We process personal data (hereinafter mostly referred to as 'data') only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as 'GDPR'), 'processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or linking, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing, either alone or jointly with others. Furthermore, we inform you below about the third-party components we use for optimization purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the responsible party
II. Rights of users and data subjects
III. Information on data processing
The responsible provider of this website in terms of data protection law is:
g-HoReCa, Casalanas GmbH
Manjari Khetan
Lürriper Bruchweg 69b
41065 Mönchengladbach
Germany
Telephone: +49(0)1577-5377000
Email: mail@g-horeca.com
With regard to the data processing described in more detail below, users and data subjects have the right
Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing pursuant to Articles 16, 17 (1), and 18 GDPR. However, this obligation shall not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of their data, provided that the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.
Your data processed when you use our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no legal retention obligations that prevent the deletion of the data and no other information is given below regarding individual processing procedures.
For technical reasons, particularly to ensure a secure and stable website, data is transmitted through your internet browser to us or our web space provider. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of each access, and the IP address of the internet connection from which you accessed our website.
The data collected in this way will be stored temporarily, but not together with other data about you.
This storage is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data will be exempt from deletion in whole or in part until the incident has been finally resolved.
We use cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping cart function.
The legal basis for this processing is Art. 6 (1) (b) GDPR, provided that these cookies process data for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 (1) (f) GDPR.
When you close your internet browser, these session cookies are deleted.
You can prevent or restrict the installation of cookies by adjusting the settings in your Internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required to do this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, you cannot prevent the processing of cookies via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required to do this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
The data you submit to use our products and/or services will be processed by us for the purpose of contract execution and is necessary for this purpose. Conclusion and contract execution are not possible without providing your data.
The legal basis for the processing is Art. 6 (1) (b) GDPR.
We will delete the data once the contract has been fully processed, but we must observe the retention periods required by tax and commercial law.
As part of the contract processing, we will pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.
The legal basis for the transfer of data is then Art. 6 (1) (b) GDPR.
If you create a customer account with us via our website, we will collect and store the data you entered during registration (e.g., your name, address, or email address) exclusively for pre-contractual services, for contract fulfillment, or for customer care purposes (e.g., to provide you with an overview of your previous orders with us or to offer you the so-called wish list function). At the same time, we will store your IP address and the date and time of your registration. This data will not be shared with third parties.
As part of the registration process, your consent to this processing will be obtained and reference will be made to this privacy policy. The data we collect will be used exclusively to provide the customer account.
If you consent to this processing, Art. 6 (1) (a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 (1) (b) GDPR.
You may revoke your consent to open and maintain your customer account at any time with future effect in accordance with Art. 7 (3) GDPR. To do so, you simply need to notify us of your revocation.
The data collected in this way will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.
If we offer you the general option of payment by invoice as part of our product or service offerings and you choose to do so, we reserve the right to obtain a credit report from a credit agency (such as Creditreform, Schufa, Bürgel, or infoscore) based on mathematical and statistical procedures. For this purpose, your data, insofar as it is relevant to the contract, such as your name and address, will be forwarded to the credit agency. We use the resulting information on the statistical probability of a payment default to decide whether to offer you payment by invoice.
The legal basis for this processing is our legitimate interest in the reliability of the claim in accordance with Art. 6 (1) (f) GDPR.
We offer you the opportunity to sign up for our free newsletter via our website. The prerequisite is that you are a verified customer with a customer account.
If you're interested, simply send us an email with the subject "Subscribe to newsletter" to mail @g-horeca.com. Please use the email address you used to register with our shop.
Furthermore, by purchasing goods or services, you allow us to send newsletters to the email address stored in your customer account under the very strict conditions of Section 7 Paragraph 3 of the German Unfair Competition Act (UWG).
To send our newsletter, we use MailChimp, a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as "The Rocket Science Group." This service is now part of Intuit and can be reached in Europe at Intuit France SAS, Intuit Data Protection Administration, 7 rue de la Paix, 75002 Paris, France.
As a result, The Rocket Science Group has fully adopted Intuit's global privacy policy and adapted its own legal guidelines for data processing .
The Rocket Science Group has certified its compliance with the EU-US Privacy Shield Framework since 2016. On July 16, 2020, Europe's highest court (the CJEU) invalidated the EU-US Privacy Shield. However, The Rocket Science Group will continue to voluntarily protect data from Europe in accordance with the Privacy Shield Principles, to which it has certified compliance. Further details can be found in Intuit's Global Privacy Notice.
In addition, The Rocket Science Group contractually agrees to transfer and process all of its European users' data in accordance with the Standard Contractual Clauses (the "SCCs"), which continue to provide The Rocket Science Group's Mailchimp users with the ability to lawfully transfer data subject to European data protection laws (including the GDPR) outside of Europe to Mailchimp in the US. The SCCs automatically apply according to Mailchimp's Data Processing Addendum .
