Privacy and data protection policy

1. Data Controller

The controller of the personal data is:

Controller: Install Beer S.L.
Trade name: Install Beer
Tax ID (NIF/CIF): B61005526
Intra‑Community VAT: ESB61005526
Registered office: Carrer de Joaquim Valls, 109, local, 08042 Barcelona, Spain
Commercial Registry: Volume 28682, Page 157, Sheet B-138552
Telephone: +34 93 346 46 56
Email: info@installbeer.com
Website: installbeer.com

Queries related to privacy, data protection and the exercise of rights can be sent to info@installbeer.com , indicating “Data protection” in the subject line.

2. Scope of application

This policy applies to processing carried out through:

• Browsing on installbeer.com.
• The online store and the purchase process.
• Customer accounts.
• Contact, quote or request forms.
• Email and telephone support.
• Messaging channels enabled by Install Beer.
• Technical and commercial inquiries.
• Orders, invoices, payments and deliveries.
• Projects, installations and maintenance.
• Repairs, warranties and after-sales service.
• Rentals, events, and trade fairs.
• Subscriptions and recurring deliveries.
• Marketing communications and surveys.
• Relationships with suppliers and professional contacts.
• Recruitment processes, where applicable.

This policy does not replace the specific privacy terms of third‑party platforms or services that act as independent controllers.

3. Applicable principles

Install Beer will process data in accordance with the following principles:

• Lawfulness, fairness, and transparency: data will be processed on a valid legal basis and in a way that is understandable to the data subject.
• Purpose limitation: they will be used for specified, explicit, and legitimate purposes.
• Minimization: only data that is reasonably necessary will be requested.
• Accuracy: measures will be taken to correct or update inaccurate data.
• Storage limitation: data will not be kept longer than necessary.
• Integrity and confidentiality: protection against unauthorized access, loss or use.
• Proactive responsibility: Install Beer will adopt appropriate measures to demonstrate compliance.

4. Categories of data processed

Depending on the relationship maintained with Install Beer, the following categories may be processed:

Identification data

• First and last name.
• Username or account ID.
• ID card, foreigner ID number, passport or other document where necessary.
• Signature and proof of representation.

Contact details

• Postal and delivery address.
• Email.
• Telephone.
• Communication preferences.

Professional and business data

• Company, position and department.
• Tax ID (NIF), Corporate Tax ID (CIF) or VAT number.
• EORI number and customs data.

• Tax address and workplaces.

• Business activity, sector and type of establishment.
• Authorizations and representation data.

Order and contracting data

• Products, variants, quantities and prices.
• Quotes, proposals and accepted terms.
• Delivery and billing addresses.
• Order, return and refund history.
• Subscriptions, frequency and preferences.
• Contractual documents and related communications.

Payment and billing data

• Payment status and reference.
• Amounts, currency and taxes.
• Bank account details for transfers, refunds or direct debits.
• Data required for invoicing and accounting.

The full card details and other payment instruments are normally handled by the selected payment gateway or provider. Install Beer may receive a reference, status, partial cardholder details, last digits or other limited information necessary to manage the transaction.

Technical and project data

• Type of beverage and dispensing system.
• Plans, photographs, videos and measurements.
• Characteristics of the premises or installation.
• Temperatures, pressures, flow rates and connections.
• Equipment, serial numbers and configurations.
• Maintenance and repair history.
• Diagnostic reports and work orders.

Browsing and device data

• IP address.

• Device and session identifiers.
• Browser, operating system and settings.
• Pages visited and actions taken.
• Date, time and technical logs.
• Consent and cookie preferences.
• Approximate location data derived from the IP address.

Communications and customer service

• Emails, messages and forms sent.
• Technical and commercial inquiries.
• Complaints, claims and exercise of rights.
• Photographs, videos or documents provided by the data subject.

Marketing data

• Consents and objections.
• Subscription to newsletters.
• Interaction with marketing communications.
• Product, sector or content preferences.
• Advertising audiences, where consent exists.

Security and fraud-prevention data

• Risk indicators.
• Access or payment attempts.
• IP addresses and devices related to the transaction.
• Results of identity, address or payment checks.

Install Beer does not usually request special categories of data, such as information on health, ideology, religion, racial origin, biometrics or sexual orientation.

If a person voluntarily provides sensitive information that is not necessary, efforts will be made not to use it and it will be deleted when there is no obligation or legitimate reason to retain it.

