Weber-Stephen Products LLC and Weber-Stephen Products (EMEA) GmbH are Joint Controllers for the processing in the App.
Weber-Stephen Products LLC, 1415 Roselle Road, Palatine, IL 60067, USA is responsible for the technical set-up, administration and distribution of the App. With regard to the Weber-ID registration, Analytics, Marketing and communication, Weber-Stephen Products LLC is joint-controller with Weber-Stephen Products (EMEA) Franklinstraße 28/29, 10587 Berlin, Germany, which handles the Weber-ID accounts in Europe on the technical infrastructure also used by Weber-Stephen Products LLC. Information obligations in accordance with Art. 13, 14 of the GDPR are fulfilled by Weber-Stephen Products LLC. Weber-Stephen Products (EMEA) GmbH is the main establishment of Weber-Stephen Products LLC.
While using the App, we will process different sets of data; the processing is different for users who have registered a Weber-ID and for non-registered users. The use of the App does not require the registration of a Weber-ID. Additionally, some data is processed automatically by the App to ensure correct and uninterrupted service of the App.
The legal basis for processing is Art. 6 (1) b) of the GDPR, if no other legal basis is provided.
To ensure trouble-free use of the App, we need to collect, process and store (see Data Storage) the following personal data:
Consent, where applicable (eg: marketing opt-in).
Mobile operating system
Unique device ID
Mobile App or web browser version
Usage data (time, temperature, type of meat)
Optional: Marketing data (opt-in, if selected by user)
We do not collect or process any personal data from non-registered users while they are using the App. All data that is processed for the use of the App is processed in connection with a random anonymous identification (“Random ID”) created automatically by the App and transferred to a cloud-based data base that the App accesses when used. The following data is stored for the user under the Random ID:
Preset sub category
Session name/Consumer login name
Graph data (temperate point for each second of the session collected from iGrill Device)
Recipes and “Favorites”
Product setup information
Product registration information
We have no knowledge of the identity of a non-registered user and have no possibility of identifying him/her. The abovementioned anonymous data is stored in the cloud for access by the App for future use, so the App can access information on prior use, settings and user generated information, without registering an account.
In case the user registers a Weber-ID at a later point, the data stored under the Random ID will be merged into the Weber-ID.
The data according to App Usage Data is used for identifying the respective user and connect him/her to the Random ID resp. his/her Weber-ID (if logged in) while he is using the App
The Weber-ID creates a central consumer account where all of your data is collected in one place in order to constantly improve your experience with Weber products and to tailor the experience to your specific interests. You may create a Weber-ID Account free of charge.
When you create a Weber-ID account within the App, we collect the following information:
Orders and cart
Email list status
Customer service/online consumer care claim information
Legal Basis for the processing is Art. 6 (1) b) of the GDPR, as the data is necessary for providing you with the services and functionalities of the Weber-ID.
This will give you access to exclusive contents of the web page (recipes, tips and tricks, etc.), you can register your grill/grills, receive all important information (warranty periods, operating instructions, etc.) and have central access to all data and services Weber-Stephen has on offer for you. You can also easily log into our shop at any time to check your order status or place additional orders without having to register again. A Weber ID will also allow you to use features such as notepad and wish list.
We are also entitled to store your IP addresses, time of registration and confirmation times on the basis of our legitimate interest, to verify your registration and to appropriately clarify any possible misuse of your personal data. The legal basis for this is Art. 6 (1) c) and f) of the GDPR.
We use a service called Firebase Analytics by Google, Inc. for analysing the use of the App by non-registered and Weber-ID users for marketing purposes. Such analytics services are deactivated in the App by default and must be activated by the user providing consent for the use of such services. The user can activate and deactivate the service in the settings of the App. These processes are based on the users consent in accordance with Art. 6 (1) a) of the GDPR.
This App uses Firebase Analytics, an analysis service by Google, Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google"). The service collects and transmits data of the user’s behaviour for the purpose of analysis and improvement of our marketing measures and offers. The tool captures the use of the app by monitoring the user manoeuvring through the different screens, screen time and other information on the use and by using the user's IP-address.
The “Audiences” tool enables us to develop user groups based on such usage data and to optimise our marketing measures individually for the defined groups.
