Data privacy

We, Naturkost Übelhör GmbH & Co. KG, are the responsible body for this website and, as a provider of teleservices, we must inform you of the type, scope and purposes of the collection and use of personal data at the beginning of your visit to our website in a precise, transparent, understandable and easily accessible form in clear and simple language. The content of the notice must be available to you at any time. Therefore, we are obligated to inform you of which personal data is collected, shared or used. Personal data (or personal information) means all information that refers to an identified or identifiable natural person.

The security of your data and compliance with data protection regulations is very important to us. The collection, processing and use of personal data is subject to the provisions of the European and national laws, such as the California Consumer Privacy Act (CCPA), that currently apply.

In this Privacy Policy, we would like to explain to you how we handle, use, and share your personal data and how you can contact us:

Naturkost Übelhör GmbH & Co. KG
Friesenhofen-Bahnhof 23-25
D-88299 Leutkirch-Friesenhofen
Commercial Register No.: HRA 610282
Managing Directors: Christian Übelhör and Marc Netten
Telephone: +49 7567 98817100
Email: info@organic-germany.com

Our Data Protection Officer
Should you have any questions, you can contact our Data Protection Officer as follows:
Sven Lenz
Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50
D-87435 Kempten
Email: lenz@deutsche-datenschutzkanzlei.de

A. General
To render this Privacy Policy easier to understand, no distinction has been made between genders. Terms apply equally to both genders within the meaning of equal treatment.

The meanings of the terms used, e.g. “personal data” or “processing”, can be found in Article 4 of the EU General Data Protection Regulation (GDPR).

The user’s personal data processed within this website includes i) inventory data (e.g. customers’ names and addresses), ii) usage data (e.g. pages of our website that have been visited, interest in our products) and iii) content data (e.g. data entered into the contact form).

“User” in this context refers to all categories of persons affected by data processing. This includes, for example, our business partners, customers, potential customers and other visitors to our website.

B. Detailed information

Privacy Policy
We guarantee that we only collect, process, store and use your data in order to process your enquiries, for internal purposes, to provide you with services you have requested or to provide content.

Bases of data processing
We only process users’ personal data in accordance with the relevant data protection provisions. User data is only processed on the following legal premises:
- To provide our contractual services (e.g. processing orders) and online services
- The processing is prescribed by law
- With your consent
- On the basis of our legitimate interests (i.e., interest in the analysis, optimisation and cost-effective operation and security of our website within the meaning of Art. 6 para. 1 letter f. GDPR, especially regarding measurement of reach, the generation of profiles for advertising and marketing purposes, the collection of access data and the use of third-party services)

We would be pleased to show you where the above legal bases are regulated in the GDPR:
Consent
Art. 6 para. 1 letter a. and Art. 7 GDPR
Processing to perform our services and execute contractual measures
Art. 6 para. 1 letter b. GDPR
Processing to fulfil our legal obligations
Art. 6 para. 1 letter c. GDPR
Processing to preserve our legitimate interests
Art. 6 para. 1 letter f. GDPR

Transmission of data to third parties
Data is only transmitted to third parties if permitted by legal provisions. We only transfer data to third parties if this is necessary, e.g. for contractual purposes or on the basis of legitimate interest in the economic and effective operation of our business.

If we commission sub-contractors in order to provide our services, we shall take suitable legal precautions as well as the corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal provisions.

Transmission of data to third-party countries or to an international organisation

Third-party countries are countries in which the GDPR is not a directly applicable law. In principle, this comprises all countries outside of the EU or the European Economic Area.

If necessary, data is transmitted to a third-party country or an international organisation. During this transmission, it is ensured that the relevant suitable/appropriate guarantees are in place and that you have enforceable rights and effective legal remedies.

Duration of storage of your personal data
We adhere to the principles of data economy and data avoidance. This means that we shall only store the data provided to us for as long as is required to fulfil the aforementioned purposes or as required by the various retention periods stipulated by the legislator. If the respective purpose ceases to apply or such a retention period expires, your data will be blocked or deleted routinely and in accordance with the legal provisions.

