PRIVACY POLICY ACCORDING TO ARTICLE 13, 14 GDPR

CONTACT DATA OF THE CONTROLLER

Dr. Theiss Naturwaren GmbH
Michelinstraße 10
66424 Homburg
Tel.: +49 6841/709 - 0
Fax: +49 6841/709 - 265
E-Mail: info@naturwaren-theiss.de

 

Contact data of the data protection officer

Dr. Theiss Naturwaren GmbH

- Datenschutzbeauftragter -
Michelinstraße 10
66424 Homburg
E-Mail: datenschutzbeauftragter@naturwaren-theiss.de

 

Welcome to our website. The protection of your data is very important to us. Therefore, we will demonstrate in the following how we process your personal data.

 

DATA CATEGORIES; DATA SOURCES

We generally process the personal data that you provide to us in the context of an enquiry, a pre-contractual relationship or a contractual relationship. In individual cases and insofar as this is necessary within the framework of fulfilment of the contract, we also process personal data that has been taken from publicly available sources (e.g. trade register, debt directories, Internet) in a permissible manner or has been permissibly transmitted by third parties (e.g. credit reference agencies).

 

This may be personal data (name, date of birth, legally authorised representative), address data (address, e-mail address, contact person), financial data (name of the account holder, IBAN, BIC), contract data (contract duration, services purchased, cancellations), communication data (correspondence, e-mails), advertising data (advertising letters) and other comparable categories of personal data.

 

GENERAL PROCESSING OF VISITOR DATA

 

The use of our website is generally possible without the provision of personal data. However, please note that access data is also collected and stored in the server log files in this case. This particularly refers to the following data:

 

  • IP address,
  • Date and time of request,
  • Time zone difference to Greenwich Mean Time (GMT),
  • Content of the request (specific page),
  • Access status/HTTP status code,
  • Each transmitted data volume,
  • Website where the request comes from,
  • Browser,
  • Operating system and its interface,
  • Language and version of browser software.

 

In principle, we evaluate this information in anonymised form to ward off attacks and to improve our offer (processing of personal data in the context of a balance of interests in accordance with Article 6 (1) f GDPR) and then delete it. The data is can generally not be tracked by us to your person and will not be merged with other data.

 

However, in the case of concrete indications of unlawful use, we reserve the right to evaluate the data retrospectively.

 

PROCESSING OF PERSONAL DATA AFTER CONSENT (ART. 6 (1) SENTENCE 1 A GDPR)

 

In individual cases, we will obtain consent from you for specific purposes expressly identified in connection with data collection (e.g. request by means of a contact form, order a newsletter).

 

Data processing takes place only if you give us consent. It is possible that the processing of your request without your consent is not possible and therefore must be made dependent on it. The processing of the data takes place exclusively for the purpose(s) expressly stated.

 

You can revoke your granted consent at any time with effect for the future. The revocation has no influence on the legality of the processing until the time of revocation.

 

CONTACT

 

If you contact us via the contact details provided, we will process the information you provide to process your enquiry. Your data will generally be deleted after processing the enquiry, provided that there is no contractual or statutory retention obligation. If you provide us with contractually relevant information, we will transfer it to our existing system.

 

PROCESSING OF PERSONAL DATA AS PART OF A BALANCE OF INTERESTS (ART. 6 (1F) GDPR)

 

In general, we process personal data according to balance of interests, as far as this is necessary for the protection of our interests or the interests of third parties.

 

Examples of such purposes are:

 

  • Assurance of IT security and integrity of our systems,
  • Prevention or investigation of criminal offences,
  • Assertion or defence of legal claims.

 

USE OF COOKIES

 

As part of your visit to our website, Cookies can be used on various pages. These are text files that are placed on your computer and allow, among other things, smooth processing of visits to our website.

