Data protection

As of: 07/2018

We only process personal data (hereinafter "data") of the users to the extent necessary to provide a functional and comfortable website and our content and services.

"Processing" is the collection, use, transfer and / or storage. According to the General Data Protection Regulation (hereinafter referred to as "GDPR"), "personal data" basically includes all data with which a natural person can be identified. The exact definitions of the terms are defined in Art. 4 GDPR.

The following statements inform you in particular about the type, the scope, the purpose, the duration and the legal basis of the processing of personal data about its purpose and means of processing we decide alone or together with others, as well as on ours for optimization and quality of use third-party components that process data on their own responsibility: 
_________________________________________

A) Information on the person responsible 
B) User rights 
C) Information on data processing 
_________________________________________

A) Information about the person responsible

The person responsible (hereinafter "Provider") within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Smart Drinks GmbH & Co. KG 
Metzerstrasse 10 
10405 Berlin

Telephone: 030 40053400 
E-Mail: info@bjuice.de

B) Rights of the user

The user has the right in relation to the processing of his personal data reproduced below by the provider,

1. to demand a confirmation as to whether the data concerning him are being processed and for precise information about this data and for further information and copies of the data in accordance with Art. 15 GDPR;

2. to demand the immediate correction of incorrect data concerning him or the completion of such data in accordance with Art. 16 GDPR;

3. to demand that the data concerning him be deleted immediately pursuant to Art. 17 GDPR, alternatively, for example, if further processing pursuant to Art. 17 (3) GDPR is required, a limitation of the processing of the data in accordance with Art. 18 GDPR to demand;

4. that he receives the data relating to him and provided by him in accordance with Art. 20 GDPR and to request their transmission to other responsible persons;

5. Submit a complaint to the supervisory authority pursuant to Art. 77 GDPR if the user considers that the processing of his data by the provider violates the GDPR. 
_________________________

6. In  principle, the user is entitled to the future processing of the data concerning him, which is processed by a person responsible on the basis of Art. 6 para. 1 lit. f DSGVO takes place at any time in accordance with Art. 21 DSGVO. The objection may in particular be made against processing for direct marketing purposes. 
_________________________

7. The supplier is also obliged to notify all recipients of the data to which the data of him or her are subject to any correction or deletion of the personal data or a restriction of the processing carried out pursuant to Article 16 DSGVO, Article 17 paragraph 1 GDPR and Article 18 GDPR were disclosed. The obligation does not exist in the event that this communication proves to be impossible or involves a disproportionate effort. The user has the right to information regarding these recipients.

C) Information about data processing

Insofar as no detailed information is given below regarding the individual data processing, the user's data processed by the provider will be deleted or blocked as soon as the purpose of the storage is omitted and the deletion does not conflict with any statutory storage requirements.

server data

For reasons of communication and security, during the visit of the website, the following data, in particular, which the user's Internet browser transmits to the provider or to his web space provider, are collected (so-called server log files):

- browser type and version; 
- used operating system; 
- website from which the user has switched to the website of the provider (referrer URL); 
- Website visited by the user; 
- date and time of access; 
- Internet Protocol (IP) address of the user.

The data will also be temporarily stored. A storage of this data together with other personal data of the user does not take place. The legal basis for the temporary storage is Art. 6 para. 1 lit. f DSGVO based on the legitimate interest in improving the stability, functionality and security of the website.

After seven days the data will be deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.

cookies

a) "Session" cookies / "Persistent" cookies

The provider uses on its website so-called cookies. Cookies are small text files or other storage technologies that the Internet browser used by the user stores and saves on the device. These cookies individually process certain information of the user, such as browser and location data and IP address values.

The processing allows the provider to make his website more user-friendly, effective and secure. For example, the processing of the "session" cookies enables the content to be displayed in different languages ​​or, if necessary, the use of a shopping cart function.

The "persistent" cookies allow the website to recognize the user through his browser during a regular visit to the website.

If personal data are processed by these cookies for the purposes of initiating an agreement or processing a contract, the legal basis of the processing is Art. 6 para. 1 lit. b DSGVO.

If the processing is not intended to initiate an agreement or to execute the contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Art. 6 para. 1 lit. f DSGVO.

