Data protection
Privacy Policy
1. Controller
The controller for data processing on this website is:
Mathias Hoehn
bierfabrik hoehn GmbH
Hauptstraße 71A
91074 Herzogenaurach
Germany
Email: info@bierfabrikhoehn.de
2. Hosting and Content Management (Shopify)
Our website is hosted by Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada (“Shopify”).
Shopify provides us with the online platform through which we operate our website and provide content and functionalities.
When using our website, data is automatically collected and processed by Shopify (e.g., IP address, time of access, device and browser information). This is done to ensure stable and secure operation of the website.
Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional website).
Shopify may also transfer data to third countries, particularly Canada and the USA. For Canada, there is an adequacy decision by the European Commission. For data transfers to the USA, Shopify uses standard contractual clauses of the European Commission.
Further information can be found in Shopify’s privacy policy:
https://www.shopify.de/legal/datenschutz
3. Access Data (Server Log Files)
When you access our website, information is automatically collected by the web server and stored in so-called server log files.
This includes in particular:
• IP address
• Date and time of access
• Pages/files accessed
• Browser type and operating system
• Referrer URL
This data is used exclusively to ensure the smooth operation of the website and to improve our offerings.
The legal basis is Art. 6 para. 1 lit. f GDPR.
4. Contacting Us
If you contact us by email or via a contact form, the data you provide (e.g., name, email address, message) will be processed to handle your inquiry.
Legal basis:
• Art. 6 para. 1 lit. b GDPR (contract initiation) or
• Art. 6 para. 1 lit. f GDPR (legitimate interest in processing inquiries)
5. Newsletter
If you subscribe to our newsletter, we will use your email address to regularly send you information about our offers, events, and products.
The subscription is done using the so-called double opt-in procedure. This means that after registration, you will receive an email in which you must confirm your subscription.
The newsletter is sent via Shopify (Shopify Email). Your data will therefore be processed on Shopify's servers.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
You can revoke your consent at any time, for example, via the unsubscribe link in the newsletter or by sending us a message.
6. Reservations and Bookings (Cowlender)
Our website offers the possibility to make reservations (e.g., for events or our taproom) and to book optional additional services.
The data you enter (e.g., name, contact details, booking details) will be processed to carry out your reservation.
Processing is based on:
• Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures)
For technical implementation, we use a third-party plugin (Cowlender). Data may be processed by this provider.
Further information can be found in the privacy policies of the respective provider.
7. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device.
We only use:
• technically necessary cookies (for the operation of the website and basic functions)
If additional cookies are used, this will only happen with your consent.
Legal basis:
• Art. 6 para. 1 lit. f GDPR (technically necessary cookies)
• Art. 6 para. 1 lit. a GDPR (cookies requiring consent)
You can change your cookie settings at any time via the corresponding settings in your browser.
8. Social Media
Our website contains links to our profiles on social networks (Facebook and Instagram).
When you click on these links, you will be redirected to the respective platform. Personal data may be processed by the respective provider.
Further information can be found in the privacy policies of the providers:
• Facebook: https://www.facebook.com/privacy/policy
• Instagram: https://help.instagram.com/519522125107875
9. Your Rights
You have the following rights within the framework of legal provisions:
• Information about your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
10. Revocation of Consent
You can revoke any given consent at any time with effect for the future.
-----