Privacy Policy

What We Do

Smoke Master (sales@steakandbeer.eu, +34 665 335 196) manages the website steakandbeer.eu (hereinafter referred to as “we” or “us”). On this website, you can find information about our organisation, use our online services, and contact us.

Protecting your personal data is essential to us. In this Privacy Policy, we provide clear and transparent information about the data we collect through our website and how we process it.

What Information We Provide

  • Who is responsible for data processing
  • What data is collected
  • For what purpose this data is collected
  • Who we share this information with
  • How you can object to data processing
  • What rights you have and how to exercise them

Definitions of Terms

What is personal data?

Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address, phone number, and IP address.

Data about personal preferences, such as leisure activities or memberships, are also considered personal data.

What are special categories of personal data?

Special categories of personal data (also known as “sensitive data”) include:

  • Data relating to religious, ideological, political, or trade union opinions or activities
  • Data relating to health, privacy, racial or ethnic origin, sexual life, and sexual orientation
  • Data relating to administrative or criminal proceedings and sanctions, as well as social welfare measures
  • Genetic and biometric data that uniquely identify a person

    Where necessary, and if you provide this information yourself, we may process data belonging to a special category of personal data. In such cases, this processing will be subject to the strictest confidentiality.

What is the processing of personal data?

Processing refers to any operation performed on personal data, regardless of the means or procedures used — including the collection, storage, retention, use, modification, disclosure, archiving, deletion, or destruction of personal data.

What is the disclosure of personal data?

This refers to the transfer or making available of personal data, for example, publishing or providing it to a third party.

Contact

If you have any questions or concerns about how we protect your data, please contact our Data Protection Officer:

Smoke Master
sales@steakandbeer.eu
+34 665 335 196

Data Security

We keep your information secure and take all reasonable measures to protect it from loss, access, misuse, or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it may be necessary for us to forward your inquiries to affiliated companies as part of contract processing. Even in these cases, your data will be treated confidentially.

On our website, we use the SSL (Secure Socket Layer) method with the highest level of encryption supported by your browser.

Rights of Data Subjects

Right to Information

You can request information about the data we have stored about you at any time. Send your request for information, along with valid proof of identity, to sales@steakandbeer.eu.

Information will be provided in writing or in another format, including electronically if required. Upon request, we can also provide the information verbally, provided you verify your identity by other means. If you submit the request electronically, we will provide the information in a common electronic format unless you specify otherwise.

Information is usually provided free of charge. If additional copies are requested, we may charge a reasonable fee.

The right to obtain a copy of processed data must not adversely affect the rights and freedoms of other individuals.

In the case of manifestly unfounded or excessive requests, we reserve the right to refuse to provide the information within the limits of the law or to require a reasonable fee.

Your request is subject to the legal period of 30 days. Due to complexity or a large number of requests, we may extend this period by up to two additional months if necessary. You will be notified of the extension within one month of submitting your request, along with the reasons for the delay.

Deletion and Correction

You have the right to request deletion, correction, or completion of your data at any time, provided there are no legal retention periods or legal grounds preventing this.

Please note that exercising your rights may conflict with contractual agreements and could have consequences for the execution of the contract (e.g., early termination or financial implications).

Restriction of Processing

You also have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful, the data is no longer needed, or you have objected to the processing.

If data processing is restricted, it may only be stored for a limited period. Further processing can only occur with your consent, for the establishment, exercise, or defence of legal claims, to protect another person’s rights, or for reasons of important public interest. You will be notified if the restriction is lifted.

Right to Data Portability

You have the right to receive your data in a commonly used file format or (if technically feasible) to have it transmitted to a third party if we process your data automatically and if:

  • You have given your consent to the processing; or
  • You provided the data in connection with the conclusion or performance of a contract.

Right to Object

You have the right to object at any time to processing, including profiling, based on our legitimate interests, for reasons relating to your particular situation. This right also applies to processing for direct marketing purposes.

Legal Remedies

If you are affected by the processing of your personal data, you have the right to assert your rights before the courts or lodge a complaint with the competent supervisory authority.

General Data Processing

What data do we process and from whom do we receive it?

We primarily process personal data that you provide to us directly or that we collect during the operation of our website. We may also receive personal data about you from third parties. This may include the following categories:

  • Personal master data (name, address, date of birth, etc.)
  • Contact data (phone number, email address, etc.)
  • Financial data (e.g., account details)
  • Online identifiers (e.g., cookie IDs, IP addresses)
These data may come from the following sources:
  • Information from publicly accessible sources (e.g., media, the Internet)
  • Information from public registers (e.g., commercial register, debt collection register, land register)
  • Information related to administrative or legal proceedings
  • Information about your professional functions and activities (e.g., professional networks)
  • Information about you from correspondence or meetings with third parties
  • Credit information (if we do business personally with you)
  • Information about you that people in your circle provide to us so we can conclude or perform contracts with you
  • Data related to the use of the website

Under what conditions do we process your data?

We process your data fairly and in accordance with the purposes set out in this Privacy Policy. We ensure transparent and proportionate processing.

