Privacy

We take data protection seriously

In this privacy policy, we explain how we handle your personal data. The protection of this data is a top priority for us and is carried out in accordance with the relevant legal provisions of the EU General Data Protection Regulation (GDPR), national data protection laws and other data protection regulations. It is generally possible to use our website without providing personal data. If personal data (e.g. name, address or email addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

Alessandro Romano
Roonstraße 94
50674 Köln
+49 (0)221 – 96 02 40 86
office@roonstreetspirituosen.com

Umsatzsteuer-Identifikationsnummer:
gem. § 27a UStG: DE 268256363


General information on data protection & data processing

General information on data protection & data processing

1. Scope of the processing of personal data

The personal data of our users is only processed to the extent necessary to provide a functional website and our content and services. The processing of our users’ personal data only takes place regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. We treat personal data as strictly confidential and it will not be passed on to third parties without the express consent of the person concerned. Consent given at any time can also be revoked at any time. You can also obtain information about the personal data we have stored about you at any time. We would like to point out that, although the greatest possible care is taken, absolute security cannot always be guaranteed when transmitting data on the Internet. Complete protection of data against access by third parties is not possible. Therefore, no liability can be accepted for damages resulting from any misuse of confidential data by unauthorized third parties. E-mails and letters are always treated confidentially and are only stored for as long as the progress of the correspondence appears necessary.
If expressly required by applicable law, the relevant information is retained (e.g. IP address).

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


Provision of the website and creation of log files

Provision of the website and creation of log files

1. Description and scope of data processing / access data

When you visit our website, the system automatically collects data and information from the computer system of the accessing computer. This means that the website operator or site provider collects data about access to the site and saves it as “server log files”. The following data is logged in this way:

  • Visited website
  • Time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Browser type & version
  • Operating system of the calling computer / end device
  • IP address of the calling computer / end device
  • Websites that are accessed by the user’s system via our website
  • Internet service provider of the user

This data is transmitted by your browser and temporarily stored in log files. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.

2. Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. The data collected is only used for statistical evaluations and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3. Purpose of data processing

The temporary storage of the website visitor’s IP address for the duration of website use is necessary in order to display the website on the user’s computer. The stored log files ensure the functionality of the website.
The data is also used to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

As soon as the purpose of the data processing is fulfilled, the collected data is deleted. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.


Cookies

Cookies

1. Description and scope of data processing

Internet pages sometimes use so-called cookies. Cookies are used to make the website more user-friendly, effective and secure. Cookies are small text files that are stored on the accessing computer and saved by the browser.
Most cookies are so-called “session cookies” and are automatically deleted at the end of the website visit. Other cookies remain stored on the computer until they are deleted manually. Cookies make it possible, for example, to identify the accessing browser even after a page change and to recognize it on the next visit. The default settings of web browsers make it possible to be informed about the use of cookies and to allow them only in individual cases, to allow them for certain cases or to generally exclude them and to activate the automatic deletion of cookies when the browser is closed. However, deactivating cookies can restrict the functionality of websites. We do not use technically unnecessary cookies on this website. We do not use analysis software that collects data by setting cookies.

2. Legal basis for data processing (without the user's consent)

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.


Contact form and e-mail contact

Contact form and e-mail contact

1. Description and scope of data processing

The contact form on our website is intended to enable our users to contact us directly and independently of an e-mail client (Apple Mail or Outlook, etc.) via the Internet. If the form is used, the information and data entered in the input mask will be transmitted to us and stored for the purpose of processing the inquiry and in the event of follow-up questions. These data are

  • Last name
  • First name
  • Email
  • Telephone number (optional)
  • Individual text message from the user
  • The following data is also stored at the time the message is sent:
  • IP address
  • Date & time of the contact request

Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.
Visitors to our website can also contact us via the email address provided. The user’s personal data transmitted in the e-mail is thus temporarily stored. The data transmitted will always be treated confidentially and will not be passed on to third parties.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.
The legal basis for the processing of the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

The purpose of data processing is to process the contact or conversation. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. (e.g. letter combinations)

4. Duration of storage

Once the purpose for which the data was collected has been achieved, it will be deleted. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of objection and removal

The data entered in the contact form is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a GDPR). This consent to the processing of personal data can be revoked at any time. When contacting us by email, the user can also object to the storage of personal data at any time. Revocation options are easily possible, for example, as an informal message in writing or by e-mail to us. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
In the event of a revocation, all personal data that was transmitted and used for contacting us will be deleted immediately.


Other data protection measures and technologies

Other data protection measures and technologies

For security reasons and to protect the transmission of confidential content, this website uses SSL encryption. When a connection is encrypted using SSL, the address line of the browser changes from “http://” to “https://” and a lock symbol is displayed. If SSL encryption is active, the data that you transmit to us cannot normally be read by third parties.
The security measures are revised as quickly as possible in line with technological advances.


Changes to our privacy policy

Changes to our privacy policy

The legal requirements for data protection are constantly changing. We reserve the right to make changes to the privacy policy in this case. This will be adapted to the current legal framework on an ongoing basis.

Do you have questions about the protection of your data with us? Feel free to contact us! You can contact us at any time if you have further questions on the subject of personal data.