Privacy Policy weber.com
Thank you for your interest in our website and what it has to offer.
The protection of your personal data (hereinafter referred to as “data”) is very important to us. In the following, we would like to provide you with detailed information on what data is collected during your visit to our website and when you use our online offers and how we process and use this data in detail. We would also like to inform you about our technical and organizational security measures.
Please note that this privacy policy may be updated from time to time to reflect the introduction of new technologies and/or changes in legislation. We will notify you at the appropriate place. We will always take your concerns into account when making any changes.
Our privacy policy has a modular structure. It is made up of a general section, which applies to all processing of personal data and processing situations that arise each time a website is accessed (A. General Information) and a specific section, the content of which relates only to the processing situation mentioned there with the name of the respective offer or product (B. Collection and Processing of Personal Data) and the use of cookies and analysis tools (C. Statistics, Advertising, Tracking and Retargeting, Plugins Provided by Partners - Use of Cookies and Similar Technologies).
A. General Information
1. Controller
Weber-Stephen Products LLC, 1415 S. Roselle Road, Palatine, Illinois 60067 (USA), Weber-Stephen Products (EMEA) GmbH, Franklinstr. 28/29, 10587 Berlin, Weber-Stephen Deutschland GmbH, Rheinstrasse 194, 55218 Ingelheim (am Rhein) and Weber-Stephen Products (U.K.) Limited are jointly responsible for the processing of your personal data in accordance with Article 4 No. 7 and Article 26 of the GDPR.
The above-mentioned controllers jointly determine the purposes and means of the data processing. In the following, "Weber" refers to the entirety of the joint controllers, unless individual controllers are explicitly named. All data transfers to the USA within the Weber-Stephen Group are carried out based on EU standard contractual clauses with appropriate safeguards.
In particular, the respective controllers perform the following specific functions:
Scope of duties | Detailed tasks | Responsible Weber unit |
Software | Acquisition and administration of software | Weber-Stephen Products LLC |
Services related to data processing | Acquisition and administration of services | Weber-Stephen Products LLC (global), Weber-Stephen Products (EMEA) GmbH (for exclusive use in Europe) |
Contract management | Contracting with third party service providers | Weber-Stephen Products LLC (global), Weber-Stephen Products (EMEA) GmbH (for exclusive use in Europe) |
Technical support | Technical website operation, IT infrastructure, Weber-ID account administration | Weber-Stephen Products LLC, Weber-Stephen Products (EMEA) GmbH |
Sales | Technical and commercial handling of the shop and booking system for the Weber Grill course, including payments and returns | Weber Deutschland GmbH |
Data management | Access to analysis data and log files | Weber-Stephen Products LLC, Weber-Stephen Products (EMEA) GmbH |
Access to evaluation system data | Weber-Stephen Products LLC, Weber-Stephen Products (EMEA) GmbH | Access to the technical and commercial processing of the shop and booking system for the Weber Grill course, including payments and returns, as well as processing support. | Weber Deutschland GmbH |
Marketing | Decisions about marketing measures and improvement of offers | Weber-Stephen Products LLC, Weber-Stephen Products (EMEA) GmbH |
Customer care | Processing of inquiries (warranty, products), if the product in question was purchased at weber.com | Weber-Stephen Products (EMEA) GmbH, Weber-Stephen Products (U.K) Limited |
Customer reviews | Operating the rating system | Weber-Stephen Products (EMEA) GmbH |
Weber warranty | Processing enquiries | Weber-Stephen Products LLC, Weber-Stephen Products (EMEA) GmbH, Weber-Stephen Products (U.K) Limited |
Data protection | Fulfilment of information obligations (Articles 13, 14 GDPR), implementation of general data protection principles (Article 5 GDPR) for the protection of data subjects (Article 32 GDPR) | Weber-Stephen Products (EMEA) GmbH, Weber-Stephen Products (U.K) Limited |
2. Data Protection Officer
If you have any questions or comments about the processing of your data, you can contact the Data Protection Officer. He can be contacted by post at Weber-Stephen Deutschland GmbH, Rheinstrasse 194, 55218 Ingelheim (am Rhein), for the attention of the Data Protection Officer, or by e-mail at privacy.emea@weberstephen.com.
3. Legal Basis for Data processing
We only process your personal data if this is legally permitted. We use various legal bases for this:
Legal | Explanation | Example |
Consent (Article 6 (1) (a) GDPR | You have explicitly allowed us to use your data for a specific purpose. | You have registered for our newsletter |
Performance of a contract (Article 6 (1) (b) GDPR) | Your data is necessary to conclude or execute a contract with you. | We need your address to deliver your order to you. |
Legal obligation (Article 6 (1) (c) GDPR) | We are legally obliged to process your data. | We have to keep your billing data. |
Legitimate interest (Article 6 (1) (f) GDPR) | Processing is important for our company or third parties and does not affect your rights. | We use your data to improve our products. |
In the following, we specify the applicable legal basis for the processing operations we carry out. Processing may be based on more than one legal basis.
We will only store information on your device (e.g. your computer or smartphone) if this is permitted by law:
- if you have given your consent (Article 6 (1) (a) GDPR)
- to send you a message
- to provide digital services
4. Recipients of Data / Conditions for the Transfer of Personal Data to Third Countries
Processors are companies that we commission to process your personal data. They work exclusively according to our instructions and are contractually obliged to ensure data protection. You can find more information about the processors in the individual procedures.