If, in exceptional circumstances, we cannot fully comply with these principles, data processing may still be lawful if there is a valid justification, such as:

  • Your consent
  • The performance of a contract or pre-contractual measures
  • Compliance with legal obligations
  • Our legitimate interests, unless overridden by your own

In certain circumstances, you may be required to provide us with certain personal data to start a business relationship. Without this information, we generally cannot process a contract. The website may also not function normally if certain necessary information (e.g., your IP address) is not disclosed, as it is required to secure data traffic.

How can you withdraw your consent?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of that consent unless another legal justification applies.

You can withdraw your consent at any time by sending an email to sales@steakandbeer.eu. Data processing already carried out will not be affected by the withdrawal.

How can you withdraw your consent?

If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of that consent unless another legal justification applies.

You can withdraw your consent at any time by sending an email to sales@steakandbeer.eu. Data processing already carried out will not be affected by the withdrawal.

When do we share your data with third parties?

a. General Principle

We may use the services of third parties or affiliated companies and commission them to process your data (known as data processors). The categories of recipients include:

  • Accounting, fiduciary, and auditing firms
  • Consulting companies (legal, tax, etc.)
  • IT service providers (web hosting, support, cloud services, website design, etc.)
  • Payment service providers (only with your prior consent)
  • Tracking, conversion, and advertising service providers

We ensure that your data is shared only with your express consent, unless it is contractually required. We also ensure that these third parties and our affiliates comply with data protection requirements and treat your personal data confidentially. In certain circumstances, we may also be required to disclose your data to public authorities.

b. Disclosure to Partners and Associated Companies

We occasionally work with various companies and partners that publish their offers on our website. You can identify these as third-party offers (marked as “advertising”).

If you take advantage of such an offer, we will transfer your personal data (e.g., name, role, communication details, etc.) to the relevant partner or company whose offer you wish to use, provided you have given your express consent beforehand. These partners and associated companies are responsible for the personal data they receive, and their own privacy policies will apply after the transfer.

c. International Data Transfers

In certain cases, your personal data may be transferred to companies abroad as part of our processing. These companies are subject to the same data protection obligations as we are. Transfers may take place worldwide.

If the level of data protection in the recipient country does not correspond to that of the EU, we carry out a prior risk assessment and ensure contractually that the same level of protection is guaranteed (e.g., using the European Commission’s Standard Contractual Clauses or other legally required measures). If our risk assessment is negative, we implement additional technical measures to protect your data.

Data Retention Periods

We store personal data only as long as necessary to fulfil the specific purposes for which it was collected.

Contract data is stored for longer periods if we are legally obliged to do so. In particular, we must retain business correspondence, concluded contracts, and accounting documents for up to 10 years. If these data are no longer required for service delivery, we limit processing and use them only for accounting and tax purposes.

Detailed Data Processing

Providing the Website and Creating Log Files

When you visit steakandbeer.ch without registering or providing any information, we only collect the data that your browser automatically transmits to our server.
These data are technically necessary for the operation of the website.

Data we process:
  • Name of the internet service provider
  • IP address
  • Technical information such as browser, operating system, or screen resolution
  • Date and time of access
  • Referring URL

These data cannot be assigned to a specific person and are not merged with other data sources.

Purpose of processing:

Log files are processed to ensure the functionality of the website and the security of our IT systems.

Who we share the data with:

Data sharing follows the rules described in our data transfer section.

How you can prevent processing:

Data is stored only as long as necessary to fulfil its purpose and is deleted after each session. Storing log files is essential for the website’s operation; therefore, you cannot opt-out unless you stop using our website.

Contact

You can contact us in several ways. When you contact us and provide personal data, we process that data. This applies to any oral, written, or electronic contact.

Data we process:
  • Name
  • Email address
  • Content and time of your message
  • Contact details

In some cases, certain information may be required, for example, when using a contact form or requesting a callback.

Purpose of processing:

We use the data only for the specific reason you contacted us — typically communication, customer support, or handling business inquiries.

Who we share the data with:

Data is shared in accordance with our data transfer policies. If your inquiry requires sharing your data with third parties, we will do so only to the extent necessary.

How to prevent processing:

If you contact us, we cannot avoid processing your data. If you do not want your data processed, you should refrain from contacting us.

Cookies

Our website uses cookies — small text files stored on your device by your browser when you visit our site. Cookies do not damage your device or contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are “session cookies,” which are automatically deleted after your visit. Other cookies remain stored until you delete them or they expire.

Purpose of processing:

We use cookies to make our website more user-friendly, efficient, and secure. This includes saving your preferences (such as language and location settings), optimising website display (e.g., fonts, CDN usage), and analysing website use for statistical and improvement purposes (often via third-party cookies).

Who we share the data with:

Data sharing follows our general data transfer policies, plus specific statements in this Privacy Policy.

How to prevent processing:

You can delete, disable, or limit cookies via your browser settings. Disabling cookies may affect website functionality.
Instructions for major browsers:

  • Google Chrome
  • Apple Safari
  • Microsoft Edge
  • Mozilla Firefox

For performance and advertising cookies, you can also opt out through:

  • Network Advertising Initiative (NAI)
  • YourAdChoices (Digital Advertising Alliance)
  • Your Online Choices (EDAA)

Newsletter with Performance & Reach Tracking

You can subscribe to our newsletter via our website to receive news, events, and offers. Our newsletters include performance and reach tracking.

