The protection of your personal data is very important to Krombacher. Of course, we strictly adhere to the data protection regulations when processing your data.
Our information systems are protected by technical and organisational measures designed to safeguard the data protection objectives, confidentiality, integrity, availability and reliability (Art. 24, 32 of the General Data Protection Regulation, GDPR).
Our Data Protection Supervisor can be reached at:
1. Key terms
Cookies: Text files, which the accessed web server places on the browser of the user’s computer. This stored cookie information may contain both an identifier (cookie ID), which serves as recognition, as well as content information, such as registration status or information about websites visited. With subsequent new visits to this page, the browser sends the cookie information back to the web server with each request. Most browsers accept cookies automatically. You can manage your cookies by using your browser’s settings (usually under ‘options’ or ‘preferences’). This allows you to disable or otherwise limit the storing of cookies depending on your individual approval. You can also delete cookies at any time. We do not use IP addresses or cookies to identify you personally. If you have chosen in your login/profile settings to automatically remain logged in, a long-term cookie will be used to submit an anonymous login token.
Browser: Computer programme for displaying websites (such as Chrome, Firefox, Safari).
GDPR: Regulation (EU) 2016/679 of the European Parliament and Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, replacing Directive 95/46/EC (General Data Protection Regulation), available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.
Personal data: Personal data is any information relating to identified or identifiable natural persons. Natural persons are considered to be identifiable, if they can be identified directly or indirectly, in particular by association with an identifier such as a name, identification number, location data, online identifier, or one or more special features that embody the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.
Processing: Any operation performed with or without the help of automated procedures or any such sequence of operations related to personal data , such as collecting, recording, organising, ordering, storing, adapting or modifying, reading, querying, using, disclosing, submitting, distributing or any other form of providing, adjusting, linking, limiting, erasing, or destroying the data.
For the duration of your visit to our website, cookies will be stored on your hard drive and, depending on your browser settings, will be deleted when you exit the browser again. Cookies can be disabled or turned off in your browser settings. Session cookies are automatically deleted when you close your browser. Persistent cookies remain even after the browser is closed.
A cookie is a data record that is generated by a web server and stored on your device. These are required to ensure the smooth and improved functioning of the website.
In addition, cookies are used for anonymous statistical evaluation for the duration of a session. Cookies do not contain personal information and are not intended to identify you on third-party websites.
More information can be found here.
Local Storage enables your preferences when using the Krombacher media library to be stored on your computer and used by you. The data from Local Storage is used, for example, to provide you with recommendations based on your anonymous usage or to enable you to create a watch list and subscription list. The following information is stored by the Krombacher Mediathek as local data:
- the addresses of the pages you call up in the Krombacher Mediathek,
- the addresses of the Krombacher Mediathek pages that you have added to your watch list
Third parties cannot access the data stored in the Local Storage. They are not passed on to third parties and are not used for advertising purposes. We use these techniques in the legitimate interest to be able to make you an attractive fully functional offer on the basis of article 6 paragraph 1 letter f DSGVO.
3. Purpose and legal basis of data processing
As far as required for carrying out contractual obligations for providing services or for processing requests (Art. 6, paragraph 1 b) of the General Data Protection Regulation, GDPR) and for the company’s own advertising purposes.
Data will not be disclosed to other third parties.
4. When does Krombacher use and process personal data?
In some cases we need your personal data, for example:
• when you enter a competition
• when you contact us
• for catalogue requests
• for subscribing or unsubscribing to our newsletter
As far as required for carrying out these services or for processing enquiries, we collect and process personal data you have submitted (in particular your surname, given name, date of birth, and e-mail address).
We know that careful handling of your personal data is very important. Privacy is a high priority at Krombacher.
Of course, when collecting, processing, and using data, we comply in full with the legal provisions of the Federal Data Protection and the Telemedia Act. Your data helps us to tailor our service to your needs and constantly improve our offer.
You may request information about the stored data, why it is being stored, and its possible recipients at any time. Additionally, in accordance with legal provisions, you have the right to correct, block, or delete any personal data. You may submit such a request to Krombacher International GmbH, HagenerStraße 261, 57223 Kreuztal in writing, by e-mail email@example.com, or by telephone +49 2732 - 880 880.
5. Applicant Privacy
We collect and process the personal data of applicants for the purpose of handling applications. Processing may also be digital. This is always the case when a candidate submits application documents digitally, for example by e-mail or on our website using an online form. If we enter into an employment contract with an applicant, the data transmitted will be stored for the purposes of processing the employment relationship in compliance with the legal requirements. If no employment contract is entered into with the applicant, the application documents will be automatically deleted four months after the announcement of the cancellation decision unless deletion would preclude other legitimate interests, such as burden of proof in proceedings under the General Equal Treatment Act (AGG).