Third parties are companies that we commission to provide certain services (e.g. shipping, payment) or to which we are required to transfer data by law. These companies are responsible for handling your data.
Category | Recipient | Purpose of data transfer | Legal basis |
Processor | IT service providers (e.g. hosting providers, software providers, e-mail service providers, logistics providers) | Technical support for the website, provision of software solutions, goods management | Data processing agreement (Article 28 GDPR) |
Third parties | Payment service providers | Processing payments and shipping ordered goods | Contractual obligation to fulfil the contract with the customer Article 6 (1) (b) GDPR |
Third parties | Authorities (e.g. tax office, customs) | Fulfilment of legal reporting obligations | Legal obligation Article 6 (1) (c) GDPR |
In order to provide you with the best possible service, we work with partners in different countries. This means that your information may be transferred to countries outside the EU.
We make sure that your information is protected when it is transferred abroad. We use various measures to do this:
Scenario | Description | Security measures | Legal basis |
Adequate level of data protection | Transfer of data to countries with a level of data protection similar to that in the EU (e.g. Switzerland, Canada). | No additional protection is required as the level of data protection is considered sufficient. | Article 45 GDPR |
No adequacy, but contract clauses | Data transfer to countries without an adequate level of data protection. | e.g. EU- standard contractual clauses, binding corporate rules. | Article 46 GDPR, Article 47 GDPR |
Data transfer to certified companies in the USA | Transfer of data to companies in the United States that have joined the EU-US Data Privacy Framework. | The companies have undertaken to comply with European data protection standards and are subject to regular review, Article 45 GDPR & certification according to the EU-US Data Privacy Framework. | Article 45 GDPR certification https://www.dataprivacyframework.gov |
Exceptional cases | Data transfer that is necessary due to explicit consent, contractual or legal obligation. | Consent of the data subject, contractual obligation, legal obligation. | Article 49 GDPR |
5. Children
Our online offer is not meant for children under 16 years of age.
6. Data Deletion and Duration of Storage
We will only store your personal data for as long as necessary to fulfil the respective purposes. As soon as the purpose no longer applies, the data will be deleted, Articles 17 and 18 GDPR.
In some cases, we are required by law to keep your data for a certain period of time (e.g. for tax purposes). Also, we cannot delete your data while legal proceedings are pending in which your data is required as evidence.
To better protect your information, we may pseudonymize your information. This involves replacing personal identifiers with pseudonyms so that they can no longer be directly linked to you.
7. Your Rights
You may exercise the following rights against the data controller in accordance with the law:
Your rights | Significance | Legal basis |
Access | You can find out at any time which of your data we process. | Article 15 GDPR |
Rectification | Is your data incorrect? We will be happy to correct it. | Article 16 GDPR |
Erasure | Under certain circumstances, you may request that your data be deleted. | Article 17 GDPR |
Restriction of processing | In certain cases, you can restrict the processing of your data. | Article 18 GDPR |
Transmission | You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. | Article 20 GDPR |
Object | You have the right to object to the processing of your data, particularly if it is used for direct marketing purposes. | Article 21 GDPR, provided that the processing is carried out based on Article 6 (1) (f) GDPR |
Withdraw of consent | If you have given us consent to process your data, you can withdraw your consent at any time with effect for the future. | Article 7 (3) GDPR |
To exercise your rights under the GDPR, please contact us by asserting your rights against the individual controllers for joint control under the heading “Contact” https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie. If you consider that the processing of your personal data is in breach of data protection law, you have the right to lodge a complaint with the data protection supervisory authority of your choice in accordance with Article 77 (1) of the GDPR.
8. Data Security
Our primary objective is to ensure confidentiality, integrity and availability of your personal information. We use technical and organizational security measures to protect the personal data we collect, in particular against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continually improved in line with technological developments.
9. External Links
Our website contains links to other websites. If you click on one of these links, you will leave our website and go to an external website. We are not responsible for the content of these external websites or their privacy policies.
Please note: Before providing any personal information to any external website, we recommend that you carefully read the privacy policy of that website. We have no control over the collection, processing and use of personal data by these website operators.
B. Collection and Processing of Personal Data
In the following, we would like to inform you about how Weber processes your personal data when you visit this website and when you shop in our shop. Please note that under C. we provide separate information about the processing of data in connection with the creation of statistics, cross-platform advertising, tracking, retargeting and the use of plug-ins.
1. Provision of weber.com for Informational Use (log files)
When you visit our website, certain information is automatically stored in so-called server logs. This information helps us to improve our website and ensure that it operates smoothly.
The data collected includes:
- technical data (date and time you accessed one of our websites; your browser type and settings; your operating system; the pages you visited and the duration of your visit, as well as the amount of data transferred and the access status, e.g. for downloads, success messages or error messages)
- IP address This is done to enable you to use the websites you have accessed and to improve our website. We only store your IP address for the duration of your visit so that you can access and use the website for information purposes. Any further evaluation will only take place in accordance with the following provisions and based on your consent.
The processing of the aforementioned data is mandatory in accordance with Article 6 (1) (f) GDPR for the correct display of our website and to ensure stability and security for the performance of the website.