We use Cookies on the basis of Article 6 (1) sentence 1 a) of the GDPR, whereby we request your consent for the use and following purposes of your consent, which can be withdrawn at any time for the future:

 

  • Enabling the use of special functions,
  • (Pseudonymised) analysis of usage behaviour to optimise our website,
  • Increased attractiveness and usage convenience of our website,
  • Improvement and needs-based design of our offer.

 

The use of Cookies takes place in the context of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored. Your IP address will only be saved in shortened form, so that a personal assignment of the usage profile is no longer possible.

 

Most of the Cookies we use are deleted from your computer when the browser is closed (session Cookies). Other types of Cookies may remain on your computer and allow us to recognise your computer by means of the usage profile you created on your next visit to our site (permanent Cookies).

 

Cookies are used on our site only by ourselves and not by third parties, with the exception of the third-party Cookies that are expressly mentioned in this privacy policy. You can set your browser so that you are informed about the setting of Cookies and individually decide on their acceptance or exclude the acceptance of Cookies for specific cases or in general. The non-acceptance of Cookies may limit the functionality of our website.

 

WEB ANALYSIS AND REMARKETING

Facebook Pixel: The site uses the “Facebook Pixel” remarketing feature of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). Users of the website can thus continue to be shown interest-related advertisements when visiting the social network Facebook and the procedure - the function - also of using websites. We are hereby interested in displaying ads that are relevant to you in order to make the visit to our website more interesting.

 

In the context of the use of Cookies, we rely on your consent to data collection. Unless you consent to data usage when you first visit our site, we will not collect your usage and other personal information that may be generated during your visit to the site, and will not use it for remarketing activities. This also applies to third-party Cookies such as the present Facebook Pixel Plugin.

 

If you consent to the processing of your data in the context of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we provide your data to the extent of your consent for the purposes of marketing and evaluation of your usage behaviour.

 

Due to the use of the plug-in, your browser establishes a direct connection to the Facebook server. We do not have any influence on the processing of the data that is collected due to the use of the function by Facebook. To the best of our knowledge, Facebook receives the information that you have accessed the sub-page of our website or clicked on the ad. This information can be assigned to Facebook if you are registered on Facebook. If you are not registered or not logged in, there is still the possibility that Facebook will process the IP address and other identification features.

Information about the use of this website and your IP address will be transmitted to Facebook servers in the USA and other third countries and also stored on this server. . Facebook LL.C. USA is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Facebook servers in the United States may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US (see also: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

In addition, Facebook claims to use the standard contractual clauses of the European Union within its group structure in order to ensure that the data protection requirements for transmissions to third countries are guaranteed (regarding Facebook, see: https://de-de.facebook.com/policy.php - > How do we process and transmit data as part of our global services?)

 

Pinterest Tag: This website uses the “Pinterest-Tag”; a retargeting tool of Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA. This will track your behaviour after you've seen or clicked on a Pinterest ad. This process is designed to analyse the effectiveness of Pinterest advertisements and to optimise future advertising efforts.

 

It processes information about the pages you have accessed and clicked advertisements as well as information about your browser, operating system and your IP address.

 

The data collected does not give us any information about your identity. However, the data is also stored and processed by Pinterest so that a connection to the respective user profile is possible and Pinterest can use the data for its own advertising purposes.

 

This processing of your data takes place on the basis of your consent to access to our website pursuant to Article 6 (1) sentence 1 a) of the GDPR.

 

Pinterest adheres to the self-regulatory principles of the Digital Advertising Alliance for behavioural advertising on the Internet.

 

For more details on how Pinterest collects or uses and processes your personal information, as well as privacy practices for personalized advertisements on Pinterest, please refer to Pinterest's Privacy Policy at: https://policy.pinterest.com/de/privacy-policy

 

Google-Remarketing: Google Remarketing, a retargeting feature of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used on our website.

 

Google Remarketing allows you to personalise advertisements for and on our website according to the interests of the visitors, to only show you advertisements that may interest you.

