Thank you for your interest in our website. The protection of your personal data is important to us. We comply with the statutory provisions on data protection and data security.

 

We are subject in particular to the provisions of the General Data Protection Regulation (DSGVO), the Federal Data Protection Act in the version applicable since 25.05.2018 (BDSG) and the Telemedia Act (TMG). Accordingly, we are entitled in particular to collect and use personal data to the extent necessary to enable you to use our website at www.justspices.com, including all services and functions contained therein.

 

Below you will find information about what personal data we collect when you use our website and the services and functions contained therein, and how we use it and for what purposes.

 

I. Name and address of the responsible person

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is the:

 

Just Spices GmbH

Schiessstr. 44 a

40549 Düsseldorf

Germany

Tel.: +49-211 97 53 23 20

E-Mail:contact@justspices.com

Website: https://www.justspices.com

 

II. Name and address of the data protection officer

The data protection officer of the controller is:

Johannes Schwiegk

180° Data Protection Ltd.

Hansaallee 321

D-40549 Düsseldorf

E-mail: datenschutz@180-datenschutz.de

Website: https://www.180-datenschutz.de/ 

 

III. General information on data processing

1. scope of the processing of personal data

We process personal data of our users only insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

 

2. legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c) DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) d) DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) a) DSGVO serves as the legal basis for the processing.

 

3. data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

 

IV. Provision of the website and creation of log files

 

1. description and scope of data processing

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

 

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • Web page from which the request comes
  • Web page that is called up by the user via our website
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

 

We cannot assign this data to specific persons. We do not combine this data with other data sources.

The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. a) DSGVO.

 

2. purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The storage also takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

 

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. a) DSGVO.

 

3. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Beyond that, the data is deleted after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

 

4. possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

 

V. Use of cookies

 

  1. description and scope of data processing

In addition to the previously mentioned data, cookies are stored on your computer when you use this website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to us. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective. This website uses the following types of cookies, the scope and functionality of which are explained below:

 

Transient cookies

 

Persistent cookies

 

Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

 

Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that in this case you may not be able to use all functions of this website. When you call up our website, you will be informed by an info banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

 

You can find a list of our cookies here:

 

Cookie List

A cookie is a small piece of data (text file) that your browser stores on your device when instructed by a website you visit to "remember" information about you, such as your language preferences or login information. These cookies are set by us and are called first-party cookies. We also use third-party cookies, which come from a different domain than the website you are visiting. We use these cookies to support our advertising and marketing efforts. Specifically, we use cookies and other tracker technologies for the following purposes:

Absolutely necessary cookies

These cookies are necessary for the website to function and cannot be disabled in your systems. Usually, these cookies are only set in response to actions you take that correspond to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website will then not function. These cookies do not store any personal data.

Performance cookies

These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answer questions about which pages are the most popular, which are the least used, and how visitors move around the site. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we will not be able to know when you visited our website.

Functional cookies

With these cookies, the website is able to provide advanced functionality and personalization. They may be set by us or by third parties whose services we use on our sites. If you do not allow these cookies, some or all of these services may not function properly.

Cookies for marketing purposes

These cookies may be set through our website by our advertising partners. They may be used by these companies to profile your interests and show you relevant ads on other websites. They do not directly store personal data, but are based on a unique identification of your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

  1. legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a) DSGVO.

 

  1. purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles. The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. a) DSGVO.

 

  1. duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

 

VI Newsletter

1. description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.

We verify your consent to receive our newsletter by e-mail by using the so-called double opt-in procedure. This means that we first request active confirmation of your consent to receive the newsletter by e-mail to the e-mail address you provided in the course of subscription before we start sending it. We use the information about the confirmation to document and, if necessary, prove your consent.

Furthermore, we may also send you our newsletter without your consent, subject to special conditions. In the context of existing customer relationships, we are in fact legally permitted to advertise the sale of similar goods and services by e-mail without having obtained your consent. No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

 

2. legal basis for data processing

The legal basis for the processing of data after registration for the newsletter is your consent according to Art. 6 para. 1 lit. a) DSGVO. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.

 

3. purpose of data processing

The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address will be stored as long as the subscription to the newsletter is active.

 

5. possibility of objection and elimination

The subscription to the newsletter can be cancelled by the user concerned at any time without incurring any costs other than the transmission costs according to the prime rates. For this purpose, a corresponding link can be found in each newsletter.

