Pro­tec­ting your per­so­nal data is important to us. We com­ply strict­ly with data pro­tec­tion laws when hand­ling your per­so­nal data.

In the fol­lowing docu­ment, we will inform you about how we use your per­so­nal data and what this means for you when you use our web­site,

The con­trol­ler respon­si­ble for pro­ces­sing per­so­nal data under app­li­ca­ble data pro­tec­tion regu­la­ti­ons is:

Warsteiner Welt GmbH & Co. KG
Dom­ring 4–10
59581 Warstein

Pho­ne: +49 2902 885001

Repre­sen­ted by:
HCG Beteiligungs-GmbH

in turn repre­sen­ted by:
Simo­ne Pollmann-Schweckhorst


Per­so­nal data is all infor­ma­ti­on rela­ted to an iden­ti­fied or iden­ti­fia­ble natu­ral per­son. This inclu­des data pro­vi­ded such as your address, tele­pho­ne num­ber and e‑mail address, as well as usa­ge data such as your user­na­me and password.

Data that does not refe­rence an iden­ti­fia­ble per­son in any way is not con­si­de­red per­so­nal data, such as anony­mi­zed data on usa­ge and ser­vice processes.


In gene­ral, you can surf anony­mous­ly on Unless you share such data with us yourself, we will not collect or store any per­so­nal data during your visit to When you visit our web­site, howe­ver, our web ser­ver will store cer­tain tech­ni­cal data (cal­led access data) in log files, such as

- Name of the acces­sed file
— Date and time of access
— IP address of the acces­sing computer
— Brow­ser type and version
— Ope­ra­ting sys­tem used by the use
— URL of the last page acces­sed by the user
— Quan­ti­ty of data transmitted
— Sta­tus of access (suc­cess­ful yes/no)

The IP addres­ses recor­ded in our log files ser­ve only to bet­ter ana­ly­se and cor­rect issu­es with the avai­la­bi­li­ty of the web­sites pro­vi­ded on our ser­vers, to impro­ve and opti­mi­se the web­sites we pro­vi­de from a tech­ni­cal and edi­to­ri­al stand­point, and for foren­sic ana­ly­sis if necessa­ry. We do not pre­pa­re sta­tis­ti­cal ana­ly­ses and/or user pro­files based on the data stored in log files.

When you use the fol­lowing ser­vices avail­ab­le at, we collect your per­so­nal data:

- When you book a bre­we­ry tour

We only use the per­so­nal data we collect if you pro­vi­de it to us during your regis­tra­ti­on and/or when pla­cing an order, or in the cour­se of the con­trac­tu­al rela­ti­ons­hip. You must pro­vi­de your per­so­nal data in order to con­clu­de the con­tract or car­ry out the con­trac­tu­al rela­ti­ons­hip. We collect and use the data you pro­vi­de to pro­cess your orders and for bil­ling pur­po­ses, if necessa­ry to initia­te, deter­mi­ne the con­tent of or modi­fy our con­trac­tu­al rela­ti­ons­hip with you in accordance with arti­cle 6 para­graph 1 let­ter b) GDPR. If you do not pro­vi­de us with your per­so­nal data, then we can­not make the afo­re­men­tio­ned ser­vices avail­ab­le to you.

To book a bre­we­ry tour, you must pro­vi­de the fol­lowing data:

- Date and time of your tour
— Num­ber of participants
— Name (if app­li­ca­ble, com­pa­ny name and representative)
— E‑mail address
— Tele­pho­ne number
— Pos­tal code
— Date of birth
— Num­ber of audio guides
— Num­ber of han­di­cap­ped participants
— Pay­ment infor­ma­ti­on for pay­ment methods in use

During regis­tra­ti­on for cer­tain ser­vices, Warsteiner Welt may request that users pro­vi­de fur­ther per­so­nal data in order to pro­vi­de them with their desi­red services