Data we process:
  • IP address (usually anonymised)
  • Contact details
  • Date and time of registration
  • Technical information (browser, operating system, screen resolution)
  • Newsletter interaction data (opens, clicks, etc.)
Purpose of processing:

We use the collected data to send the newsletter, verify subscriptions, and address recipients. We store IP addresses and timestamps to prevent abuse. IPs may also be used for approximate location to measure relevance in different regions. Technical data ensures proper display on all devices. Interaction data is used to evaluate and optimise campaigns.

Who we share the data with:

We may share your data with service providers responsible for newsletter distribution and analytics, some of which may operate worldwide.

How to prevent processing:

You can unsubscribe at any time via the link in our emails or by contacting us directly.

Comments

You can comment on certain content on our website.

Data we process:

  • Comment content
  • Name (or alias)
  • Email address (not published)
Purpose of processing:

We collect these to display your comment, verify your identity, and notify you of replies or moderation. We use a double opt-in process for security.

Who we share the data with:

Data sharing follows our general data transfer rules.

How to prevent processing:

Avoid posting comments if you do not want your data processed.

Online Shop

You can order our products through our online shop.

Data we process:

  • Name
  • Email address
  • Delivery and billing address
  • Phone number
  • Any additional information you provide during the ordering process

If you pay via an online payment service, please also refer to our payment services section in this Privacy Policy.

Purpose of processing:

We primarily use your data to process and fulfil your order. We may also need it to identify you as a customer, communicate with you, handle billing, manage claims, and maintain customer records.
We may use it for advertising and marketing purposes within the scope of our legitimate interest.

Due to commercial and tax law requirements, we are obliged to store your address, payment data, and order details for up to 10 years.

Who we share the data with:

Your data will only be shared with third parties when necessary for contract fulfilment (e.g., with suppliers or delivery companies). If required, we may also share data with debt collection agencies, acting on our behalf.

How to prevent processing:

This data processing only occurs if you place an order. If you do not order from us, your data will not be processed.

Web Beacons

We may use tracking pixels (also known as web beacons) on our website or in our emails. These are small, usually invisible images that are automatically loaded when visiting our site or opening our emails.

Data we process:

Web beacons can collect the same information as log files and may track user navigation during a session.

They are mainly used by third-party services we employ.

Purpose of processing:

Web beacons are used to analyse website usage, generate statistics, improve content, and track email performance.

Who we share the data with:

Data sharing follows our general privacy policy. Please also refer to third-party tracking service descriptions in this document.

How to prevent processing:

Install appropriate browser extensions (e.g., uBlock Origin) or block external images in your email client.

Web Beacons

We may use tracking pixels (also known as web beacons) on our website or in our emails. These are small, usually invisible images that are automatically loaded when visiting our site or opening our emails.

Data we process:

Web beacons can collect the same information as log files and may track user navigation during a session.

They are mainly used by third-party services we employ.

Purpose of processing:

Web beacons are used to analyse website usage, generate statistics, improve content, and track email performance.

Who we share the data with:

Data sharing follows our general privacy policy. Please also refer to third-party tracking service descriptions in this document.

How to prevent processing:

Install appropriate browser extensions (e.g., uBlock Origin) or block external images in your email client.

Google Services

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Ltd. with headquarters at Google LLC, USA.

Data we process:

  • IP address (anonymised)
  • Technical details (browser, OS, resolution)
  • Website interactions
  • Duration, time, and date of visit
  • Referring URL
Purpose of processing:

To determine approximate location, analyse visitor origins, ensure proper display, optimise campaigns, and understand user engagement.

International transfers:

Data may be transferred to Google’s US headquarters, which may not offer the same level of protection as the EU.

Google Tag Manager

We use Google Tag Manager to centrally manage tracking tags (e.g., Facebook Pixel, Google Analytics, Hotjar).
It does not collect personal data itself but controls other services that may.

Google Web Fonts

Used to ensure consistent font display. When a page is loaded, your browser connects to Google’s servers, disclosing your IP.

If your browser does not support these fonts, a default system font is used.

Google Ads & Conversion Tracking

We use Google Ads to display online advertising and measure campaign success.
Conversion tracking collects data when you arrive via a Google ad, including anonymised IP, date, technical info, interactions, and session duration.

Purpose of processing:

To measure campaign performance, optimise ads, and analyse conversions.

DoubleClick Floodlight

Used for tracking user activity and measuring ad campaign results via cookies.

Compliance (Complianz)

We use Complianz to ensure our website complies with applicable data protection laws (GDPR, CCPA, LGPD, etc.). This includes automated compliance checks and privacy configuration management.

Final Provisions

We may update this Privacy Policy at any time. Changes will be published on steakandbeer.eu without separate notification.

Contact Information

Smoke Master
Email: sales@steakandbeer.eu
Tel: +34 665 335 196