The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent. If you revoke your consent, we will delete this data and no longer send you newsletters.

 

VII. customer account registration and registration to the "Spice-Club

 

1. description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties.

The registration also includes the registration to the Spice Club (please refer to the section on "Loyalitylion"), as well as the registration to our newsletter (please refer to the section Newsletter for the registration process). As part of the registration process, the user's consent to the processing of this data is obtained.

If you are logged into your user account while visiting or shopping on our site, we collect usage data from our homepage (subpages visited, duration of visit, shopping cart, order history, device data, browser data, approximate localization based on your IP, time of visit), which we use to personalize the newsletter. In addition, we collect data from the interaction with the newsletter (time of receipt and read confirmation).

 

2. legal basis for data processing

The legal basis for the processing of the data is your consent in accordance with Art. 6 (1) a) DSGVO.

If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b) DSGVO.

 

3. purpose of data processing

Registration enables us to grant users various benefits (e.g. reward points in the "Spice Club") and to inform them about our product range as well as product news, cooking recipes and the like by means of our newsletter with information tailored to their interests.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected or if you revoke your consent.

This is the case for the data stored during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to fulfill contractual or legal obligations.

 

5. possibility of objection and elimination

As a user, you have the option to revoke your consent to the processing of your personal data at any time by cancelling the registration. You can have the data stored about you changed at any time. You can unsubscribe from our newsletter via the unsubscribe link at the end of the newsletter mail. Please also note the data protection information on the use of our webshop.

 

VIII. Webshop usage

 

  1. description and scope of data processing

If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately, other information is voluntary.

 

  1. legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. b) DSGVO.

 

  1. purpose of data processing

The specification of the data is necessary for the processing of your order. For this purpose, we may pass on your payment data to our house bank. We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

 

4. duration of storage

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after a few years without business contact, we will restrict processing, i.e. your data will only be used to comply with legal obligations.

 

5. possibility of objection and elimination

As a user, you have the option to have the data stored about you changed at any time.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

 

IX. Contact form and e-mail contact

 

1. description and scope of data processing

Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

Your clarification of the processing of the data with reference to this privacy policy is documented as part of the submission process.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

In this context, the data is passed on to our order processors. The data is used exclusively for the processing of the conversation.

 

2. legal basis for data processing

The legal basis for the processing of the data is your consent in accordance with Art. 6 (1) a) DSGVO.

If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b) DSGVO.

 

3. purpose of data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

5. possibility of objection and elimination

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

 

X. Use of Sovendus voucher offers

 

  1. description and scope of data processing

On our website we have integrated an advertising partner, Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe, Germany. For this purpose, we place voucher banners. For the selection and content of the banner specifically displayed to you, we transmit the hash value of your e-mail address and your IP address to Sovendus in pseudonymized and encrypted form. In addition, for billing purposes, we transmit pseudonymized order number, order value with currency, session ID, coupon code and timestamp to Sovendus. If you are interested in a voucher offer from Sovendus, if there is no advertising objection to your e-mail address and if you click on the voucher banner that is only displayed in this case, we transmit your title, name, postal code, country and your e-mail address in encrypted form to Sovendus for the preparation of the voucher. For more information on the processing of your data by Sovendus, please see the Sovendus privacy policy at: www.sovendus.de/datenschutz 

 

  1. legal basis for the processing of personal data

The legal basis for the use of Sovendus voucher offers is Art. 6 para. 1 p. 1 lit. a) u. b) DSGVO.

 

  1. purpose of data processing

Sovendus is a provider of after-sales vouchers. This means that on the one hand, vouchers for other online stores are offered on our site after the purchase is completed. On the other hand, our voucher offer is accordingly also displayed at other stores after the purchase is completed. Thus, we can easily generate new customers. Sovendus receives a commission per redeemed Just Spices voucher (so-called CPO model). The pseudonymized hash value of the e-mail address is used by Sovendus to take into account any possible objection to advertising. The IP address is used by Sovendus exclusively for data security purposes.

 

  1. duration of storage

The data is deleted as soon as it is no longer required for our recording purposes. The IP addresses collected by Sovendus are usually anonymized after seven days.

Depending on the circumstances, we may be required by commercial and tax law to store address, payment and order data for a period of ten years. However, after a few years without business contact, we will restrict processing, i.e. your data will only be used to comply with legal obligations.