Fur­ther­mo­re, we will only use the per­so­nal data you pro­vi­de if and inso­far as you have con­sen­ted that we may do so, or if we have legal per­mis­si­on to use the data.


a) Hyper­links links to web­sites from other pro­vi­ders with which we are not affi­lia­ted (third par­ties). Once you click the­se links has no fur­ther influ­ence over the data collec­ted and used by the­se pro­vi­ders. Fur­ther infor­ma­ti­on on data collec­tion and usa­ge is pro­vi­ded in the data pro­tec­tion decla­ra­ti­ons of the­se indi­vi­du­al pro­vi­ders. Of cour­se, sin­ce we have no con­trol over how third par­ties collect and pro­cess data, we can­not accept any respon­si­bi­li­ty for such collec­tion or processing.

b) Coo­kies

We use coo­kies to make our web­site more attrac­ti­ve and to allow you to use cer­tain functions.

Coo­kies are text files stored tem­pora­ri­ly or long-term on the user’s com­pu­ter by the user’s brow­ser. Tem­pora­ry coo­kies ensu­re that com­mu­ni­ca­ti­ons remain uni­form. Per­sis­tent coo­kies are used to reco­gni­se users when they visit our web­site again. Such per­sis­tent coo­kies are used, for instance, when users select the func­tion “Remain log­ged in on this com­pu­ter”. If you use the same com­pu­ter to access the page again later, the web­site then uses a coo­kie to reco­gni­se the com­pu­ter and log it in automatically.

You can choo­se whe­ther your brow­ser should accept coo­kies. All brow­ser pro­grams will allow you to deac­ti­va­te or dele­te coo­kies. Func­tions that requi­re the abi­li­ty to reco­gni­se your com­pu­ter, howe­ver, will not be avail­ab­le or will only be avail­ab­le to a restric­ted extent if you do so. The­re­fo­re, web­site func­tions may be impac­ted if you deac­ti­va­te coo­kies; in par­ti­cu­lar, your abi­li­ty to book a bre­we­ry tour may be restricted.

Our web­site uses coo­kie con­sent tech­no­lo­gy from Borlabs Coo­kie to obtain your con­sent to store cer­tain coo­kies in your brow­ser, then docu­ment this con­sent in accordance with data pro­tec­tion laws. The pro­vi­der of this tech­no­lo­gy is Borlabs — Ben­ja­min A. Born­schein, Georg-Wil­helm-Str. 17, 21107 Ham­burg (her­ein­af­ter refer­red to as Borlabs).

When you access our web­site, a Borlabs coo­kie is stored in your brow­ser, and your con­sent or revo­ca­ti­on of con­sent is stored with the coo­kie. This data is not trans­mit­ted to the pro­vi­der of Borlabs Cookie.

The recor­ded data is stored until you request that we dele­te it, or until you dele­te the Borlabs coo­kie yourself, or until the pur­po­se for which the data was stored no lon­ger app­lies. Man­da­to­ry sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted. Details on data pro­ces­sing by Borlabs Coo­kie are avail­ab­le at

We use Borlabs Coo­kie con­sent tech­no­lo­gy to obtain legal­ly requi­red appro­val for the use of coo­kies. Our legal basis for doing so is Art. 6 para. 1 clau­se 1 lit. c GDPR.

You can edit your coo­kie set­tings here:

c) Matomo (form­er­ly Piwik)

This web­site uses the open source web ana­ly­tics ser­vice Matomo. Matomo uses coo­kies. The­se are text files stored on your com­pu­ter that allow us to ana­ly­se your use of the web­site. To do so, infor­ma­ti­on on your use of the web­site gene­ra­ted by the coo­kie is saved on our ser­ver. Your IP address is anony­mi­sed befo­re it is saved.

Matomo coo­kies remain stored on your device until you dele­te them.

