Data protection declaration
THE PROTECTION OF YOUR PRIVACY IS IMPORTANT TO US
It goes without saying that we handle your personal data responsibly when you use our websites and communicate with us electronically. We take all necessary measures to protect the personal data you provide and to comply with applicable national and European data protection regulations.
In the context of this data protection declaration we inform you about the way in which we process your personal data. Please note that the responsible party for your personal data within the framework of a website is the company named in the imprint of the respective website.
Contact Data Protection Officer:
By e-mail: firstname.lastname@example.org
Mr. Matthias Seitz
data protection officer
follow red GmbH
70563 Stuttgart, Germany
WHAT DATA IS COLLECTED AND HOW IS IT COLLECTED WHEN YOU VISIT THIS WEBSITE?
We only collect personal information that you choose to provide to us or that is necessary to provide you with our service. When you visit our website, our web servers store information such as the browser and operating system you use, the website from which you visit us, the websites you visit on our site, the date of your visit and for security reasons, e.g. to detect attacks on our websites, and for a period of seven days the Internet Protocol address (IP address) assigned to you by your Internet service provider. Other personal data will be stored if you provide it to us voluntarily. In this way, you provide us with your e-mail address, your name, your postal address, your telephone number and, if applicable, other data in order to receive information about our products, take part in competitions or surveys, buy products or simply be up to date on the products of interest to you.
If you access our website and enter something in free text fields and, for example, comment, our systems store the Internet Protocol address (IP address). We need this information for security reasons to prevent misuse and for other security purposes.
We use technical and organizational security measures to protect the data we manage against manipulation, loss, destruction and against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
Only authorized employees have access to your personal data. These may also be authorized employees of our service providers who process the data on our behalf or have access to this data. In this case we have concluded a so-called “order data processing contract” with the service provider.
FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA?
We use your personal data for the purposes of technical administration of the website, customer administration, answering your questions as part of our consumer service, for product surveys and surveys, and for marketing only to the extent necessary in each case. We use your personal data only for the purposes for which you have made them available to us. This also includes the fulfilment and processing of your orders in the online shop.
If you have given us your consent to process your personal data, this data will also be used for the purposes stated in the corresponding consent, e.g. sending newsletters, sending products. You can revoke your consent to this at any time in the future.
Within the scope of individual use, we would like to make our advertising material, such as our newsletter and your visit to our websites as user-friendly and individual as possible. Information that is automatically generated and transmitted by you helps us to provide you with individual and accurate information. This information includes “technical data” (e.g. IP address, operating system, browser), date and time of your visit to our website and “data on your (purchase) behaviour” (service history, order history, recipes and products viewed by you).
If you have subscribed to our newsletter, we are automatically provided with “technical information” that enables us, for example, to evaluate how often the newsletter was opened and what content was clicked on and how often (e.g. opening rate and click rate). The analysis of this information also enables us to optimize our digital offers, e.g. our newsletter, and to communicate with you as individually as possible. In this way we want to ensure that you only receive content that really interests you.
TRANSMISSION OF YOUR DATA TO THIRD PARTIES AND TO OTHER COUNTRIES
We will not share your personal information with any other company that wishes to use it for direct marketing purposes unless you have given us permission to do so. In addition, we make your personal data available to the following other bodies within a very limited framework:
Our service providers, so that they can support us e.g. in the administration of our website or us in the processing of online shop orders and the dispatch of products and newsletters. We have contractually obligated these companies to take the same security measures as we do with regard to personal data, to maintain the confidentiality of the data and to process them only on our express instructions.
Other companies within our Group, if you have given your consent or if these companies work on our behalf as our service providers and we have contractually committed them as have our external service providers.
Personal data will only be transferred to state institutions and authorities within the framework of mandatory legal provisions.
Your personal data may be transferred to other countries if we have a service provider based abroad. In this case, a so-called “order data processing contract” is concluded with the service provider, which ensures that the same level of data protection and data security prevails in Germany. This is ensured, among other things, by obliging the service provider to act exclusively on our instructions and to continuously take all technical measures to protect your personal data to the same extent as here.
