We handle privacy and privacy-sensitive data with care within the limits of the General Data Protection Regulation (GDPR) or other applicable privacy legislation. In this Privacy Statement we inform you about how we process personal data, for what purposes we process personal data, how you can exercise your privacy rights and other information about how we handle personal data. Personal data is data that can be used to identify an individual or that can be linked to an individual.

This Privacy Statement applies to the processing of personal data through the website of brands and trade names of BrewDistrict24. This includes personal data processed through a webshop/company account. This Privacy Statement also applies to personal data processed by BrewDistrict24 of suppliers, (catering) customers or persons participating in win actions of BrewDistrict24. BrewDistrict24 is the data controller for these personal data.

For certain (parts of) websites, when we offer or purchase products or services, it is necessary for BrewDistrict24 to process personal data. BrewDistrict24 processes personal data of:

- Users of the website or participants in win actions.
- Personal data, such as name, address, place of residence, phone number, email address and date of birth;
- Interaction data, such as IP address, MAC address (anonymous where possible), surfing and clicking behavior on the website, location data, cookie identifiers (for more information please see our Cookie Policy) and data (name, email address, phone number and the question or complaint you have submitted) you leave on our website when you contact us 
- Consumers and hospitality entrepreneurs who purchase products and services through a BrewDistrict24 webshop:
- Contact and payment data, such as login data (username), name, address, place of residence, phone number, email address, date of birth, customer number and bank account number.
- Suppliers of BrewDistrict24:
- Contact and payment data, such as name, phone number, email address, bank account number, company and position

In particular, BrewDistrict24 obtains this personal data from you because you have provided it to BrewDistrict24.

BrewDistrict24 processes personal data based on the following legal bases:

- As far as this is necessary to enter into or execute an agreement with the person concerned. For example, you can think of the handling of consumer purchases (shipping your product) in the webshop with respect to our products and services.
- To comply with legal obligations, such as tax obligations and the prohibition to sell alcohol to minors. Therefore, when visiting our website, we ask you to indicate whether you are 18 years or older.
- To promote its legitimate interests. Here we always weigh up whether our legitimate interest takes precedence over your privacy interest. This is for example the case for service purposes, such as contacting those involved and answering questions that those involved have asked via our contact details. The legitimate interest also uses BrewDistrict24 for carrying out win promotions and promotional campaigns, and profiling purposes. This includes sharing and combining personal data within BrewDistrict24 to develop a profile so that we can better tailor the content of our website, information, advertisements, products and services to your interests and behavior.
- Based on your consent, BrewDistrict24 processes personal data for aggregated analytical and operational purposes and for marketing purposes, such as direct marketing, creating consumer target groups or look-a-like target groups, sending newsletters, displaying offers and information, sending user information, service messages or other electronic messages on the website and beyond via advertising networks and social media channels, such as Snapchat, Facebook, Instagram, Twitter, LinkedIn and TikTok.
- For development and analysis purposes, i.e. to further develop and improve our website, for statistical analysis and market research, such as anonymously measuring response to our win promotions and promotional campaigns and sending anonymous surveys.

BrewDistrict24 only provides personal data to third parties when it is permissible and carefully done. Personal data will only be provided to third parties if you have given your own permission or if this is allowed under the GDPR or other applicable privacy legislation. Sometimes we will provide personal data to the police, tax authorities, judiciary or fraud fighting organizations when this is necessary to comply with a legal obligation or a legitimate interest of BrewDistrict24. In addition, data will be provided to parties that assist BrewDistrict24 in performing services for you, delivering products to you or maintaining our website, such as:

- IT service providers;
- payment service providers;
- bailiffs, lawyers or other service providers for the purpose of collecting overdue payments or providing us with legal advice;
- enforcement agencies such as, for example, police, judicial or anti-fraud organizations;
- a BrewDistrict24 group company or a third party in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or part of our business, assets or shares (including in connection with any bankruptcy or similar proceeding).

These parties may be located in the Netherlands, other countries in the European Economic Area ("EEA") or elsewhere in the world. Where personal data is stored by us outside the EEA, we will ensure an appropriate level of protection for the transferred data. We require that service providers and other service providers take appropriate measures to protect the confidentiality and security of personal data. 

When data is transferred from the EEA to another country in the world, we will make every effort to ensure that this international data transfer does not adversely affect the level of protection of personal data by taking additional appropriate contractual, technical and organizational measures. In other cases, we will inform you of a possibly less high level of protection for your data. If necessary, we will still specifically seek your consent before the transfer. Nevertheless, foreign authorities may demand access to your data or you may not be able to turn to a court easily. Consent can be revoked at any time. Your preference will then be adjusted immediately. This does not affect any processing that has already taken place.