For the operation of this website, we commission a hosting provider to process meta and communication data of our website users on our behalf and based on our legitimate interests in the efficient and secure provision of this website in accordance with Article 6 (1) (f), Article 28 GDPR. An order processing contract has been concluded.
2. Weber-ID – Your Personal Access to the Weber World
You can create a Weber-ID on our website. The Weber-ID is a central customer account that collects all your data in one place in order to constantly improve your experience with the Weber world and to tailor it to your specific interests. It gives you access to exclusive website content (recipes, tips and tricks, etc.), allows you to register your grill, provides you with all the important information (warranty periods, instruction manuals, etc.) and gives you central access to all the data and services that Weber-Stephen offers you. You can also log in at any time to check the status of your order or place additional orders without having to re-enter your order details. A Weber-ID also allows you to use features such as the notepad and wish list. If you also use a Weber app (Weber app, Weber Connect or Weber iGrill), you can link the data stored for that device to your Weber-ID and access all the information in one place.
Category | Data types | Purpose of processing | Legal basis |
Mandatory information for registration | Email address, password, first name and surname | User identification, communication, login | Consent (Article 6 (1) (b) GDPR) |
Optional information for registration | Address Book - Add new address (address title, i.e. home or work, first and last name, company, house number, street, city, postcode, country, telephone number | Shipping of goods | Consent (Article 6 (1) (b) GDPR) |
Mandatory information for orders | Delivery address, billing address, payment information | Processing of orders | Fulfilment of contract (Article 6 (1) (b) GDPR) |
By using | Order history, interactions on the website | Personalisation, improvement of products and website | Fulfilment of contract (Article 6 (1) (b) GDPR) |
After registering your Weber-ID, you will receive a confirmation email and can set your personal password.
To confirm your registration and to prevent misuse, we also store your IP address and the date of your registration. This is legally permissible under Article 6 (1) (c) and (f) of the GDPR.
We use our processor Salesforce to ensure seamless use of the Weber-ID. Salesforce Inc, Commerce Cloud, Salesforce Tower 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA, is certified according to the EU-US Data Privacy Framework and supports us in the secure storage and processing of your data in accordance with European data protection regulations (https://www.salesforce.com/de/company/privacy/).
We work with the processor Mize Inc., 12802 Tampa Oaks Blvd, Suite #320, Temple Terrace, FL 33637, USA, to ensure that registering your barbecue is a straightforward process. An order processing contract and EU standard contractual clauses with appropriate safeguards for the transfer of data to third countries in accordance with Article 46 of the GDPR have been concluded.
Do you want to delete your Weber-ID account or change your email address? You can delete your Weber-ID account using this https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie. After entering your data, you will receive an email asking you to confirm the deletion. If you want to change your email address or other data, simply contact us by using this https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie.
IMPORTANT! Before deleting your account, please back up any important data such as invoices or order confirmations. This data cannot be recovered once it has been deleted.
3. Shopping at weber.com, Grill Course
Your personal data is collected and processed in the context of contract execution. The mandatory information for the contract execution is marked with an asterisk (*), and you can provide further information voluntarily. The data processing is carried out based on Article 6 (1) (b) of the GDPR (contract fulfilment). The data will be deleted as soon as it is no longer required for the purposes of the contract and there are no legal obligations to retain it.
The technical processing of the data is carried out by our processor Salesforce Inc., Commerce Cloud, Salesforce Tower 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. Salesforce has joined the EU-US Data Privacy Framework and thus ensures compliance with European data protection standards (https://www.salesforce.com/de/company/privacy/).
We use the services of PVS DVG Vertriebsgesellschaft GmbH Birkenmaarstr. 8, 53340 Meckenheim, Germany and PVS Weber-Stephen Deutschland GmbH, c/o PVS DVG Vertriebsgesellschaft GmbH, Birkenmaarstr. 8, 53340 Meckenheim, Germany as processors for the structured processing and transmission of delivery data, with whom we have concluded a contract for order processing.
The following data is processed: name, delivery address, billing address (if different), payment details, email address, telephone number (for delivery by freight forwarder).
Your name and delivery address will be passed on to the respective delivery company and, in addition, your telephone number will be passed on to a freight forwarder to arrange an appointment to enable delivery. The delivery and freight company, as a third party, is responsible for the processing of this data in accordance with data protection law.
We use SAP from our processor SAP America Inc., 3999 West Chester Pike, Newton Square, PA 19073, USA, for supply chain management purposes, for example to make incoming and outgoing goods processing as effective as possible in the context of your order and to better coordinate goods movements, which is in line with our legitimate interest in optimizing goods processing. The legal basis for our legitimate interest is Article 6 (1) (f) of the GDPR. A data processing agreement and EU standard contractual clauses with appropriate safeguards for the transfer of data to third countries in accordance with Article 46 of the GDPR have been concluded.
a) Guest Order
We process the data you provide to us to fulfil the order. The legal basis for this is the performance of a contract in accordance with Article 6 (1) (b) GDPR. With the exception of data that must be stored due to legal retention requirements, we will not store your data beyond the end of the contract processing.
b) Order via Weber-ID
You can also store the data required for order processing in your Weber-ID account. When you shop using your Weber-ID, the data required for creating an order history is also processed in addition to the order data. You can find more information on this in this data protection declaration under section B, clause 2 Weber-ID.