 

  1. possibility of objection and elimination

Before the banner is displayed to you after checkout, the hash value of your email address is checked. This ensures that the Sovendus banner will not be displayed to you if you have already declared in other cases that you no longer wish to receive offers from Sovendus. In addition, you can tell us at any time that you no longer wish to receive offers from Sovendus. We would then disable the feature.

 

XI. Use of Google Ads (formerly Google Adwords)

 

  1. description and scope data processing

On our website, we use Google Ads Conversion, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With this we can draw attention to our offers and services with the help of advertising media (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies (for cookies, see above), which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites.

The data transfer of personal data to the USA takes place on the basis of the so-called standard contractual clauses of the European Commission.

Further information on the handling of user data can be found in Google's privacy policy at: https://www.google.de/intl/de/policies/privacy 

 

  1. legal basis for the processing of personal data

The legal basis for the use of Google Ads is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

By using Google Ads we have the possibility to show you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs. By using it, we can further publicize and spread the word about our company and the services we offer. We hope to reach more potential customers. In these purposes also lies our legitimate interest in processing the data according to Art. 6 para. 1 lit. a) DSGVO.

 

  1. duration of storage

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

 

  1. possibility of objection and elimination

You can prevent participation in this tracking process in several ways:

  1. a) by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers.

 

  1. b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin.

 

  1. c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies.

 

  1. d) by permanently deactivating it in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin.

 

  1. e) by means of appropriate cookie settings. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

 

XII. Web analysis through Google Analytics

 

  1. scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics sets cookies on the user's computer (for cookies, see above) and enables us to analyze your use of our website. The information generated by the cookies about your use of our website (including your IP address) is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization (On our website, Google Analytics has been extended by the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses), Google will truncate the user's IP address beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA in exceptional cases and shortened there. The data transfer of personal data to the USA takes place on the basis of the so-called standard contractual clauses of the European Commission. This information is used by Google on our behalf to evaluate your use of our website, to compile reports on website activity for us and to provide other services related to the use of our website and the Internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address determined by Google Analytics will not be merged with other data from Google.

 

2. legal basis for the processing of personal data

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in processing the data according to Art. 6 para. 1 lit. a) DSGVO. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

 

  1. duration of storage

The data is deleted as soon as it is no longer required for our recording purposes.

 

5. possibility of objection and elimination

You can prevent cookies from being stored on your computer by setting your browser software accordingly. In this case, you may not be able to use all the functions of our website. To prevent the collection of data generated by cookies and related to your use of our website (including your IP address) by Google, as well as the processing of this data by Google, a browser plug-in is available for download and subsequent installation at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the collection by Google Analytics by clicking on the following link (the link must be clicked again after each deletion of your cookies). This link sets an opt-out cookie, which prevents the collection of your data when visiting these websites in the future:

Deactivate Google Analytics

 

XIII. Use of the rating reminder for and by Trusted Shops

 

  1. scope of the processing of personal data

We work with Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany, to evaluate our products and our services as well as the online shopping experience. If you have activated a corresponding checkbox or clicked on the button "Rate later", we will transmit your e-mail address to Trusted Shops GmbH for the reminder to submit a rating of your purchase, so that Trusted Shops GmbH reminds you by e-mail of the possibility to submit a rating.

For more information on the handling of user data, please refer to the Trusted Shops privacy policy at: https://www.trustedshops.de/impressum/ 

 

  1. legal basis for the processing of personal data

The legal basis for the use of the rating reminder is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

We use the rating function to analyze and regularly improve the use of our webshop. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

 

  1. duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for this purpose until a rating has been submitted or a revocation has been made.

 

5. possibility of objection and elimination

Your consent, given by activating the checkbox or clicking the button "Rate later", can be revoked at any time by sending a message to us or directly to Trusted Shops with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent. If you revoke your consent, we will delete this data or have it deleted and will no longer send you reminder emails.

 

XIII. Use of Facebook plug-ins (Like button)

 

  1. scope of the processing of personal data

Plug-ins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA or Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are integrated on our pages. You can recognize the Facebook plug-ins by the Facebook logo or the "Like" button ("Like") on our site. You can find an overview of the Facebook plug-ins here: https://developers.facebook.com/docs/plugins/ 

When you visit our pages, a direct connection between your browser and the Facebook server is established via the plug-in. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account.

In addition, we maintain an online presence, a so-called fan page, on Facebook in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.

