EN DE

Data Privacy

Welcome to our website. We appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, particularly the EU General Data Protection Regulation (GDPR) and country-specific implementing laws. This Privacy Policy provides comprehensive information about how Foodgrove GmbH processes your personal data and about your rights.

Personal data is information that enables the identification of a natural person. This includes your name, date of birth, address, telephone number, email address and IP address, among other things.

Anonymous data is data that cannot be personally linked to any specific user.

Controller and data protection officer

Foodgrove GmbH
Datenschutz
Steegener Chaussee 13
19230 Hagenow
Germany

E-Mail: datenschutz@foodgrove.de

Your rights as a data subject

First of all, we would like to inform you about your rights as a data subject. These rights are standardized in Articles 15–22 GDPR. They include:

The right to information (Art. 15 GDPR),
The right to erasure (Art. 17 GDPR),
The right to rectification (Art. 16 GDPR),
The right to data portability (Art. 20 GDPR),
The right to restriction of processing (Art. 18 GDPR),
The right to object to data processing (Art. 21 GDPR).

To exercise these rights, please contact datenschutz@foodgrove.de. The same applies if you have any questions about data processing within our company or wish to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with rights of objection:

If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time, without giving reasons. The same applies to profiling insofar as it is related to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for this purpose. You can make the objection informally and free of charge, preferably by sending an email to datenschutz@foodgrove.de.

If we process your data to protect our legitimate interests, you can object to this at any time if there are reasons relating to your particular situation; the same applies to profiling based on these provisions.

In this case, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless the processing is necessary for us to assert, exercise or defend legal claims.

Purposes and legal bases of data processing

We comply with the provisions of the GDPR and all other applicable data protection regulations when processing your personal data. The legal bases for data processing are derived in particular from Art. 6 GDPR.

We use your data for business development, to fulfil contractual and legal obligations, to execute the contractual relationship, to offer products and services, and to strengthen customer relationships. This may include marketing analysis and direct marketing.

Your consent to data processing may also constitute a data protection permission requirement. Before granting consent, we will inform you of the purpose of the processing and of your right to withdraw consent.

If your consent relates to the processing of special categories of personal data, we will expressly point this out to you in the consent form. Otherwise, special categories of personal data pursuant to Art. 9 GDPR will only be processed if required by law.

Disclosure to third parties

We will only disclose your data to third parties within the scope of the legal provisions or with your consent. Otherwise, your data will not be disclosed to third parties unless we are obliged to do so by mandatory legal provisions (e.g. disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of the data/categories of recipients

Within our company, we ensure that only those persons who require your data to fulfil contractual and legal obligations will receive it.

In certain cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers.

Third-country transfer/intention to transfer to third countries

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, required by law or if you have given us your consent.

We do not transfer your personal data to any service providers outside the European Economic Area.

Data storage period

We only store your data for as long as is necessary for the purpose of processing it. Please note that numerous retention periods require data to be stored for longer. This particularly applies to commercial or tax law retention obligations (e.g. German Commercial Code, German Tax Code). Once the purpose has been achieved and there are no further retention obligations, the data will be routinely deleted.

Additionally, we may retain data if you have given us permission to do so, or if legal disputes arise and we require evidence within the statutory limitation period, which can be up to thirty years; the regular limitation period is three years.

Secure transfer of your data

We use appropriate technical and organizational security measures to protect the data we store as well as possible against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

Data exchange from and to our website is encrypted. We offer HTTPS as the transfer protocol for our website, using the latest encryption protocols. Alternative communication channels (e.g. post) can also be used.

Obligation to provide data

Various personal data are necessary for establishing, executing and terminating the contractual relationship, and for fulfilling the associated contractual and legal obligations. The same applies to using our website and the various functions it provides.

We have summarized the details for you in the above section. In certain cases, data must also be collected or made available due to legal provisions. Please note that we cannot process your request or fulfil the underlying contractual obligation without this data being provided.

Categories, sources and origin of the data

The context determines which data we process. For example, this depends on whether you place an order online, submit an enquiry using our contact form, send us an application or submit a complaint.

Please note that we may also provide information on specific processing situations in the relevant place, e.g. when you upload application documents or make a contact enquiry.

When you visit our website, we collect and process the following data:

Information about the website from which you are visiting us,
Web browser and operating system used,
The IP address assigned by your internet service provider,
Requested files, amount of data transferred, downloads/file exports,
Information about the web pages you visit on our site, including date and time,
For technical security reasons (in particular to defend against attempts to attack our web server), this data is stored in accordance with Art. 6(1)(f) GDPR. The data will be deleted after 30 days.

Automated decision-making in individual cases

We do not use purely automated processing procedures to make decisions.

Cookies (Art. 6(1)(a), (f) GDPR, Section 25(1), (2) TDDDG)

Our website does not use cookies.

Online offers for children

Persons under the age of 16 must not transfer any personal data to us or submit a declaration of consent without the consent of their legal guardians. We encourage parents and legal guardians to actively participate in their children’s online activities and interests.