Entity responsible (Controller)
Joh. Berenberg, Gossler & Co. KG
Neuer Jungfernstieg 20
D - 20354 Hamburg
Telefon +49 40-350 60-0
Telefax +49 40 350 60-900
E-Mail  info@berenberg.de

Notes relating to data protection
Berenberg takes the protection of your personal data very seriously and acts in strict compliance with the relevant data protection regulations. We process personal data in conformity with the provisions of the European General Data Protection Regulation (GDPR) and the [German] Federal Data Protection Act (BDSG). In no case whatsoever will the data sourced by passed on to any third parties without the consent of the data subjects. The following presentation provides an overview of how Berenberg safeguards the protection of your data and what type of data are collected for which purpose and on which basis (Art. 6 (1) GDPR).

Data processing on this website
In connection with your access, data are stored on our services for backup purposes that possibly enable an identification to be made (e.g. IP address, date, time and pages viewed). No use of personal data is made - apart from the statistical evaluation of anonymised data records. We save IP addresses for a period of up to 28 days. Storage is for purposes of data security in order to safeguard the stability and operational safety of our systems. No merging of such data with those from other data sources takes place.

Processing, in particular collection, use and erasure of personal data
Personal date are collected on this website only to the extent technically necessary. We process, (in particular) collect and use no personal data without your explicit approval. You can also give your approval to us by electronic means and, of course, you may revoke it via the same channel for future effect. In order to send you the newsletters offered on our website and ordered by you, we use an order form to obtain your e-mail address and request you for subsequent confirmation (known as the double opt-in procedure). This means that after registration, you will receive an e-mail message in which you are requested for confirmation of your registration. This confirmation is necessary so that no one can sign up with unknown e-mail addresses. The data in question are stored and used solely for carrying out the relevant dispatch. Personal data that you provide us with via our website or which you provided us with to order the newsletter will only be kept in storage as along as the purpose has been fulfilled for which the data were entrusted to us. 
Within the scope of registering and cancelling receipt of the newsletter, in addition to the relevant point in time (data and time of day), we store the e-mail address, confirmation e-mail and the IP address for a period of 12 months. If you no longer agree to the storage of your personal data or if the latter should be or have become inaccurate, we will arrange for such data to be erased, blocked or erased in accordance with your instructions of carry out the necessary rectifications if this is possible according to applicable law

Newsletter dispatch service provider
Dispatch of the newsletter is carried out e.g. by means of a dispatch service provider trading as Inxmail GmbH (Wentzingerstr. 17, D-79106 Freiburg, Germany). The data protection regulations of the dispatch service provider are available for inspection here. In the process, the e-mail addresses of the newsletter recipients are stored on servers of the dispatch service provider. The latter will be involved on the basis of our legitimate interests according to Art. 6 (1) letter f GDPR and an order processing agreement as contemplated by Art. 28 (3) p. 1 GDPR. The dispatch service provider may use own information to compile the data of the recipients in pseudonymised form, i.e. without specific assignment to a particular newsletter recipient, for optimisation or improvement of its own service, e.g. for technical optimisation of dispatch, presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of the recipients to contact them personally or to forward the data to any third parties.

Newsletter success measurement
The newsletters contain a so-called “web beacon”, i.e. a file the size of one pixel that is retrieved when opening the newsletter either from the server at Berenberg or from the server of the dispatch service provider. Within the scope of such retrieval, initially technical information such as on the browser and your system as well as your IP address and the time of retrieval may be retrieved. This information is used for technical improvement of the services according to the technical data or target groups and their reading behaviour by means of their retrieval locations (determinable with the aid of the IP address) or the access times in question. Statistical collections also extend to include determining whether the newsletters are opened, when they are opened and which links are clicked. Whereas this information can be assigned, for technical reasons, to the individual recipients of the newsletter by the dispatch service provider, it is neither Berenberg’s endeavour nor that of the dispatch service provider to monitor individual users. Instead, the evaluations serve to enable Berenberg and the dispatch service provider, respectively, to identify the reading habits of the recipients of newsletters and adjust any content to such habits or to dispatch different kinds of content depending on the recipients’ interests.

Golf shop
If you order something in our golf shop you have the choice, if you want to register for it.

  1. 1. Registration
    If you want to register, this is for the purpose of simplifying future purchases. In the future, it would only be required to provide your login details and thus trigger the order. The data required to fulfill the contract (address, name, delivery address, payment information) are collected and stored. If you create an account under "Shopping Cart", the data you provide will be revocable and saved on the basis of your consent. All data stored on this basis, including your user account, can always be deleted in the customer area. Mandatory information required for the execution of the contracts is marked separately, the other information is provided voluntarily. Legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a GDPR in this case.
  2. 2. Without registration
    If you wish to process the order without registration, only the one-time specification of the above-mentioned data for the fulfillment of the contract is required. The data will not be saved and would have to be indicated again for further orders. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. 

We process the data provided by you in both variants exclusively for the processing of your order. For this we can pass on your delivery address to shipping service providers and suppliers. If you do not want to transfer the payment to the account of Berenberg but want to use another payment service provider such as Paypal from the offer, this service provider also receives the necessary data. Due to commercial and tax regulations, we are obliged to save your address, payment and order data for a period of ten years. The retention of your data is then however limited for this purpose, it will only be used to comply with legal obligations and then deleted. To store the items in the basket, a technically necessary cookie is stored in your browser (See “Cookies” in this policy for further information). An evaluation of cookie data beyond this purpose does not take place, the cookie will be deleted as you close the browser. The legal basis for the use of the cookie is Art. 6 I p. 1 lit. f) GDPR. 
To prevent unauthorized access by third parties to your personal data, in particular financial data, the entire ordering process is encrypted using TLS technology.