c) Order/repair service via customer support
Would you like to order spare parts or use our repair service (subject to availability in the respective country)? Please feel free to contact us by phone, email or using our contact form. To process your request quickly, we need some information from you, such as your name, delivery and billing address, and if the order is not covered by the Weber warranty or the statutory warranty, as well as a short description of the spare part or problem. For freight deliveries, your telephone number is also required. Your personal data will be used exclusively for the fulfilment of the contract (Article 6, (1) (b) GDPR), i.e. to process your request and deliver the goods. After processing is complete, your data will be deleted, provided that there are no legal obligations to retain it. For technical processing, we use the secure ticket system of our processor Zendesk Inc., 1019 Market Street, San Francisco, CA 94103, a company based in the USA that is certified according to the EU-US Data Privacy Framework and thus guarantees the highest data protection standards (https://www.zendesk.com/trust-center/#).
d) Grill Course Registration
To organize your participation in the Weber grill course, we require the following information from you: first and last name and email address of the person registering and, if applicable, other participants. The legal basis for this is the performance of the contract in accordance with Article 6(1)(b) of the GDPR.
We use the booking system bookingkit from our processor bookingkit GmbH, Sonnenallee 223, 12059 Berlin, Germany (https://bookingkit.com/privacy-statement/) for registration.
The data you provide will be passed on to our partners for the purpose of organizing the grill course. These partners are responsible for organizing the event.
e) Product ratings
After purchasing a Weber product, we warmly invite you to share your experiences with us. For this purpose, we will send you an e-mail (Article 6 (1) (f) GDPR), provided that you have not objected to the sending of direct mail, with a link to our rating portal.
This is how it works:
Simply follow the link in the e-mail and let us know your opinion.
To publish your review on our website weber.com, we need your first name and the first letter of your last name. Your email address will be treated confidentially and will not be published.
You can revoke your consent to the publication of your review at any time by going to the ‘Contact’ section and revoking your consent under the heading ‘Contact’ [https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie].
Please note: By submitting a review, you agree to the above conditions.
We work with our processor Yotpo Inc. 233 Spring Street, Fl 6, New York City, New York 10013, USA, to manage your ratings. Yotpo is a US company certified under the EU-US Data Privacy Framework and is subject to EU data protection regulations (https://www.yotpo.com/privacy-policy/ ).
Why your opinion counts: Your reviews help us to continuously improve our products and support other customers in their purchase decisions.
f) Notification of products that are back in stock
If individual products are out of stock in our shop, we offer you a notification function. As soon as the desired product is back in stock and available, you will receive a notification by email.
The legal basis for this is your consent (Article 6 (1) (a), Article 7 GDPR), which you give by clicking on the confirmation link in the email sent to you If at any time you wish to unsubscribe, simply click on the unsubscribe link at the bottom of each notification email or on our contact form link at the bottom of each notification email. Please indicate which service you wish to unsubscribe from.
Your data will automatically be deleted from our notification database when the product is available again and you have been notified or you have withdrawn your consent.
In order to provide the service, it is necessary to process your email address in connection with the requested product. The processing is carried out by our US-based, EU-US Data Privacy Framework certified processor Salesforce Inc., 415 Mission St FL 3, San Francisco, CA 94105, USA (https://www.salesforce.com/eu/).
g) Use of Payment Service Providers (Payment Services)
In order to offer you a wide range of secure payment methods, we work with a number of different payment service providers. When you make a payment, depending on the payment method you choose, you will be redirected to the service provider's website. There you can complete your payment conveniently and securely. The transfer of your data to the payment service provider is necessary to complete your purchase and to secure your payment. The legal basis for this is Article 6 (1) (b) GDPR (fulfilment of contract) and, in some cases, Article 6 (1) (f) GDPR (legitimate interest) in order to verify your identity and prevent fraud. The payment service providers, as third parties, are responsible for the processing of this data in accordance with data protection law.
Credit card
If you choose to pay by credit card, we use the payment provider Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands (‘Adyen’). Ayden carries out a credit check. You can find detailed information about Adyen's data processing at https://www.adyen.com/policies-and-disclaimer/privacy-policy.
PayPal
If you select PayPal for a payment, you will be redirected directly to PayPal (PayPal (Europe) S.à r.l. & Cie, S.C.A., 5th floor, 22-24 Boulevard Royal, L-2449 Luxembourg (‘PayPal’)). Depending on the payment method, PayPal reserves the right to carry out a credit check. Detailed information on PayPal's data processing can be found at https://www.paypal.com/eu/legalhub/paypal/privacy-full.
Klarna
If you choose one of the following payment options
- Klarna – Pay Later (credit subject to status)
- Klarna – Pay Over Time (credit subject to status)
We use the payment provider Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (‘Klarna’). In these cases, a credit check (for invoice and hire purchase) is a prerequisite for the selected payment method. You can find detailed information about Klarna's data processing at https://www.klarna.com/international/privacy-policy/.
Google Pay
If you choose to pay via Google Pay/Google Payments, the payment will be processed by Google LLC, Google LLC 1600 Amphitheatre Pkwy Mountain View, CA 94043, USA as the payment provider. Google LLC has joined the EU-US Data Privacy Framework in the United States. Insofar as data is transmitted to the United States, this is done on the basis of the European Commission's adequacy decision regarding the EU-US Data Privacy Framework, Article 45 of the GDPR. This certification confirms that Google LLC complies with the necessary data protection regulations and practices.