We have created an internal concept to ensure this procedure.

Contact
If you contact us by email or using the contact form, you thereby agree to electronic communication. Personal data is collected within the context of you making contact with us. The contact form shows which data is collected if you contact us through the contact form. Your data is transmitted under SSL encryption. The information provided by you is only stored for the purposes of processing the enquiry and for any possible follow-up questions.

We would be pleased to specify the legal bases for this:
Processing for the performance of our services and execution of contractual measures
Art. 6 para. 1 letter b. GDPR
Processing to preserve our legitimate interests
Art. 6 para 1 letter f. GDPR

We use software to maintain customer data (CRM system) or a comparable software on the basis of our legitimate interests (efficient and rapid processing of user enquiries).

We operate the system in-house. Data is therefore not transmitted to third parties in this context.

Please note that emails may be read or amended in an unauthorised and unnoticed manner during transmission. Please also be aware that we use software to filter unwanted emails (spam filters). The spam filter may reject emails if they have been falsely identified as spam due to certain features.

What are your rights as a European resident?

a) Right to information
You have the right to obtain free information on data stored that concerns you. Upon request, we shall disclose to you in writing which of your personal data we have stored in accordance with the applicable law. This includes the origin and recipients of your data as well as the purpose of data processing.

b) Right to correction
You have the right to have any data stored by us that refers to you corrected in the case of inaccuracies. You may request that the processing is restricted, e.g. if the accuracy of your personal data is contested.

c) Right to blocking
Furthermore, you can have your data blocked. In order to ensure that the blocking of your data can be observed at any time, this data must be retained in a locked file for inspection purposes.

d) Right to deletion
You may also request the deletion of your personal data, provided that no legal retention obligations apply. If such an obligation applies, we shall block your data upon your request. If the relevant legal provisions apply, we shall also delete your personal data without your specific request in this respect.

e) Right to data portability
You are entitled to request the provision of the personal data transmitted to us in a format that allows forwarding to another body.

f) Right to file a complaint with a regulatory authority
You have the option to file a complaint with a data protection regulatory authority.

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg State Representative for Data Protection and Freedom of Information)
Postal address: Postbox 10 29 32, D-70025 Stuttgart
Physical address: Königstraße 10a, D-70173 Stuttgart
Telephone: +49 711 615541–0
Fax: +49 711 615541–15
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de
You can open the complaint form using the following link:
https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde

g) Right to object
You have the option to object to the use of your data for internal purposes with effect for the future at any time. It will suffice to send an email to info@organic-germany.de. However, such an objection does not affect the legality of processing operations carried out until the revocation. Data processing carried out on all other legal bases, e.g. the initiation of a contract (see above), remains unaffected.

Response Timing and Format. We will confirm that we received your request within ten (10) days and will respond within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.
We will deliver our written response electronically or, at your option, by mail.
Any disclosures we provide will only cover the 12-month period preceding our receipt of the request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Protection of your personal data
We take contractual, organisational and technical security measures corresponding with the latest technology to ensure that the provisions of data protection laws are observed and to protect the data that we process from accidental or intentional manipulation, loss, destruction or unauthorised access.

The security measures include, in particular, the encrypted transmission of data between your browser and our server. 256-bit SSL (AES 256) encryption technology is used for this purpose.

Your personal data is protected with regard to the following points (excerpt):
a) Preservation of the confidentiality of your personal data
In order to preserve the confidentiality of the personal data that we have stored concerning you, we have taken various measures to control access.
b) Preservation of the integrity of your personal data
In order to preserve the integrity of the personal data that we have stored concerning you, we have taken various measures with regard to transmission and input control.
c) Preservation of the availability of your personal data
In order to preserve the availability of the personal data that we have stored concerning you, we have taken various measures with regard to order and availability control.

The security measures in place are continuously improved in accordance with technological development. Despite these provisions, we cannot guarantee the security of your data transmission to our website due to the insecure nature of the Internet. As a result, all data transmission between you and our website takes place at your own risk.