When using the Fanpage or the plug-ins, your data may be processed outside the area of the European Union. This may result in risks for you because, for example, it may make it more difficult to enforce your rights. The data transfer of personal data to the USA takes place on the basis of the so-called standard contractual clauses of the European Commission.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Facebook plug-ins is Art. 6 para. 1 p. 1 lit. a) DSGVO.

If you are asked by Facebook for consent to the described data processing, the legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO.

In addition, on the basis of an agreement on joint processing of personal data pursuant to Art. 26 DSGVO in conjunction with the declaration deposited under this link https://www.facebook.com/legal/terms/page_controller_addendum.

 

  1. purpose of data processing

Facebook plug-ins make it easier to share content on the social platforms.

If content is posted by users on Facebook, we reach more potential customers. In addition, a so-called reach analysis may be possible for us.

Furthermore, Facebook usually processes user data for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the user's interests. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles.

 

  1. duration of storage

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this in Facebook's privacy policy at

https://de-de.facebook.com/policy.php. As well as specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data 

 

  1. possibility of objection and elimination

If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook user account.

An opt-out option is available at: https://www.facebook.com/settings?tab=ads 

 

XIV. Use of Google Maps

 

  1. scope of the processing of personal data

Maps from the "Google Maps" service are integrated on this page. The provider of this service is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed includes, in particular, your IP address and your location data, which, however, are not collected without your consent (e.g. through the corresponding settings of your browser). The data may be processed in the USA.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Google Maps is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

By using Google Maps, we are able to visually display geographic information and provide you with an easy way to find a route from any location to our company.

 

  1. duration of storage

We would like to point out that we have no concrete knowledge about the transmitted data as well as their use by Google. For more information on Google Maps, please visit https://maps.google.com/help/terms_maps.html. The applicable data protection provisions of Google can be found at https://www.google.com/policies/privacy/.

 

  1. possibility of objection and elimination

The processing of data by Google can be modified and excluded at https://adssettings.google.com/authenticated.

 

XV. Use of Google reCAPTCHA

 

  1. scope of the processing of personal data

To protect input forms on our site, we use the service "reCAPTCHA". The provider of this service is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To our knowledge, the referrer URL, the IP address, the behavior of website visitors, information about the operating system, browser and dwell time, cookies, display instructions and scripts, the user's input behavior and mouse movements in the area of the "reCAPTCHA" checkbox are transmitted to "Google". The data may be processed in the USA.

Google uses the information obtained in this way to digitize books and other printed matter and to optimize services such as Google Street View and Google Maps (e.g., house number and street name recognition).

 

  1. legal basis for the processing of personal data

The legal basis for the use of Google reCAPTCHA is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

We use the service to protect input forms on our site. By using this service, it is possible to distinguish whether the corresponding input is of human origin or misused by automated machine processing.

 

  1. duration of storage

We would like to point out that we have no concrete knowledge of the transmitted data or its use by Google beyond the data mentioned. The applicable privacy policy of Google can be found at https://www.google.com/policies/privacy/.

 

  1. possibility of objection and elimination

The IP address transmitted as part of "reCAPTCHA" is not merged with other data from Google, unless you are logged into your Google account at the time of using the "reCAPTCHA" plug-in. If you want to prevent this transmission and storage of data about you and your behavior on our website by "Google", you must log out of "Google" before you visit our site or use the reCAPTCHA plug- in. The processing of data by Google can be changed and excluded at https://adssettings.google.com/authenticated.

 

XVI. Use of Google Web Fonts

 

  1. scope of the processing of personal data

Our site uses so-called web fonts of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. Through this, Google obtains knowledge that our website was accessed via your IP address.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Google Web Fonts is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

We use the service for the uniform display of fonts and in the interest of a uniform and appealing presentation of our online presence.

 

  1. duration of storage

We would like to point out that we have no concrete knowledge of the transmitted data or its use by Google beyond the data mentioned. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq. The applicable privacy policy of Google can be found at https://www.google.com/policies/privacy/.

 

  1. possibility of objection and elimination

You can set your browser so that the fonts are not loaded from Google servers (for example, by installing browser add-ons such as NoScript or Ghostery for Firefox). If your browser does not support Google Web Fonts or you disable access to the Google servers, the text will be displayed in the system's default font. The processing of data by Google can be changed and excluded at https://adssettings.google.com/authenticated.

 

XVI. use of Instagram

  1. scope of the processing of personal data

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Instagram is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

Using Instagram makes it easier to share content.