Matomo coo­kies are stored, and this ana­ly­tic tool is used, on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the anony­mi­sed ana­ly­sis of user beha­viour, in order to opti­mi­se both its web­site and its adver­ti­se­ments. If we request your con­sent (for instance con­sent to store coo­kies), then data is pro­ces­sed exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; you may revo­ke your con­sent at any time.

Infor­ma­ti­on on your use of the web­site gene­ra­ted by the coo­kie is not trans­mit­ted to third par­ties. You can chan­ge your brow­ser soft­ware set­tings to pre­vent it from sto­ring coo­kies; howe­ver, if you do so you may not be able to use all of the func­tions of this web­site in full.

If you do not agree to the sto­rage and use of your data, you can deac­ti­va­te said data sto­rage and use. If you do so, an opt-out coo­kie will be stored on your brow­ser to pre­vent Matomo from saving usa­ge data. If you dele­te your coo­kies, then the Matomo opt-out coo­kie will also be dele­ted. You will have to reac­ti­va­te the opt out the next time you visit the website.

d) Face­book

Face­book is a social net­work run by the Ame­ri­can com­pa­ny Face­book, Inc. (1601 S. Cali­for­nia Ave, Palo Alto, CA 94304, USA). Face­book but­tons are always mar­ked with the Face­book logo. When you con­firm (click on) the icon, your per­so­nal data are trans­mit­ted and pro­ces­sed. Infor­ma­ti­on on data pro­ces­sing on our Face­book fan page is avail­ab­le at the fol­lowing link:

e) Twit­ter

Twit­ter is a micro­blog­ging ser­vice from the Ame­ri­can com­pa­ny Twit­ter, Inc. (795 Fol­som St., Suite 600, San Fran­cis­co, CA 94107). Twit­ter but­tons are always mar­ked with the Twit­ter logo. When you con­firm (click on) the icon, your per­so­nal data are trans­mit­ted and processed.

f) Insta­gram

Insta­gram is a social net­work run by the Ame­ri­can com­pa­ny Face­book, Inc. (1601 S. Cali­for­nia Ave, Palo Alto, CA 94304, USA). Insta­gram but­tons are always mar­ked with the Insta­gram logo. When you con­firm (click on) the icon, your per­so­nal data are trans­mit­ted and processed.

g) You­tube

You­tube ist ein Video­platt­form des ame­ri­ka­ni­schen Unter­neh­mens Goog­le LLC. (1600 Amphi­theat­re Park­way Moun­tain View, CA 94043 USA). You­tube-But­tons sind stets mit dem You­tube-Logo gekenn­zeich­net. Erst bei Bestä­ti­gung (Ankli­cken) des Icons erfolgt eine Wei­ter­lei­tung und es erfolgt eine Ver­ar­bei­tung per­so­nen­be­zo­ge­ner Daten.

h) Ado­be Fonts

This web­site uses cer­tain web fonts from Ado­be in order to achie­ve a uni­form appearan­ce. The pro­vi­der is Ado­be Sys­tems Incor­po­ra­ted, 345 Park Ave­nue, San Jose, CA 95110–2704, USA (Ado­be).

When you access this web­site, your brow­ser will load the requi­red fonts direct­ly from Ado­be in order to dis­play the site cor­rect­ly on your device. Your brow­ser crea­tes a link to Ado­be ser­vers in the USA to do so. When it does, Ado­be is noti­fied that your IP address acces­sed this web­site. Accord­ing to Ado­be, no coo­kies are stored in asso­cia­ti­on with pro­vi­ding the­se fonts.

Ado­be is cer­ti­fied under the EU-US Pri­va­cy Shield. The Pri­va­cy Shield is a con­ven­ti­on bet­ween the United Sta­tes of Ame­ri­ca and the Euro­pean Uni­on desi­gned to ensu­re com­pli­an­ce with Euro­pean data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on is avail­ab­le at:

Data is stored and ana­ly­sed in accordance with Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in dis­play­ing fonts in a uni­form man­ner on the web­site. If we request your con­sent (for instance con­sent to store coo­kies), then data is pro­ces­sed exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; you may revo­ke your con­sent at any time.