Protection of minors
Persons below the age of 16 may not transmit data to us without the consent of their legal guardians. Personal information may only be provided to us by persons below the age of 16 if they have the express consent of their legal guardian or if the persons have reached the age of 16 or older. This data is processed in accordance with this Privacy Policy.

Cookies
We use cookies. Cookies are small text files that are stored locally in the cache of your Internet browser. Cookies enable an Internet browser to be recognised. The files are used to help the browser to navigate the website and use all of the functions of the website in full.

Our website uses: Browser cookies

Control of cookies by users
Browser cookies: You can adjust the settings in any browser so that cookies are only accepted upon request. You can also adjust the settings so that cookies are only accepted for websites that you are currently visiting. All browsers offer functions that allow the selective deletion of cookies. The acceptance of cookies can also be switched off in general. However, in this case, there may be restrictions in terms of the user-friendliness of this website.

Lifespan of cookies placed
Cookies are managed by the web server of our website. This website uses:
- Session cookies (one-time use)
- Lifespan: Until closing the website

Deactivate or remove cookies (opt-out)
Each web browser offers options to restrict or delete cookies. More information in this respect can be found on the following websites:

- Internet Explorer:
http://windows.microsoft.com/en-GB/windows7/How-to-manage-cookies-in-Internet-Explorer-9

- Firefox:
https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

- Google Chrome:
https://support.google.com/chrome/answer/95647?hl=en

- Safari:
https://support.apple.com/de-de/HT201265

Use of YouTube

Functions of the YouTube service are integrated into our website to display and playback videos. These functions are provided by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA. Further information can be found in the YouTube data protection guidelines.

The extended data protection mode is used here, which only initiates the storage of user information when the video starts to play, according to provider information.

Once the playback of embedded YouTube videos starts, YouTube places cookies to collect information on user behaviour. According to information provided by YouTube, these serve to collect video statistics, improve user-friendliness and prevent abusive conduct, among other things. Irrespective of playback of embedded videos, a connection to the Google network “DoubleClick” is established each time our website is opened, which can trigger further data processing operations without our influence.

Further details on the use of cookies by YouTube can be found in the YouTube Privacy Policy at: http://www.youtube.com/t/privacy_at_youtube


Social networks

Alongside this website, we also maintain a presence across various social media platforms, which you can find using the respective buttons on our website. If you visit such an account on social media, personal data is transmitted to the social media provider if applicable. It is possible that further information may be processed by the social media provider in addition to the storage of data that you have specifically entered into this social media platform.

Through this process, the provider of the social network processes, if applicable, the most important data regarding the computer system from which you visit the social media – for example, your IP address, the processor type and the browser version used, including plug-ins.

If you are logged into your personal user account on the respective social media network when visiting our account on this network, the network can then assign this visit to your personal account.

The purpose and scope of data collection by each medium and the further data processing of your data carried out there, as well as your rights relating to this, can be found in the respective privacy statements provided by each responsible body, e.g. under:

Facebook: https://de-de.facebook.com/about/privacy/

Twitter: https://twitter.com/de/privacy

Instagram: https://help.instagram.com/155833707900388

Google: https://policies.google.com/privacy?hl=de

Please also note that our website contains other links to external websites and that we have no influence over the processing of data on these external websites.

Changes to our data protection provisions

We reserve the right to occasionally adjust our data privacy statement so that it always corresponds to the current legal requirements or to implement changes to our services in the Privacy Policy. This could, for example, relate to the introduction of new services. The new Privacy Policy shall apply to your next visit.

Trademark protection

Each company or trademark mentioned here belongs to the respective company. The mention of brands and names is purely for information purposes.

C. Russia-specific provisions

The following applies for users that reside in the Russian Federation:

The aforementioned services of our website are not intended for citizens of the Russian Federation who are resident in Russia.

If you are a Russian citizen based in Russia, you are hereby expressly informed that any personal data you provide to us via this website is your sole responsibility and is provided at your own risk. You also confirm that you agree that you will not hold us responsible for any failure to comply with the laws of the Russian Federation.