If personal data is processed in a country outside the EU and the EEA, we ensure the appropriate level of data protection by concluding the standard contract specified for this purpose by the EU or an adequacy resolution of the EU Commission for the respective country is available.
In addition, your personal data will be processed on the basis of declarations of consent that you have actively submitted, e.g. for the dispatch of newsletters.
We have listed your rights with regard to your personal data below:
The right to information, rectification, cancellation, restriction of processing, objection to processing and the right to data transferability.
You also have the right to revoke your consent to the processing of your personal data at any time in the future.
To assert these rights, please contact our data protection officer using the contact data stated above.
In addition, we would like to draw your attention to the fact that each of our newsletters gives you the opportunity to cancel your consent to this service and thus to revoke the consent given.
Due to the lack of clear identification, it is unfortunately not possible to provide information on your personal data by telephone.
In addition, there is a right of appeal to a data protection supervisory authority.
If you use our website, you agree to the use and storage of cookies on your terminal device. You can also view our website without cookies. Most browsers automatically accept cookies. You can prevent cookies from being stored on your terminal device by selecting *do not accept cookies* in your browser settings. You can delete cookies already set on your terminal device at any time. Please refer to the instructions of your browser or terminal device manufacturer to find out how this works in detail. If you use different computers in different locations, you need to make sure that each browser matches your cookie preferences.
Personal data can be stored in cookies if you have consented or if this is technically absolutely necessary, e.g. to enable a protected login.
These cookies are mandatory for websites and their functions to function properly.
|Name of the cookie||Purpose|
|JSESSIONID||This cookie serves to protect session information from unauthorized readout and e.g. for the caching assignment of the page. It is deleted at the end of the session.|
|frontend||The cookie is used, for example, to log into the customer account of the online shop and to save the products in the shopping basket.|
These cookies make it possible to improve the comfort and performance of websites and to make various functions available.
|Name of the cookie||Purpose|
|external_no_cache||flag indicating whether or not caching is disabled.|
|Name of the cookie||Purpose|
|Social Plugins: Twitter||
The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your relevant rights and setting options for the protection of your privacy can be found in the Twitter data protection information: https://twitter.com/privacy.
|Social Plugins: Pinterest||
The purpose and scope of the data collection and the further processing and use of the data by Pinterest as well as your rights and setting options for the protection of your privacy can be found in Pinterest’s data protection information at: https://policy.pinterest.com/de/privacy-policy.
|cfduid: Cloudflare||The cookie is used to identify individual clients behind a shared IP address and to apply security settings on a client basis. For example, if the visitor is in a cafe with multiple infected computers but the computer of the particular visitor is trustworthy (for example, because he or she has completed a challenge within the Challenge Passage period), we can recognize this from the cookie. It does not correspond to any user ID in the web application and does not store any personal data.|
WEB ANALYSIS BY GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be cut back by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area.
In view of the discussion about the use of analysis tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses are only processed further in abbreviated form in order to exclude direct personal reference.
Further information on the use of your data by google can be found at http://www.google.com/analytics/terms/de.html and http://www.google.com/intl/de/analytics/privacyoverview.html.
Our website mainly contains links to the external social network Facebook. You can recognize the links on our website, e.g. by the Facebook logo. As a rule, we do not use so-called “social plug-ins” from Facebook for this purpose. Clicking on these icons will take you directly to the Facebook web pages. This website is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA, (Facebook).
In our blog and as part of the “Share Page” function on our website, we alternatively use so-called social plug-ins (“plug-ins”) from Facebook. The plug-ins are marked with a Facebook logo (e.g. “I like the button”). An overview of the Facebook plug-ins and their appearance can be found here: https://developers.facebook.com/docs/plugins.
You can tell if it is a link or a plug-in by moving the mouse pointer to the respective Facebook logos. If a social plug-in is used, the message “2-Clicks for more data protection” appears.
