Country Grill - Rotisserie Chicken & More

 

Privacy Policy

 

This Privacy Policy describes how we process your personal data on this website, including the services offered therein.

For more information on how we process your personal data, please contact us using the contact details below.

 

Table of Contents

Privacy Policy. 1

1)      General information. 2

2)      Purposes and legal bases of the processing of personal data. 2

3)      Storage period of personal data. 2

4)      Rights of the data subject 2

5)      Information on data transferred to the United States. 3

6)      Withdrawal of your consent to data processing. 3

a)      Direct marketing purposes (Article 21 GDPR) 3

b)     Right to lodge a complaint with a supervisory authority. 3

7)      Additional information. 4

8)      SSL or TLS encryption. 4

9)      Details of the online services. 4

a)      External hosting. 4

b)     Recording. 4

10)   Cookies. 5

a)     Session cookies (technical cookies – essential) 5

b)     Contailor cookies (technical cookies – essential) 5

c)     Selectedlanguage (technical cookies – essential) 5

d)     Cookie consent with Usercentrics. 5

11)   Analysis of user behavior (web tracking systems; reach measurement) 6

a)     Use of Google Analytics. 6

12)   Use of plug-ins. 6

a)     Google Maps. 6

b)     Use of YouTube. 7

13)   Collection of additional data. 7

a)     Contact form – “Chicken & More” category: 7

b)     Party service request: 8

c)     Contact form – “Become a partner” category: 8

14)   Email 9

15)   Subcontractor/commissioned data processor 9

1. General information

Publisher:
Hertel Verwaltungs GmbH
Steinbachstraße 8
95126 Schwarzenbach an der Saale, Germany
Telephone: +49 (0)9284 9500-0

Fax: +49 (0)9284 9500-55
Email: info@countrygrill.de


Responsible for the website
Markus Hertel, Rainer Hertel


Responsible for data protection
Hertel Verwaltungs GmbH
Markus Hertel, Rainer Hertel
Email: info@countrygrill.de

 

Data Protection Officer:
Tom Böhmel
Telephone: +49 (0)9284 9500-31
Fax: +49 (0)9284 9500-55
Email: datenschutz@countrygrill.de

 

Managing Director:
Markus Hertel
Rainer Hertel
Telephone: +49 (0)9284 9500-0
Email: info@countrygrill.de

2.Purposes and legal bases of the processing of personal data

The legal basis of the processing of your data, unless otherwise stated, ensues from point (a) of Article 6(1) of the General Data Protection Regulation (GDPR). This enables us to process the data required to fulfill a task entrusted to us.
 

3. Storage period of personal data

Your data shall only be stored for as long as is necessary for the performance of the tasks, in due regard to the statutory retention periods.

4. Rights of the data subject

Insofar as we process the personal data that concerns you, you are entitled to the following rights as a data subject:
- If your personal data is processed, you have the right to obtain information your stored personal data (Article 15 GDPR).
- If inaccurate personal data is processed, you have a right to rectification (Article 16 GDPR).
-If the legal requirements are met, you may request the erasure or restriction of processing (Article 17, 18 GDPR).
- If processing is based on consent or on a contract and the data processing is carried out by automated means, you may have a right to data portability (Article 20 GDPR).
- If you have given consent to the processing and the processing is based on this consent, you may withdraw the consent at any time with future effect. The lawfulness of the
data processing carried out on the basis of the consent up to the withdrawal is not affected by this. You have the right to object, on grounds relating to your particular situation, at any time, to processing of personal data concerning you which is based on subparagraph of point (e) of Article 6(1) GDPR (sentence 1 of Article 21(1) GDPR).

5. Information on data transferred to the United States

Tools from companies based in the US, among others, are integrated on our website. When these tools are active, your personal data may be transferred to the US servers of the companies involved. Please note that the US is considered a third country that does not offer an adequate level of data protection for the purposes of EU data protection law. US companies are required to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. In view of this, it cannot be excluded that US authorities (e.g. intelligence services) process, analyze and permanently store your data on US servers for surveillance purposes. We have no control over these processing activities.

6. Withdrawal of your consent to data processing

A wide array of data processing operations are only possible with your explicit consent. You can withdraw an already given consent at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal. Right to object to the collection of data in specific cases and for

a) Direct marketing purposes (Article 21 GDPR)

If the data processing is based on point (e) or (f) of Article 6(1) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we shall no longer process your personal data unless we can demonstrate compelling legitimate ground for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims (objection in accordance with Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection in accordance with Article 21(2) GDPR).

b) Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the Bavarian Data Protection Authority for the Private Sector. You can contact the supervisory authority by way of the following contact details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de
Tel.: +49 (0)981 180093-0
Fax: +49 (0)981 180093-800
Email: poststelle@lda.bayern.de

7. Additional information

For more information about the processing of your personal data and your rights, you can contact us at the contact details mentioned above.
 

8. SSL or TLS encryption

This website uses SSL or TLS encryption for reasons of security and to safeguard the transmission of confidential content, such as orders or requests that you send to us as the website operator.

