Controller
AWL Zentrum Ltd, Basepoint Business Centre, Unit 34 John de Mierre House, West Sussex RH16 1UA, United Kingdom. Contact: kontakt@beergarden24.com. EU representative: AWL Zentrum SL, Psaje Peligros 3 1, Estepona, Spain.
Hosting
This website runs on our own servers in Germany, rented from Hostinger International Ltd. Connection data and technically necessary logs are processed to deliver the site securely (Art. 6(1)(f) GDPR).
Maps and images
The map uses map data from OpenStreetMap contributors, displayed with MapLibre; the map style, tiles, fonts and symbols are served through our own server (img.beergarden24.com), which fetches them from OpenFreeMap; your browser does not connect to OpenFreeMap for this. For walking or travel routes, for example from the nearest stop to the venue, the map queries the routing service of FOSSGIS e. V. (routing.openstreetmap.de) directly; your IP address is transmitted to FOSSGIS in the process. Routes in Google Maps only open when you click the relevant link.
We serve photos from Wikimedia Commons through our own image server (img.beergarden24.com); your browser does not connect to the Wikimedia Foundation for this. Wikimedia Commons only opens if you click a licence or source link. The legal basis for maps and routes is our legitimate interest in a complete and clear presentation (Art. 6(1)(f) GDPR).
Statistics
Google Analytics 4 and PostHog are only loaded after you have given your explicit consent via the consent banner. Without consent, no audience measurement takes place. Your choice is stored in your browser and can be withdrawn at any time via the “Privacy settings” link at the bottom of the page; statistics cookies already set are deleted at the same time. We do not use third-party advertising networks.
We use Google Analytics 4 (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for audience measurement. The legal basis is your explicit consent (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, on which the transfer is based (European Commission adequacy decision of 10 July 2023). According to Google, Google Analytics 4 does not store IP addresses. Google Analytics keeps event data for 2 months and user-level data for 14 months in our account. Unless you withdraw consent, the “_ga” cookie is stored for up to 2 years.
We use PostHog (provider: PostHog Inc.) to measure usage; the data is processed on servers in the EU. The legal basis is your explicit consent (Art. 6(1)(a) GDPR). We record page views, clicks on phone numbers, route, website and external links, and individual actions such as opening the map, the menu or the search. Session recordings are switched off. For this, PostHog stores a random identifier in your browser, which is deleted when you withdraw consent. IP addresses are anonymised in PostHog. We have not set a shorter deletion period; under our plan PostHog keeps event data for up to 7 years.
Anonymous counting for operators
So that operators can see how often their listing is viewed, we count views and clicks on “Call”, “Website” and “Route” on venue pages and in lists, and for advertising banners also impressions and clicks. Only a total per venue and day is stored. We do not set cookies for this, store nothing in your browser and record neither your IP address nor any other information about you. The legal basis is our legitimate interest in providing operators with a performance overview (Art. 6(1)(f) GDPR).
Forms, reviews and photo submissions
If you suggest a listing, claim a listing, register your venue, report content or submit a photo, we process the data you provide (name, email address and, where applicable, the photo) solely to handle your request. The data reaches our mailbox via the email service Resend (provider: Plus Five Five, Inc., San Francisco, USA) and is checked by a person before anything is published. Resend processes the data in the USA; Plus Five Five, Inc. is certified under the EU-US Data Privacy Framework including the UK Extension, on which the transfer is based. For transfers from Switzerland, the European Commission's Standard Contractual Clauses in Resend's data processing agreement apply.
For reviews we store the stars, text, first name, email address and, instead of your IP address, only a non-reversible check value that changes daily, to prevent abuse. Only the first name, stars, text and date are published – and only after a person has checked the review. The email address is never published; on request we delete a review (kontakt@beergarden24.com).
The legal basis is Art. 6(1)(b) GDPR (handling your request or using the directory in accordance with the terms of use).