For more information about Google Pay's compliance with the GDPR, please see the Google Payments Privacy Policy at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en.
Apple Pay
If you choose to pay via Apple Pay, the payment will be processed by Apple Distribution International Ltd, Hollyhill Ln, Hollyhill Industrial Estate, Cork, T23 YK84, Ireland (an Apple Inc. company, One Apple Park Way, Cupertino, CA 95014, USA) as the payment provider.
For more detailed information about Apple's compliance with the GDPR, please refer to Apple's privacy policy at https://www.apple.com/legal/privacy/en-ww/.
h) Order Tracking
With our practical order tracking tool, you can keep an eye on your order at all times. Simply enter your email address and order number and you will receive all the important details about your delivery. We also use live tracking to give you an even more precise picture. This allows you to follow the delivery route of your order on a map. Your data will, of course, be treated confidentially and used solely for the purpose of customer-friendly processing and presentation of the ordering and shipping process (Article 6 (1) (f) GDPR).
In order to offer you these practical functions, we work together with our processor parcelLab GmbH, Kapellenweg 6, 81371 Munich, Germany (https://parcellab.com/privacy-policy/). They help us to track your order and provide you with all the important information. We use Google Maps to display the map. You can find more information about the use of Google Maps in section C, clause 3, letter a).
i)Digital Return Label
Do you wish to return an order? No problem! With just a few clicks, you can create a digital return label on our portal. To do this, we need your order number and your email address. We will forward this data to our processor, paracelLab GmbH, Kapellenweg 6, 81371 Munich, Germany, to make the return process as easy as possible for you. The legal basis for this data processing is Article 6 (1) (b) GDPR.
j) Address Validation with Loqate
To ensure that you receive our notification about your order and that it reaches you reliably, we check the delivery address you have entered using the ‘Loqate’ service provided by our processor GB Group PLC, The Foundation, Herons Way, Chester Business Park, Chester, CH4 9GB, United Kingdom.
Why do we check your address?
- Error prevention: We want to make sure that your address is spelled correctly and does not contain any typos.
- Optimizing delivery: By checking your address, we can speed up the delivery of your order and avoid possible delays.
How does the address check work?
- Direct transmission: The address and email address you enter is transmitted directly to Loqate and checked against an extensive database.
- Error correction: If an error is detected in your address, you will receive a suggestion for how to correct it.
The legal basis for this processing of your data is Article 6 (1) (b) and (f) GDPR. This means that processing is necessary on the one hand to fulfil your contract with us (order and delivery) and on the other hand we have a legitimate interest in checking your data to ensure smooth business processing.
Your data is transferred in accordance with Article 45 of the GDPR, as an adequacy decision has been made by the EU Commission for the United Kingdom.
Detailed information on data protection at Loqate can be found at https://www.loqate.com/en-gb/products-services-privacy-notice/.
C. Newsletter Use of Your Data for Advertising Purposes/Participation in Competitions
1. Newsletter
Register now for our newsletter and be the first to hear about our latest offers, exciting events and current grill trends. We need your email address for this.
Your opinion is important to us! To get to know you better, we may send you a separate email asking you to voluntarily take part in surveys about your interests and preferences. This will help us tailor our offers even better to your needs.
Your data will be used to send the newsletter and to improve our offers. After registering, you will receive an email with a confirmation link. Please click on this link to confirm your registration. If you do not confirm your email address within three days, we will delete your data. We also store your email address and temporarily store your IP address to confirm your registration and to prevent misuse.
The processing of your data is based on the legal basis of Article 6 (1) (a) GDPR. The storage of your IP address and the date and time of your registration is necessary to be able to prove your consent. Since we are obliged to document your consent in accordance with Article 6 (1) (c) GDPR in conjunction with Article 7 (1) GDPR, we are entitled to do so.
We use the Salesforce Marketing Cloud of our processor Salesforce Inc., Salesforce Tower 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA for this purpose. Salesforce has joined the EU-US Data Privacy Framework and thus guarantees compliance with European data protection standards (https://www.salesforce.com/eu/company/privacy/).
We use tracking tools such as Google Analytics to measure the effectiveness of our newsletters (for more information, see section C., clause 1). These tools record, for example, whether you open our emails and which links you click on.
You can revoke your consent at any time by clicking on the unsubscribe link at the end of each email or by sending us a message using our contact form https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie.
2. Data Analysis – How we Personalize our Offers for You
We use modern analytical methods to provide you with a newsletter tailored to your interests and an even better shopping experience.
To do this, we use information such as your previous orders, your click behavior in our emails and your demographic data (if you have provided this voluntarily). On this basis, we can send you targeted offers and content that are precisely tailored to your needs. To do this, we use a small invisible graphic that shows us whether you open our emails and which topics are of particular interest to you. We also record, for example, which device you use to open our emails.
Our objective is to offer you added value and to show you only the content that is relevant to you. Personalization enables us to offer you a better user experience and optimize our offers.
What data do we process? Email address so that we can send you the newsletter, click behavior, which links you click on in our emails, open rate, if you open our emails, technical data (your operating system, browser and IP address) as well as order data, information about your previous orders.