The "session" cookies are deleted when the user closes their browser. The "persistent" cookies are automatically deleted after a deadline set by the provider. This period varies by cookie, but does not exceed one year.

b) third-party cookies

If applicable, third-party cookies are also used on the website of the provider. These third party vendors are affiliate companies with whom the vendor cooperates for the purposes of advertising, analysis or website functionalities. Should this be the case, the purposes and legal bases of the corresponding processing are given in the following statements.

c) disposal option

The user can prevent or restrict the installation of cookies by setting the browser accordingly. Already saved cookies can also be deleted at any time. The settings depend on the browser. For Flash cookies, the processing can not be prevented by the settings of the browser, but by the appropriate setting of the Flash player. Should the user prevent or restrict the installation of the cookies, this may result in the failure to use all the functions of the website to the full extent.

contract management

a) Processing

The personal data provided by the user for the purpose of a purchase of goods or services shall be processed by the provider for the purpose of contract execution. The details of the data are required for the conclusion of the contract; without the provision of the data, the contract is not possible. The legal basis for processing is Art. 6 para. 1 lit. b DSGVO. After completion of the contract, the data of the user with regard to tax and commercial retention periods are deleted.

b) passing on

The personal data of the user are passed on to a service provider used to process the purchase of goods or services, to the carrier in charge of the delivery or to the financial service provider, insofar as this is necessary for processing, delivery or payment of the goods.

The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.

Note about PayPal:

In the case of the selection of the payment service provider PayPal by the customer, there may be credit checks for certain and also selected by the customer payment methods through PayPal. For details on the processing of personal data of the customer by PayPal at

https://www.paypal.com/webapps/mpp/ua/privacy-full  .

Note about Amazon pay:

In the case of the selection of the payment service provider amazon pay by the customer, the data will be processed for payment by Amazon Payments sca. For details on the processing of personal data of the customer by amazon pay below

https://pay.amazon.com/de/help/201751600

Note on payment by credit card:

When paying by credit card, Stripe will process payment from Stripe Payments Europe Ltd, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland. For more information on Stripe privacy, visit  
https://stripe.com/en/privacy#translation .

customer account

Should the user register for a customer account with the provider, the data entered in the course of this registration (eg name, address, e-mail address) will be used exclusively for the fulfillment of a contract or the implementation of pre-contractual measures as well as for the general administration of the customer relationship ( eg retrieval of previous orders or memo function) collected and stored. The registration will also save the IP address and date and time of registration. A passing on to third does not take place.

Legal basis is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. As part of the registration process, the express consent of the user to the above processing may be obtained and reference be made to this privacy policy. The data collected in this way are used exclusively for the aforementioned purpose. A passing on to third does not take place.

If the opening of the customer account serves the fulfillment of a contract or the implementation of pre-contractual measures, then additional legal basis is Art. 6 para. 1 lit. b DSGVO.

Any consent granted to the customer account may be revoked at any time by the user pursuant to Art. 7 para. 3 DSGVO by notification to the provider. The related data is deleted as soon as its processing is no longer required. If the data is required to fulfill a contract or to carry out pre-contractual measures, the data of the user will be deleted upon expiry of the tax and commercial retention periods.

Inquiry

In the event of the user contacting the provider, the personal data of the user entered on this occasion will be used to process the request. The details of the data are required to answer the request, without the provision of data, a response is not or only partially possible.

If the contact request serves the fulfillment of a contract or the performance of pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b DSGVO.

The user's data will be deleted, provided that the user's request has been finally answered and no legal storage obligations, such as in a subsequent contract execution, preclude.

Legal basis may also be a consent of the user in accordance with Art. 6 para. 1 lit. a GDPR. In the context of the contact form, the consent of the user to the above processing may be obtained and referred to this privacy policy.

Any consent given to the contact request may be revoked at any time by the user pursuant to Art. 7 para. 3 DSGVO by notification to the provider. The related data is deleted as soon as its processing is no longer required.

Newsletter

If the user signs up for the free newsletter of the provider, the data requested in the input mask (e-mail address and optional name and address) will be transmitted to the provider. In addition, the IP address and the date and time of login are stored. As part of the registration process, the consent of the user is obtained and the contents concretely circumscribed. At the same time reference is made to this privacy policy. The data collected in this way will be used exclusively for the subscription to the newsletter. A passing on to third does not take place.