Guest requests (“Request a table”)
If you request a table via a venue page, we store the date, time, number of guests, name, email address, optionally a phone number and message, and the language of the page. The sole purpose is to forward your request to the venue; the legal basis is Art. 6(1)(b) GDPR (steps prior to a reservation with the venue).
We forward these details by email to the venue concerned; the venue uses them under its own responsibility to reply to you. To prevent abuse we store, instead of your IP address, only a non-reversible check value that changes daily. We delete each request 12 months after receipt.
Storage period
Server logs: We delete the web server access logs (IP address, time, requested address, referring page and browser information) after 14 days, and system logs after 7 days.
Forms: We delete information from the forms (suggest a listing, claim a listing, register a venue, report content, submit a photo) 12 months after receipt, and rejected photo submissions 30 days after the decision. We do not store submitted photos on our servers; they only reach our mailbox as an attachment. We delete guest requests 12 months after receipt.
We keep reviews for as long as they are published; we delete rejected reviews 30 days after the decision. We delete the check value used to prevent abuse after 30 days.
Deletion runs automatically every night. How long Google Analytics and PostHog store data is described in the “Statistics” section.
Your rights
You can request access, rectification, erasure, restriction of processing and data portability, and withdraw any consent you have given at any time. You also have the right to lodge a complaint with a competent data protection supervisory authority.
Notes for individual countries
United Kingdom: The controller is AWL Zentrum Ltd (address above). You can complain to the Information Commissioner's Office (ICO, ico.org.uk).
Norway: You can complain to the data protection authority Datatilsynet (datatilsynet.no).
Switzerland and Liechtenstein: Our servers are located in Germany, a country with adequate data protection under Annex 1 of the Swiss Data Protection Ordinance. With your consent to Google Analytics, data may additionally be transferred to the USA; Google LLC is certified under the Swiss-US Data Privacy Framework. Form emails are sent via Resend in the USA; the Standard Contractual Clauses in Resend's data processing agreement apply to this.
USA: Audience measurement only starts after your consent; we do not respond separately to “Do Not Track” browser signals. After your consent, Google Analytics may collect data about your use across different websites. The directory is not directed at children under 13; we do not knowingly collect personal data from children under 13. This policy applies from the date stated below; we publish changes on this page with a new date.
Canada: AWL Zentrum Ltd (address above) is responsible for data protection and can be reached at kontakt@beergarden24.com. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), and in Québec to the Commission d'accès à l'information (cai.gouv.qc.ca).
Japan: Please send requests for disclosure, correction, deletion or cessation of use of your data by email to kontakt@beergarden24.com; we do not charge a fee. To protect your data we use encrypted connections (HTTPS) and restrict access to authorised persons. Our servers are located in Germany (European Union); the EU is recognised by Japan's Personal Information Protection Commission (PPC) as having an equivalent level of protection. Google Analytics and PostHog only transfer data with your consent; form emails are sent via Resend in the USA. Information under Art. 28(2) APPI on transfers to the USA: the recipient country is the United States of America. According to the PPC country report (research status October 2021), there is no comprehensive data protection law there, but laws for individual sectors, such as the Electronic Communications Privacy Act (ECPA), the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA); the report does not list an EU adequacy decision, and the USA has participated in the APEC CBPR system since 25 July 2012. The report does not mention any obligations to store data domestically or to cooperate with government information gathering that could significantly affect your rights. Measures taken by the recipients: Google LLC is certified under the EU-US Data Privacy Framework; Google Analytics transfers data in encrypted form (HTTPS with HSTS), and according to Google uses it only in accordance with its contract with us and our settings. PostHog stores our data in the PostHog EU Cloud in Frankfurt am Main and anonymises IP addresses; under the data processing agreement PostHog Inc. may also process data in the USA, states that it participates in the EU-US Data Privacy Framework and encrypts data in transit and at rest. Resend (Plus Five Five, Inc.) is certified under the EU-US Data Privacy Framework and has additionally agreed to the European Commission's Standard Contractual Clauses in its data processing agreement. Google Analytics and PostHog are only loaded after your consent; we use Resend only to handle your form request.