Privacy policy

1. data protection at a glance

General information

The following instructions provide a simple overview of what to do with your
personal data happens when you visit this website.
Personal data is all data with which you can be personally identified.
can be used.

Data collection on this website

Data processing on this website is carried out by the website operator.
Their contact details can be found in the section „Information on the responsible
Place" of this privacy policy.

On the one hand, your data is collected when you provide it to us
(e.g. via a contact form). Other data is collected automatically or after
your consent when you visit the website is recorded by our IT systems
(e.g. internet browser, operating system, time of page view).

You have the right at any time to request information free of charge about the origin, recipient
and purpose of your stored personal data. You have
Furthermore, the right to correction or deletion of this data, to revocation
of a given consent as well as the restriction of processing. The
You also have the right to lodge a complaint with the competent supervisory authority
to.

2. hosting

External hosting

This website is hosted externally. The personal data collected on this
website are stored on the hoster's servers. Hereby
may include IP addresses, contact requests, meta and
Communication data, contract data, contact data, names, website accesses and
other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our
potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the
In the interest of a secure, fast and efficient provision of our
online offer (Art. 6 para. 1 lit. f GDPR). Insofar as a corresponding
consent has been requested, the processing is carried out exclusively on the basis of
Basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The
Consent can be revoked at any time.

We use the following hoster:

netcup GmbH
Daimlerstraße 25, D-76185 Karlsruhe
Web: www.netcup.de |
E-Mail: mail@netcup.de
Commercial register: HRB 705547, Mannheim Local Court

We have a contract with netcup for order processing (AVV)
which guarantees that the personal data of our employees is
Website visitors only in accordance with our instructions and in compliance with the GDPR
be processed.

3 General notes and mandatory information

Data protection

We treat your personal data confidentially and in accordance with the
statutory data protection regulations and this privacy policy. We
point out that data transmission on the Internet is subject to security vulnerabilities.
can have. Complete protection of data against access by third parties
is not possible.

Note on the responsible body

Y-Media
Owner: Fabian Laschet
Richard-Wagner-Str. 12
52078 Aachen

Phone: +49 174 8848830
E-Mail: info@alkoholy.de

Storage duration

Unless a more specific storage period is specified in this privacy policy
your personal data will remain with us until the purpose has been fulfilled.
for data processing no longer applies. If you have a justified request for deletion
or revoke your consent, your data will be deleted,
unless there are other legally permissible reasons for storage
(e.g. retention periods under tax or commercial law).

Legal basis for data processing

If you have consented to the data processing, we will process your
Data on the basis of Art. 6 para. 1 lit. a GDPR. If you have consented to the
Storage of cookies or access to information in your end device
have given their consent, the processing is additionally carried out on the basis of
§ 25 para. 1 TDDDG. Consent can be revoked at any time. If your
data is required for the fulfillment of the contract, we process it on the basis of
pursuant to Art. 6 para. 1 lit. b GDPR. For the fulfillment of legal obligations
the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. On
On the basis of our legitimate interest, processing is carried out in accordance with
Art. 6 para. 1 lit. f GDPR.

Note on data transfer to the USA

We use tools from companies based in the USA. For the USA
Since July 10, 2023, an adequacy decision by the European Commission
Commission (EU-U.S. Data Privacy Framework, DPF, Decision C(2023) 4745).
Provided that the respective provider is certified under the DPF, the
Data transfer on the basis of this adequacy decision in accordance with
Art. 45 GDPR. If a provider is not DPF-certified, we rely on
the standard data protection clauses of the European Commission in accordance with
Art. 46 para. 2 lit. c GDPR.

Recipients of personal data

We only pass on personal data to external bodies if
this is necessary for the fulfillment of a contract, we are legally obliged to do so
we have a legitimate interest pursuant to Art. 6 para. 1 lit. f
GDPR or another legal basis allows the transfer.