You can recognize an encrypted connection if the browser address bar changes from
“http://” to “https://” and a lock symbol appears in your browser bar.
The data you transmit to us cannot be read by third parties if the SSL or TLS encryption is activated.

9. Details of the online services

a) External hosting

Our web server is operated by the ProComp GmbH. The personal data you transmit when visiting our website is therefore processed on our behalf by ProComp GmbH.

Contact information:
Name of processor: ProComp Professional Computer GmbH
Address: Industrieallee 1, 95615 Marktredwitz, Germany
Email: info@procomp.de

The personal data collected on this website is stored on the web host’s servers. This may include, but is not limited to, IP addresses, contact requests, meta data and communication data, contractual data, contact data, names, website logins and other data generated through a website.

The web host is necessary for the performance of the contract with our potential and existing customers (point (b) of Article 6(1) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (point (f) of Article 6(1) GDPR).

Our web host shall only process your data to the extent necessary to fulfill its service obligations and shall follow our instructions with regard to this data.

To ensure that processing is compliant with data protection laws, we have concluded a contract for order processing with our web host.

b) Recording

When you access this website or others, you transmit data to the web server via your browser. The following data is recorded during an ongoing connection to ensure communication between your browser and our web server:

- Date and time of the request
- Website from which the data was requested
- Browser

This data is deleted once the connection ends.

10. Cookies

a) Session cookies (technical cookies – essential)

When you access this website, we store technical cookies (small data files) called session cookies on your device which are valid while you visit the website. We use these exclusively when you visit our website and only store the browser’s current session ID. This cookie is removed again when the browser session ends. IP addresses are not stored.

b) Contailor cookies (technical cookies – essential)

This cookie allows administrators/authors to log into the admin portal to enable editing.
The following personal data is collected:

- Username (encrypted)
- Password (as defined by a set password policy) (encrypted)
- Last login

The data is stored for 3 months from the first login. The 3-month cycle always starts as soon as the corresponding user logs in to the platform.

c) Selectedlanguage (technical cookies – essential)

This cookie memorizes the language set in the browser. When you visit the website again, the selected language is displayed once more. The setting is embedded in the browser accordingly. Personal data is not collected.

d) Cookie consent with Usercentrics

This website uses the cookie consent technology developed by Usercentrics to obtain your consent to the storage of specific cookies on your terminal or to the use of specific technologies and to document this in accordance with data protection law.

This technology is provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany; website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

The following personal data is transferred to Usercentrics when you enter our website:

- Your consent(s) or withdrawal of your consent(s)
- Your IP address
- Information about your browser
- Information about your terminal
- Time of your visit to the website

In addition, Usercentrics stores a cookie in your browser to assign the your consent or withdrawal. The data collected in this way is stored until you either request that we delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected. Usercentrics is contracted to obtain the statutory consents for the use of specific technologies. The legal basis ensues from sentence 1 of point (c) of Article 6(1) GDPR.

Contract for order processing

We have concluded a contract for order processing with Usercentrics. This is a contract required by data protection law and ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

12. Analysis of user behavior (web tracking systems; reach measurement)

a) Use of Google Analytics

This website uses Google Analytics, a web analysis service from Google, Inc. (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies” (text data files stored on your computer), which allow the website to analyze how users navigate on the website. The information in connection with your use of this website generated by the cookie is usually transmitted to a Google server in the US and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a Google server in the US and shortened there. Upon request by the website operator, Google shall use this information for the purpose of analyzing your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of the Google Analytics services is not merged with other data from Google. You may refuse the storage of cookies by selecting the appropriate settings on your browser. However, please note that if you do refuse, the full functionality of this website may not be available. You may also refuse the collection and processing of this data, generated by the cookie associated to your use of the website (including your IP address), by Google by downloading and installing the browser plugin at the following link (https://tools.google.com/dlpage/gaoptout?hl=en). In regard to the discussion in connection with the use of analysis tools with complete IP addresses, we wish to highlight that this website uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses are only processed in shortened form to prevent the identification of the person. If you use a browser on a mobile device, please click this link to refuse the collection of anonymized data by Google Analytics on this website for your browser in the future using a so-called “opt-out cookie”.

The IP addresses are transmitted to Google Analytics in an anonymized form.

The storage period is 14 months.

b) Use of YouTube

We use the YouTube.com platform to post our videos online and render them publicly available. YouTube is the service of a third party that is not affiliated with us, namely YouTube LLC.

Some of our product webpages contain links or connections to YouTube services. In general, we bear no responsibility for the content of the linked websites. All the same, should you follow a link on YouTube, we wish to highlight that YouTube stores the data of its users (e.g. personal information, IP address) in accordance with its own data usage guidelines and uses it for business purposes.

Furthermore, YouTube may store various cookies on your terminal or use similar recognition technologies (e.g. device fingerprinting). In this manner, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user experience, and prevent fraud attempts.