6. Automated decision-making
We currently do not use automated decision-making methods or profiling.
7. Data processing for advertising purposes
We use your data for our own advertising purposes. We would like to inform you about new products, our services and interesting events.
Our Newsletter will only be sent to you, if you subscribe to it.
More about your rights can be found under the heading ‘Rights of persons affected’.
8. Objection to promotional advertising
You are entitled to object to the use of your data for advertising purposes without incurring any costs other than the transmission costs according to the basic rates. To do this, the following contacts are available:
Krombacher International GmbH
Hagener Straße 261
57223 Kreuztal-Krombach, Germany
Tel. +49 (0)2732 880-880
9. Recipients of personal data
Within the scope of the relevant legislative powers, your personal data will be disclosed to the following companies:
• Postal service providers, freight forwarders, shipping services, disposal of file/data media
• IT service providers for maintenance and software support
• Other service providers as part of payment processing, credit checks
• Collection and dialogue marketing.
10. Duration of data storage
We store your data for as long as the purposes involved require. Appropriate deletion protocols are available and are continuously adapted to the statutory and required conditions.
11. Rights of the party offected
Your rights as the party affected are fully guaranteed by Krombacher.
Information requirements pursuant to article 13, 14 and 34:
• Right to rectification art. 16
• Right to cancellation art. 17
• Right to restricted processing art. 18
• Notification obligation pursuant to art. 19
• Right to data portability pursuant to art. 20
• Right to object of the party affected pursuant to art. 21
• Right to information of the party affected pursuant to art. 15.
• Right of appeal to supervisory authorities under Art. 77.
If you assert one or more of the above listed data subject rights against us, we will store this circumstance on the basis of Article 6 paragraph 1 letter f) DSGVO. The fact that we can also prove that we have duly complied with your request in cases of doubt is to be considered a legitimate interest within the meaning of this provision.
Right of appeal to the competent supervisory authority:
In the event of violations of data protection laws, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection commissioner of the federal state of North Rhine-Westphalia, where our company has its headquarters. You can reach the authority via the link: https://www.ldi.nrw.de/
12. Other rights
The person responsible for your stored personal data is entitled to the following rights:
• Deletion or limiting of processing
• Objection to processing
• Data portability
• Right of appeal to regulatory authorities
13. Contacts: How can I exercise the rights listed above?
In order to exercise your rights, you can contact the Data Protection Officer (see above) or the person responsible (see above). We will process your requests in accordance with the legal requirements as soon as possible, free of charge, and inform you of any action that we have taken.
14. Withdrawal of consent
You may withdraw your consent to the processing of the data you have provided at any time. The easiest way to withdraw your consent is by sending an e-mail to the contact details listed above. This withdrawal of consent shall not affect the legality of the processing of your data until your consent has been fully revoked. Please note, however, that you may need to submit your data again, before making a purchase.
15. Right to object
You have the right to object to the processing of your personal data at any time.
Should you wish to file an objection, we will no longer process your personal data in this case, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing is for the purposes of enforcing, pursuing, or defending legal claims.
Send any objections to firstname.lastname@example.org.
16. Update and changes
17. Web Analytics
17.1 Analysis of the web pages of Krombacher by Google Analytics
Our website uses the analysis service Google Analytics. The provider is Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Usage profiles may be created from the data using a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of your Internet browser. These cookies make it possible to recognise your browser again. The data collected using Google Analytics technologies will not be used to personally identify visitors to our website and will not be merged with personal data about the bearer of the pseudonym without the specific consent of the person concerned.
You may object to your data being collected and stored in the future at any time.. In order to object to the future collection and storage of your data, you may use the following link to obtain an opt-out cookie from Google Analytics, which will ensure that in future, no visitor data will be collected from your browser and stored at Google Analytics:
Where the DoubleClick Ad Exchange, which is a web advertising service of Google Inc., USA (‘Google’), places advertising (text messages, banners, etc.) on this website, your browser may store a cookie sent by Google Inc. or by a third party. The information stored in this cookie may be recorded, collected, and analysed by Google Inc. or by third parties. Furthermore, the DoubleClick Ad Exchange also uses so-called ‘web beacons’ (small invisible images) for collecting information. These web beacons record, collect and analyse simple actions, such as visitor traffic on the website. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. Google uses the information thus obtained to perform an analysis of your usage behaviour with regard to the DoubleClick Ad Exchange advertisements.
Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. If IP addresses are transmitted and stored in this context, this is done only to counteract and filter spam or fraud (ad impression-spam and click-spam). These data are exclusively strictly accessible to anti-abuse teams. The IP address is not associated with other Google data stored by Google.
You may prevent cookies from being stored on your hard drive and also prevent the display of web beacons. In order to do this, you must select ‘Do not accept cookies’ in your browser settings (in Internet Explorer under ‘Tools/Internet Options/Privacy/Settings’, in Firefox under ‘Tools/Settings/Privacy/Cookies’).