This means that if you access a page of our website that contains such a plug-in, we will inform you that when you click again, your browser will establish a direct connection to the Facebook servers. Facebook sends the content of the plug-in directly to your browser and integrates it into the page. Through this integration Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged on to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the “I like” button or making a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
For the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy, please refer to the Facebook data protection information:
If you do not want Facebook to associate the data collected via our website directly with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plug-ins from loading with add-ons for your browser, for example with the “Facebook Blocker” http://webgraph.com/resources/facebookblocker/.
Our website mainly contains links to the microblogging service Twitter. You can recognize the links on our website, e.g. by the Twitter logo in the form of a blue “Twitter bird”. As a rule, we do not use so-called “social plug-ins” from Twitter for this purpose. By clicking on these icons you will be redirected to the Twitter website. This website is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA, (Twitter).
In our blog and as part of the “Share Page” function on our website, we alternatively use so-called social plug-ins (“plug-ins”) from Twitter. The plugins are marked with a Twitter logo, for example in the form of a blue “Twitter bird”.
You can tell whether it is a link or a plug-in by moving the mouse pointer to the respective Twitter logos. If a social plug-in is used, the message “2-Clicks for more data protection” appears.
This means that if you access a page of our website that contains such a plug-in, we will inform you that when you click again, your browser will establish a direct connection to Twitter’s servers. The content of the plug-in is transmitted directly from Twitter to your browser and integrated into the page. The integration gives Twitter the information that your browser has called up the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in to Twitter. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there.
If you are logged in to Twitter, Twitter can immediately associate your visit to our website with your Twitter account. If you interact with the plug-ins, for example by pressing the “Twitter” button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information will also be published on your Twitter account and displayed to your contacts.
The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your relevant rights and setting options for the protection of your privacy can be found in the Twitter data protection https://twitter.com/privacy.
If you do not want Twitter to associate the data collected via our website directly with your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the Twitter plug-ins from loading with add-ons for your browser, for example with the script blocker “NoScript” (http://noscript.net).
On our website, references (links) are implemented on the YouTube page operated by Google. This website is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. We do not use so-called “social plugins” from YouTube for this purpose. Clicking on these icons will take you directly to the YouTube website.
Our website mainly contains links to the social network Pinterest, which is operated by Pinterest, Inc. 808 Brannan St, San Francisco, CA 94103, USA. As a rule, we do not use so-called “social plug-ins” from Pinterest for this purpose. Clicking on these icons will take you directly to the Pinterest website.
Our website contains links to the Instagram Inc. service operated by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. We do not use so-called “social plugins” from Instagram for this purpose. Clicking on these icons will take you directly to the Instagram website.
Our pages use functions of Google+. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Collection and disclosure of information: Use the Google+ button to publish information worldwide. The Google+ button gives you and other users personalized content from Google and our partners. Google stores both the information that you have given +1 for a content and information about the page that you viewed when you clicked +1. Your +1 can appear in Google services, such as search results or your Google profile, or elsewhere on websites and ads, along with your profile name and photo.
Google records information about your +1 activity to improve Google services for you and others. To use the Google+ button, you need a public Google profile that is visible worldwide and must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you access one of our pages that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the “Recommend button” of LinkedIn and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We point out that we as provider of the pages have no knowledge of the content of the transmitted data and their use by LinkedIn.
Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Every time you access one of our pages that contains XING functions, a connection to XING servers is established. To our knowledge, personal data will not be stored. In particular, no IP addresses are stored or the usage behavior is evaluated. Further information on data protection and the XING Share button can be found in XING’s data protection declaration at: https://www.xing.com/app/share?op=data_protection.
HOW LONG DO WE STORE YOUR DATA?
We store your personal data that you transmit to us via our websites in our databases. The data is stored for as long as this is necessary for the purpose for which you have transmitted your data to us or for compliance with statutory regulations (e.g. statutory retention obligations). For example, this means that the data is stored until we have answered a question from you or until a competition is over. If you have given us your consent for the storage of your personal data for marketing purposes, this means that your data will be stored for the duration for which we take marketing measures or until you revoke your consent. You can revoke your consent to receive advertising at any time with effect for the future.
LINKS TO OTHER WEBSITES
Our websites contain links to other websites. We have no influence on the content and design of the pages of other providers. Our data protection declaration does not apply there.
Status: May 2018