RAHR CORPORATION AND AFFILIATES PRIVACY POLICY

Rahr Corporation and its affiliate companies, including Rahr Malting Co., Rahr Malting Canada Ltd., Gambrinus Malting Corporation, Brewers Supply Group, Inc., Brewer’s Supply Group (Canada) Limited, Koda Energy, LLC, Rahr Technical Center, LLC, and Bushel Boy Farms, LLP (collectively, “Rahr”) is committed to the privacy of your information. This Privacy Policy is meant to help you understand the information we collect, why we collect it, and how you can manage it. This Policy applies to our websites available at rahr.com, rahrbsg.com, rahrmaltingco.com, gambrinusmalting.com, kodaenergy.com, cancraftsolutions.com, rahrbsg.ca, account.bsgcraftbrewing.com, and bushelboy.com, (the “Site”) and any related products, services, or communications (the “Products”). By using our Site, or by purchasing our Products, you are acknowledging that you have read, understood, and accept this Privacy Policy.

In this Privacy Policy, any use of the words “you,” “yours,” or similar expressions refers to users of this Site or our Products as well as any other individuals whose information we collect and process. References to “we,” “us,” “our” or similar expressions refer to Rahr.

This Privacy Policy does not extend to anyone whose personal information is not under our control or management, including data that is collected by other websites that you may visit before or after this Site, and which are not governed by this Privacy Policy. We are not responsible for the data protection or privacy policies of any other websites and accept no responsibility or liability for those policies. Please carefully check the policies of other websites and services you use before you visit or submit personal information.

Information We Collect

Information We Collect and Receive. For you to use our Site and purchase our Products, we need to collect and process certain types of information. Depending on your use of our Site and purchase of Products, this may include:

  1. Information you provide to us by completing forms on our Site: For example, your name, contact, and address information, and any other information you may provide in the forms on our website;
  2. Information you provide to us by contacting us: Any personal information you may provide to us when you email or call us, such as name, phone number, employer, and any other details you provide in your communications. Rahr may also request your contact information for the purposes of having someone contact you for additional information or in response to your request for information from us;
  3. Transaction information when you purchase Products from us: For example, if you make purchases with your credit card, we may use your credit card information for shipping, billing, and credit card validation purposes;
  4. Information to support delivery of our Products: For example, we may require your address to deliver Products and other materials you request to you;
  5. Login information, such as username and password, that you may use in connection with our Site;
  6. Information about your activity through our Site, including your device information, such as your IP address, the type of device or browser you use, and your actions on the Site.

We will only use personal information to provide you with information, products, or services you have requested, or for other purposes set out in this Policy. Personal information does not include aggregate information from which individual identities have been removed.

Information from Children. Rahr does not knowingly solicit or collect any personal information from anyone under 13 years of age, and children under 13 are not permitted to register for or use our Site, including by subscribing to receive information from Rahr. Parents can contact our customer service department to access, change, or delete personal information that has been submitted by a child. If we become aware that a child under the age of 13 has provided us with personal information, we will delete it.

Cookies and Tracers. We may use cookies and similar technologies (e.g., web beacons, pixels, ad tags, and device identifiers) to recognize you and/or your device(s) on, off, and across the Site and different devices. You can view our full Cookie Policy here.

Consent to Use Cookies: The first time you visit our website, a cookie notice is displayed describing our use of cookies and linking to this Cookie Policy. As described in that notice, the cookie choices you make the first time you visit our Site will be used for your future use of the Site.

How We Use Information

Rahr may use the personal information we collect for the following purposes:

  • To deliver our Products;
  • To allow you to log into and access your account;
  • To provide customer service and our support services, or respond to any requests you make;
  • To process any financial transactions you make on our Site;
  • To facilitate Rahr’s development, design, marketing, or quality improvement of the Site and for our general business purposes;
  • To keep your information secure, such as by detecting security incidents, and to be able to verify your identity and contact information;
  • To alert you about product updates, special offers, updated information, and other news and services from Rahr;
  • To ensure our Site and Products are relevant to you and your interests;
  • To help us create and publish content most relevant to you; and
  • To contact you in response to sign up forms or requests such as our Contact Us forms.

How Information May Be Shared

Rahr does not sell or rent any of your personal information, and we do not share your personal information publicly without your consent. Rahr also does not disclose sensitive personal information for purposes other than those permitted by applicable law. However, we may disclose your information to certain trusted third-party services to help us provide, improve, promote, or protect our Products. For example, we may use data storage vendors or partner with other companies to process your payments or to store your personal information when necessary to support delivery of our Products and respond to customer service requests. Whenever we share data with third-party services, we require that they use your information only for the purposes we’ve authorized, and that they protect your personal information at least to the same standards we do.

We also reserve the right to disclose personal information when it is reasonably necessary to conduct our business, protect Rahr’s legal rights and property, and to comply with the law. Otherwise, your personal information is not shared with any individual or other organization.

Protection of Your Personal Information

We take the security of your personal information seriously and follow industry-standard practices to protect the data we collect and process. Rahr has therefore put in place commercially reasonable physical, electronic, and managerial procedures to safeguard and secure the personal information that Rahr collects. Access to personal information will be restricted to our authorized personnel who require the information in order to perform their duties properly. In addition, access will be limited to only that information that is strictly necessary for the performance of those duties.