If content is posted by users on Instagram, we reach more potential customers through this. In addition, the use of Instagram serves us to further publicize and disseminate our company and the services we offer.

 

  1. duration of storage

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please see Instagram's privacy policy:

instagram.com/about/legal/privacy/

 

  1. possibility of objection and elimination

If you do not want Instagram to be able to associate your visit to our pages with your Instagram user account, please log out of your Instagram user account.

 

XVIII. Use of Xing

 

  1. scope of the processing of personal data

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing Xing functions is called up, a connection to Xing servers is established. As far as we are aware, no personal data is stored in this process. In particular, no IP addresses are stored or usage behavior evaluated. For further information on data protection and the Xing Share button, please refer to the Xing privacy policy at www.xing.com/app/share. 

 

  1. legal basis for the processing of personal data

The legal basis for the use of Xing is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

Using Xing makes it easier to share content.

The use of Xing serves to recruit new employees and to further publicize and spread the word about our company and the services we offer.

 

  1. duration of storage

To our knowledge, no personal data is stored when connecting to Xing's servers. In particular, no IP addresses are stored or usage behavior evaluated.

 

  1. possibility of objection and elimination

An objection or removal option is not required, as no storage of personal data takes place.

 

XIX Use of Pinterest

 

  1. scope of the processing of personal data

Functions of the Pinterest service are integrated on our pages. These functions are offered by Pinterest Inc, 651 Brannan Street, San Francisco, CA 94103, USA. Responsible for the data processing of persons living outside the United States is Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

The data transfer of personal data to the USA takes place on the basis of the so-called standard contractual clauses of the European Commission. We have no influence on the type and scope of the data processed by Pinterest, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. By using Pinterest, your personal data is collected, transferred, stored, disclosed and used by Pinterest Inc. and thereby transferred to and stored and used in the United States, Ireland and any other country in which Pinterest Inc. does business, regardless of your residence. Pinterest processes on the one hand your voluntarily entered data such as name and username and email address.

On the other hand, Pinterest also evaluates the content you share to determine what topics you are interested in, stores and processes messages you send directly to other users, and can determine your location using GPS data, wireless network information, or your IP address to serve you advertising or other content.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Pinterest is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

Using Pinterest makes it easier to share content.

If content is posted by users on Pinterest, we reach more potential customers through this. In addition, the use of Pinterest serves us to further publicize and disseminate our company and the goods and services offered.

 

  1. duration of storage

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Pinterest. For more information, please refer to the Pinterest privacy policy at https://policy.pinterest.com/de/privacy-policy.

 

  1. possibility of objection and elimination

If you do not want Pinterest to associate your visit to our pages with your Pinterest user account, please log out of your Pinterest user account.

In addition, you have the right to object. To exercise this right, please contact Pinterest directly. We recommend that you log out regularly after using Pinterest.

 

XX. Use of Twitter

 

  1. scope of the processing of personal data

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The responsible party for the data processing of persons living outside the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

The data transfer of personal data to the USA takes place on the basis of the so-called standard contractual clauses of the European Commission. We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. By using Twitter, your personal data will be collected, transferred, stored, disclosed and used by Twitter Inc. and thereby transferred to, and stored and used in, the United States, Ireland and any other country in which Twitter Inc. does business, regardless of your country of residence. Twitter processes on the one hand your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts of your address book when you upload or synchronize it.

On the other hand, Twitter also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages you send directly to other users, and can determine your location using GPS data, wireless network information, or your IP address in order to send you advertising or other content.

 

  1. legal basis for the processing of personal data

The legal basis for the use of Twitter is Art. 6 para. 1 p. 1 lit. a) DSGVO.

 

  1. purpose of data processing

We use Twitter mainly for our own tweets and retweets. In selected cases, we will also communicate via direct messages and respond to retweets and comments, insofar as this involves the exchange of information on our services or products. We will not take note of or respond to submissions, complaints, etc. via Twitter.

 

  1. duration of storage

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please refer to Twitter's privacy policy at twitter.com/privacy.

 

  1. possibility of objection and elimination

You can change your privacy settings on Twitter in the account settings at twitter.com/account/settings. In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.

