Privacy Policy
English translation for convenience. The legally binding German version is available at espresso-tonic.com/de/datenschutz.html.
Thank you for your interest in Espresso Tonic. Protecting your personal data matters to us. For anonymous, cookie-free audience measurement we use the software Umami (section 7); the pre-order of the 24-can tray is technically provided via Shopify (section 8). To measure and deliver our advertising on Facebook and Instagram we use the Meta pixel (section 9). Beyond that, we only process personal data when you actively contact us – for example via our enquiry form for retail & hospitality or the optional newsletter sign-up (see below).
1. Controller
Aperitivo Kollektiv GmbH
Sudetenstraße 116, 83052 Bruckmühl, Germany
Managing Director: Johannes Schubert
Email: kontakt@sanktsprizz.de
2. Hosting and server log files
This website is hosted by an external service provider: Greenmark IT GmbH (do.de / Domain-Offensive), Leinstraße 3, 31061 Alfeld (Leine), Germany. When you access the site, the hosting provider automatically collects information transmitted by your browser and stores it in so-called server log files. These are typically:
- IP address of the requesting device
- date and time of access
- name and URL of the file retrieved
- amount of data transferred, notification of successful retrieval
- browser type and operating system used
- referrer URL (the previously visited page)
Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free provision and security of our website. For security reasons, the log files are stored for a limited time and then deleted. A data processing agreement (Art. 28 GDPR) is in place with the hosting provider.
3. Enquiry form for retail & hospitality
Via the form on this site you can submit a retail/hospitality enquiry. We process exclusively the data you provide (name, company/business, email, optionally phone, postcode/town, type of business, interest, quantity/frequency, message) – solely to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) and your consent given when submitting (Art. 6 (1) (a) GDPR). Transmission only takes place when you actively submit the form.
4. Newsletter (optional, double opt-in)
You can optionally subscribe to our email newsletter about Espresso Tonic (news & stockists). Sign-up uses the double opt-in procedure: you first receive an email with which you confirm the sign-up. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email.
5. Use of Klaviyo (processor, third-country transfer)
To handle form enquiries and send the newsletter, we use the service Klaviyo (Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA). Klaviyo processes the data as our processor (Art. 28 GDPR). When you submit a form, the data entered is transmitted to Klaviyo and stored there on our behalf. This may involve a transfer to the USA; it is safeguarded by the EU Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework. We embed no tracking or on-site script from Klaviyo on this website – a data transfer takes place solely when you actively submit a form.
6. Contact by email
If you write to us directly by email, we process your details to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). We store the data until your enquiry has been finally dealt with and no statutory retention obligations conflict with deletion.
7. Audience measurement with Umami (cookie-free)
For anonymous statistical analysis of website use (e.g. page views, time on page, scroll depth, buttons clicked) we use the analytics software Umami. Umami works in a deliberately data-minimising and cookie-free way: it sets no cookies, performs no cross-device recognition and builds no personal user profiles. Your IP address is not stored; it is used only briefly to generate an anonymous, non-reversible daily value and is then immediately discarded. The data collected is aggregated and does not allow any conclusions about individual persons. The legal basis is our legitimate interest in data-minimising, cookie-free audience measurement (Art. 6 (1) (f) GDPR). The service is operated via Umami Cloud (Umami Software, Inc., USA) as our processor (Art. 28 GDPR); this may involve a transfer to the USA, safeguarded by the EU Standard Contractual Clauses. Because of its cookie-free, anonymous operation, no personal user profiles are formed.
8. Ordering function for the 24-can tray (Shopify)
The online pre-order of the 24-can tray is technically provided via Shopify's „Buy Button“ function (Shopify International Limited, 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland). On the order page (/en/tray/) a script from Shopify (sdks.shopifycdn.com) is loaded for this purpose; it is technically necessary for the cart and checkout function and may store a cart/session value in your device's browser. When you click „Order now“, you are redirected to the secure, Shopify-hosted checkout; the order and payment data entered there is processed by Shopify on our behalf to fulfil the contract. The legal basis for providing this ordering function is Art. 6 (1) (b) GDPR (initiation/performance of a contract). This may involve a data transfer to third countries, safeguarded by appropriate guarantees (EU Standard Contractual Clauses).
9. Meta pixel (Facebook and Instagram)
This website uses the „Meta pixel“ of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). The pixel records which pages you visit and which actions you take, and links this information to your Meta account if you are logged in to Facebook or Instagram. A cookie is set for this purpose and information about your device and browser is processed. We use this data to measure the effectiveness of our ads, to reach people with comparable interests and to show you ads on Facebook and Instagram that match your interest in Espresso Tonic.
The legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TDDDG. You may object to this processing at any time with effect for the future: via the ad settings of your Meta account at facebook.com/adpreferences, by deleting the cookies in your browser, or by blocking third-party cookies in your browser settings. With regard to the collection and transfer of the data, Meta Platforms Ireland Limited and Meta Platforms, Inc. (USA) are joint controllers with us within the meaning of Art. 26 GDPR; any further processing is carried out by Meta alone. This may involve a transfer to the USA, safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Details of Meta's data processing are available at facebook.com/privacy/policy.
10. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21), as well as the right to withdraw consent given at any time with effect for the future. To exercise these, please contact the controller named above.
11. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
As of: July 2026. This policy will be adapted when the website or the legal situation changes.