Your data is processed based on your voluntary consent (Article 6 (1) (a) GDPR) and our legitimate interest (Article 6 (1) (f) GDPR) in offering you a personalized service and optimizing our marketing measures.
3. Direct Marketing/Customer Communication
We use your order data to provide you with individual product suggestions and offers based on your previous purchasing behavior. (Article 6 (1) (f) GDPR). We have a legitimate interest in informing you about our products and services that match your previous purchases.
We use the following data of yours for direct marketing: name, address, email address and information about your order.
We use your data to:
- send you information about our products and services by post,
- send you information about similar products and services by email,
- ask you to rate the product you have purchased.
You have the right to object to the processing of your data for direct marketing purposes at any time. Simply use the unsubscribe link in our emails or send us a message using our contact form https://contact-emea.weber.com/hc/en-us/requests/new?afl=en-ie.
4. Participation in Competitions/Campaigns
We regularly organize competitions and campaigns in which you can participate. The conditions of participation and the personal data collected will be communicated separately to the participant when the competition or campaign is carried out, as these may vary. We need your data to carry out the competition. With your information, we can
- check whether you are eligible to participate,
- notify you if you have won,
- send you your prize and
- submit similar competitions or offers to you in the future if you have given your consent.
Your data is processed based on Article 6 (1) (b) GDPR (fulfilment of contract) for the purpose of executing the competition contract and Article 6 (1) (f) GDPR (legitimate interest), as we have a legitimate interest in running our competitions and submitting relevant offers to you. We require your express consent for the processing of your data for advertising purposes in accordance with Article 6 (1) (a) GDPR.
If winners are photographed for corporate communications and external image measures (e.g. for publication on the internet, on social media channels) or photos are taken in connection with the prize, these photos may also be used by us and/or the competition partner (e.g. manufacturer, organizer). The legal basis for this is your consent in accordance with Article 6 (1) (a) GDPR.
The recipients of the data are the Weber companies involved in the competition, as well as the manufacturer or competition partner with whom we carry out the contests/campaigns. Where necessary, we have concluded corresponding agreements on joint responsibility and order processing.
5. Contact Form, Email Inquiries
It's so easy to contact us: Simply fill out the contact form. Select your request and enter the required information (name, email address, message). We use the data you provide to process your request.
We use the data you provide exclusively to process your request. The legal basis for this is your consent (Article 6 (1) (a) GDPR) or, if your request is related to a contract, the fulfilment or initiation of a contract (Article 6 (1) (b) GDPR).
After answering your enquiry, it will be archived. Access to it is strictly limited. Enquiries without contractual reference will be deleted after one year. Enquiries with contractual reference are subject to statutory retention periods (see our data protection declaration, section A, clause 6).
We use the Zendesk-Ticket-System platform, a platform of our EU-US Data Privacy Framework certified processor Zendesk Inc., 1019 Market Street, San Francisco, CA 94103, to process contact requests by email and contact form. Further information can be found at https://www.zendesk.com/company/customers-partners/eu-data-protection.
6. Application
Information on data processing in connection with applications for job advertisements at Weber can be found on our website under “Data protection information for applicants” in the “job offers” section.
7. Chat-Bot Ada
We use a chatbot provided by our processor Ada Support Inc. (371 Front Street W, Suite 314, Toronto, ON, M5V 3S8, Canada) to efficiently process your requests.
It is used based on the adequacy decision for Canada, as the level of data protection there is comparable to that in the EU. Use of the chatbot requires your consent in accordance with Article 6 (1) (a) GDPR, which you can give via the consent banner and revoke at any time.
When using the chatbot, the following data may be processed: name, email address, telephone number, order information, chat history, technical data (IP address, location, timestamp, metadata). If you request that our support team deal with your enquiry, the entire chat history will be forwarded to our customer service team. Your chat history will then be processed as described in section 6 (contact form, email enquiries).
D. Statistics, Advertising, Tracking and Retargeting, Plugins Provided by Partners - Use of Cookies and Similar Technologies
1) Google Services
We use the Google services listed in the following table. These services are provided by Google Ireland Limited, as our processor, and the parent company Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The transfer of personal data to the USA is based on the EU-US Data Privacy Framework certified parent company and the adequacy decision (Article 45 GDPR).
Service | Purpose | Data processed | Privacy settings | |
Google Analytics 4 (GOA4) |
Website analysis, optimization, reports on website activity Use of artificial intelligence for automated analysis and enrichment of data https://support.google.com/analytics/answer/9443595?hl=en Creation of statistics on "demographic characteristics" that provide information on the age, gender and interests of site visitors without individualizing them With a UserID, improvement of the individual user experience across devices |
Device information JavaScript and pixels (reading of information on the end device) Cookies (storage of information on end device) Network information
User behavior Traffic sources Interactions Analyze user behavior across devices and create database models (e.g. conversation) |
Deactivated advertising function Deactivated personalised advertising Deactivated data sharing (in particular Google products and services, benchmarking, technical support, account specialist) UserIDs function if a Weber account is registered on different Storage period of cookies with randomly generated user ID for recognition in the web browser for 24 months since the last website visit Deactivation via https://support.google.com/ads/answer/2662922?hl=de | |
in conjunction with Google Signals | Cross-device reports; if personalized ads are activated on the device and linked to a Google account | |||
Google Tag Manager | Management of tags | Implementation of code elements via an interface, no personal data | Triggering of other tags that may collect data | |
Google Remarket-ing | Personalized advertising | Cookies (storage of information on end device) User behavior on our website
|
Deactivation via your browser software or in the cookie banner | |
Google DoubleClick | Personalized advertising | Cookies (storage of information on end device) User behavior of previous app and website visits including third-party providers
|
Deactivation via your browser software or in the cookie banner | |
Google Ads/ Conversion Tracking |
Statistical evaluation of the success of advertising campaigns to adapt more efficient advertising campaigns | Cookies (storage of information on end device) Encrypted user data e.g.