Fur­ther infor­ma­ti­on on Ado­be Fonts is avail­ab­le at:

Adobe’s data pro­tec­tion decla­ra­ti­on is avail­ab­le at:

4. Hosting und Content Delivery Networks (CDN)

Exter­nal hosting

This web­site is hos­ted by an exter­nal ser­vice pro­vi­der (hos­ter). Per­so­nal data collec­ted on this web­site is stored on the hoster’s ser­vers. This may inclu­de, for instance, IP addres­ses, con­ta­ct inqui­ries, meta and com­mu­ni­ca­ti­on data, con­tract data, con­ta­ct data, names, web­site access data and other data gene­ra­ted via a website.

We make use of the hoster’s ser­vices to ful­fil our con­tracts with cur­rent and poten­ti­al cus­to­mers (Art. 6 para. 1 lit. b GDPR) and in the inte­rest of pro­vi­ding our online ser­vices secu­re­ly, quick­ly and effi­ci­ent­ly via a pro­fes­sio­nal pro­vi­der (Art. 6 para. 1 lit. f GDPR).

Our hos­ter will only pro­cess your data if necessa­ry to ful­fil its ser­vice obli­ga­ti­ons, and under our inst­ruc­tions with respect to this data.

Con­clu­ding a con­tract for data processing

We have con­clu­ded a con­tract for data pro­ces­sing with our hos­ter in order to ensu­re pro­ces­sing is car­ri­ed out accord­ing to data pro­tec­tion law.


If you are obli­ga­ted to pro­vi­de us with your pay­ment infor­ma­ti­on (such as your account num­ber for direct debits) after con­clu­ding a con­tract that invol­ves pay­ments, then we requi­re this data to pro­cess your payment.

Pay­ments are pro­ces­sed via com­mon­ly used pay­ment methods (Visa/MasterCard, direct debit) exclu­si­ve­ly via an encryp­ted SSL or TLS con­nec­tion. You can tell whe­ther a con­nec­tion is encryp­ted becau­se the address line of your brow­ser will switch from “http://” to “https://” and you will see a lock sym­bol in the brow­ser line.

The pay­ment data you pro­vi­de to us can­not be view­ed by third par­ties if you com­mu­ni­ca­te it to us via encryp­ted means.


Data pro­ces­sing (cus­to­mer and con­tract data)

We collect, pro­cess and use per­so­nal data only if necessa­ry to initia­te, deter­mi­ne the con­tent or modi­fy our legal rela­ti­ons­hip. We do so on the basis of Art. 6 para. 1 lit. b GDPR, which allows data pro­ces­sing in order to ful­fil a con­tract or car­ry out pre-con­trac­tu­al mea­su­res. We only collect, pro­cess and use per­so­nal data regar­ding the use of this web­site (usa­ge data) if necessa­ry to allow users to uti­li­se our ser­vices, or to char­ge for them.

Collec­ted cus­to­mer data is dele­ted after their con­tract is com­ple­te, or after the end of the busi­ness rela­ti­ons­hip. Sta­tu­to­ry reten­ti­on peri­ods remain unaffected.

Data trans­mis­si­on upon con­clu­ding a con­tract for ser­vices and digi­tal content

We trans­mit per­so­nal data to third par­ties only if necessa­ry in the cour­se of car­ry­ing out a con­tract, for instance to a credit insti­tu­ti­on invol­ved in pro­ces­sing a payment.

Data is not trans­mit­ted for other pur­po­ses, or is trans­mit­ted only if you have express­ly agreed to the trans­mis­si­on. Your data is not dis­c­lo­sed to third par­ties without your express con­sent, for instance for adver­ti­sing purposes.

Data is pro­ces­sed based on Art. 6 para. 1 lit. b GDPR, which allows data pro­ces­sing in order to ful­fil a con­tract or car­ry out pre-con­trac­tu­al measures.


