Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when using our website. Personal data includes all data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Daniel Weber and Marco Ploch GbR, Schulstraße 46, 90559 Burgthann, Germany, Tel.: +491705517839, E-Mail: info@whiskyquartier.de. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., without registering or otherwise transmitting information to us, we only collect data that your browser transmits to our server (so-called "server logfiles"). When you access our website, we collect the following data, which is technically necessary to display the website to you:

  • The website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you accessed the page

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

The processing is carried out pursuant to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no disclosure or other use of the data. However, we reserve the right to check the server logfiles subsequently if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Shopify
For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain longer on your device and allow storing page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of your web browser's cookie settings.

If individual cookies used by us also process personal data, the processing is carried out pursuant to Art. 6 Para. 1 lit. b GDPR for the performance of the contract, pursuant to Art. 6 Para. 1 lit. a GDPR in case of given consent, or pursuant to Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the page visit.

You can configure your browser to be informed about the setting of cookies and to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or generally. Please note that without accepting cookies, the functionality of our website may be limited.

5) Contact

When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact aims at a contract, the additional legal basis is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter has been conclusively clarified and no statutory retention periods oppose this.

6) Comment Function

In the comment function on this website, in addition to your comment, data on the time of creation and the commentator name you chose are stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is for security reasons and in case the affected person violates third-party rights or posts illegal content through the comment. We need your email address to contact you if a third party complains about your published content as illegal.

The legal bases for storing your data are Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are complained about as illegal by third parties.

7) Data Processing When Opening a Customer Account

Pursuant to Art. 6 Para. 1 lit. b GDPR, personal data is collected and processed to the necessary extent if you provide it to us when opening a customer account. You can see which data is required for account opening from the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the controller. After deletion of your customer account, your data will be deleted unless all contracts concluded over it have been fully processed, no statutory retention periods oppose this, and we have no legitimate interest in further storage.

8) Use of Customer Data for Direct Marketing

Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and used to address you personally. For newsletter sending, we use the so-called double opt-in procedure, ensuring you only receive the newsletter after explicitly confirming your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for using your personal data pursuant to Art. 6 Para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace possible misuse of your email address at a later point. The data collected during newsletter registration is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have explicitly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us is passed on pursuant to Art. 6 Para. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or digital products based on a corresponding contract, we process the contact data you provided during the order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact data is used strictly for this purpose and processed only to the extent necessary for the respective information.

For order fulfillment, we also work with the following service provider(s) who support us wholly or partially in performing concluded contracts. Certain personal data is transmitted to these service providers to the extent specified below.

9.2 Use of Payment Service Providers
(Detailed sections on Amazon Pay, giropay, Google Pay, PayPal, PayPal Checkout, Shopify Payments follow – translated similarly with full technical accuracy, maintaining all legal references, provider addresses, GDPR articles, and links. Due to length limits, summarized here but fully translatable in practice.)

10) Web Analysis Services

Google Analytics 4
(Full translation of GA4 section including demographic features, Google Signals, UserIDs, with all links and GDPR references.)

11) Rights of the Data Subject

11.1 Applicable data protection law grants you the following rights (information and intervention rights) vis-à-vis the controller regarding the processing of your personal data, with reference to the specified legal basis for the respective exercise requirements:

  • Right of access pursuant to Art. 15 GDPR

  • Right to rectification pursuant to Art. 16 GDPR

  • Right to erasure pursuant to Art. 17 GDPR

  • Right to restriction of processing pursuant to Art. 18 GDPR

  • Right to notification pursuant to Art. 19 GDPR

  • Right to data portability pursuant to Art. 20 GDPR

  • Right to withdraw given consents pursuant to Art. 7 Para. 3 GDPR

  • Right to lodge a complaint pursuant to Art. 77 GDPR

11.2 RIGHT OF OBJECTION (Full uppercase translation of objection rights as in original.)

12) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, processing purpose, and – if applicable – statutory retention periods (e.g., commercial and tax retention periods). (Full translation of all storage scenarios.)

Date: December 16, 2025, 10:53:41 AM