We are pleased that you are visiting our website and grateful for your interest. Protection of your private affairs during use of our website is very important to us, so please familiarise yourself with the following information regarding our handling of your personal data:
1. Responsible body and scope of application
1.1 Responsible data processing body as outlined in the data protection basic ordinance (“DS-GVO”) is Alois Dallmayr KG, Dienerstrasse 14-15, D-80331 Munich (hereinafter referred to as “Dallmayr”, “we” or “us”).
1.2 This data protection declaration applies to our website, which can be accessed at the domain https://www.dallmayr.com (“website”). It also applies to internet offers from Alois Dallmayr KG, and a link on the website refers you to the data protection declaration. This does not apply to third-party providers.
1.3 We have implemented appropriate technical and organisational measures to protect your data. Amongst other things transfer of your data contained in our contact forms is encrypted with an SSL certificate.
2. Personal data
Personal data means any information referring to an identified or identifiable individual; an individual is deemed identifiable, if they are directly or indirectly identifiable, particularly through allocation to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this individual person. Examples of this information would be your first name and surname, address and email address, telephone number and date of birth.
3. Data processing and legal foundation
As a matter of principle you can visit our website without disclosing personal data. We collect, process and use your personal data on our website as follows:
3.1 Data for setting up a customer account
If you set up a customer account on our website, the personal data provided by you (e.g. name, address, email address, telephone, title and access data) are stored and processed in the Dallmayr customer data bank. Processing of these data is performed to fulfil a contract or pre-contract measures (article 6 paragraph 1 letter b. DS-GVO). You can deactivate or cancel your customer account at any time at the contact address given under number 7. In case of cancellation we delete your personal data without delay. In case of deactivation of the customer account we delete the customer account after maximum two weeks, unless we require the data for enforcement, exercise or defence of legal claims or if deletion is prevented by statutory or contractual retention periods.
If, when setting up your account, you confirmed your agreement to receiving advertising information, Dallmayr uses the personal data provided by you for direct advertising. This use is conditional on your agreement (article 6 paragraph 1 letter a DS-GVO). This agreement is voluntary, and you can withdraw this with future effect at any time without stating reasons at the contact address given under number 7. If we contact you by email, every email contains an unsubscribe link at the end that allows your objection. Upon receiving unsubscription or withdrawal of the agreement, we delete your data, unless we still require them for contract fulfilment, or there are legal, statutory or contractual retention periods, or if continued storage is required for enforcement, exercise or defence of legal claims.
3.2 Your contact by contact form or email
If you contact us (e.g. by contact, reservation form or email), your personal data provided in your contact form are stored and processed by Dallmayr. The data covered by a contact form can be seen in the relevant form. These data are stored and used only for answering your enquiry or for contact and any connected technical administration, then they are transferred to the business area you indicate (e.g. Dallmayr Delikatessen). Processing of these data is performed in fulfilment of contract or pre-contract measures (article 6 paragraph 1 letter b. DS-GVO) or indeed when it lies in our justified interest, when any contrary interest on your side is not predominant, since the processing of these enquiries is in both our interests (article 6 paragraph 1 letter f DS-GVO). After the end of processing the enquiry we retain the correspondence for another 3 years from the end of the calendar year when termination takes place, after which we delete your data or retain them only if legal, statutory or contractual retention periods exist or continued storage is required for enforcement, exercise or defence of legal claims.
3.3 Data for subscription to the newsletter
If you subscribe to our newsletter service, your personal data (e.g. name, address and email address) are stored and processed by Dallmayr for purposes of despatching newsletters. Processing of these data is undertaken in line with your agreement (article 6 paragraph 1 letter c DSGVO) or is performed to fulfil the contract (article 6 paragraph 1 letter b DSGVO). In this case we regularly send you advertising information about the services and products connected with our offers. You can unsubscribe from the newsletter at any time at the contact address given under number 7 or by following the unsubscribe link at the end of every newsletter. Upon successful unsubscription your email address is deleted from our newsletter distribution system without delay.
3.4 Data used for advertising purposes
For our own advertising purposes we reserve the right to store in summary lists your first and surname, your postal address and - if we have received these additional details from you under the contract relationship - your title, academic degree, your year of birth and professional, industry or business title and use them for sending interesting offers and information on our products by mail. Processing of your data for this purpose relies on Dallmayr having a justified interest (article 6 paragraph1 letter f DSGVO) in advertising its products and services. We also assume that as a matter of principle you are interested in this purely postal advertising, otherwise you can object to storage and use of your data for this purpose at any time with future effect without giving reasons at the contact address given under number 7. We delete your data for postal advertising without delay in case of objection, unless there is another legal basis for the processing or there exist legal, statutory or contractual retention periods, or indeed continued storage is required for enforcement, exercise or defence of legal claims.
4. Disclosure of personal data
4.1 As a matter of principle we do not disclose personal data to third parties, unless required in fulfilment of the contract (e.g. communication of address data to delivery companies for orders) or permissible due to relevant legal provisions or you have given your agreement.
4.2 In the context of our business processes we are sometimes supported by service providers (so-called contract processors) (e.g. maintaining the website or other IT services or for servicing) who may be exposed to your personal data. These entities process personal data purely at our direction and for our business purposes. We have committed the order processors to us through so-called order processor contracts, to ensure proper processing. Order processors only receive access to personal data as required to fulfil their activity. These contract processors are specifically forbidden to use or process your personal data for any other purpose.
4.3 If in the context of future data collection further categories of recipients of personal data emerge, we shall inform you of this at the time of collecting details for this purpose.
