Privacy Policy Data privacy policyThank you for your interest in our website. We would like to deal with the topic of data protection sensitively and openly. In the following privacy policy, you will learn which personal data we process when you visit our website, place an order with us or interact with our social media channels. 1. ControllerResponsible for data processing according to Art. 4 No. 7 GDPR is:UWU GmbHChief executives: Hai Do, Nick FahrSchnellerstraße 6012439 BerlinGermanyWebseite: drinkuwu.comEmail: [email protected] 2. Your rightsYou may exercise the following rights at any time using the contact information above: You can request information about your data stored by us and its processing (right to information). You can request the correction of incorrect personal data (right to rectification). You can request the deletion of your data stored by us (right to deletion). If we still need your data, for example to process your order, or if we are legally obligated or entitled to retain certain data (e.g. legal retention periods for invoices), we will only delete the part of the data that we no longer need. You can request the restriction of data processing (right to restriction of processing). You can object to the processing of your data with us (right to object). You have the right to the transfer of your data in machine-readable form (right to data portability). You have the right to revoke consent once given at any time with effect for the future without giving a reason for doing so (right of revocation). The data processing carried out up to that point will remain effective. You may lodge a complaint with the competent supervisory authority at any time. 3. Data processed when you visit our website 3.1. Server Log Files During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we collect personal data of a general nature that your browser transmits to our server (server log files). When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security: IP address Date and time of your access to the website Address of the page visited Access status / http status code Transferred volume of data Address of the previously visited website (referrer) Used browser Operating system Language and version of the browser This is information that does not allow any conclusions to be drawn about you as a person. This information is technically necessary to deliver the requested content correctly and is mandatory when using the internet. The data is processed to ensure a smooth connection and use of the website, to evaluate system security and stability, and for other administrative purposes. The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection in accordance with Art. 6 para. 1 lit. f GDPR. We do not use your data to draw conclusions about you as a person. Recipients of the data are only us and, if applicable, our order processors (e.g. hosting of the website). 3.2. Cookies In addition to the aforementioned data, our website sets cookies on your computer. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and which provide us or another cookie-setting website with certain information. Through the information that a cookie sends back, a website can, for example, recognize that you have visited this website before with the browser of your computer or mobile device. Cookies cannot execute programs of transfer viruses to the computer. They serve to make the internet offer as a whole user-friendly and effective. If you do not want cookies to be stored on your computer, we ask you to deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our online offer.Depending on the design, cookies are deleted either when the browser is closed (so-called“transient” or “session cookies”) or only when the storage period has expired (so-called“permanent” or “persistent cookies”).“Strictly necessary cookies“ ensure that the website functions properly from a technical point of view. The website cannot be used without the absolute necessary cookies. These cookies are used exclusively by us. Third-party providers do not deposit absolutely necessary cookies and therefore do not receive any information from them.On our website, we use the Borlabs cookie as a required cookie, which is used for data protection consent management. It is used to remember whether and which cookies you have agreed to, so that you do not have to be asked again on each subpage.The legal basis for the absolutely necessary cookies is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in the correct display of the website on your device.“Functional cookies” are cookies that improve the functionality of our website, for example bystoring the contents of your shopping cart for the duration of your purchase or your language selection. The cookies only collect and store anonymized data. The legal basis for the functional cookies is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in an analysis, optimization and economic operation of the website. 3.3. Contact form If you wish to contact us via contact form, we store the data requested there, such as name, email address, contact details and the message itself for the purpose of processing andresponding to the request. The data processing takes place on the basis of Art. 6 para. 1 lit. aGDPR, in that you tacitly consent to the processing by voluntarily sending your message. Messages that reach us via the contact form are stored for as long as the content of the message requires. 3.4. Google Analytics This website uses functions of the web analysis service Google Analytics. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place. Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis. Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored. The use of these services occurs on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. The consent can be revoked at any time. The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. Browser plug-in You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=de. Contract data processing We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics. 4. Data processing for orders If you order products or services in our online shop, we need some data from you for the processing of the contract and for billing. This includes your name, delivery and billing address and payment data. We need this data for the processing of the contract, the legal basis for data processing is therefore Art. 6 para. 1 lit. b GDPR. In some cases, we work with external service providers who handle logistics, shipping or payment processing for us. We transmit your data only insofar as this is necessary for the processing of the contract. The legal basis for the involvement of external service providers is our legitimate interest in a professional, smooth and fast shipping process in accordance with Art. 6 para. 1 lit. f GDPR. Fort he operation of our online shop, we use the service WooCommerce of the provider Automattic Inc, 60 29th Street no. 343, San Francisco, CA 94110, USA. WooCommerce receives your customer data (personal and order details, delivery and billing address, and choice of payment method) for the purpose of order processing. For sending emails, e.g. order confirmations for orders via the online shop, we use the SendGrid service of the U.S. provider Twilio Inc., 889 Winslow St, Redwood City, California 94063, USA. The use of SendGrid serves to ensure reliable delivery of emails (some of which are relevant to the contract) and to reduce the risk of our emails being classified as spam by the recipient’s email provider. For the processing of payments, we integrate, among others, PayPal, Klarna, Sofortüberweisung and Apple Pay. Some of the service providers mentioned are U.S. companies that are subject to the EU-U.S. Data Privacy Framework. Through this international agreement, the U.S. has a comparable data protection standard as the EU. 5. Social media accounts (Instagram, Youtube, TikTok, Facebook, Twitter) We operate company accounts on various social media platforms to show you our products and services and to interact with you. When you communicate with us on our social media channels, share our posts or consume our content, personal data such as your profile name is not only visible to us and stored on our channel (for example, when you comment on our videos or mark them with a like), but data processing also takes place by the respective platform operator (such as Facebook). In concrete terms, we can be found on the following platforms: Facebook and Instagram, platforms provided by Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. X (formerly Twitter), platform provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. TikTok, video platform provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Youtube, video platform provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA Patreon, artist platform provided by Patreon Ireland Ltd., Suite 3, One Earlsfort Center, Lower Hatch Street, Dublin 2, Ireland. From a legal perspective, we are considered jointly responsible parties. However, we have no influence on the data processing at platforms such as Facebook and Google. For example, we cannot influence which cookies the platforms store on your device. Furthermore, we have no insight into whether the platform operators merge your data with other data and to what extent data is stored outside the European Union. If you have any questions about data processing at Google, Meta and others, please refer to their privacy policies or contact the platform’s data protection officers directly. The aforementioned platforms have their headquarters or server locations outside the European Union. The U.S. has a level of data protection similar to the European Union standard via the EU-U.S. Data Privacy Framework. 6. Modification of this privacy policy We reserve the right to adapt this privacy policy so that it complies with the current legal requirements. Also, we might change the privacy policy in order to implement changes to our services, e.g. when introducing new services. The new privacy policy will then apply to future website visits and orders.