More information on these items is available on the following Twitter support pages:

https://support.twitter.com/articles/105576#

https://help.twitter.com/de/search?q=datenschutz

You can find out about the possibility of viewing your own data on Twitter here: https://support.twitter.com/articles/20172711# 

Information about the inferences Twitter makes about you can be found here:

https://twitter.com/your_twitter_data

Information on the available personalization and privacy setting options can be found here (with further references):

https://twitter.com/personalization

Furthermore, you have the option to request information via the Twitter privacy form or the archive requests:

https://support.twitter.com/forms/privacy

https://support.twitter.com/articles/20170320#

 

XXI. Use of Cleverpush

 

  1. scope of the processing of personal data

You can sign up to receive so-called push notifications. For this purpose, we use the offer "CleverPush", which is operated by CleverPush GmbH, Nagelsweg 22, 20097 Hamburg ("CleverPush"). In order to sign up for the push messages, you must confirm the query of your browser or terminal device to receive the notifications. This process is documented and stored by CleverPush. For this purpose, the login time as well as a push token or device ID is stored. This data is used on the one hand to be able to send you the push notifications and on the other hand as proof of your registration. CleverPush also evaluates our push notifications statistically. CleverPush can thus recognize if and when our push notifications were displayed and clicked on. This allows us to determine which push notifications interest recipients in order to tailor future messages to the presumed interests of all recipients and thus increase interest in our service. The assignment of a push token or device ID to a specific person only takes place if we should be legally obligated to do so, for the defense of claims against us if this is required as evidence, and for the possible prosecution of violations of the law.

 

  1. legal basis for the processing of personal data

The legal basis for the processing of personal data is Art. 6 para. 1 p.1 lit. a) DSGVO.

 

  1. purpose of data processing

The use of Cleverpush allows us to send you electronic advertisements based on your interests and previous purchases in our store. You will receive regular information about new products, product news and special offers from our store via our push notifications. The collection of user data is used to enable the service and deliver the desired messages. It is also used to analyze the use of the service and the demand for our products and to be able to improve them regularly. The statistics obtained allow us to adapt our offer and make it more interesting for you as a user.

 

  1. duration of storage

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your data will be stored as long as the subscription to our push notifications is active.

 

  1. possibility of objection and elimination

You can revoke your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future. You can make the revocation in the settings provided for receiving push notifications in the settings of your device or browser. The following link explains the unsubscribe process in detail:https://cleverpush.com/de/faq/ 

 

XXII. Use of LoyaltyLion for the Spice Club

 

  1. scope of the processing of personal data

On our homepage you can register for our reward points program, the so-called "Spice Club". For this purpose we use the offer Loyaltylion. The producer is LoyaltyLion, 26 Hatton Garden, Floor 2, London, EC1N 8BR, UK. Users of our homepage who have registered and signed up for the "Spice Club" can generate reward points ("Spice Points") by interacting with our pages, e.g. by posting recipes, writing product reviews or sharing our products and offers on social networks. These points can later be redeemed when making a purchase in our online store, thereby granting a price advantage. The points account is provided via Loyaltylion and integrated into our homepage. By using the "Spice Club", the following personal data will be transferred to Loyaltylion for the administration and allocation of the reward points: name, e-mail address, telephone number, address, IP address, date of birth, transaction data. Your consent to this processing is obtained and documented with reference to this privacy policy when registering for the "Spice Club".

 

  1. legal basis for the processing of personal data

The legal basis for the processing of personal data is Art. 6 para. 1 p.1 lit. a) DSGVO.

 

  1. purpose of data processing

The use of Loyaltylion allows us to credit participants in our "Spice Club" program with reward points based on various interactions with our homepage and to manage this points account.

 

  1. duration of storage

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your data will therefore be stored for as long as is necessary to maintain your reward points account via Loyaltylion.

 

  1. possibility of objection and elimination

You can revoke your consent to the storage and use of your personal data for the use of our premine program within the scope of the "Spice Club" at any time for the future by terminating your membership in the "Spice Club". In addition, you have the option of exercising your right of deletion against us.

 

XXIII Use of Hotjar

 

  1. scope of the processing of personal data

We use the program Hotjar from the company Hotjar ltd, Level 2, St Julian Business Centre, 3 Elia Zammit Street, St. Julians STJ 1000, Malta. Hotjar is a comprehensive analytics and feedback program that allows us to evaluate the quality and performance of your interaction with our website. After your consent, Hotjar processes the following data: IP address (pseudonymized), screen resolution, device type (device fingerprinting), operating system and browser, approximate geographic region, language preference, mouse movements, position and clicks, keystrokes, date and time of access to our website, channel through which you arrived at our website and previously visited pages. For this purpose, a cookie is set by Hotjar, for more information about this cookie, please refer to the "Cookies" section of this Privacy Policy. For more information, please visit https://www.hotjar.com/legal/policies/privacy/.