5. Deletion of data
Please note that due to legal retention periods we can be obliged to store certain data for the duration of the legally specified period. Your data are deleted as soon as they are no longer necessary for the intended purposes or you withdraw your agreement and no legal, contractual or statutory retention obligations exist and the data are not needed for enforcement, exercise or defence of legal claims.
6. User data, cookies, pixels, plug-ins
6.1 For technical reasons every access to our website may cause your IP address and further user data (e.g. date and time of access, name of page accessed, amount of data transmitted to the enquiring provider) to be collected and processed on our server. This is required for performing the communication process with our website requested by you. This processing is based on our justified interest (article 6 paragraph 1 letter f DSGVO) in performing the communication. We assume that this is also in your interest, since the website cannot be displayed without this communication. At any time, and without giving reasons, you can object to the processing of your data for this purpose with future effect. We nevertheless inform you that, on accessing the website, your personal data can also be processed following objection, since for technical reasons it is not possible to set the processing necessary for individual users of the website or generally. There are compelling protection reasons for the processing that outweigh your interests, rights and freedoms. If you wish to obstruct the processing described above, we would ask you no longer to access our website.
6.3 The main cookies we use are:
(a) First party session cookies: first party session cookies are cookies originating with ourselves with a view to facilitating the customer-friendly use of our website, e.g. by storage of user settings (e.g. language, storage of the shopping basket contents). At the end of a browser session these cookies are automatically deleted.
(i) CapsaQS cookie: This cookie enables interim storage of the shopping basket by storing the contents until termination of the browser session. This processing is based on article 6 paragraph 1 letter b DSGVO (processing for fulfilment of contract or performance of pre-contract measures). It is not possible to object to this.
(b) First party persistent cookies: First party persistent cookies are cookies originating with ourselves and only deleted after a certain time.
(ii) Cookies for reservation forms: We provide the “Bp Event” service from the company Bankettprofi GmbH on our domains www.dallmayr.com and reservierungen.dallmayr.com. Bp Event enables users to make reservations online. In order to use Bp Event, it is necessary to provide certain data (name, email address, telephone number). If, while making a reservation, the user selects the option “Keep my input for the next reservation”, this sets a cookie on their device. The cookie stores the user’s data mentioned above to prevent the user having to re-enter it the next time they use Bp Event. Processing is based on article 6, paragraph 1, letter b DSGVO (processing for the performance of a contract or to take steps prior to entering into a contract). The cookie will be deleted after 30 years if it is not deleted by the user beforehand.
(c) Third party persistent cookies: Third party persistent cookies are cookies inserted by a third party upon visits to our page.
Google uses this information on behalf of the operator of this website with a view to assessing your use of the website, compiling reports about website activity for the operator and further compiling for the website operator services connected with the activity and internet usage. The IP address communicated by your browser to Google Analytics is not combined by Google with other data. This processing is based on article 6 paragraph 1 letter a DSGVO (agreement).
As an alternative to the browser add-on or in browsers on mobile devices please click this link, in order to prevent future collection by Google Analytics on this website (the opt-out only functions in that browser and only for this domain). This involves placing an opt-out cookie on your device. If you delete cookies in this browser, you have to click this link once again.
For further information please visit https://www.google.com/analytics/terms/gb.html or https://support.google.com/analytics/answer/6004245?hl=en.
Plug-ins are software functions from third-party providers built into our page via an interface. Processing performed via this page are the sworn responsibility of the respective provider. You can read how a plug-in processes your data in the data protection declaration by the respective provider. In detail this affects the following providers:
(i) Google Maps: We link our website to functions from Google Maps, who may insert their own cookies. The data protection declaration by Google can be downloaded from the following link: https://www.google.de/intl/en/policies/privacy/.
(ii) Google Recaptcha: This plug-in checks whether an enquiry in our contact form is automated from a robot. The data protection declaration by Google can be downloaded from the following link: https://www.google.de/intl/en/policies/privacy/.
(iii) UTZ Certified: By incorporating the Iframe from UTZ Certified, you are enabled to trace the origin of your coffee. The data protection declaration by UTZ Certified can be downloaded at the following link: https://utz.org/wp-content/uploads/2018/05/18-05-Rainforest-Alliance-Privacy-Policy.pdf, and the cookie declaration can be downloaded from the following link: https://utz.org/cookie-policy/.
(iv) The provider Monotype GmbH inserts a tracking pixel with the aim of counting page access for the purpose of calculating script licenses. Monotype is responsible for this processing. The data protection declaration from Monotype can be downloaded from the following link: https://www.monotype.com/
7. Your rights and contact details
7.1 If processing of your personal data is based on an agreement, you can withdraw your agreement at any time with future effect. This has no effect on any data processing performed before agreement withdrawal.
Right to object
If the processing of your personal data is based on article 6 paragraph 1 letter f DSGVO (processing to protect the justified interests of the responsible party), you have the right to raise objection to the processing at any time on conditions laid out in the law e.g. for reasons resulting from your particular situation or in the case of processing for direct advertising purposes.
You have the right to information about the personal data concerning you. Under provisions outlined in the law you are entitled to correction, deletion or limitation to processing and data transfer. You also have the right to lodge a complaint with a supervising authority, especially in the member state where you normally reside or work or where the alleged infringement took place.
7.2 The following are our contact details:
Alois Dallmayr KG
Telephone switchboard: +49 89 / 2135-0
Telephone customer service: +49 89 / 2135-130
email to: infodallmayrde.
The Dallmayr KG data protection officer can be contacted at the following address:
Firma SBU-Sicherheitstechnische Betreuung von Unternehmen
Friemarer Strasse 38
As at 23.05.2018