This privacy policy applies to fronteiraspirits.com and www.fronteiraspirits.com.
1. Controller
The controller responsible for the processing of personal data on this website is:
K&V Mercantil GmbH
Gerbermühlstr. 45
60594 Frankfurt am Main
Germany
Email: info@fronteiraspirits.com
2. Data protection officer
We are currently not legally required to appoint a data protection officer. For questions about data protection, you may contact us using the contact details above.
3. Website hosting and server log files
This website is hosted on the Shopify platform, provided by Shopify (the specific contracting Shopify entity is set out in our Shopify merchant/terms of service agreement). When you access our website, technical access data may be processed automatically by the hosting infrastructure. This may include your IP address, date and time of access, requested file, referrer URL, browser type, operating system, transferred data volume and access status.
This processing is necessary to display the website, maintain technical stability and ensure security. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.
4. Contact form and email inquiries
If you contact us by email or through the contact form, we process the data you provide, such as your name, email address and message content, to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR where your request relates to pre-contractual or contractual matters, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to inquiries.
Our email communication is currently connected to Microsoft services. This means that inquiry data may be processed by Microsoft as an email service provider.
5. Age gate and local storage
Because this website relates to alcoholic beverages, we use an age gate: on your first visit, you are asked to confirm that you are 18 years or older before browsing the store. If you confirm, this confirmation is stored locally in your browser using localStorage, so that the age gate does not appear again on every page view. This local storage only holds a simple yes/no flag - it does not collect your date of birth or any other personal data, and is not used for tracking or advertising.
You can delete this local storage at any time through your browser settings, which will cause the age gate to appear again on your next visit.
6. Cookies, analytics and tracking
At this stage, we do not use analytics tools, advertising pixels, social media embeds or non-essential tracking cookies. If this changes, this privacy policy will be updated accordingly and, where required, a consent mechanism will be implemented.
7. Fonts, videos and external content
The website is intended to use locally hosted fonts and self-hosted video files where possible. At this stage, no external video platform such as YouTube or Vimeo and no social media feed is embedded.
8. Recipients of personal data
Personal data may be processed by service providers that support the operation of this website and communication with users, in particular our hosting provider (Shopify) and our email service provider. Where required, these providers act as processors under Art. 28 GDPR.
9. Transfers outside the EU/EEA
A transfer of personal data to countries outside the EU/EEA is not intended for the basic website operation, unless it becomes necessary through the use of service providers such as Shopify or Microsoft. In such cases, appropriate safeguards under the GDPR will be used where required.
10. Storage period
We store personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. Contact inquiries are generally stored only as long as necessary to process the inquiry and any follow-up communication.
11. Your rights
You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and, where applicable, objection to processing. Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
12. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
Language versions: This page is also provided in German and Portuguese (Brazil). In case of any discrepancy between language versions, the German version shall prevail.
This privacy policy is a working draft prepared as part of our current storefront build and has not yet been reviewed by qualified legal counsel. Section 5 (age gate) now describes the age gate as actually implemented on this website.