5. Source of the data

The data may come from:

• Directly from the data subject.
• From the company or organization for which you work or which you represent.
• From another person authorized to place an order or make an inquiry.
• From distributors, installers, manufacturers, or partners.
• From carriers and payment providers.
• From technological platforms used by Install Beer.
• From public tax records and validation systems.
• From publicly accessible professional sources.
• From cookies and similar technologies, according to consent.

In intra-Community transactions, Install Beer may verify the VAT number through the VIES system or other official sources.

When the data has not been obtained directly from the data subject, the legally required information will be provided within a reasonable period, normally in the first communication or, at the latest, within the applicable time limit.

6. Purposes and legal bases

Consent

When processing is based on consent, the person may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out previously.

Legitimate interest

When Install Beer relies on a legitimate interest, it will assess the necessity of the processing, its proportionality, and the rights and reasonable expectations of the individuals concerned.

The data subject may request additional information and object to processing based on legitimate interest.

Legal obligations

Certain data must be processed to comply with tax, commercial, accounting, customs, consumer, security, warranty, fraud-prevention obligations or official requests.

7. Mandatory data and consequences of not providing it

Fields marked as mandatory are necessary to process the request, order, invoice, delivery, or service.

If essential data is not provided, Install Beer may be unable to:

• Respond appropriately to an inquiry.
• Prepare a quote.
• Check technical compatibility.
• Formalise or perform a contract.
• Process payment or delivery.
• Apply a tax exemption.
• Prepare customs documentation.
• Manage a warranty or repair.

Data used exclusively for marketing or personalization will be voluntary, unless they are necessary for a requested functionality.

8. Recipients and providers

Install Beer does not sell or rent the personal data of customers, users or contacts.

To manage the store, process orders, provide services, process payments, organize deliveries, handle queries and measure the performance of the site, Install Beer uses technology and professional providers that may access only the data necessary to provide their service.

Depending on the function performed, these providers may act as processors on behalf of Install Beer, as independent controllers in respect of their own obligations or, in certain cases, as joint controllers.

Technology platforms and e-commerce

Install Beer uses Shopify and its associated services to host and manage the online store, products, accounts, forms, orders, communications, payments, security, and advanced features.

Within this environment, Shopify Forms, Shopify Messaging, Shopify Payments and Shopify Network Intelligence are used. Their operation is explained in more detail in the section Processing via Shopify.

Analytics and advertising

Install Beer uses Google Analytics to analyze use of the store, and Google Ads, Meta, Microsoft Advertising and Pinterest to measure campaigns, attribute conversions, create audiences and display advertising.

These services may process online identifiers, IP address, device information, pages visited, products viewed, carts and purchases.

Non-essential analytics or advertising tools will only be activated when there is a valid legal basis and, where required, the user’s consent.

Reviews and trust services

Install Beer uses Trusted Shops and Judge.me to request, verify, manage and publish customer and product reviews.

These providers may receive limited order data, such as name or alias, email address, order number and date, products purchased, language and the content of the review.

Posting a review may make visible the name or alias, rating, comment, photographs and other content voluntarily provided by the user.

Customer service and messaging

Install Beer uses Meta services to communicate via WhatsApp Business, Instagram and Facebook Messenger.

It also uses Konvo AI to assist with and automate certain sales and after‑sales queries. To do this, Konvo may access messages and the data it needs from Shopify, such as name, contact details, orders, products, returns or incidents.

Konvo acts as a data processor on behalf of Install Beer and may use infrastructure providers and AI models in accordance with its data processing agreement.

Artificial intelligence

Install Beer may use OpenAI services for request classification, assisted content generation, information search, automation, and support for technical or commercial assistance.

Only the information necessary for the functionality used will be sent. Install Beer will seek not to send passwords, full bank details, special categories of data or unnecessary confidential information.

Payment providers

Payments may be processed via Shopify Payments, PayPal and MONEI.

These providers may process identifying data, billing information, amount, currency, payment references, technical data, authentication and fraud indicators.

PayPal, MONEI, Shopify, and the participating financial institutions may act as independent controllers with regard to the processing necessary to provide the payment service, prevent fraud, manage disputes, and comply with financial or regulatory obligations.

Install Beer does not directly store full card details when they are entered in the secure environments of the payment gateways.

Transport, customs and delivery

To prepare and deliver orders, Install Beer may share data with carriers, logistics operators, freight forwarders, customs brokers and pickup points.