 

For this purpose, when Google calls up our website, a code is executed and so-called (re) marketing tags are integrated into the website. This will save an individual Cookie file on your device that stores information about the websites you have visited, the content you have accessed, your browser and your operating system. Your IP address is also recorded. The IP address will not be merged with data from you within any other Google offers. However, the above information may be linked by Google with such information from other sources. If the user subsequently visits other websites, they may be shown the ads tailored to him according to his interests.

 

Your data will always be pseudonymed as part of Google Remarketing. This does not apply if you have explicitly allowed Google to process your data without pseudonymisation. The information collected about users by Google Remarketing is transmitted to Google and stored on Google's servers.

 

For more information about Google's data usage for marketing purposes, please see Google's overview page or privacy policy:

 

Overview page: https://policies.google.com/technologies/ads?hl=de

 

Privacy policy: https://policies.google.com/privacy

 

If you want to opt out of interest-based advertising through Google Marketing Services, you can take advantage of Google's setting and opt-out opportunities.

 

https://adssettings.google.com/anonymous?hl=de&sig=ACi0TCjIfttUS8RSjuUrDY4xkZ4euXmG3-Z5xgYhZ-Uq9kR0iIVGIhiuv5MiduM8_VsQhkSccAawF63IEc9KNH1hlC5f1vNpapfphD6LZQ2Z3ZlCESGLrzM

 

Google is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation.

 

The legal basis for the use of Google Remarketing is the consent given by you when you access our website in accordance with Article 6 (1) sentence 1 a) of the GDPR.

 

Google Analytics: This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "Cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you.

 

In the context of the use of Cookies, we rely on your consent to data collection. Unless you consent to data usage when you first visit our site, we will not collect your usage and other personal information that may be generated during your visit to the site, and will not use it for usage analysis and remarketing activities. This also applies to third-party Cookies such as the present Google Analytics Plugin.

 

If you consent to the processing of your data in the context of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we provide your data to the extent of your consent for the purposes of marketing and evaluation of your usage behaviour.

 

The information generated by the Cookie about your use of this website is usually transmitted to a server of Google LLC in the USA and stored there. Information about the use of this website and your IP address may be transmitted to Google servers in the USA and also stored on this server. Google LLC is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Google may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of your Google Analytics service will not be merged with any other data provided by Google unless you have configured the web and app activity settings in Google Account settings to allow Google to merge it.

 

 

Further information on terms of use and data privacy is available at <https://marketingplatform.google.com/about/analytics/terms/de/> or at <https://policies.google.com/?hl=de&gl=de>.

On our website, Google Analytics has been extended to include the code “anonymizeIp” in order to be able to capture IP addresses anonymously (so-called IP masking).

USE OF GOOGLE FONTS

 

For the representation of external fonts we use the “online” mode. This service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In this context, a server call takes place in which data (including your IP address) and the page from which the call is made are transmitted to a Google server in the USA. Details of the processing by Google are unknown to us. According to Google, data is processed only to represent the fonts and not merged with data from other Google services. According to Google, aggregated data is only processed to analyse the popularity of the different fonts.

 

Google LLC is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Google may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US. Processing is necessary for a proper representation of our Internet presence and is therefore in our as well as your interest. The legal basis for the processing is therefore Article 6 (1) sentence 1 f of the GDPR in relation to the external appearance of the company via a functioning website.

 

Further information can be found on the websites of Google at the following links:

 

https://developers.google.com/fonts/faq

 

https://policies.google.com/privacy

 

SOCIAL MEDIA PLUGINS

 

Some social plug-ins are included on our websites, but they are disabled by default for privacy reasons. When a user visits our website, no data will be transmitted to the social media services (such as Facebook). A profile formation by third parties is thereby excluded.

 

Users have the possibility to activate the social plug-ins with one click and thus to give their consent to communicate with the respective social network. When a social plug-in is activated, certain data is transmitted to the respective social network, e.g. the IP address of the user, information about the used browser and the operating system and the visited website as well as the date and time. As part of this communication, data from a server of the social media provider are also downloaded to our website.

