing The processing of data in the context of chatbot use takes place on the basis of:

        • Art. 6 para. 1 lit. b GDPR (fulfillment of contract), if the communication is necessary for the processing of orders.

        • Art. 6 para. 1 lit. f GDPR (legitimate interest), as the chatbot enables efficient customer service.

        • If you have to actively consent to the use of the chatbot, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR (consent). Consent can be withdrawn at any time.

        7 Storage duration and deletion Chat histories are only stored for as long as is necessary to process the request. Any further storage will only take place if this is required by law or appears necessary to prevent misuse.

        8. your rights as a data subject You have the following rights under the GDPR:

        • Right to information (§ 15 DSGVO)

        • Right to rectification (§ 16 DSGVO)

        • Right to erasure (§ 17 DSGVO)

        • Right to restriction of processing (§ 18 DSGVO)

        • Right to object (§ 21 DSGVO)

        • Right to data portability (§ 20 DSGVO)

        • Right to lodge a complaint with a supervisory authority

        To exercise your rights, you can contact us using the contact details given above.

        9. cookies and tracking in connection with the chatbot If the chatbot uses cookies or tracking technologies, you will be informed about this in our cookie policy. If necessary, you can manage your consent to this in the cookie banner.

        10. changes to this privacy policy We reserve the right to amend this privacy policy as necessary in order to comply with legal requirements or to reflect changes to our services. The current version is always available on our website.