Revocation of your consent to data processing

You can revoke your consent at any time. The
The lawfulness of the data processing carried out until the revocation remains
Revocation unaffected.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F
DSGVO, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM
YOUR PARTICULAR SITUATION, AGAINST THE PROCESSING OF YOUR
PERSONAL DATA; THIS ALSO APPLIES TO AN OBJECTION BASED ON A
PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT,
WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED,
UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING.
THAT OUTWEIGH THEIR INTERESTS, RIGHTS AND FREEDOMS OR THAT
PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

WILL YOUR PERSONAL DATA BE PROCESSED FOR DIRECT MARKETING PURPOSES?
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE
PROCESSING FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO
PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING
(OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, you have the right to lodge a complaint with
to a supervisory authority. The supervisory authority responsible for us is

State Commissioner for Data Protection and Freedom of Information NRW (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf
Phone: +49 211 38424-0
E-Mail: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de

Right to data portability

You have the right to access data that we have collected on the basis of your consent or in
process automatically in the performance of a contract, in a commonly used,
machine-readable format.

Information, correction and deletion

You have the right to free information about your personal data at any time.
stored personal data, their origin and recipient as well as the
Purpose of data processing and, if applicable, a right to rectification or erasure
of this data. You can contact us at any time regarding this and other questions at
turn to us.

Right to restriction of processing

You have the right to request the restriction of the processing of your
personal data if you contest the accuracy of the personal data
the processing is unlawful, we no longer need the data for the purpose of
but you need them to assert legal claims,
or you have lodged an objection pursuant to Art. 21 (1) GDPR.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons.
You can recognize an encrypted connection by the fact that the address line of the
browser switches from „http://" to „https://" and click on the lock symbol in
your browser line.

Objection to advertising e-mails

The use of data published within the scope of the imprint obligation
Contact details for sending unsolicited advertising is not expressly requested.
herewith contradicted. We reserve the right to take legal action in the event of
unsolicited sending of advertising information.

4. data processing for contract processing and contacting

Contract processing

For the purpose of contract processing (Art. 6 para. 1 sentence 1 lit. b GDPR) we collect
personal data if you provide it to us within the scope of your order.
tell us. Mandatory fields are marked as such. After complete
processing of the contract, your data will be restricted and after expiry of the
retention periods under tax and commercial law (Art. 6 para. 1 sentence 1
lit. c GDPR) will be deleted.

Customer account

When you create a customer account, we process your data on the basis of
your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). The deletion of the
customer account is possible at any time by sending a message to the address given in this
contact address mentioned in the privacy policy or via the corresponding
Function in the customer account.

Contact us

When you contact us by e-mail, we collect your data for processing
your request (Art. 6 para. 1 sentence 1 lit. b GDPR). After complete
processing, your data will be deleted, provided that no legal
storage obligations.

5. dispatch processing

For the fulfillment of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR) we give your data
to the commissioned shipping service provider, insofar as this is necessary for delivery
ordered goods is required.

6. payment processing

We work together with the following service providers for payment processing.
Depending on the payment method selected, we transmit the data required for the transaction
required data on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR.

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449
Luxembourg. Privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna (direct debit, purchase on account, installment purchase)

Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden. With these
payment methods, we ask for your consent (Art. 6 para. 1 sentence 1 lit. a
GDPR) for the transmission of data required for identity and credit checks
necessary data to Klarna. You can revoke your consent at any time.
Privacy policy:

https://www.klarna.com/de/datenschutz/

Google Pay

Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC
is certified under the EU-U.S. Data Privacy Framework (DPF). Privacy policy:

https://policies.google.com/privacy?hl=de

Apple Pay

Apple Inc, One Apple Park Way, Cupertino, CA 95014, USA. Privacy policy:

https://www.apple.com/de/privacy/

7th Newsletter

If you subscribe to our newsletter, we will use your e-mail address
on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR) for the
regular newsletter mailing. You can unsubscribe at any time via the
Newsletter or by sending us a message. After
If you unsubscribe, we will delete your e-mail address from the recipient list.

We would like to point out that when sending the newsletter, we use your
evaluate user behavior through tracking pixels (opening rates,
click rates) for the purpose of optimizing future campaigns. The data is
as long as you have subscribed to the newsletter.