 

The respective provider of the social plug-in receives information about which websites the user visits. This may, if appropriate, happen regardless of whether the user is currently logged in to the provider of the social plug-in (for example Facebook) or not. The provider may also process this data outside the European Union and may be able to create customised usage profiles. We have no influence on the type, scope and purpose of the data processing by the providers of the respective social media services.

 

Facebook: Our website uses social plug-ins (“plug-ins”) of the social network facebook.com, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

 

The plug-ins are recognisable by one of the Facebook logos or are marked with the addition “Facebook Social Plugin”. The list and the look of the Facebook social plug-ins can be viewed here:

 

https://developers.facebook.com/docs/plugins/page-plugin.

In the context of the use of plug-ins, we rely on your consent to data collection. If you do not agree to the use of data when visiting our website for the first time, the social plug-in of the social network facebook.com will not be activated, so that data transmission will not take place even if the buttons are accidentally activated.

 

If you consent to the processing of your data through the Facebook social plug-in as part of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we can store your data within the scope of your consent for purposes of linking to the social network.

 

If you then call up a page of our website that contains such a plug-in, your browser does not establish a direct connection with the Facebook servers until the user activates the “Facebook” button by clicking on it. The content of the plug-in is then transmitted by Facebook to your browser and incorporated into the website. By activating the plug-in, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for example, press the Like button or leave a comment, the information is transmitted from your browser directly to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out and save your IP address. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this respect and setting options for the protection of your privacy, please refer to the privacy policy of Facebook: https://www.facebook.com/about/privacy.

 

Information about the use of this website and your IP address will be transmitted to Facebook servers in the USA and other third countries and also stored on this server. . Facebook LL.C. USA is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Facebook servers in the United States may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US (see also: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

 

In addition, Facebook claims to use the standard contractual clauses of the European Union within its group structure in order to ensure that the data protection requirements for transmissions to third countries are guaranteed (regarding Facebook, see: https://de-de.facebook.com/policy.php - > How do we process and transmit data as part of our global services?)

 

Twitter: Our website uses social plug-ins (e.g. “Tweet” button) of the Twitter messaging service, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103

U.S.A. Responsible for the data processing of persons living outside of the United States is the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The corresponding plug-ins can be recognised by a Twitter logo (e.g. blue “Twitter bird”). For more information about the Twitter plug-ins, please refer to the following link: https://help.twitter.com/de/using-twitter/twitter-buttons

 

In the context of the use of plug-ins, we rely on your consent to data collection. If you do not agree to the use of data when visiting our website for the first time, the social plug-in of the social network Twitter will not be activated, so that data transmission will not take place even if the buttons are accidentally activated.

If you consent to the processing of your data through the Twitter social plug-in as part of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we can store your data within the scope of your consent for purposes of linking to the social network.

If you then call up a website of our website that contains such a plug-in, your browser does not establish a direct connection with the Twitter servers until the user activates the “Twitter” button by clicking on it. The content of the plug-in is then transmitted by Twitter to your browser and incorporated into the website. By activating the plug-in, Twitter receives the information that you have accessed the corresponding page of our website. Content is then transferred from Twitter to your browser and recorded on the page. Twitter receives the message that you are on the corresponding page of our website. This happens even in the event that you do not have a profile on Twitter or are not logged in. Personal information (including your IP address) will then be automatically forwarded to and stored on a Twitter server.

Information about the use of this website and your IP address will be transmitted to Twitter servers in the USA and other third countries and also stored on this server. Twitter Inc. is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Twitter servers in the United States may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US (see also: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).

 

Instagram: Our website uses social plug-ins of the messaging service Instagram, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The corresponding plug-ins can be recognised by an Instagram logo (e.g. “Instagram camera”).

