How we handle personal data on this website.

1. Controller

The controller for this website is Christian Dzieia & Daniel Ristic GbR, Dr.-Mack-Str. 41, 90762 Fuerth, Germany. You can reach us at info@sidequestwhisky.com.

2. Website hosting and server logs

When you visit this website, the hosting provider may automatically process technical access data such as IP address, date and time of the request, requested resource, referrer, browser information, and operating system data. This processing is used to deliver the website, ensure stability, and defend against abuse or attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure and reliable website operation).

Retention: server log retention depends on the hosting provider's operational necessity and deletion cycles.

3. Cloudflare as CDN and WAF

This website uses Cloudflare as a content delivery network (CDN), reverse proxy, and web application firewall (WAF). In this role, Cloudflare processes personal data such as IP addresses, request metadata, and security-related event data in order to deliver content efficiently, protect the website against attacks, and stabilize availability.

Depending on the enabled Cloudflare security features, technically necessary cookies may be set by Cloudflare, for example to distinguish legitimate visitors from malicious traffic or to maintain security challenge state. These cookies are not used by us for marketing or cross-site tracking.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure content delivery, network security, and defense against abuse).

Further information on Cloudflare's processing, retention, and safeguards should be reviewed in Cloudflare's privacy and data processing documentation.

4. Local delivery of website assets

This website is designed to avoid loading third-party frontend resources where possible. Images, styles, and typography are served from our own website. We do not load Google Fonts in the visitor's browser.

5. Cookies and similar technologies

This website is intentionally built to avoid non-essential cookies, analytics tags, marketing pixels, and third-party embeds. At the time of this notice, we do not use tracking or marketing cookies on the public website.

If Cloudflare security features are enabled, technically necessary security cookies may be used. We currently do not intend to use cookies for analytics or marketing. Where consent is legally required before non-essential technologies are set, we will obtain it in advance.

6. Newsletter

If you subscribe to our newsletter, we process your email address in order to send you updates about releases, availability, and related company news. We use a double opt-in process. This means you will first receive a confirmation email and will only be added to the newsletter after you confirm your subscription.

To document your consent, we or our processor may store the time of registration, confirmation time, and related technical verification data.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in any newsletter email or by contacting us.

7. Newsletter processor: Brevo

We use Brevo (Sendinblue GmbH / Brevo group companies, depending on the contractual setup) as our newsletter service provider. Brevo processes newsletter data on our behalf as a processor under Art. 28 GDPR.

Please review Brevo's privacy and data processing information for current details on infrastructure, subprocessors, and international transfers.

Brevo information: brevo.com and help.brevo.com

8. Your rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing, and data portability, where the legal requirements are met. You also have the right to lodge a complaint with a competent supervisory authority.

9. Contact regarding privacy

If you have questions about this privacy notice or the processing of your data, contact us at info@sidequestwhisky.com.