8. consent management (compliance)

To manage consents for cookies and other technologies, we set
the Consent Management Tool Complianz Privacy Suite Premium
of Complianz B.V., Kalmarweg 14-5, 9723JG Groningen, Netherlands.
Complianz stores your consent decisions in order to be able to prove them.
(Art. 6 para. 1 lit. c GDPR). An order processing contract (AVV)
has been closed. Privacy policy:

https://complianz.io/privacy-statement/

9. cookies and other technologies

We use cookies and similar technologies on our website. Technical
necessary cookies do not require consent (Section 25 (2) TDDDG). For non
necessary cookies and technologies, we obtain your consent in accordance with § 25
para. 1 TDDDG. You can revoke your consent at any time via our
Revoke cookie settings.

10. google services

We use the services of Google Ireland Ltd, Gordon, Ireland, described below.
House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC, 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA. Google
LLC is certified under the EU-U.S. Data Privacy Framework (DPF); the
Transmission takes place on the basis of the adequacy decision of the
EU Commission (C(2023) 4745) pursuant to Art. 45 GDPR.

Google Analytics 4 (GA4)

This website uses Google Analytics 4, implemented via MonsterInsights and
Google Site Kit. GA4 analyzes user behavior on this website.
IP addresses are not stored in full; IP anonymization is activated in
GA4 active by default.

The use is based on your consent (Art. 6 para. 1 lit. a
GDPR, § 25 para. 1 TDDDG). Consent can be revoked at any time via our
Cookie settings revocable. We have concluded an agreement with Google
Order processing contract (AVV) concluded. Privacy policy Google:

https://policies.google.com/privacy?hl=de

Google AdSense

This website uses Google AdSense to integrate advertisements of the
Google Ireland Ltd. AdSense uses cookies and similar technologies to
display advertising based on your usage behavior.

The use is based on your consent (Art. 6 para. 1 lit. a
GDPR, § 25 para. 1 TDDDG). Consent can be revoked at any time via our
Cookie settings revocable. Privacy policy Google:

https://policies.google.com/privacy?hl=de

Google reCAPTCHA

We use Google reCAPTCHA to prevent automated misuse of forms.
reCAPTCHA analyzes the behavior of website visitors on the basis of
various characteristics (e.g. IP address, mouse movements, dwell time).

The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR and
§ 25 para. 1 TDDDG. Privacy policy:

https://policies.google.com/privacy?hl=de

11. Microsoft Clarity

This website uses Microsoft Clarity, an analysis tool from Microsoft
Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records the
user behavior through session recordings and heat maps. Among other things.
access times, anonymized IP addresses as well as cursor, scroll and
click behavior in order to improve the user-friendliness of our website.
improve.

Microsoft Corporation is subject to the EU-U.S. Data Privacy Framework (DPF).
certified; the transfer to the USA takes place on the basis of the
adequacy decision of the EU Commission (C(2023) 4745) pursuant to Art. 45
GDPR.

The use is based on your consent (Art. 6 para. 1 lit. a
GDPR, § 25 para. 1 TDDDG). Consent can be revoked at any time via our
Cookie settings can be revoked. We have concluded an agreement with Microsoft
Order processing contract (AVV) concluded. Privacy policy
Microsoft:

https://privacy.microsoft.com/de-de/privacystatement

12. social media

Facebook and Instagram (Meta)

Facebook and Instagram are services provided by Meta Platforms Ireland Ltd, 4 Grand
Canal Square, Dublin 2, Ireland. Data may be transferred to Meta Platforms, Inc,
1601 Willow Road, Menlo Park, CA 94025, USA. Meta Platforms,
Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); the
Transmission takes place on the basis of the adequacy decision of the
EU Commission (C(2023) 4745) pursuant to Art. 45 GDPR. Data processing in the
Within the scope of the visit to our fan pages, this is done on the basis of an agreement
between joint controllers (Art. 26 GDPR).

Data protection declarations:

https://www.facebook.com/privacy/policy/

and

https://privacycenter.instagram.com/policy/

YouTube

YouTube is a service provided by Google Ireland Ltd, Gordon House, Barrow Street,
Dublin 4, Ireland (Operator: YouTube LLC, 901 Cherry Ave, San Bruno, CA
94066, USA). Google LLC is registered under the EU-U.S. Data Privacy Framework (DPF)
certified; the transmission takes place on the basis of the
adequacy decision of the EU Commission (C(2023) 4745) pursuant to Art. 45
GDPR. Privacy policy:

https://policies.google.com/privacy?hl=de

Status: February 2026