The data communicated may include name, address, phone number, email, order number, parcel information and tax or customs information when necessary.

Manufacturers, distributors and technical services

Install Beer may communicate limited data to manufacturers, distributors, installers and technical services when necessary to check compatibilities, prepare a configuration, process a warranty, manage a repair, request spare parts or coordinate an installation.

Only the data necessary for the specific intervention will be provided.

Advisors, insurers, and authorities

Data may be disclosed to accounting, tax, labor, or legal advisors, auditors, experts, and insurers when necessary to fulfill obligations, manage a claim, or establish, exercise, or defend legal claims.

They may also be communicated to tax and customs authorities, courts, law enforcement, consumer agencies, data protection authorities and other authorities when there is a legal obligation or a valid request.

International transfers

Some providers may process data outside the European Economic Area. Where there is an international transfer, Install Beer will use a mechanism permitted by the regulations, such as an adequacy decision, standard contractual clauses or another valid safeguard.

Additional information can be found in the International transfers section.

Updating providers

Providers may change as a result of technical improvements, replacement of services or the addition of new features. Install Beer will update this policy when the change is relevant to the purposes, categories of data, transfers or individuals’ rights.

9. Processing via Shopify

Install Beer uses Shopify as the main platform to host and manage the online store, catalog, markets, currencies, customer accounts, carts, forms, orders, payments, communications and certain security and personalization features.

To provide these services, Shopify may process:

• Name and contact details.
• Billing and delivery addresses.
• Account and authentication data.
• Cart contents and products viewed.
• Orders, returns and refunds.
• Limited information on payments and transactions.
• IP address and device data.
• Security logs and fraud prevention.
• Privacy preferences and consent.

Shopify generally acts as data processor in relation to the data it processes to provide the platform on behalf of Install Beer. It may also carry out certain processing as controller when necessary to provide payment, security, fraud‑prevention, legal‑compliance or enhanced services.

Shopify Forms

Shopify Forms is used to collect requests, sign-ups, and data voluntarily entered through the store’s forms.

It may process names, email addresses, phone numbers, company, country, interests, content of the inquiry and consent to communications.

Shopify Messaging

Shopify Messaging is used to manage newsletters, automations and communications related to products, content, orders and services.

It may record subscription status, messages sent, opens, clicks, unsubscribes and other interactions needed to manage and measure communications.

Shopify Payments

Shopify Payments allows the processing of payments, authentications, refunds, disputes and fraud-prevention checks.

Shopify and the financial entities involved may process identification data, billing information, amount, currency, payment reference, IP address, device and risk indicators.

The full card details are entered and processed through secure environments provided by Shopify and its payment providers, without Install Beer storing them directly.

Shopify Network Intelligence

Install Beer has enabled Shopify Network Intelligence, which allows Shopify to use certain customer data together with information from other Shopify services and stores to provide enhanced features.

These features may be related to:

• Security and fraud prevention.
• Measurement and attribution.
• Analytics and service improvement.
• Personalization and recommendations.
• Product search and discovery.
• Enhanced commercial and advertising services.

The use of data for these functions will be subject to the store’s privacy settings, the preferences expressed by the user, and the applicable Shopify terms.

When an enhanced feature requires consent, Install Beer will transmit to Shopify the preferences recorded via the banner, the privacy panel or the tools enabled in the store.

Apps connected to Shopify

Install Beer uses apps and services connected to Shopify, such as form tools, messaging, reviews, advertising, analytics, customer service and artificial intelligence.

Each app will receive only the permissions and data necessary to perform the contracted function. Install Beer will periodically review the permissions, providers and installed apps.

Shopify international transfers

For customers and users in the European Economic Area, the United Kingdom and Switzerland, services are initially provided by the relevant European Shopify entity, without prejudice to the involvement of affiliated entities and subprocessors located in other countries.

Shopify may carry out international transfers to host data, provide support, process payments, ensure security and operate its global infrastructure.

These transfers will be carried out through adequacy decisions, standard contractual clauses or other mechanisms recognized by the applicable regulations.

Rights and requests related to Shopify

Requests for access, rectification, erasure, objection or other rights related to store data must initially be addressed to Install Beer.

Install Beer will handle the request and, when necessary, will use Shopify’s tools to locate, correct, export or delete the relevant data.

Data erasure may be temporarily limited when it is necessary to retain information to comply with tax, contractual or security obligations, fraud prevention or the defense of claims.