Data collected by Firebase Analytics will be transferred to the BigQuery data base which is also operated by Google, Inc. and can analyse a large amount of data in a short time. Based on this analysis, we use Periscope, a service provided by Periscope Data, 1127 Mission Street, San Francisco, CA 94103, for easy and accessible display of the results. These results will be stored internally and under no circumstances will they be shared with any third parties.
Google and Periscope act as data processors for Weber and agreements are in place between the parties according to Art. 28 of the GDPR. Both partners are Privacy-Shield enlisted
Use of data for advertising purposes, Push Notification and Facebook
Your data will only be used for advertising purposes after you have given your express consent for the different measures. The legal basis for processing on the basis of consent is Art. 6 (1) a) of the GDPR. You can withdraw your consent for a specific marketing purpose at any time by sending an email to firstname.lastname@example.org or by clicking "Unsubscribe" within any marketing communication email you receive.
The data is used for purposes such as keeping you informed via email about new products and events from the grill branch. This includes information on the current and future product range (e.g. barbecues, equipment, accessories, consumables, life style) and on presentations and events with the participation of Weber-Stephen (e.g. grill academies, seminars, fairs, consumer research, non-recurring events). We use a processor to send emails containing the aforementioned information.
On basis of your additional consent, we will provide Facebook Inc. social network, 1601 S. California Ave., Palo Alto, CA 94304, USA ("Facebook") with your name and the email address you have provided us with for marketing purposes. Facebook will analyse this data in order to provide you with matching advertisments for our services and products on the social media platform Facebook. The data is stored and processed by Facebook, whereby a connection of the data to the respective Facebook profile of the user is made. For more information about data processing through Facebook, see https://www.facebook.com/about/privacy/.
Additionally, we use so-called push notifications in the App. These are notifications that pop up on your device with news, recipes and interesting information about Weber. Legal basis is Art 6 (1) a) of the GDPR.
By default, such notifications are deactivated; you can activate the notifications in the App´s settings. When you activate these push notifications, you accordingly consent to us sending you the related marketing notifications. You can deactivate the service at any time in the App´s settings.
Contact by email
We process your email address and content of the request when you send us enquiries via email for the purpose of handling and documenting your request.
Purely informative inquiries, i.e. those which do not lead to the conclusion of a contract will be deleted by us at the end of the year after completion of the processing of the inquiry.
Depending on the content of your request, the data entered by contact form or via email will be processed on the basis of your consent pursuant to Art. 6 (1)a) of the GDPR or pursuant to Art. 6 (1) b) of the GDPR, insofar as contractual performance obligations or the implementation of pre-contractual measures exist.
Weber-Stephen uses local partners (local Weber-Stephen entities) as Processors, in accordance with Art. 4 No. 8 of the GDPR bound by data processing agreements in accordance with Art 28 GDPR, in order to process such enquiries and support users in their local language. We use the Zendesk ticket system, a platform of Zendesk Inc, 1019 Market Street, San Francisco, CA 94103, using a data centre located in the EU, to process customer inquiries by email. Zendesk is also acting as a Processor based on a Data Processing Agreement in accordance with Art. 28 GDPR. Zendesk is Privacy-Shield enlisted. No data will be transferred to third countries. Further information can be found at https://www.zendesk.com/company/customers-partners/eu-data-protection/
Disclosure of data to third parties
Unless otherwise specified in this policy, in accordance with the GDPR, we do not disclose or transmit your data to third parties.
Your data is deleted without undue delay if and to the extent that the purpose of data collection has been achieved resp. ceases to exist. The data that is processed by us will be deleted at the latest after expiry of legal retention periods. We adhere to the requirements of Art. 17, 18 of the GDPR. If the data processing is based solely on your consent, the data will be deleted immediately after receipt of an appropriate revocation.
According to legal regulations, you can claim the following rights in respect of the controller:
Right of access by the data subject, Art. 15 of the GDPR
Right to rectification, Art. 16 of the GDPR
Right to deletion (‘right to be forgotten’), Art. 17 of the GDPR
Right to restriction of processing, Art. 18 of the GDPR
Right to data portability, Art. 20 of the GDPR
Right to object, Art. 21 of the GDPR
You also have the right to file a complaint with a supervisory authority about the processing of your personal data by the controller.