The legal basis is Art. 6 para. 1 lit. a GDPR. According to Art. 7 para. 3 DSGVO, the user can revoke this consent at any time by sending a message to the provider or the unsubscribe link contained in the newsletter for the future.

Posts / Reviews

Via the evaluation and commentary (contributions) of the website the user has the possibility to publish his questions, answers or opinions on the website. In this case, the contribution, the time of submission of the contribution and the "name" or "pseudonym" specified by the user are processed and published by the provider.

The legal basis is Art. 6 para. 1 lit. a. DSGVO. The user can revoke this consent at any time in accordance with Art. 7 para. 3 DSGVO by sending a message to the provider for the future.

In addition, the IP address and the e-mail address of the user are also processed by the provider. The processing of the IP address is based on the legitimate interest of the provider in the event that the contribution of the user in the rights of third parties is intervened and / or illegal content is sold.

The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is the possibly necessary legal defense.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter "Google."

Google is certified under the EU-US Privacy Shield, thereby ensuring compliance with EU data protection regulations when processing data in the US.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google Analytics is used by the provider to analyze the use of the website. The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is in the analysis, optimization and economic operation of the website.

Information such as time, location, and frequency of the user's website visit, including its IP address, is transmitted to and stored by Google on a Google server in the United States.

The provider uses Google Analytics with an anonymization function. In this case, Google will already shorten its IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Google will use the data collected to evaluate the visit of the website by the user and to compile reports on the website activity for the provider. In addition, the data will be used to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Google will, according to their own information, in any case, the IP address of the user with other data from Google in connection. Further information, in particular on the possibilities of preventing the use of data, offers Google at the following link:

https://www.google.com/intl/de/policies/privacy/partners

Google also offers a deactivation add-on for the most popular browsers, which gives the user more control over what data Google collects about the user-accessed site. The add-on informs the JavaScript (ga.js) of Google Analytics that no website visit information should be transmitted to Google Analytics. However, the Google Analytics Disable Browser Add-On does not prevent information from being transmitted to the provider or to other web analytics services that may be used by the provider and listed in this privacy policy. Further information on installing the browser add-on is available at the following link:

Browser add-on for disabling Google Analytics

Alternatively, the future analysis of the page visit by Google Analytics can be deactivated by clicking on the following link. By clicking on the link a so-called "opt-out cookie" is set, as a result of which the analysis of the page visit on the website of the provider will be prevented in the future:

Enable opt-out cookie for Google Analytics

Please note: If the user deletes the cookies in his browser settings, the opt-out cookie will be deleted as a rule and may need to be reactivated by the user.

Google AdWords with conversion tracking

The provider also uses the Google advertising component "Google AdWords" and in this context the so-called conversion tracking. Google Conversion Tracking is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google."

Google is certified under the EU-US Privacy Shield, thereby ensuring compliance with EU data protection regulations when processing data in the US.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The use of conversion tracking serves the provider for the targeted application of his services. The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is in the analysis, optimization and economic operation of the website.

If the user clicks on an ad served by Google, a cookie will be saved on the user's device due to the inclusion of conversion tracking. These so-called "conversion cookies" lose their validity after 30 days and are not used for the personal identification of the user.

If the user visits certain pages of the provider's website and the cookie has not yet expired, both Google and the provider can recognize that the user has clicked on one of the ads placed by Google with the provider and has been redirected to the provider's website.

The information obtained through the "Conversion Cookies" is used by Google to create visitor statistics for the provider. The provider receives information about the total number of users who have clicked on their ad and also which pages of their website were called up by the respective user. However, the provider or other "Google AdWords" advertisers receive no information that personally identifies users.

The user can prevent or restrict the installation of cookies by setting the browser accordingly. Already saved cookies can also be deleted at any time. The settings depend on the browser.

Further information, in particular on the possibilities of preventing the use of data, Google offers the following links:

https://services.google.com/sitestats/en.html 
http://www.google.com/policies/technologies/ads/ 
http://www.google.com/policies/privacy/

Remarketing or "Like Audiences" component from Google

The Provider also uses the Remarketing or "Like Audiences" feature of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google."