BrewDistrict24 keeps personal data no longer than necessary for the purposes mentioned above. The retention period for personal data depends on the purpose for which the personal data is used. After your personal data is no longer necessary, it will be anonymized or deleted. We provide some examples. Certain personal data processed for tax purposes are required to be kept for seven years.

The protection of your privacy is important to you and to us. BrewDistrict24 has therefore taken appropriate technical and organizational measures to prevent loss or unlawful processing of personal data. These measures are in line with applicable privacy and information security legislation. However, no website can be guaranteed 100% security. BrewDistrict24 can therefore not be held responsible or liable for unauthorized, unauthorized or unwanted access to the personal data which is outside BrewDistrict24 direct control (i.e.: despite the fact that appropriate measures have been taken).
In addition, except for intent or gross negligence, BrewDistrict24 is not liable for inaccuracies or consequences of activities undertaken on the basis of incorrect or incomplete information provided by you. When you provide personal data to BrewDistrict24, you yourself are responsible for the accuracy and updating of personal data.

Our website may contain links to other websites and apps. You may also choose to share information from our website via social media, such as Facebook, Instagram, LinkedIn, TikTok and YouTube. This means that the information you share, including name and preferences, will be visible to visitors of your personal pages (profiles). BrewDistrict24 is not responsible for the content, privacy and security of such websites, apps or social media channels. These websites and apps are not covered by this Privacy Statement and we therefore recommend that you carefully read the privacy and cookie statements on those websites and apps and of the social media parties that apply to this processing of your personal data by these third parties.

The Website is not intended for use by persons under the age of 18 ("Children"). We do not knowingly collect personal data from Children. BrewDistrict24 is not liable for the consequences of processing personal data of Children without the consent of their parent(s) or guardian. If we learn that we have collected personal data from Children without the consent of their parent(s) or guardian, we will take steps to delete that data from our servers. If you suspect that your child has provided personal information to us without consent, please contact us using our contact information at the bottom of this Privacy Statement.

You can request and view an overview of and information about the personal data processed by Brewdistrict24. You can also make a request to correct, delete, limit or transfer the personal data that Brewdistrict24 processes about you. Brewdistrict24 will comply with such a request if the request meets the legal requirements. In principle, you will receive the personal data in digital form. In certain cases we will transfer the personal data to another processing manager at your request, as far as this is technically possible. 

In addition, you have the right to object to the use of personal data by BrewDistrict24. However, in some cases we have legitimate reasons to continue processing your personal data. However, you can always object to the use of your personal data for direct marketing and/or profiling purposes.

You can always revoke given permission (for example for placing certain cookies). BrewDistrict24 will no longer use your personal data for these purposes. However, this has no effect on earlier processing of your personal data by BrewDistrict24.

How to submit your request can be found below. BrewDistrict24 asks you to motivate your request. BrewDistrict24 will respond as soon as possible, but at the latest within one month. In principle, BrewDistrict24 will comply with your request, unless we have a compelling legitimate interest not to delete the data, which outweighs your privacy interest. Please note that BrewDistrict24 may require you to resubmit your request, supplement it or identify yourself in order to process your privacy request. Once we have deleted the data, we may not be able to immediately delete all copies of the data from our systems and backup systems for technical reasons. We may refuse to comply with the foregoing requests if they are made unreasonably frequently, require unreasonable technical effort, or have unreasonable technical impact on our systems or compromise the privacy of others.

If you are not satisfied with the way we have dealt with your request or otherwise with the processing of your personal data by Brewdistrict24, you can also file a complaint about the use of your personal data with the Dutch Data Protection Authority (DPA). 

Privacy requests
Above you can read which privacy rights you can exercise. You can send your request in this respect to BrewDistrict24 via the contact form on the website. Please indicate clearly in the message that it concerns privacy and which request it concerns. Please note that BrewDistrict24 needs to establish your identity. In some cases additional information may therefore be requested.

For other questions or requests you can also contact BrewDistrict24 by phone, via the website or by mail.

Modification of this Privacy Statement
BrewDistrict24 may make changes to this Privacy Statement. BrewDistrict24 therefore advises you to check regularly for changes. When changes to this Privacy Statement have a significant impact on you, we will inform you of these changes.