Relaying of links
When using the dispatch service provider, it may happen that the recipients of newsletters are relayed to the website of the dispatch service provider.
In this connection, Berenberg points out that cookies are in use on the dispatch service provider’s website and that personal data are thus processed by the dispatch service provider, its partners and other service providers enlisted (e.g. Google Analytics). Berenberg has no influence on such data collection. Further particulars are available in the dispatch service provider’s data protection statement.

Notice of termination/revocation
You may terminate the receipt of newsletters from Berenberg at any time, i.e. by withdrawing your approvals given. This will simultaneously result in your approvals in its dispatch by Berenberg and the dispatch service provider being erased as well as the statistical analyses. Unfortunately, separate revocation of dispatch by Berenberg, the dispatch service provider or the statistical evaluation is not possible. 

Accordingly, you will find a link on how to terminate the newsletter at the end of any such newsletter.

Cookies and Webtracking
When users visit our web pages, we occasionally use cookies, i.e. small text files deposited on your computer and which are saved in your browser. These cookies serve to make our offering user-friendly, effective and safe. No passwords are deposited in cookies. Most of the cookies used by us are so-called session cookies. They are automatically reset at the end of your visit as soon as you log off. If you terminate the session by closing your browser, then the cookie will continue to exist for a while. You can change the length of this period in the settings on your computer. Next, the cookie is either overwritten or deleted from your computer (client). Our cookies do not cause any damage to your computer and contain no viruses. You may reject cookies by selecting the appropriate settings on your browser; if you do, however, please note that you may not be able to use the full functionality of this website.

Berenberg uses a web analysis service called Google Analytics for its website, made available by Google LLC (“Google). It is used on the basis of Art. 6 (a) p. 1 letter f GDPR. Google Analytics uses cookies, i.e. text files placed on your computer to help the analyse how you use the website. As a rule the information generated on your website use, such as

  • browser type / version,
  • the operating system used,
  • referrer URL (the web page previously visited),
  • the host name of the accessing computer (IP address),
  • time of the server request,

is transmitted to and stored on a server of Google in the U.S. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. In addition, we have extended Google Analytics on our website to include the code “anonymizeIP”. This masks your IP address, which means that all data are collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
Only in exceptional cases does Google use this information on our instructions, e.g. to evaluate your use of our website, to compile aggregated reports on the activities and in order to perform other services to us associated with general website and Internet use. You may reject cookies by selecting the appropriate settings on your browser; if you do, however, please note that you may not be able to use the full functionality of our website.

In addition, you can prevent Google from transmitting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing such data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, in particular in browsers on mobile devices, you can additionally prevent data collection by Google by clicking on this link. An opt-out cookie will then be placed to prevent the future collection of your data when visiting our website. The opt-out cookie only applies to this browser and to our website and is placed on your device. If you delete your cookies in this browser, you will need to activate the opt-out cookie again. [Notes on activating the opt-out cookie can be found at: [https://developers.google.com/analytics/devguides/collection/gajs/?hl=de%20-%20disable].

We also use Google Analytics to evaluate data from double-click cookies as well as AdWords for statistical purposes. Should you object to this, you can deactivate this option via your display parameter manager (http://www.google.com/settings/ads/onweb/?hl=de).

The following cookies are placed by Google:

Cookie nameDuration of storageDescription
_ga2 yearsThis cookie is used to identify and differentiate users.
_gid24 hoursThis cookie is used to identify and differentiate users.
_gat1 minuteCookie is used to suppress the request rate.


The following cookies are used by our Content Management System (CMS) Wordpress in order to be able to offer the relevant service:

Cookie nameDuration of storageDescription
cookie_notice_accepted1 monthCookie saves the agreement with the cookie guide and does not display the layer on the bottom screen edge again.
14 daysCookies of a Wordpress plug-in that monitors the page and is intended to provide protection against hacking, spam and attacks in general. These cookies do not store any personal data.

The following cookies are used in our golfshop in order to be able to offer the relevat service:

Cookie NameDuration of storageDescription
ShopInit, SessionIDUntil browser is closedCookies storing the curent runtime information (session cookie) and will be deleted automatically when the browser is closed. The temporarily storage takes only part in the RAM, not at the harddrive.
epagescookielawcookie2 yearsCookie stores the confirmation of the cookie notice layer to not show it again.

Twitter feed
Our website includes the feed of our Twitter account.
Whenever a website of our Internet presence is called up that display the relevant content in visual terms, the Twitter servers are informed via your browser exactly which website of our Internet presence you are visiting and transmits additional data such as your IP address. We have no influence on the volume of data collected by the social network with the aid of this plug-in. Please read the data protection notes on Twitter.

Information according to the General Data Protection Regulation
In addition to these website-specific data protection references, the Information on the General Data Protection Regulation is also applicable.

Right to information and to complain
You have the right to information at all times pursuant to 15 GDPR on the data stored on your person, its recipients as well as the purpose of data processing. In addition, you have the right to rectification under Art. 16 GDPR, the right to erasure (right to be forgotten) according to Art. 17 GDPR and the right to restriction of processing under Art. 18 GFPR. Moreover, there is a right to complain to a data protection supervisory authority (Article 77 GDPR, read in conjunction with Section 19 of BDSG). We are also available at all times for any questions concerning the processing and use of your personal data. Should you request any further information that this data protection statement was unable to give you, or if you wish to know about your data stored, please do not hesitate to contact the Data Protection Officer of Berenberg:

Joh. Berenberg, Gossler & Co. KG
data protection officer
Neuer Jungfernstieg 20
D - 20354 Hamburg
E-Mail dataprotection@berenberg.com

This text was last updated on 19th September 2018.