GDPR – Our Privacy Policy

  Personal Data Protection Policy Protecting your personal data when you visit our website is of great importance to us. We protect your privacy and your private data. We collect, process and use your personal data in compliance with the content of these data protection provisions as well as the applicable data protection regulations, in particular the General Data Protection Regulation, the ePrivacy Regulation, the Act on the Protection of Personal Data (Act No. 101/2000 Coll. included in laws of the Czech Republic). These data protection provisions govern the personal data concerning you that we collect, process and use. We therefore ask you to read the explanations outlined below with great care. 1. Information on the collection of personal data Below, we want to inform you about how we collect personal data when visitors use our website. Personal data are all data that are personally relatable to you, e.g. your name, address, e-mail addresses, user behaviour. The controller pursuant to Article 4(7) of the General Data Protection Regulation (GDPR) is company the CZECH BREWERY SYSTEM s.r.o., Kolofíkovo nábřeží 1080/30, 747 05 Opava, Czech Republis, gdpr(at)czechbrewerysystem.com. You can contact our data protection officer at e-mail address gdpr(at)czechbrewerysystem.com, or through our postal address by adding the words »Attn data protection officer«. When you contact us by e-mail or via a contact form, the data you transmit (your e-mail address, and, where applicable, your name and/or phone number) will be saved on our server in order to answer your questions. We will erase the data that accrue in this connection once it no longer becomes necessary for them to be saved, or we will restrict their processing in the event of any legal obligations existing requiring that the data be preserved. If, in the process of providing individual features as part of our offer, we rely on service providers who cooperate with us, or should we wish to use your data for advertising purposes, we will inform you in detail below of the processes involved. At the same time, we will specify the prescribed criteria concerning the time of storage of such data. 2. Your rights You have the following rights in respect of your personal data that we collect:

• Right of access to your personal data,
• Right to rectification or to erasure of your personal data,
• Right to restriction of processing of your personal data,
• Right to object to the processing of your personal data,
• Right to your personal data portability.

You also have the right to lodge a complaint with a supervisory authority responsible for data protection if you have a doubts concerning the processing of your personal data by our company. 3. Collection of personal data when visiting our website When you visit our website purely as a source of information, i.e. if you do not register and do not log in or otherwise transmit any information, we will only collect the personal data that your browser transmits to our server. When you decide to view our website, we collect the following data, which are required for technical reasons in order to display our website and ensure it is stable and secure (legal basis: Point (f) of Article 6(1) GDPR):

• IP address of your device
• Date and time of the request
• Time difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Volume of data transmitted
• Website from which the request came
• Browser type
• Operating system and its user interface
• Language and version of the browser software.

In addition to the aforementioned data, the cookies will be stored on your computer memory when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you use, and which enable certain information to flow to the location where will be placed the cookie. Cookies are not capable of running programs or transmitting viruses onto your computer. They serve to make our website offer more user-friendly and effective informations for you. Use of cookies: This website uses the types of cookie listed below. Their nature and function are equally described below:

• Transient cookies
• Persistent cookies

Transient cookies are automatically deleted when you close the browser. This group of cookies especially includes session cookies. These store a so-called session ID through which various requests from your browser can be assigned to a common session. They enable your computer to be recognised on your return to our website. Session cookies are deleted when you log off or when you close the browser. Persistent cookies are automatically deleted after a pre-defined period of time, which can vary depending on the cookie. You can delete these cookies at any time by going to the security settings for your browser and choose “cookie delete”. You can configure your browser settings to your personal preferences and e.g. refuse third-party cookies or all cookies. We would point out, however, that doing so may mean you will be unable to use all of the functions on our website. We use cookies in order to identify follow-up visits in the event that you have an account on our website. Without active cookies, you will need to log on each time that you visit again. 4. Other functions and offers on our website In addition to our website being used purely as a source of information, we offer a variety of services that may be of interest to you. To make use of these, you will typically need to provide additional personal data which we use to provide the service in question and for which the aforementioned data processing principles apply. On some occasions, we use external service providers to process your data. These providers are carefully selected and engaged by us, are bound to follow our instructions, and are audited at regular intervals. Moreover, we may forward your personal data to third parties when working in collaboration with other partners to offer special promotions, competitions, concluding contracts, or similar services. You will obtain further details on this process either when you provide your personal data or by reading the descriptions of the offers found below. Should our service providers or partners be located in a country outside the European Economic Area (EEA), we will notify you of the consequences of this circumstance in the description of the individual offer. 5. Right to object or withdraw consent to the processing of your data If you have previously consented to your data being processed, you may withdraw such consent at any time. Withdrawing your consent will affect the lawfulness of the processing of your personal data once you inform us of such your decision. To the extent that our processing of your personal data is based on the weighing of your interests, you have the right to object to the processing of your personal data. Among other things, this is the case if the processing is not required in order to fulfil a contract with you, which we describe in the description of the functions below. When exercising such a right to object, we ask you to furnish the reasons for we do not process your personal data in the manner that you accept. If your objection is justified, we will review the situation and either cease or amend the processing of your data or furnish you with our compelling legitimate grounds for continuing to process the data. Needless to say, you can, at any time, withdraw your consent to your personal data being processed for advertising purposes and data analysis. To find out more about your right to object, please contact: CZECH BREWERY SYSTEM s.r.o., Kolofíkovo nábřeží 1080/30, 747 05 Opava, Czech Republis, gdpr(at)czechbrewerysystem.com 6. Use of our webshop If you wish to order through our webshop, you will need to conclude a contract containing personal data concerning you that we require in order to process your order. The mandatory data required in order to process contracts are correspondingly marked; all other data are provided voluntarily. We use the data that you provide in order to process your order. This can also involve forwarding your payment details to our principal bank. The legal basis for this is Point (b) of Art. 6(1)(1) GDPR. You can create a customer account of your own volition, through which we can store your data for any purchases that you make in the future. When you create an account under »My Account«, the data you provide are stored with revocable effect. All other data, including your user account, can always be erased by going to the customer section. We may also process the data you provide in order to notify you of interesting products from our range or to send you e-mails containing technical information. Commercial and tax law regulations require us to store your address, payment and order details for a period of ten years. We do, however, restrict the processing of your data after two years, i.e. your data are only used in order for us to comply with our statutory duties. To prevent any unauthorised third-party access to your personal data, in particular any stored financial data, the order process is encrypted using TLS technology. 7. PayPal payment service Within the bounds of the handling of payments via PayPal, PayPal Credit, or using the PayPal direct debit service, or – if offered – »pay upon invoice« via PayPal, we forward your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter »PayPal«). In the event that the chosen method relates to payment by credit card using PayPal, to the PayPal direct debit service, or – if offered – to »pay upon invoice« via PayPal, PayPal reserves the right to carry out a credit check www.paypal.com/en/webapps/mpp/ua/privacy-full?locale.x=en_GB#rAnnex. PayPal uses the findings of the credit check relating to the statistical likelihood of a payment default to determine whether or not to provide the payment method concerned. The credit check may entail probability values (so-called score values). Should score values be factored in to the findings of the credit inquiry, these are based on a scientifically accepted mathematical and statistical process. Among other things, your address details will be included when calculating the score values. PayPal is furthermore entitled to forward your data to, among other parties, known third parties (banks, e-service providers, service partners, but also auditors, analytics services, credit inquiry agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies) as well as to unnamed third parties Further data privacy information, including the credit inquiry agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full The legal basis for this is Point (b) of Art. 6(1)(1) GDPR. 8. Amazon payment service When paying through amazon pay, we first forward your payment details to Amazon Payments Europe s.c.a. as party of the payments handling process, and secondly to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three of which are located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter »Amazon Payments«). Amazon Payments reserves the right to carry out a credit check. Amazon Payments uses the findings of the credit check relating to the statistical likelihood of a payment default to determine whether or not to provide the payment method concerned. The credit check may entail probability values (so-called score values). Should score values be factored in to the findings of the credit inquiry, these are based on a scientifically accepted mathematical and statistical process. Among other things, your address details will be included when calculating the score values. Amazon Payments is furthermore entitled to forward your data to, among other parties, unnamed third parties (banks, e-service providers, service partners, but also auditors, analytics services, credit inquiry agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies). Further data privacy information, including the credit inquiry agencies used, can be found in Amazon Payments’ privacy notice: pay.amazon.com/uk/help/201751600 The legal basis for this is Point (b) of Art. 6(1)(1) GDPR. ANALYTICS SERVICES 9. Use of Google Analytics This website uses Google Analytics, a web analytics service provided by Google lnc. (»Google«). Google Analytics uses »cookies«, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of our website is transmitted to and stored on Google’s servers in the USA. However, if IP anonymisation is activated on this website, Google will truncate your IP address within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide the website operator with further services associated with website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do so you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available under tools.google.com/dlpage/gaoptout?hl=en-GB. This website uses Google Analytics with the extension »anonymizeIp()«. The IP addresses thus collected are truncated so as to eliminate any direct reference to a specific individual. To the extent that the data collected personally relate to you, such a relation will be excluded without undue delay and the personal data will be erased immediately. We use Google Analytics to analyse and regularly improve the use of our website. Using the acquired statistics, we can improve our offer to you and make the website more interesting for you as a user. As regards the exceptional cases when personal data are transferred to the USA, Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Point (f) of Article 6(1)(1) GDPR. Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: www.google.com/analytics/terms/gb.html; privacy overview: www.google.com/intl/en/analytics/learn/privacy.html; and privacy policy: www.google.de/intl/en/policies/privacy. This website furthermore uses Google Analytics to analyse across all devices the visitor flows that are carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account at »My data«, »Personal data«. SOCIAL MEDIA 10. Incorporation of YouTube videos We have incorporated YouTube videos in our online offer, which are saved at www.youtube.com and can be played directly from our website. These have all been incorporated in »extended data protection mode«, i.e. no data concerning you as the user are transferred to YouTube if you do not play the videos. Only if you play the video will the data specified in Section 2 be transferred. The transfer of such data is beyond our control. When you visit the website, YouTube is informed that you have accessed the corresponding sub-page on our website. The data specified under Section 3 of this privacy policy will also be transmitted. This occurs irrespective of whether a user account on YouTube is available through which you are logged on or whether you have no such user account. If you are logged on to Google, your data will be directly associated with your account. If you do not wish such an association to be made with your profile on YouTube, you will first need to log off before activating the button. YouTube saves your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the needs of its users. Such an evaluation is especially undertaken (including for users that are not logged in) in order to provide needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of such user profiles, but need to contact YouTube directly in order to exercise this right. Further information on the purposes and extent of the collected data and their processing by YouTube can be found in the company’s privacy policy. This privacy policy also contains information on your corresponding rights and settings options in order to protect your privacy: www.google.de/intl/en/policies/privacy Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. 11. Incorporation of Google Maps This website uses the Google Maps service. This enables us to display interactive maps directly on our website and you to use this convenient maps feature. When you visit the website, Google is informed that you have accessed the corresponding sub-page on our website. The data specified under Section 3 of this privacy policy will also be transmitted. This occurs irrespective of whether a user account on Google is available through which you are logged on or whether you have no such user account. If you are logged on to Google, your data will be directly associated with your account. If you do not wish such an association to be made with your profile at Google, you will first need to log off before activating the button. Google saves your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the needs of its users. Such an evaluation is especially undertaken (including for users that are not logged in) in order to provide needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of such user profiles, but need to contact Google directly in order to exercise this right. Further information on the purpose and extent of the collection and processing of data by the plug-in provider can be found in the provider’s privacy policies. They also contain information on your corresponding rights and settings options in order to protect your privacy: www.google.de/intl/en/policies/privacy Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. ONLINE ADVERTISING 12. Use of Google Adwords Conversion We use the advertising media service Google Adwords to draw attention on external websites to our attractive offers. By referencing the advertising campaign data, we can determine the success of individual advertising measures. In doing so, our interest lies in showing you advertising which is of interest to you, in making the design of our website more interesting to you, and in arriving at a fair calculation of advertising costs. These means of advertising are supplied by Google through so-called »ad servers«. To this end, we use ad server cookies through which certain performance metrics, such as flash advertising or clicks by users, can be measured. Should you access our website via a Google advert, Google Adwords will store a cookie on your PC. These cookies typically expire after 30 days and are not intended to serve to identify you personally. Linked to this cookie, a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), as well as opt-out information (a note that the user does not want to be addressed any longer) are typically saved. These cookies enable Google to recognise your Internet browser. Should a user visit certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to the page in question. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We ourselves do not collect and/or process any personal data during the aforementioned advertising measures. We merely receive statistical evaluations provided by Google. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media and, in particular, we cannot identify the users on the basis of this information. Through the marketing tools used, your browser automatically establishes a direct connection to the Google server. As we have no control over the extent and the further use of the data which are collected by Google through the employment of this tool, the information that follows is based on our level of knowledge as it stands: By incorporating AdWords conversion, Google receives the information that you visited the respective part of our website or clicked on one of our adverts. Provided that you are registered with a service provided by Google, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will learn and store your IP address. There are several ways for you to prevent participation in this tracking process:

• by adjusting your browser software accordingly, in particular – – by suppressing third-party cookies, you will not receive any third-party adverts;
• by disabling the conversion-tracking cookies by setting your browser to block cookies from the domain »www.googleadservices.com«, www.google.com/settings/ads, which will result in this setting being deleted when you delete your cookies;
• by deactivating the interest-based advertisements of the providers, who have signed up to the »About Ads« self-regulation campaign, by going to the link www.aboutads.info/choices, though this setting will be deleted if you delete your cookies;
• by permanently disabling cookies in your Firefox, Internet Explorer or Google Chrome browser by going to the link www.google.com/settings/ads/plugin. We wish to point out that doing so may result in you being unable to use all of the features of this offer, however.

The legal basis for the processing of your data is Point (f) of Art. 6(1)(1) GDPR. Further information on data privacy at Google can be found at: policies.google.com/privacy?hl=en and services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) web site at www.networkadvertising.org. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. 13. Remarketing In addition to Adwords Conversion, we use the Google Remarketing application. This is a process through which we aim to approach you again. The application allows you to see our adverts after visiting our website as you continue to use the Internet. This is done through cookies stored in your browser through which your usage behaviour when visiting various websites is recorded and evaluated by Google. In this way, Google is able to detect the last visit you made to our website. According to Google, none of the personal data concerning you that are collected during the remarketing process, and which may potentially be stored by Google, is merged with other data. In particular, pseudonymisation is used in remarketing, according to Google.