Hashed values Anonymization of data for the purpose of creating statistics (e.g. to determine conversion rates) |
Deactivation via browser software or in the cookie banner | |
Google AdSense | Placement of ads to collect information about the use of this and other websites to improve the measurement of advertising campaigns | Cookies (storage of information on end device) Technical data
|
Deactivation via browser software or in the cookie banner | |
Google Display & Viedeo 360 |
Personalized advertising to analyze user behavior Definition of precise target groups |
Cookies (storage of information on end device) Technical data
|
Deactivation via browser software or in the cookie banner |
For more information about the general data protection overview of all Google services, please visit https://policies.google.com/privacy and about the technologies used, please visit https://policies.google.com/technologies.
For more information about Google Analytics 4, please refer to the terms of service at https://support.google.com/analytics/answer/7318509?hl=en and at https://support.google.com/analytics/answer/12017362?hl=en.
For more information about Google Signals, please visit https://support.google.com/analytics/answer/9445345?hl=en#zippy=%2Cin-this-article.
For more information about Google Tag Manager and how it works, please visit https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
2) Salesforce Commerce Cloud (Analyse)
We use Salesforce Commerce Cloud, Salesforce Tower 415 Mission Street, 3rd Floor San Francisco, CA 94105, USA. Cookies, web beacons or similar technologies are used. Data collection is carried out via a cookie ID, which is stored as a pseudonym. Information about the user's activities on our websites, services and applications is assigned to this pseudonym. Aggregating the data records makes it impossible to identify the user personally. To ensure functionality, IP addresses are stored briefly and truncated before any processing. Complete IP addresses are neither stored nor processed.
Salesforce has joined the EU-US Data Privacy Framework and thus guarantees compliance with European data protection standards (https://www.salesforce.com/eu/company/privacy/). Further information about Salesforce can be found at: https://www.salesforce.com/eu/company/privacy/full_privacy/
3) Dynamic Yield
We use the web analytics service Dynamic Yield from Mastercard Europe SA, Chau. de Tervuren 198, 1410 Waterloo, Belgium. Dynamic Yield helps us to understand how our website is used so that we can continuously improve it. The tool is designed to display dynamic elements such as newsletter popups, product slides and notifications on demand. It also allows us to carry out A/B testing on the website. Based on the page content that you have previously accessed and the products you have purchased, we would like to offer you equivalent or similar products or other content that is relevant to you. For this purpose, Dynamic Yield uses cookies that store only pseudonymous information. It is not possible to identify you with this information. Further information can be found at https://www.dynamicyield.com/privacy-notice/.
4) Meta-Pixel
We use the meta pixel analysis tool on our website. This is provided by Meta Platforms Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, a company certified under the EU-US Data Privacy Framework. The meta pixel allows us to analyze the use of our website and to optimize our marketing measures.
The following data is collected by the meta pixel:
- device and usage data: Information about your device (e.g. browser, operating system), your IP address (in anonymized form), your activities on our website (e.g. pages visited, links clicked).
- customer data: If you have a customer account with us or make a purchase, your customer data (e.g. name, email address) can also be linked to the meta pixel.
The data collected is used for the following purposes:
- personalized advertising: We use the data to display personalized advertising on other platforms (e.g. Facebook, Instagram).
- reach measurement: We measure the effectiveness of our advertising campaigns and optimize them.
- website optimization: We analyze user behavior to improve our website and make it more user-friendly.
The collected user data collected is anonymous to us and therefore does not allow any conclusions to be drawn about your identity. However, Facebook stores and processes data that allows conclusions to be drawn about the respective user profile. You can find more information about Meta Pixel at https://www.facebook.com/business/tools/meta-pixel/. Data processing by Facebook Meta is carried out in accordance with the Facebook Meta data usage guidelines. For this purpose, we have concluded an agreement with Facebook Meta on joint responsibility as a joint controller. You can find more information about data processing by Meta at: https://www.facebook.com/about/privacy/.
5) Hotjar
Our website also uses the ‘Hotjar’ analytics software provided by Hotjar Ltd, Level 2, St. Julian's Business Centre, 3 Elia Zammit Street, St. Julian's STJ 1000, Malta.
Hotjar allows us to measure and analyze the use of our website (clicks, mouse movements, scrolling movements, etc.). The data collected is transferred to a Hotjar server in Ireland and stored there. The following data is collected by Hotjar on our behalf:
- IP address (stored and processed anonymously);
- your email address, including your first and last name, if you have provided it to us through our website;
- your device screen size;
- information about your device type and browser;
- the preferred language for displaying our website;
- previously visited page (referrer domain);
- visited websites;
- date and time of access to the website.