You will find more information here: https://policies.google.com/privacv?hl=en.
This website uses the web analysis service Hotjar of Hotjar Ltd.
When using this tool, we pay special attention to the protection of your personal data. For example, we can only track which buttons are clicked, the course of the mouse, how far it scrolls, the screen size of the device, device type and browser information, geographic location (country only) and the preferred language to display our website. Areas of the websites where personal data of you or third parties are displayed are automatically hidden by Hotjar and therefore cannot be traced at any time. In order to exclude the possibility of direct personal references, IP addresses are only stored and processed anonymously. However, Hotjar uses various third-party services such as Google Analytics and Optimizely. It may therefore be the case that these services collect data that are transmitted by your browser as part of web page requests. These would be, for example, cookies or your IP address. In these exceptional cases, in accordance with Art. 6 para. 1 letter a DSGVO, this processing is carried out on the basis of the consent you have given for the purpose of statistical analysis of user behaviour for optimisation and marketing purposes.
Hotjar offers every user the option of preventing the use of the Hotjar tool by means of a "Do Not Track" header, so that no data about the visit to the respective website is recorded. This is a setting that is supported by all common browsers in current versions. To do this, your browser sends a request to Hotjar to disable tracking for that user. If you use our websites with different browsers/computers, you must set up the "Do Not Track" header separately for each of these browsers/computers.
When you visit a Hotjar-based website, you can prevent Hotjar from collecting your data at any time by going to the Hotjar opt-out page www.hotjar.com/legal/compliance/opt-out and clicking deactivate Hotjar.
Third Party Information: Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788). For more information about privacy, please visit the following Hotjar websites:
18. Data processing for advertising purposes
We only use your data for our own advertising purposes. We would like to inform you about new products, our services and interesting events. Therefore, we also use your data to recommend certain products, services or events that might interest you in addition to your purchases. The evaluation of your purchase history and the sending of corresponding advertising by post or e-mail to existing customers is only carried out for GVS products and services, taking into account your legitimate interests. The sending by e-mail is only carried out with your consent, which you can revoke at any time with effect for the future.
18.1 Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature allows you to link the advertising audiences created with Google Analytics Remarketing to the cross-device capabilities of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been customized for you on one device (e.g. mobile phone) based on your previous usage and surfing behavior can also be displayed on another of your devices (e.g. tablet or PC). If you have given permission, Google will link your web and app browsing history to your Google Account for this purpose. This allows the same personalized advertising messages to be displayed on any device you sign in with your Google Account. To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.
The summary of the data collected in your Google Account is based solely on your consent, which you can give or withdraw to Google (Art. 6 para. 1 lit. a DSGVO). In the case of data collection processes that are not merged into your Google Account (e.g. because you do not have a Google Account or because you have objected to the merging), the collection of data is based on Art. 6, para. 1, letter f, DSGVO. The legitimate interest arises from the fact that we have an interest in the anonymised analysis of website visitors for advertising purposes.
Although we register legitimate interests in the use and storage of "conversion cookies", we offer you opt-out options. You can permanently opt-out of cross-device remarketing/targeting by disabling personalized ads in your Google Account.
18.2 Google Ads and Google Conversion Tracking
This website uses Google Ads. Ads is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google Ads, we use what is known as conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser places on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we may recognize that the user clicked on the ad and was redirected to that page. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Every Google Ads customer receives a different cookie. The cookies cannot be tracked through the websites of Google Ads customers. The information collected through the conversion cookie is used to compile conversion statistics for ads customers who have opted in to conversion tracking. The customers will know the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the analysis of user behaviour in order to optimise both our website and our advertising.
Although we register legitimate interests in the use and storage of "conversion cookies", we offer you opt-out options. If you do not wish to participate in tracking, you can opt-out of this use by slightly disabling the Google Conversion Tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.
18.3 Facebook Pixel, Facebook Custom Audiences and Facebook Conversion
Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.
With the help of the Facebook pixel, Facebook is on the one hand able to determine you as a visitor to our online offer as a target group for the presentation of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called "conversion").
The processing of the data by Facebook is carried out within the framework of the Facebook data usage guidelines. Accordingly, general information on the display of Facebook Ads, in the Facebook Data Usage Policy. Special information and details about the Facebook pixel and its functionality can be found in the Facebook help area.
The use of the Facebook pixel and the storage of "conversion cookies" is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the analysis of user behaviour in order to optimise both our website and our advertising.
Order data processing contract
For the processing of data for which Facebook acts as a commissioned data processor, we have concluded a commissioned data processing agreement with Facebook, in which we oblige Facebook to protect the data of our customers and not to pass it on to third parties.