Legal

Privacy policy

Please note This is a courtesy translation. The German version is the legally binding text.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

NOVASELECT Beverages GmbH
Kocherweg 18, 74172 Neckarsulm, Germany
Phone: +49 171 3453321
E-mail: info@novaselectdrinks.de

We have not appointed a data protection officer; the legal requirements for doing so are not currently met.

2. Principle

We process personal data only to the extent necessary to operate this website and our B2B portal. Our offering is addressed to commercial customers; we do not collect data for advertising or analytics purposes.

This website sets no cookies. There is no web analytics, no tracking pixels, no social media buttons and no advertising networks. Fonts are served from our own server — there is no connection to Google Fonts or comparable services.

3. Visiting the website (server log files)

Each time a page is accessed, the web server automatically records data transmitted by your browser: IP address, date and time, page requested, volume of data transferred, status code, referring page, and browser and operating system details.

Legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free operation and the security of our systems. Retention: logs are deleted or truncated after seven days at the latest, unless they are required to investigate a specific security incident.

4. Hosting

The public pages at novaselectdrinks.de are hosted by one.com Group AB; the servers are located within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

We operate the B2B portal at portal.novaselectdrinks.de on our own rented server in a data centre within the European Union. The connection is encrypted with TLS throughout.

5. B2B dealer application

If you apply as a dealer via the application form, we process the data you provide: company name, legal form, contact person, address, telephone number, e-mail address, VAT identification number, commercial register details, customer type and, where applicable, your TEAM BEVERAGE partner number.

Purpose: review and approval of your dealer account and the initiation and performance of the business relationship.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures and performance of a contract).
Retention: until the end of the business relationship, and beyond that for as long as commercial and tax retention obligations apply (§ 257 German Commercial Code, § 147 German Fiscal Code — generally six and ten years respectively). If an application is rejected, we delete the data after six months at the latest.

The fields marked * are required; without them we cannot review the application. You are under no obligation to provide them, but processing is then not possible.

6. Dealer account and orders

After approval, the portal processes your login credentials, your delivery locations and all data relating to orders, tours, deliveries and payments.

Legal basis: Art. 6 (1) (b) GDPR.
Passwords are stored exclusively as a cryptographic hash (bcrypt); we do not know them in plain text.
Logging: for security and evidentiary reasons we log security-relevant events in the portal — such as logins, approval decisions and status changes — each with timestamp, user and IP address. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the security of the system and the traceability of business transactions.

7. Cookies in the portal

The B2B portal uses strictly necessary cookies only:

NamePurposeLifetime
ns.sidKeeps you signed in12 hours
ns.spracheRemembers the chosen language12 months

Both cookies are required for operation; consent is therefore not required under § 25 (2) TDDDG. No tracking takes place.

8. Contacting us by e-mail or telephone

If you write to us or call us, we process your details in order to handle the enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry serves to initiate or perform a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data as soon as it is no longer required and no retention obligations apply.

9. Recipients of the data

Data is passed on only where necessary to perform the business relationship or where we are legally obliged to do so. Recipients may in particular be: the production plant for processing the production order, commissioned logistics and freight companies for delivery, our tax adviser and — where you purchase through a partner — the relevant distribution partner. A transfer to a country outside the European Union takes place only where this is necessary to perform an order (Art. 49 (1) (b) GDPR) and is limited to the details required for that purpose. Your data is not sold and is not passed on to third parties for advertising purposes.

10. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). To exercise these rights, simply contact info@novaselectdrinks.de.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

11. Data security

All connections to this website and to the portal are encrypted with TLS. Access to the portal is restricted to approved users and graded by role; repeated failed logins result in temporary locking of the account.

12. Changes

We will amend this statement if the processing or the legal situation changes. The version published on this page applies.

Status: October 2026