10. International transfers

Some technology, logistics, payment, marketing, support or communications providers may process data outside the European Economic Area.

When an international transfer exists, Install Beer will seek to use a mechanism accepted under the regulations, such as:

• An adequacy decision by the European Commission.
• Standard contractual clauses approved by the European Commission.
• Binding corporate rules.
• A recognized data protection framework where the recipient is validly adhered.
• Another legally permitted exception or safeguard.

Where necessary, the circumstances of the transfer will be assessed and additional technical, contractual or organizational measures will be applied.

The data subject may request information on the mechanism and safeguards applicable to a specific transfer by writing to info@installbeer.com.

11. Retention periods

Data will be retained for as long as necessary to fulfill the purpose for which it was collected and, thereafter, for the periods required to meet obligations and potential liabilities.

Once the purpose has been fulfilled, the data will be deleted, anonymized or blocked, as appropriate.

Blocked data will only be available to address potential legal liabilities and will not be used for ordinary or commercial purposes.

12. Commercial communications

Install Beer may send information about products, services, technical guides, news, events, promotions and professional content when there is a valid legal basis.

With consent

Where there is no sufficient prior relationship, consent will be requested before sending electronic marketing communications.

Existing customers

Where the law allows, Install Beer may send customers information about its own products or services that are similar to those already contracted, always offering an easy and free way to object.

Professional contacts

Professional communications related to the recipient’s position, company, activity, or business relationship may be sent when there is a legitimate interest and the communication is reasonable and relevant.

How to unsubscribe

The person can stop receiving communications by:

• By using the unsubscribe link included in the message.
• By changing your preferences, where that function exists.
• By writing to info@installbeer.com .

Unsubscribing from marketing will not prevent you from receiving necessary communications about orders, payments, deliveries, warranties, safety, or contracts.

13. Cookies, analytics and advertising

The site uses cookies and similar technologies to enable technical functions, remember preferences, analyze usage and, where consent exists, measure campaigns or personalize advertising.

Non-essential technologies must not be used before obtaining valid consent where this is required.

The user may accept, reject or configure the non-essential categories through the privacy panel available in the store.

Full information on categories, providers, duration and how to change your consent can be found in the Cookie Policy.

14. WhatsApp, messaging and social media

When Install Beer enables support via WhatsApp or another messaging platform, it will process the phone number, name, message content, files sent and any other data necessary to respond.

The messaging platform may process data as an independent controller in accordance with its own terms and may host them outside the European Economic Area.

The following must not be sent by courier:

• Full bank details.
• Passwords.
• Unnecessary sensitive documentation.

• Information about third parties without authorization.

Messages relevant to an order, quote, warranty or contract may be added to the corresponding commercial or technical file.

Interaction with Install Beer profiles on social media will also be subject to each platform’s privacy conditions.

15. Profiling and automated decisions

Install Beer does not normally make decisions based solely on automated processing that produce legal effects or similarly significant effects on a person.

However, the store, payment gateways and security systems may use automatic rules to:

• Detect potentially fraudulent transactions.
• Request additional authentication.

• Temporarily block access attempts.

• Calculate available payment or shipping methods.
• Sort or recommend products.
• Create advertising audiences with consent.

An order flagged as risky may be held for review, require additional information or be declined by the payment provider.

When a significant automated decision is applicable, the person may request information, express their point of view, challenge it and request human intervention under the terms laid down by law.

16. Third-party data

When a person provides data of a recipient, employee, collaborator, installer, supplier or contact other than themselves, they declare that they have a legitimate basis for doing so.

You must inform that person that their data will be communicated and provide them with this Privacy Policy where necessary.

Install Beer will use this data only for the purpose related to the order, delivery, project, service or communication.

You must not provide personal data of third parties that are not necessary for the transaction.

17. Business and professional contacts

Install Beer may process data of sole traders and of people working for customers, suppliers, manufacturers, distributors, public administrations, and other organizations.

Processing may be based on:

• The performance of a contract or pre-contractual measures.
• Compliance with legal obligations.
• The legitimate interest in maintaining business and professional relationships.

In these cases, the data processed will normally be limited to name, position, company, business phone number, corporate email and communications related to the activity.

The professional contact may object at any time to receiving communications that are not necessary for the contractual relationship.

18. Minors

The Install Beer store and services are not specifically aimed at minors.

Minors under 18 must not enter into purchases or contracts without the involvement of their legal representative where they lack sufficient capacity.