 

For more information about the Instagram plug-ins, please refer to the following link: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

 

In the context of the use of plug-ins, we rely on your consent to data collection. If you do not agree to the use of data when visiting our website for the first time, the social plug-in of the social network Instagram will not be activated, so that data transmission will not take place even if the buttons are accidentally activated.

 

Immediate assignment by Instagram only occurs when you are logged in to Instagram. A corresponding interaction also takes place if you activate the corresponding button actively. The result is a publication on your Instagram account and the presentation in your contacts. Further details on how Instagram handles your personal data can be found on the following page: https://help.instagram.com/155833707900388/.

 

If you consent to the processing of your data through the Instagram social plug-in as part of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we can store your data within the scope of your consent for purposes of linking to the social network.

 

If you then call up a page of our website that contains such a plug-in, your browser does not establish a direct connection with the Instagram servers until the user activates the respective button by clicking on it. The content of the plug-in is then transmitted by Instagram to your browser and incorporated into the website. By activating the plug-in, Instagram receives the information that you have accessed the corresponding page of our website. Content is then transferred from Instagram to your browser and recorded on the page. Instagram receives the message that you are on the corresponding page of our website. This happens even in the event that you do not have a profile on Instagram or are not logged in. Personal information (including your IP address) will then be automatically forwarded to and stored on a Instagram server located in the USA.

 

Immediate assignment by Instagram only occurs when you are logged in to Instagram. A corresponding interaction also takes place if you activate the corresponding button actively. The result is a publication on your Instagram account and the presentation in your contacts. Further details on how Instagram handles your personal data can be found on the following page: https://help.instagram.com/155833707900388/

Information about the use of this website and your IP address will be transmitted to Facebook servers in the USA and other third countries and also stored on this server. Facebook LL.C. USA is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Facebook servers in the United States may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US (see also: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

In addition, Facebook claims to use the standard contractual clauses of the European Union within its group structure in order to ensure that the data protection requirements for transmissions to third countries are guaranteed (regarding Instagram, see: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20Sicherheit -> IX. How do we process and transmit data as part of our global services?)

 

Pinterest: On our site we use plug-ins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”). When you access our website, your browser does not establish a direct connection to the servers of Pinterest until you activate the respective button by clicking on it. The plug-in transmits protocol data to the server of Pinterest in the USA. This log data may include your IP address, the address of the websites visited, which also includes Pinterest features, browser type and settings, date and time of the request, how you use Pinterest, and Cookies.

 

Immediate assignment by Pinterest only occurs when you are logged in to Pinterest. A corresponding interaction also takes place if you activate the corresponding button actively. The result is a publication on your Pinterest account and the presentation in your contacts. For more information about the purpose, scope, and further processing and use of the data by Pinterest, as well as your rights and privacy options, please refer to the Pinterest Privacy Policy at: https://about.pinterest.com/privacy-policy

 

To prevent your data from being linked to the Pinterest account, you must log out of Pinterest before using our website. You can additionally prevent the loading of the Pinterest plug-ins by using the script blocker “NoScript” (http://noscript.net/).

 

We process your data on the basis of your consent to access to our website pursuant to Article 6 (1) sentence 1 a) of the GDPR.

 

Youtube: Plug-ins of the social network Youtube are used on our website. The operator of Youtube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

In the context of the use of plug-ins, we rely on your consent to data collection. If you do not agree to the use of data when visiting our website for the first time, the plug-in will not be activated by Youtube, so that data transmission will not take place even if you interact with a Youtube plug-in by mistake.

 

If you consent to the processing of your data through the Google Maps plug-in as part of the opt-in procedure, the lawfulness of the processing of your data is based on a consent pursuant to Art. 6 (1) sentence 1 a) GDPR, so that we can store your data within the scope of your consent for purposes of linking to Youtube.

