When operating this website („website“) and using the services offered on this website, personal data is processed. This data protection declaration is intended to inform you as a visitor to the website and user of the services about the type, scope and purpose of the processing of personal data.
The terms used in this data protection declaration (e.g. „personal data“, „data processing“, „pseudonym“ or „anonymous“) correspond to the definitions of the General Data Protection Regulation („GDPR“), in particular those of Article 4.
The website operator, the IT brewery, based at Cecilienallee 56-57, 40474 Düsseldorf, is responsible for data processing.
If you have any questions about data protection, please contact hello @ itbrewery.
2. Data processing
The type, scope and purpose of the processing of personal data depends on which services are used. In particular, when you use our services, we process specific personal data required for the service.
2.1. Provision of the website
The affected group in relation to the provision of the website are all website visitors.
The legal basis for processing is Article 6 (1) (b) GDPR (fulfillment of the contract) In order to make the website available at all, to enable basic functions and smooth operation, it is technically necessary to process personal data. Although this is basically device data, this data can possibly be used to establish a reference to the website visitor. For example, the IP addresses of the end devices used, identifiers of the end devices used, the operating systems and the browser must be processed in order to establish a connection between the end device and the server on which the website is hosted and to display the content in the intended layout.
We use so-called web fonts for the uniform representation of fonts and use Google Web Fonts for this. This service is provided by Google LLC (1600 Amphitheater Parkway Mountain View, CA 94043, USA, “Google”).
When a page is called up, the website visitor’s browser loads the required web fonts into the browser cache in order to display texts and fonts correctly.
For this purpose, the browser used by the website visitor must connect to the Google servers. This gives Google knowledge that our website has been accessed via the IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers.
If your browser does not support web fonts, a standard font will be used by your computer.
2.2. Website security
Affected group in relation to the security of the website are all website visitors.
In order to ensure the security of the website, the data about access to the website are processed as server log files. Although this is basically device data, this data can possibly be used to establish a reference to the website visitor. This data is compared with existing attack vectors and evaluated if attacks are detected.
The data in the server log files are: the website visited, the time of access, the amount of data sent in bytes, the reference from which the website was accessed, the browser and operating system used.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The storage period for the server log files is a maximum of 7 days. If data have to be kept for reasons of evidence, they are excluded from deletion until the incident has been finally resolved.
The legal basis for processing is Article 6 (1) (f) GDPR (legitimate interest).
3. Rights of the user vis-à-vis the person responsible
If your personal data is processed, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible in accordance with Articles 15 to 21 GDPR. To make use of your rights or to receive further information on data protection, please contact
3.1. right of providing information
In accordance with Art. 15 GDPR, you have the right to request confirmation from the person responsible as to whether your personal data is being processed. If this is the case, you have the right to free information about all of your personal data that are processed by us, as well as the right to a copy of this data.
In addition, in accordance with Art. 19 (2) GDPR, you have the right to request the person responsible to inform you about all recipients to whom your personal data has been passed on.
3.2. Rectification of your data
According to Art. 16 GDPR, you have the right to request that your personal data be corrected and / or supplemented if it is incorrect or incomplete.
3.3. Deletion of data
If your request does not conflict with a legal obligation to store data (e.g. data retention), you have the right to have your personal data deleted in accordance with Art. 17 GDPR. Data stored by the person responsible will be deleted if they are no longer required for their intended purpose and do not fall under statutory retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes. The deletion of your data means that the services we offer can no longer be used in full or at all.
The person responsible is obliged to delete personal data immediately if processing is not necessary and one of the following reasons applies:
• The personal data are no longer required for the purposes for which they were collected or otherwise processed;
• You have withdrawn your consent on which the processing is based and there is no other legal basis for the processing;
• You have objected to processing in accordance with Art. 21 Paragraph 1 GDPR and there are no compelling legitimate reasons for processing or you have objected to processing in accordance with Art. 21 Paragraph 2 GDPR;
• The personal data was processed unlawfully;
• The deletion of your personal data is necessary to fulfill a legal obligation under German or European law.
If we have published your personal data and are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform our data processors who process your personal data that you have requested all links to yours delete personal data or copies or reproductions of your personal data. The measures are only taken insofar as processing is not necessary.
3.4. Restriction of processing
In accordance with Art. 18 GDPR, you have the right to request the controller to restrict processing if one of the following conditions is met:
• You have contested the accuracy of your personal data. Processing is restricted for a period of time. which enables the person responsible to check the accuracy of your personal data;
• The processing is unlawful and you refused to delete your personal data and instead requested that the use of your personal data be restricted;
• The person responsible no longer needs your personal data for processing, but for the enforcement, exercise or defense of legal claims;
• You have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate interests of the person responsible outweigh yours.
If the processing of personal data has been restricted in accordance with the above conditions, the processing of this data – apart from storage – may only be carried out with your consent or for the purpose of asserting, exercising or defending rights or to protect the rights of another natural or legal person or take place for reasons of an important public interest of the Union or of a Member State.
If the processing is restricted, we will inform you before the restriction is lifted.
3.5. Data portability
According to Art. 20 GDPR, you have the right to receive your personal data, which you have made available to the person responsible, in a structured, commonly used and machine-readable format.
In addition, you have the right to transmit your personal data yourself or through us directly to another person responsible, insofar as this is technically possible and the rights and freedoms of third parties are not impaired.
3.6. Right to object
According to Art. 21 GDPR, you have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e) or f) GDPR, To lodge an objection.
If you would like a correction, blocking, deletion or information about the personal data stored about you or if you have any questions regarding the collection, processing or use of your personal data or if you would like to revoke your consent, please contact the following email address : firstname.lastname@example.org
3.7. Revocation of your consent
You have the right to withdraw your consent to the processing of your personal data at any time.
All you need to do is send an email to email@example.com
4. Filing a complaint with a supervisory authority
Finally, in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority responsible for the person responsible.
State Commissioner for Data Protection and Freedom of Information
P.O. Box 20 04 44
Tel .: 0211 / 38424-0
Fax: 0211 / 38424-10
We reserve the right to change this data protection declaration at any time within the scope of the legal possibilities.
Updated: January 2021
6. Google Analytics
This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been expanded to include the code “gat._anonymizeIp ();” has been expanded to ensure an anonymous collection of IP addresses (so-called IP masking).
The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set which prevents the future collection of your data when you visit this website: Deactivate Google Analytics.