Hotjar uses this information to analyze your use of our website, to create reports on its use and to offer other internet analysis services.
Further information can be found at https://www.hotjar.com/legal/policies/privacy/.
6) LinkedIn-Insights Tag
We use the LinkedIn Insight Tag to analyze your user behavior on our website and to display relevant advertising to you. This tool is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (https://www.linkedin.com/legal/privacy-policy).
The Insight tag collects the following information:
- URL and referrer URL
- IP address (truncated)
- device and browser data
- timestamp
In the case of LinkedIn members, profile data may also be processed in exceptional cases. LinkedIn provides us with aggregated analyses of website usage, which we use to optimize our offering. In addition, LinkedIn uses the data for targeted advertising on its platform.
The Insight tag only collects and transmits data after you have given your express consent in the cookie banner that appears when you access our website.
LinkedIn will encrypt your data, truncate IP addresses, and remove direct identifiers within seven days to pseudonymize the data. The remaining pseudonymized data is then deleted within 90 days.
The legal basis for this procedure is your consent, Article 6(1) (a), Article 7 GDPR. Further information can be found at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
E. Social Media
Unless otherwise stated, we process your data based on your consent, which you give via the cookie settings.
1) Videos from YouTube
We embed YouTube videos on our website. This function is operated by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When playing embedded YouTube videos, the following data is transmitted to Google:
- IP address
- specific address of the visited website
- system date and time
- browser identification
- YouTube and DoubleClick cookies
This transmission occurs regardless of whether you have a Google account. Google may link this information to your Google account (if you are logged in) and use it for user profiles, advertising, market research and website optimization.
This type of analysis (even for unregistered users) is carried out in particular to provide customized advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google, the operator of YouTube.
The privacy policy can be found at https://www.google.de/intl/en/policies/privacy.
2) Weber-Profile - Verlinkung zu sozialen Netzwerken
On our website, you will find links to our profiles on various social networks. Only when you click on one of these graphics will you be redirected to the corresponding platform and data about you (IP address, date, time and page visited) may be collected.
Note for logged-in users: If you are already logged into one of the social networks while visiting our website, the collected data can be directly assigned to your personal profile. To protect your privacy, we recommend that you log out of the respective networks before visiting our website or clicking on the linked graphic. Please note the data protection information of the respective networks.
The following social networks are integrated into our site:
- Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta Platforms Inc. 1601 Willow Road Menlo Park California 94025, USA
- Privacy policy at: https://www.facebook.com/policy.php
- Pinterest, Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland
- Privacy policy at: https://help.pinterest.com/en/article/your-privacy-and-data-settings
- X (formerly Twitter), X Corp., 1355 Market St, Suite 900, San Francisco, California 94103, USA;
- Privacy policy available at: https://twitter.com/en/privacy
- YouTube, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland
- Privacy policy available at: https://policies.google.com/privacy?hl=en
- TikTok, TikTok Technology Ltd., 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Ltd., WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom
- Privacy policy at: https://www.tiktok.com/legal/page/eea/privacy-policy/en
F. Various
1) Google Maps
We use Google Maps on our website to provide you with interactive maps and location information. This service is provided by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Various data are collected and processed when you use Google Maps. These include:
- IP address
- location data
- device information
- date and time of access
- visited pages
This data is transmitted to Google even if you do not access Google Maps directly. This data is collected via cookies that are set in your browser (https://policies.google.com/technologies/product-privacy?hl=en).
To use Google Maps in a privacy-compliant manner, we require your express consent in accordance with Article 6 (1) (a) GDPR. This consent is obtained via a cookie consent tool that asks you for your consent to the collection and processing of data. It is possible that your data may be transferred to the certified parent company Google LLC in the USA as part of the processing. If data is transferred to the USA, this is done based on the EU-US Data Privacy Framework certification and the European Commission's adequacy decision pursuant to Article 45 of the GDPR.
2) Imgix
We use Imgix, a real-time image optimization service, to improve the loading times of our website and optimize the user experience. The provider is the processor Imgix Inc., 423 Tehama St, San Francisco, CA 94103, USA. When using Imgix, your IP address is transmitted to Imgix in order to load images in the optimal size from the server. The data transmitted includes, among other things:
- IP address
- device information
- access location
This information is used exclusively for the optimization and provision of image content. Imgix is certified according to the EU-US Data Privacy Framework, so that the data is transmitted based on the EU-US Data Privacy Framework and the European Commission's adequacy decision pursuant to Article 45 of the GDPR.
3) Google reCAPTCHA
In certain cases, we use Google reCAPTCHA to prevent automated programs or bots from using our text fields. This increases the security of our website and reduces spam. This measure is based on our legitimate interest and fulfils our legal obligations in accordance with Article 6 (1) (f) and (c) GDPR.
When using Google reCAPTCHA, various data is collected, including:
- IP address
- device and application data
- referrer URL
- time spent on the website
- mouse movements and keyboard strokes
This data is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The information collected is not used for personalized advertising. Insofar as your data is transmitted to the USA, this is done on the basis of the adequacy decision and the certification of the parent company in accordance with Article 45 of the GDPR.
For more information, please refer to the Google Privacy Policy at https://policies.google.com/privacy. Further documentation can be found at https://developers.google.com/recaptcha/ and at https://developers.google.com/recaptcha/docs/faq.