PRIVACY POLICY
Sect. 1 – General
We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please pay attention and be sure to review their privacy practices.
Sect. 2 – Data processing for the performance of contracts
(1) Purpose of data processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is solely for the purpose of contract performance.
If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.
In case of opening a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you are able to shop faster and view your previous orders at any time. By sending us a notice or via a delete function you can delete the account again.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).
(4) Duration of storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)). The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 3 – PayPal-transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Sect. 4 – Web analysis with Google Analytics
(1) Purpose of data processing
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("Google"). Google Analytics uses so- called “cookies”, small text files, which are placed on your computer to analyze how you use the website. The information generated by the cookie about your use of this website will be transmitted and saved on server in the United States by Google. If the anonymizeIP function is activated on this website, Google will shorten your IP address in advance within the member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases Google will transmit the full IP address on server in the United States and will shorten there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activities and providing other services related to website and internet usage for the website operators.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
Google and its partners.
(4) Transfer to a third country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Duration of Storage
14 months
(6) Right of objection
You can prevent the installation of the cookies in your browser settings. If you choose to change your settings you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
OPT OUT
You may also generate blocking by setting an opt-out cookie. If you want to prevent the future collection of your data when you visit this website, please click here:
Disable Google Analytics
Sect. 5 – Web analysis with Squarespace
(1) Purpose of data processing
This website is hosted by Squarespace (Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland); “Squarespace”. Squarespace collects personal data when you visit this website to power our site analytics, including information about your browser, network, and device, Web pages you visited prior to coming to this website, and your IP address. This information may also include details about your use of this website, including clicks, internal links, pages visited, scrolling, searches and timestamps. This information is collected to learn about site traffic and activity. When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your billing and shipping address, details relating to your purchase (for example, your shirt size), email address, name and phone number. This information is collected so that we can receive website services. When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions, for storage of the query and data porting. Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form. You’ll receive an automated email within 24 hours after you abandon your shopping cart, if all of the following occur: You enter your email address at checkout, you add a product which is in stock to your shopping cart and you close your browser or leave this website without completing your purchase. You can unsubscribe from these messages at the bottom of the email. The email will link back to this website, where you can pick up where you left off and complete your purchase. We may email you with messages about your order or account activity. For example, we may email you to tell you that you’ve made a purchase or your order has shipped. It’s not possible to unsubscribe from these messages. We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf. This website uses font files from Google Fonts and Adobe Fonts. To properly display this site to you, servers where the font files are stored may receive personal information about you, including information about your browser, network, or device and your IP-address.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
Squarespace and its partners.
(4) Transfer to a third country
Squarespace Ireland Ltd. is an affiliate of Squarespace, Inc. Squarespace, Inc. is based in the USA (225 Varick Street, 12th Floor, New York, NY 10014).
(5) Duration of Storage
Functional: 1 month
Analytics/Performance: 24 months
(6) Right of objection
You can reject the use of cookies via the cookie banner upon your first visit of this website. You can prevent the installation of the cookies in your browser settings. If you choose to change your settings you may not be able to use the full functionality of this website. You may also generate blocking by setting an opt-out cookie.
Sect. 6 – Information about cookies
(1) Purpose of data processing
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit 'The cookies Squarespace uses'. These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you. These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.
(4) Duration of storage
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.
(5) Right of objection
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.
Sect. 7 – Social plugins from Instagram
This website uses social plugins ("Plugins") of the online service Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges . When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/ . If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
Sect. 8 – Web Indicator Service with Google Adsense
(1) Purpose of data processing
These pages use Google AdSense, a web advertisement service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("Google") to place advertisements (text ads, banners etc.). Your browser stores cookies (small text files) on your hard disk. These cookies are used by Google to personalize contents and advertisements, to operate functions for social media and to analyze access to our website. For apps device identifiers are employed. We also transfer information as to how you use our website to our partners for social media, advertising and analysis. These partners aggregate this information with other information that you provide them or that they have collected when you use the services.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
Google LLC and its partners.
(4) Transfer to a third country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Duration of Storage
Your personal data will only be stored as long as you have consented to the processing.
(6) Revocation consent
You may revoke your consent at any time by notifying the controller.
Sect. 9 Your rights as a data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:
1. Right to information
You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.
2. Right to rectification
If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.
3. Right to erasure
You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.
4. Right to restriction of processing
You have the right to restrict the processing your personal data under Article 18 of the GDPR.
5. Right to data portability
You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
6. Right to revoke the consent given under data protection law
You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).
Please also note your right of objection under Article 21 GDPR:
a) In general: reasoned objection required
If the processing of personal data concerning you takes place in order
- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)
or
- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),
you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Responsible for data processing:
Edelweiss Foods GmbH
Großbeerenstraße 2-10, 12107 Berlin
+49 30 55571398
info@edelweissfoods.de