 

  1. legal basis for the processing of personal data

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. a) DSGVO

 

  1. purpose of data processing

The use of Hotjar allows us to evaluate and improve your experience of our homepage by tailoring it to your interaction. In addition, we can incorporate these insights and your feedback into the further development of our homepage, the redevelopment of features and new offers.

 

  1. duration of storage

The data will be stored until you revoke your consent.

 

  1. possibility of objection and elimination

You can revoke your consent for the future at any time by changing the setting in our cookie banner. The withdrawal of consent does not affect the lawfulness of the processing up to that point.

 

XXIV Use of kickoff labs

 

  1. scope of the processing of personal data

We use the software Kickofflabs from the provider Kickofflabs LLC, 4111 E Madison St #19, Seattle, WA, 98112, USA. Kickofflabs provides a Tell-A-Friend program for referral marketing, which allows users to receive discount codes and similar benefits for our offer for participating in various promotions. For the purpose of running these promotions, the following information is transmitted in the process: Email address, IT metadata (IP- address, usage statistics, cookie data, website history, geographic origin, browser), credit card data, account data, payment information), interests and preferences (purchase history, advertising preferences, publicly available social media information), personal and contact information (name, date of birth, gender, profession or other demographic information, address, title, contact details). A cookie is set to collect this data after your consent. In addition, Kickofflabs uses technologies such as fingerprinting, web beacons and similar technologies with your consent. As far as Kickofflabs transfers data to the USA, this is done on the basis of the standard contractual clauses of the European Commission.

 

  1. legal basis for the processing of personal data

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.

 

  1. purpose of data processing

By using Kickofflabs, we are able to run various promotions quickly and engagingly and get to know our customers better. Besides that, we can track who has qualified for the discount promotions by participating.

 

  1. duration of storage

The data will be stored until you revoke your consent.

 

  1. possibility of objection and elimination

You have the option to revoke your consent for the future at any time by changing the settings in our cookie banner. The legality of the processing of your personal data until the revocation of your consent remains unaffected.

 

XXV. Use of Trbo

 

  1. scope of the processing of personal data

On our homepage we use the program trbo of trbo GmbH, Leopoldstraße 41, 80802 Munich. After your consent, we can use trbo to analyze your usage behavior of our website and play you personalized overlays within the browser during your visit. For this purpose, the following data is collected and processed by trbo by setting cookies: User ID, through which channel (banner, e-mail or similar) you arrived at our site, movement profile on the website, contents of the shopping cart, purchased items. For more information about the cookie used, please see our cookie overview in the "Cookies" section of this privacy policy.

 

  1. legal basis for the processing of personal data

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.

 

  1. purpose of data processing

The use of the knowledge gained through the use of trbo enables us to adapt and improve our offer more precisely to the individual needs of our customers.

 

  1. duration of storage

Your data will be stored by trbo until you revoke your consent.

 

  1. possibility of objection and elimination

You can revoke your consent for the future at any time by changing the settings in our cookie banner. The withdrawal of consent does not affect the lawfulness of the processing up to that point.

 

XXVI Application Portal or E-Recruiting System Prescreen

 

  1. description and scope of the processing of personal data

For our applicant management we use the e-recruiting system "Prescreen" under the domain *.jobbase.io of Prescreen International GmbH, Mariahilfer Straße 17, 1060 Vienna. Here we can place job advertisements and receive and manage applications. Prescreen sets cookies on the user's computer (for cookies, see above). In the course of using Prescreen, we process the following data: Salutation, first name, last name, e-mail address, address, date of birth, telephone number, citizenship, CV, in particular information on professional experience and education, skills (e.g. Photoshop, MS Office), application photo, qualifications, certificates, awards and language skills, cover letter and motivation letter as well as other uploaded documents. In order to be able to adapt Prescreen to our needs and to enable trouble-free use of the website, we collect statistical information on surfing behavior (e.g. which areas of the website are clicked on and log-in times). As a matter of principle, only those persons in the company who require this for the proper conduct of the application process and for the smooth use of Prescreen have access to this data.

 

  1. legal basis for the processing of personal data

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable since 25.05.2018. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application process, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) a) DSGVO. Our interest then consists in the assertion or defense of claims.