If you then call up a page of our website that contains such a plug-in, your browser does not establish a direct connection with the Youtube servers until the user activates the respective button by clicking on it (“extended data protection mode”). The content of the plug-in is then transmitted by Youtube to your browser and incorporated into the website. By activating the plug-in, Youtube receives the information that you have accessed the corresponding page of our website. Content is then transferred from Youtube to your browser and recorded on the page. Youtube receives the message that you are on the corresponding page of our website. This happens even in the event that you do not have a profile on Youtube or are not logged in. Personal information (including your IP address) will then be automatically forwarded to and stored on a Youtube server located in the USA.

Immediate assignment by Youtube only occurs when you are logged in to Youtube. A corresponding interaction also takes place if you activate the corresponding button actively. The result is a publication on your Youtube account and the presentation in your contacts. Further details on how Youtube handles your personal data can be found on the following page: https://policies.google.com/privacy?hl=de&gl=de

 

As an application of Google LLC, Youtube is a Privacy Shield certified company, so, in addition to your consent, the transmission of data to Google in the USA may also be based on the Commission's adequacy decision regarding data sharing between the EU and the US.

 

DATA TRANSFER

We pass on data to other third parties if and to the extent that we have delegated the fulfilment of tasks to them. The data transfer takes place only to the extent necessary for the fulfilment of the transferred tasks.

 

Amongst others, we work with the following companies:

 

  • NEW ORDER mediamanagement GmbH, Gabelsbergerstraße 9, 80333 Munich
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

 

The data transfer takes place within the framework of an assignment processing contract, which ensures the observance of all data protection requirements.

 

Incidentally, a data transfer takes place exclusively in the context of the statutory cases, for example, in the case of legal duty to inform law enforcement authorities.

 

DURATION OF DATA STORAGE

 

Your personal data will be deleted by us as soon as the data is no longer needed for the fulfilment of the contractual and legal obligations.

 

Personal data will be stored for at least as long as necessary to fulfil contractual obligations and to exercise contractual rights. This period may extend beyond the actual contract period, as the data may still be relevant under the statute of limitations after the end of the contract. In addition, deletion can only take place if any retention periods required under tax and commercial law have expired.

 

The criteria for the duration of the storage of Cookies can be found in the relevant section.

 

RIGHTS OF THE DATA SUBJECT

 

As a data subject affected by the processing of personal data, you have the following rights:

 

You have the right to ask for confirmation of the processing of personal data. If this is the case, you have a right to information about the personal data and to the information listed in Article 15 GDPR.

 

You have the right to demand, without delay, the correction of incorrect personal data relating to you and, if necessary, the completion of incomplete personal data (Art. 16 DSGVO) from the controller.

 

You have the right to demand from the controller that personal data relating to you be deleted immediately, provided that one of the reasons listed in Section 17 GDPR applies e.g. if the data is no longer needed for the purposes pursued (right to cancellation).

 

You have the right to require the controller to restrict processing if one of the conditions listed in Article 18 GDPR is fulfilled, e.g. for example, if you have objected to processing for the duration of the review by the controller.

You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. The controller then no longer processes the personal data, unless he can prove compelling legitimate reasons for the processing that outweighs your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims (Article 21 GDPR ).

 

With regard to exercising your rights, you can always contact us via the contact options offered on our website.

 

RIGHT TO COMPLAIN

 

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR (Article 77 GDPR). You may assert this right with a supervisory authority in the Member State of your place of residence, your place of work or the place of alleged infringement.

 

Responsible supervisory authority in Saarland:

Independent Data Protection Centre Saarland

Frau Monika Grethel

State officer for data protection and freedom of information

 

Further information is available on the service portal of the state of Saarland at the following link:

http://www.datenschutz.saarland.de

 

Of course, you can also contact us directly if you are dissatisfied or have questions about privacy. The fastest way to reach our internal contact for data protection is by using the following contact details:

 

Dr. Theiss Naturwaren GmbH

- Datenschutzbeauftragter -

Michelinstraße 10

66424 Homburg

E-Mail: datenschutzbeauftragter@naturwaren-theiss.de