One of the pay­ment methods we offer on this web­site is pay­ment by Klar­na. The pro­vi­der is Klar­na AB, Svea­vä­gen 46, 111 34 Stock­holm, Swe­den (her­ein­af­ter refer­red to as “Klar­na”).

Klar­na offers a varie­ty of pay­ment opti­ons (such as inst­alm­ent purcha­ses). If you deci­de to pay with Klar­na (Klar­na check­out solu­ti­on), then Klar­na will collect a varie­ty of per­so­nal data from you. Details are avail­ab­le in the Klar­na data pro­tec­tion decla­ra­ti­on at the fol­lowing link:

Klar­na uses coo­kies to opti­mi­se use of the Klar­na check­out solu­ti­on. Opti­mi­sing the check­out solu­ti­on is part of our legi­ti­ma­te inte­rest in the sen­se of Art. 6 para. 1 lit. f GDPR. Coo­kies are small text files stored on your device, and do not cau­se any harm. They remain stored on your device until you dele­te them. Details on the use of Klar­na coo­kies are avail­ab­le at the fol­lowing link:

We trans­mit your data to Klar­na on the basis of Art. 6 para. 1 lit. a GDPR (con­sent) and Art. 6 para. 1 lit. b GDPR (pro­ces­sing to ful­fil a con­tract). You can revo­ke your con­sent to data pro­ces­sing at any time. Your revo­ca­ti­on will not impact the effec­ti­ve­ness of data pro­ces­sing car­ri­ed out in the past.

Instant trans­fers

One of the pay­ment methods we offer on this web­site is an “instant trans­fer”. The pro­vi­der of this pay­ment ser­vice is Sofort GmbH, The­re­si­en­hö­he 12, 80339 Munich (her­ein­af­ter refer­red to as “Sofort GmbH”).

The “Instant trans­fer” pro­cess pro­vi­des us with a pay­ment con­fir­ma­ti­on from Sofort GmbH in real time, allowing us to begin ful­fil­ling our lia­bi­li­ties immediately.

If you deci­de to use the “instant trans­fer” pay­ment method, then you will trans­mit a PIN and valid TAN to Sofort GmbH so that they can log into your online ban­king account. Sofort GmbH will auto­ma­ti­cal­ly check your account balan­ce after log­ging in and com­ple­te the trans­fer to us with the TAN you pro­vi­de. Then, they will send us an immedia­te tran­sac­tion con­fir­ma­ti­on. After log­ging in, your reve­nues, the credit line of the over­draft faci­li­ty and the exis­tence of other accounts and their balan­ces are che­cked automatically.

In addi­ti­on to your PIN and TAN, the pay­ment data and per­so­nal data you pro­vi­de are also trans­mit­ted to Sofort GmbH. The per­so­nal data inclu­des your first and last name, address, tele­pho­ne number(s), e‑mail address, IP address, and any other data necessa­ry to pro­cess your pay­ment. This data must be trans­mit­ted to deter­mi­ne your iden­ti­ty and pre­vent any fraud attempts.

We trans­mit your data to Sofort GmbH on the basis of Art. 6 para. 1 lit. a GDPR (con­sent) and Art. 6 para. 1 lit. b GDPR (pro­ces­sing to ful­fil a con­tract). You can revo­ke your con­sent to data pro­ces­sing at any time. Your revo­ca­ti­on will not impact the effec­ti­ve­ness of data pro­ces­sing car­ri­ed out in the past.

Details on pay­ment via instant trans­fer are avail­ab­le at the fol­lowing links: and


We only trans­mit your per­so­nal data if this is indi­ca­ted in this data pro­tec­tion decla­ra­ti­on, if the con­trac­tu­al pur­po­se requi­res that we do so (Arti­cle 6 para. 1 let­ter b) GDPR), if you have given your express con­sent that we do so (Arti­cle 6 para. 1 let­ter a) GDPR), and/or if we have legal per­mis­si­on to do so (Arti­cle 6 para. 1 let­ter c) GDPR). We may trans­mit your data to our com­mis­sio­ned credit insti­tu­te or pay­ment pro­vi­der in order to pro­cess your payment.