The Rocket Science Group recently updated its Data Processing Addendum to ensure it includes the new SCCs adopted by the European Commission on June 4, 2021. The new SCCs will automatically apply to all users who have used The Rocket Science Group's service since September 27, 2021, and to all other users from December 27, 2022. This is in line with the EU Commission Implementing Decision of June 4, 2021 , which accompanies the new SCCs.
The newsletter sent by The Rocket Science Group contains a so-called tracking pixel, also known as a web beacon. This tracking pixel allows us to evaluate whether and when you read our newsletter and whether you followed any links contained in the newsletter. Along with other technical data, such as your IT system data and your IP address, the data processed in this process is stored so that we can optimize our newsletter offering and respond to readers' wishes. The data is therefore used to improve the quality and attractiveness of our newsletter offering.
The legal basis for sending the newsletter and the analysis is Art. 6 (1) (a) GDPR when you register via email, and Art. 6 (1) (f) in conjunction with Section 7 (3) UWG in the other cases listed.
You can revoke your consent to receive the newsletter at any time with future effect, in accordance with Art. 7 (3) GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in each newsletter.
If you contact us via contact form or email, the data you provide will be used to process your inquiry. Providing this data is necessary to process and respond to your inquiry; without it, we cannot respond to your inquiry or can only respond to a limited extent.
The legal basis for this processing is Art. 6 (1) (b) GDPR.
Your data will be deleted once your inquiry has been conclusively answered and there are no legal retention obligations that prevent deletion, such as in the case of any subsequent contract processing.
We offer you the opportunity to publish questions, answers, opinions, or reviews (hereinafter referred to as "contributions") on our website. If you take advantage of this offer, we will process and publish your contribution, the date and time of submission, and any pseudonym you may use.
The legal basis for this is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. To do so, you simply need to notify us of your revocation.
In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further action if your post infringes on the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the necessary legal defense.
In unserem Internetauftritt setzen wir Google reCAPTCHA zur Überprüfung und Vermeidung von Interaktionen auf unserer Internetseite durch automatisierte Zugriffe, bspw. durch sog. Bots, ein. Es handelt sich hierbei um einen Dienst der Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, nachfolgend nur „Google“ genannt.
Google garantiert, dass die Datenschutzvorgaben der EU auch bei der Verarbeitung von Daten eingehalten werden. Durch diesen Dienst kann Google ermitteln, von welcher Webseite eine Anfrage gesendet wird sowie von welcher IP-Adresse aus Sie die sog. reCAPTCHA-Eingabebox verwenden. Neben Ihrer IP-Adresse werden womöglich noch weitere Informationen durch Google erfasst, die für das Angebot und die Gewährleistung dieses Dienstes notwendig sind. Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in der Sicherheit unseres Internetauftritts sowie in der Abwehr unerwünschter, automatisierter Zugriffe in Form von Spam o.ä.
Google bietet weitergehende Informationen zu dem allgemeinen Umgang mit Ihren Nutzerdaten an.
Auf unserer Website bieten wir u.a. ggf. die Bezahlung via PayPal an. Anbieter dieses Zahlungsdienstes ist die PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (im Folgenden 'PayPal' genannt). Wenn Sie die Bezahlung via PayPal auswählen, werden die von Ihnen eingegebenen Zahlungsdaten an PayPal übermittelt. Details entnehmen Sie bitte den Datenschutzbestimmungen von PayPal unter https://www.paypal.com/de/webapps/mpp/ua/privacy-full. Die Übermittlung Ihrer Daten an PayPal erfolgt nur, wenn Sie sich für diese Zahlungsoption entscheiden. Grundlage ist dann Art. 6 Abs. 1 lit. b DSGVO (Verarbeitung zur Erfüllung eines Vertrags).
Zur Anzeige unseres Trusted Shops Gütesiegels und der gegebenenfalls gesammelten Bewertungen sowie zum Angebot der Trusted Shops Produkte für Käufer nach einer Bestellung ist auf dieser Webseite das Trusted Shops Trustbadge eingebunden.
This serves to protect our overriding legitimate interests in optimal marketing by enabling secure online shopping, in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is provided by a CDN (Content Delivery Network) provider as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz
When you access the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. Individual access data is stored in a security database for the analysis of security irregularities. The log files are automatically deleted no later than 90 days after creation.
Further personal data will be transferred to Trusted Shops GmbH if, after completing an order, you decide to use Trusted Shops products or have already registered for use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you, as a buyer, are already registered to use a product is automatically checked using a neutral parameter, the email address hashed using a cryptographic one-way function. Before transmission, the email address is converted into this hash value, which Trusted Shops cannot decrypt. After checking for a match, the parameter is automatically deleted.
This is necessary to fulfill our and Trusted Shops' overriding legitimate interests in providing buyer protection linked to the specific order and transactional evaluation services in accordance with Art. 6 (1) (f) GDPR. Further details, including the right to object, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
Sample data protection declaration from the law firm Weiß & Partner , individually expanded.