Children under 14 must not provide personal data through the site without authorization from their parents or legal guardians.

If Install Beer detects that it has received data from a minor without a valid basis, it will take reasonable steps to delete the data or regularize the processing.

19. Rights of individuals

Data subjects may exercise the following rights, where applicable:

Access

Obtain confirmation as to whether Install Beer is processing your data and receive information and a copy of it.

Rectification

Request the correction of inaccurate data or the completion of incomplete data.

Erasure

Request the erasure of data when it is no longer needed, consent is withdrawn, or another legal ground applies.

Objection

Object to processing based on legitimate interest and, at any time, to direct marketing.

Limitation

Request that processing be restricted while its accuracy, legitimacy or necessity is being verified.

Portability

Receive certain data in a structured, commonly used and machine‑readable format and request its transmission to another controller when technically feasible.

Withdraw consent

Withdraw at any time a consent that has been given, without affecting prior processing.

Automated decisions

Not to be subject to certain decisions based solely on automated processing and to request human intervention where appropriate.

These rights may be subject to limits where it is necessary to retain data to comply with a legal obligation, perform a contract, or establish, exercise or defend claims.

20. How to exercise your rights

A request may be submitted via:

Email: info@installbeer.com
Postal mail:
Install Beer S.L.
Data protection
Carrer de Joaquim Valls, 109, local
08042 Barcelona, Spain

The request must indicate:

• First and last name.
• Right you wish to exercise.
• Information that makes it possible to locate the data.
• Means for receiving the response.

Install Beer may request additional information or a partial copy of an identity document when necessary to confirm identity and prevent fraudulent access.

The document must show only the data necessary for verification. Data that are not relevant may be concealed.

The request is free of charge, except for manifestly unfounded or excessive requests in the cases legally permitted.

Install Beer will normally respond within one month of receipt. This period may be extended by up to an additional two months when necessary due to the complexity or number of requests, with notice of the extension and its reasons.

Claims specifically related to the processing of personal data will be handled in accordance with this policy. For other commercial queries or complaints you can use: Customer service, complaints and claims .

21. Complaint to the supervisory authority

If a person believes that the processing of their data infringes the regulations or that their request has not been properly handled, they may file a complaint with:

Spanish Data Protection Agency
Website: www.aepd.es

You can also contact the data protection authority of your EU Member State of habitual residence, place of work, or place of the alleged infringement.

Before filing a complaint, you can contact Install Beer to try to resolve the issue directly.

22. Security and confidentiality

Install Beer adopts technical and organizational measures appropriate to the risk to protect personal data.

These measures may include:

• Encrypted connections via HTTPS.
• Access and permission control.
• Authentication of administrative users.
• Backups and recovery measures.
• System updating and maintenance.
• Contracts with suppliers and processors.
• Confidentiality obligations.
• Logging and management of incidents.

• Data minimization and access limitation.

No system is completely infallible. If a security breach occurs that may create a risk for individuals, Install Beer will take the containment, assessment, documentation, and notification measures that are legally required.

Users must protect their passwords, not share credentials, and report any unauthorized use of their account.

23. Accuracy and updating of data

The data subject undertakes to provide truthful, accurate and up-to-date data.

You must notify any relevant changes to your address, contact details, company, representation, VAT number, delivery address or other data necessary for the relationship.

Install Beer may verify certain data when necessary to prevent fraud, comply with tax obligations, or ensure correct delivery.

Inaccurate data may be corrected ex officio when there is a reliable source, or at the request of the data subject.

24. Third-party services and pages

The site may contain links or integrations with pages of manufacturers, carriers, financial institutions, social networks, payment platforms and other external services.

When the user leaves installbeer.com or uses a service managed by another entity, processing may be subject to that third party’s privacy policy.

Install Beer does not control the policies of independent entities and recommends reviewing them before providing personal data.

25. Changes to this policy

Install Beer may update this policy to adapt it to regulatory, technological, organizational or commercial changes.

The current version will be identified by its update date.

When a change is relevant to individuals’ rights or requires new consent, an appropriate notice or request will be provided before applying the new processing.

Previous versions may be retained when necessary to demonstrate the information applicable on a given date.

26. Contact

For any questions about privacy or data protection:

Install Beer S.L.
Carrer de Joaquim Valls, 109, local
08042 Barcelona, Spain
Telephone: +34 93 346 46 56
Email: info@installbeer.com

Please indicate “Data protection” in the subject line to facilitate correct identification and processing of the request.