We use tech­ni­cal and orga­ni­sa­tio­nal secu­ri­ty mea­su­res to ensu­re that users’ per­so­nal data is pro­tec­ted against loss, pro­hi­bi­ted chan­ges, or ille­gal access by third par­ties. We only allow aut­ho­ri­sed per­son­nel to access your per­so­nal data, and only allow access to the extent necessa­ry for the abo­ve purposes.

Cer­tain sen­si­ti­ve data is trans­mit­ted only in encryp­ted form. We use “secu­re socket lay­er” (SSL) trans­mis­si­on to do so. All infor­ma­ti­on trans­mit­ted using this secu­re method is encryp­ted befo­re it is sent to us. Your per­so­nal data, such as your name or address, is con­ver­ted into a code for encryp­ti­on by the secu­ri­ty ser­ver soft­ware. This ensu­res that this data can­not be acces­sed by unaut­ho­ri­sed par­ties during online trans­mis­si­on. Most newer brow­sers alrea­dy sup­port this secu­re trans­mis­si­on technology.

All employees of Warsteiner Welt and their agents are obli­ga­ted to main­tain data secrecy, if they hand­le per­so­nal data.


Once the con­tract has ended and been car­ri­ed out in full, your data is blo­cked against fur­ther use, and is dele­ted at the end of app­li­ca­ble tax and com­mer­cial law regu­la­ti­ons, unless you have decla­red your con­sent to the ongo­ing use of your data.


You have a varie­ty of rights under the law rela­ted to Warsteiner Welt’s pro­ces­sing of your per­so­nal data. As defi­ned under the law, per­sons who­se per­so­nal data is pro­ces­sed are refer­red to as “data subjects”.

You can con­ta­ct Warsteiner Welt if you would like to exer­cise any of your rights lis­ted below:

Right to revo­ke con­sent in accordance with Art. 7 para. 3 clau­se 1 GDPR

Right to infor­ma­ti­on in accordance with Art. 15 GDPR

Right to rec­ti­fi­ca­ti­on and com­ple­ti­on in accordance with Art. 16 GDPR

Right to dele­ti­on and “right to be for­got­ten” in accordance with Art. 17 GDPR

Right to restrict pro­ces­sing in accordance with Art. 18 GDPR

Right to data por­ta­bi­li­ty in accordance with Art. 20 GDPR

Right to object in accordance with Art. 21 GDPR

Right to not be sub­ject to decisi­ons based only on auto­ma­ted pro­ces­sing — inclu­ding pro­filing — in accordance with Art. 22 GDPR

Right to sub­mit com­p­laints to a super­vi­so­ry aut­ho­ri­ty in accordance with Art. 77 GDPR

Respon­si­ble super­vi­so­ry authority:

Sta­te Offi­cer for Data Pro­tec­tion and Free­dom of Information
North Rhi­ne Westphalia
PO Box 20 04 44
40102 Düsseldorf

Tel.: 0211/38424–0
Fax: 0211/38424–10


If you have con­sen­ted to the use of your per­so­nal data, you can revo­ke your con­sent gran­ted to us at any time with future effect.

If you have ques­ti­ons or requi­re fur­ther infor­ma­ti­on, or if you would like to revo­ke your con­sent, plea­se con­ta­ct our Data Pro­tec­tion Officer:

Warsteiner Welt GmbH & Co. KG
Data Pro­tec­tion Officer
Dom­ring 4–10
59581 Warstein


Data pro­tec­tion decla­ra­ti­on Ver­si­on 1.0
As of: June 2020

The Warsteiner Welt was awar­ded the Tra­vel­lers’ Choice Award 2020.

© 2022 Warsteiner