If you are logged into your YouTube account, you authorize YouTube to assign your surfing behavior directly to your personal profile. You can avoid this by logging out of your YouTube account.

YouTube is used to present our online services in an appealing manner. This constitutes a legitimate interest within the meaning of point (f) Article 6 (1) GDPR. If a corresponding consent was requested, the processing is based exclusively on point (a) of Article 6(1) GDPR; the consent can be withdrawn at any time.

The user’s active consent is needed before a connection to YouTube can be established. This consent may be withdrawn at any time.

The following data is transmitted to the third-party provider:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific webpage)
- Login status/HTTP status code
- Amount of data transferred in bytes in each case
- Webpage from which the request originates (link)
- Browser used
- Operating system and interface
- Language and version of the browser software

As soon as you play an embedded video by clicking on it and actively confirm your consent to us, YouTube stores a corresponding cookie on your terminal. These cookies can be refused by adjusting the appropriate browser settings and extensions.

Address and link to the privacy policy of the third-party provider:

Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy policy: https://policies.google.com/privacy

13. Collection of additional data

a) Contact form – “Chicken & More” category:

If you enter personal or business information (email addresses, names, addresses, etc.) on our website, this data shall be used exclusively for the submission of the requested information or for the purposes stated in the form. Your data shall be encrypted during the transmission to the mail server using software (SSL) and is protected against third-party access. The subsequent transmission by email is unencrypted (see item 13). The data shall not be disclosed to third parties. The use of the services offered shall be on a voluntary basis.

Data categories:
- Company (optional)
- Title (mandatory)
- First name (mandatory)
- Last name (mandatory)
- Email address (mandatory)
- Street address (optional)
- Postal code/City (optional)
- Country (mandatory)
- Telephone (mandatory)
- Mobile phone (optional)
- Message (mandatory)

b) Party service request:

If you enter personal or business information (email addresses, names, addresses, etc.) on our website, this data shall be used exclusively for the submission of the requested information or for the purposes stated in the form. Your data shall be encrypted during the transmission to the mail server using software (SSL) and is protected against third-party access. The subsequent transmission by email is unencrypted (see item 13). The data shall not be disclosed to third parties. The use of the services offered shall be on a voluntary basis.

Data categories:
- Name (mandatory)
- Email address (mandatory)
- Telephone (mandatory)
- Event address (mandatory)
- Date of the event (mandatory)
- Expected number of attendees (mandatory)
- Message (the menu requested) (mandatory)

c) Contact form – “Become a partner” category:

If you enter personal or business information (email addresses, names, addresses, etc.) on our website, this data shall be used exclusively for the submission of the requested information or for the purposes stated in the form. Your data shall be encrypted during the transmission to the mail server using software (SSL) and is protected against third-party access. The subsequent transmission by email is unencrypted (see item 13). The data shall not be disclosed to third parties. The use of the services offered shall be on a voluntary basis.

Data categories:
- Company (optional)
- Title (mandatory)
- First name (mandatory)
- Last name (mandatory)
- Email address (mandatory)
- Street address (optional)
- Postal code/City (optional)
- Country (mandatory)
- Telephone (mandatory)
- Mobile phone (optional)
- Message (mandatory)

14. Email

Third parties may read unencrypted information that you send to us by email. Generally speaking, we cannot verify your identity and do not know who is behind an email address. Legally-compliant communication by simple email is therefore not guaranteed. We use - - filters against unsolicited advertising (hereinafter referred to as “SPAM filters”). In rare cases, these can incorrectly and automatically classify normal emails as unsolicited advertising and delete them. Emails that contain harmful programs (hereinafter referred to as “viruses”) are always automatically deleted by us.

If you wish to send us messages with sensitive content, we recommend that you encrypt and sign them to prevent unauthorized inspection and falsification during transmission, or send the message to us by post.

Please inform us whether and how we can send you encrypted emails to respond to your messages. If you cannot receive encrypted emails, please inform us about how you wish to be contacted to answer your messages in a safe manner.

15. Subcontractor/commissioned data processor

Hertel Verwaltungs GmbH provides personal data to the following companies as a subcontractor on the basis of order processing and following the instructions of the client:

Hertel Grilltechnik GmbH
Steinbachstrasse 8
95126 Schwarzenbach / Saale, Germany
Telephone: +49 (0)9284 9500-0
Fax: +49 (0)9284 9500-55
Email: info@hertel-grilltechnik.de

Under this order fulfilment, the following personal data is transmitted to the commissioned data processor:
-             First name, last name
-             Address
-             Telephone
-             Email

The purpose of the subcontracting relationship is the performance of the contract with our potential and existing customers (point (b) of Article 6(1) GDPR) and in the interest of a professional order processing and customer service (point (f) of Article 6(1) GDPR).

The commissioned data processor shall process your data to the extent necessary to fulfill its service obligations and shall follow our instructions with regard to this data.

To ensure that processing is compliant with data protection laws, we have concluded a contract for order processing with Hertel Grilltechnik GmbH.

 

As of 8 March 2021