Google is certified under the EU-US Privacy Shield, thereby ensuring compliance with EU data protection regulations when processing data in the US.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

This component allows the provider to place personalized and interest-based advertising on third-party websites that participate in the advertising network on Google.

The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is in the analysis, optimization and economic operation of the website.

In order to enable this targeted advertising, Google's visit to the website of the provider stores a cookie with a sequence of numbers via the user's browser. This cookie records website visits and anonymous data on the use of the website. There is no disclosure of personal data.

If the user subsequently visits another website on the Google Advertising Network, he or she may be shown ad impressions that may take into account the product and information areas previously viewed on the provider's website.

The user can permanently deactivate this function via Google for the browser used by him by following the link below and installing the plugin provided there:

https://www.google.com/settings/ads/plugin.

Alternatively, the use of cookies by certain third-party providers can generally be deactivated by opt-out. This for example about:

http://www.networkadvertising.org/choices/  .

or

http://www.youronlinechoices.com/uk/your-ad-choices

In addition, Google may be able to track the usage behavior across multiple devices through so-called "cross-device marketing" and is thus able to display personalized advertising across devices. The prerequisite for this, however, is that the user has agreed to link the browser profiles with his existing Google account.

For more information about Google Remarketing, please contact Google at the following link:

http://www.google.com/privacy/ads/

Google Maps

To get directions to the site, the provider uses the Google Maps component of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter "Google."

Google is certified under the EU-US Privacy Shield, thereby ensuring compliance with EU data protection regulations when processing data in the US.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

When you visit the Google Maps component, Google sets cookies to handle user preferences and data when viewing the page and the associated features that integrate the Google Maps component. It can not be ruled out that external servers will be used by Google in the USA.

The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is to optimize the functionality of the website.

Through the connection, Google can tell from which website a request is sent and to which IP address the description of the approach is transmitted.

If the user does not agree with this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. More about this under the heading "Cookies".

Use of "Google Maps" and information obtained through "Google Maps" is subject to the  Google Terms of Use  and the additional terms and conditions  for Google Maps .

Further information, in particular on the possibilities of preventing the use of data, Google offers the following links:

https://policies.google.com/privacy 
https://adssettings.google.com/authenticated.

Google reCAPTCHA

To ensure interactions on the Website by individuals rather than through automated processing (such as "bots"), the Provider uses the "reCAPTCHA" component of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google ", on.

Google is certified under the EU-US Privacy Shield, thereby ensuring compliance with EU data protection regulations when processing data in the US.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

This feature lets Google know which website a request is being sent from and which IP address the "reCAPTCHA" input box will use. In addition to the IP address may be further information collected by Google, which are necessary for the functioning of the service.

The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is to secure the accessibility of the website and the spam defense.

Google provides further information on the general handling of users' data at the following link:

https://policies.google.com/privacy

Facebook social plugin

On this website the plugin of the social network facebook.com is used. Facebook is a service of facebook inc., 1601 p. California ave, palo alto, c. 94304, usa, and is distributed within the eu by facebook ireland limited, 4 grand canal square, dublin 2, ireland, subsequently both "facebook", operated. 
facebook is certified according to the "EU-US Privacy Shield", thereby ensuring compliance with EU data protection regulations when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

The legal basis here is Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the provider is based on the quality of use of the website. 
The possible facebook plugins and their functions can be viewed below: 
https://developers.facebook.com/docs/plugins/
Every time you visit the website that has such a plugin, this plugin causes that of the Users browser downloads a corresponding representation of the plugin from facebook in the US. In this case, it is technically necessary for facebook to process the IP address of the user, as well as the date, time and page visited by the user.
If the user accesses the website of the provider during which time he is logged in to facebook, facebook recognizes the user's specific visit by means of the information collected by the plugin and, if appropriate, assigns this information to the user's personal account on facebook. 
For example, if the user interacts via the facebook "Like" button, this information will be stored in the user's personal user account on facebook and published, if applicable. 
If the user wants to prevent facebook from assigning the collected information directly to his user account, the user must either log out of facebook before visiting the website or block the loading of facebook plugins on the site by using an "add-on".
Further information on the collection and use of the data by facebook as well as the respective rights and possibilities to protect the privacy of the user are contained in the privacy policy of facebook: 
https://www.facebook.com/policy.php