 

  1. purpose of data processing

We process the data you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process, as well as for the purpose of registration on the above-mentioned website.

 

  1. duration of storage

Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will store your data in our applicant pool. There, the data will be deleted after the period specified by you during registration has expired. If you are awarded a position during the application process, the data will be transferred from the applicant data system to our HR information system. Longer storage periods may arise in cases where the data is necessary for the assertion, exercise or defense of legal claims before a court or authority. In such cases, the data is stored for as long as is necessary to fulfill these purposes.

 

  1. possibility of objection and elimination

You can revoke your consent for the future at any time by changing the settings in our cookie banner. The withdrawal of consent does not affect the lawfulness of the processing up to that point.

 

XXVII Cooking School

 

  1. description and scope of the processing of personal data

On our website, we offer users the opportunity to register for a 30-day cooking course by providing personal data. The registration includes the subscription to our newsletter, which will be sent after the end of the cooking course (please refer to the Newsletter section of the privacy policy). The data is entered in an input mask and transmitted to us and stored. The data will not be passed on to third parties. As part of the registration process, the user's consent to the processing of this data is obtained.

 

  1. legal basis for the processing of personal data

The legal basis for the processing of the data is your consent in accordance with Art. 6 (1) a) DSGVO.

 

  1. purpose of data processing

The data processing serves us to be able to offer our cooking course to interested users and to inform them about new, interesting products.

 

  1. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected or if the user revokes his or her consent.

 

  1. possibility of objection and elimination

As a user, you have the option to revoke your consent for the future at any time. You can unsubscribe from our newsletter at any time by clicking on the "unsubscribe" link at the end of the email. You can have the data stored about you changed at any time. Please note that your revocation does not affect the lawfulness of the data processing up to this point.

 

XXVIII Nutrition check

 

  1. description and scope of the processing of personal data

On our website, we offer users the opportunity to register for our nutrition check by providing personal data. A questionnaire is used to collect data on dietary and eating habits, which we store so that we can subsequently provide nutrition tips. The nutrition check includes a registration for our personalized newsletter, with which we provide product recommendations based on the previously collected data. The data is not passed on to third parties. As part of the registration process, the user's consent to the processing of this data is obtained.

 

  1. legal basis for the processing of personal data

The legal basis for the processing of the data is your consent in accordance with Art. 6 (1) a) DSGVO and Art. 9 (1) a) DSGVO.

 

  1. purpose of data processing

Based on the data, we can provide nutrition tips to users and inform you with our newsletter specifically based on this data with tips and product news.

 

  1. duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected or if you withdraw your consent to processing.

 

  1. possibility of objection and elimination

As a user, you have the option to revoke your consent at any time. You can unsubscribe from our newsletter by clicking on the unsubscribe link at the end of the newsletter.

 

XXIV Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

 

1. right to information

You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If there is such processing, you may request information from the controller about the following:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data which are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;

(5) the existence of a right to rectify or erase the personal data concerning you, a right to have the controller restrict the processing, or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data, if the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

 

XXVII Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

 

XXVIII. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims; or

(4) if you have objected to the processing pursuant to Art. 21 (1) DSGVO and it has not yet been determined whether the controller's legitimate grounds override your grounds.

Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

 

XXIX Right to deletion

 

a) Obligation to delete

You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete such data without undue delay, if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

(4) The personal data concerning you have been processed unlawfully.

(5) The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

(6) The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

c) Exceptions

The right to erasure does not exist insofar as the processing is necessary to

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or

(5) to assert, exercise or defend legal claims.

 

XXX. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the data controller.

 

XXXI. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a DSGVO or Art. 9 Para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 Para. 1 lit. b DSGVO and

(2) the processing is carried out with the aid of automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

XXXII Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(a) or (e) DSGVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications.

 

XXXIII. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

 

XXXIV. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller,

(2) is permitted by legislation of the Union or the Member States to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is done with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms of, and the legitimate interests of, the data subject, which shall include, at least, the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

 

XXXV. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

 

XXXVI Changes to this Privacy Policy

The further development of the Internet and our Internet offering may also affect the handling of personal data. We therefore reserve the right to amend this data protection declaration in the future within the framework of the applicable data protection laws and, if necessary, to adapt it to changes in data processing. The current version of the data protection declaration is always available under the heading "Data Protection" or "Privacy Policy".

 

Your Account

Log in/register now

  • Collect Loyalty Points

  • Discounts on every Order

  • Free Shipping

Discover more