Remember, the safety and security of your information also depends on you. Where you have chosen, or where we have given you a user-name and password for access to certain parts of the Site, you are responsible for keeping the user name and password confidential. No method of transmission over the internet or electronic storage is completely secure, so Rahr cannot guarantee its absolute security.

Data Transfers

Because Rahr is a US-based company, your information may be collected and processed in the United States. Additionally, as part of the Products offered to you through our Site, the information which we collect about you may be transferred to, and stored in, one or more countries other than where you currently reside. For example, this may occur if any of our servers or third-party service providers are located in a country other than yours. These countries may have different data protection laws that are similar to your current residence. However, if we transfer your information in this way, we will put in place appropriate protection to make sure your personal data remains adequately protected and is treated in line with this Privacy Policy.

Basis for Processing – European Union Residents

Data protection law in the European Economic Area (EEA) requires a lawful basis for collecting and retaining personal information from residents. Our lawful bases for processing personal information include:

  • Performing the contract we have with you: In certain circumstances, we need your personal data to comply with our contractual obligations, such as to deliver our Products and to assist with any questions you may have.
  • Consent: We may ask your consent to process your personal information in certain situations.
  • Legal compliance: Sometimes the law requires us to collect, store, or use your data for legal purposes.
  • Legitimate interests: This is a term in data protection law that allows us to process your personal information if we have a legitimate reason to use your data, and only if we do so in ways which do not hurt your interests and rights. For example, we sometimes process your data to pursue our legitimate interests in running our business, including for delivering our Products, protecting you from fraud, quality assurance, and marketing purposes. However, we also ensure that our legitimate use of your data does not materially infringe your rights, freedoms, or interests when compared to the processing.

Email Notifications

We try to keep email communications to a minimum and give you the ability to opt-out of any marketing communications we may send. For example, we may send you email relating to the Products that we offer. You may also elect to receive certain marketing communications in accordance with your preferences, and from which you may opt-out at any time. You can always opt-out of receiving marketing emails or mobile device notifications from Rahr (other than certain required communications, such as messages confirming orders, and notifying you of any privacy policy updates, and the like), by logging into the Site and adjusting your user preferences in your account profile if you are a registered user, or by sending us an email at Privacy@Rahr.com stating your request. If we have sent you a promotional email or mobile device notification, you may send us a return email or mobile device communication asking to be omitted from future optional notices.

Retention

We will hold your personal information on our systems for as long as is necessary to perform the relevant processing activity for that information, or as long as is set out in any relevant contract you hold with us. The relevant retention period is determined on a case-by-case basis because it depends on things like the nature of the data, why it is collected, why it is processed, and any relevant legal or operational retention needs. For example, we may retain your data for as long as you are a customer of ours so that we may process and complete any orders you may make with us. We may also be required to hold some types of information to fulfill legal purposes. We review our retention periods for personal information on a regular basis. When the relevant processing activity has been completed, we may destroy your data, or alternatively anonymize the data such that the data is not personally identifiable, either directly or indirectly.

Personal Information Requests – California and European Residents

While these rights are not globally applicable, users or Site visitors residing in California are afforded certain rights regarding their personal information. Except where an exception or exemption applies, these rights may include 1) The ability to request a copy of the information we have collected about you during the previous 12 months, as well as the right to review our data collection practices related to you (a “Personal Information Request”); 2) The ability to request deletion, correction, or limitation of your personal information; and 3) The right not to be discriminated against due to your exercise of any of the preceding rights. While these rights are not globally applicable, our customers are entitled to access the personal information that we hold about them. To ensure that your personal information is accurate and complete, please contact us through the email address below regarding any errors or updates affecting the personal information that we may hold.

You may also send us an email at Privacy@Rahr.com or call us at (952) 445-1431 to request access to, correct, or delete any personal information that we hold about you. Residents of California may also designate an authorized agent to exercise certain privacy rights on their behalf and should make any such request by contacting the above email address. To protect your privacy and security, Rahr may take reasonable steps to verify your identity before granting access to, correcting, or deleting data. We will generally respond to your request for information within 45 days, unless, for reasons beyond our control, a longer response time is necessary, in which case, you will be advised accordingly. Please note that we may retain certain information as required by law or as necessary for our legitimate business purposes.

Questions, Comments, or Complaints

If you have questions or comments about this Privacy Policy, or if you are not completely satisfied with this Privacy Policy or its application by us, we invite you to convey your concerns or suggestions to us at Privacy@Rahr.com. If you have an applicable disability, you may also contact us at the above email address to request access to this Privacy Policy as an alternative format. We will reply as quickly as possible and inform you of the steps, if any, that have been or will be taken in order to address your concern or implement the suggestion.

Rahr strives to satisfy our customers’ and visitors’ privacy concerns. However, if you have contacted Rahr about your issue and are still unhappy with our response, and if you are also a resident of the European Economic Area, subject to applicable law, you may contact your local EU Data Protection Authority (DPA) regarding your issue. Rahr commits to cooperate with the panel established by the EU DPA’s, and to comply with the advice given by the panel with regard to data transferred from the EU.

Updates and Changes to This Privacy Policy

This Privacy Policy is effective as of September 6, 2024. We may update this Policy from time to time. If we do, we’ll let you know about any material changes, either by notifying you on the Site or by sending you an email. Any updates to this Policy will not apply retroactively. If you keep using our Site, or purchase our Products after a change, that means you accept this Policy.