Data Privacy Policy
1. General
We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please pay attention and be sure to review their privacy practices.
2. Data processing for the performance of contracts
(1) Purpose of data processing
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.
If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.
In case of opening a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you are able to shop faster and view your previous orders at any time. By sending us a notice or via a delete function you can delete the account again.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).
(4) Duration of storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
4. PayPal-transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
5. Credit Check
Please note the following privacy policy when choosing Stripe payment services:
https://stripe.com/en-de/privacy
6. Web analytics
(1) Purpose of data processing We use Squarespace’s built-in analytics to collect information about site visits, including IP addresses, browser types, and pages visited. This information is used in aggregate to help us understand how visitors use our site and to improve the website’s functionality and content. No personally identifiable information is collected or stored. (2) Legal basis We collect and process analytics data based on our legitimate interest to monitor and improve the functionality, performance, and user experience of our website, in accordance with applicable data protection laws. In cases where consent is required (e.g., for cookies used in analytics tracking), we will request explicit user consent before collecting such data. (3) Right of objection You have the right to object to the processing of your data for analytics purposes. If you wish to do so, please contact us using the details provided in this policy. Additionally, you may adjust your browser settings to disable cookies or use tools to block tracking mechanisms that collect analytics data.
7. Information about cookies
(1) Purpose of data processing
This website uses essential (technically necessary) cookies. These are small text files that are stored in or by your Internet browser on your device (e.g. for keeping track of items in your shopping basket). Other, non-essential cookies, remain stored permanently and recognize your browser on your next visit (e.g. for keeping your customer account logged in).
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
You have expressly given your consent to the use of cookies on our website as follows: You agree to let use cookies to enhance your shopping experience, provide essential functionality, and analyze site traffic. Short-term cookies are used to manage your shopping cart and session data, while persistent cookies help us remember your preferences and improve our store. These cookies are stored on your device. By clicking “Accept All,” you consent to the use of all cookies. To manage your preferences or learn more, click “Manage Preferences.” Select “Decline all” to decline the use of all non-essential cookies.
(3) Duration of storage
The essential cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.
(4) Right of revocation
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.
Your consent to persistent cookies can be withdrawn at any time by clicking “Cookies” on the bottom of the page to manage your cookie preferences.
8. Social plugins
Integration of Instagram Features Our website integrates features from Instagram, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These features allow us to display content from our Instagram account directly on our website and enable you to interact with Instagram posts. When you interact with these features, Instagram may collect data such as your IP address, the pages you visit on our site, and other device-specific information. If you are logged into your Instagram account, Instagram can associate this data with your profile. Purpose of Data Processing The integration of Instagram features allows us to enhance the user experience by displaying dynamic and relevant content, and to connect our online presence with our Instagram profile for marketing purposes. Legal Basis The processing of data in connection with Instagram features is based on our legitimate interest in providing an engaging and interactive website experience (Article 6(1)(f) GDPR). If Instagram sets cookies or processes your data based on your consent, this is done under Article 6(1)(a) GDPR, which will be obtained via our cookie banner where applicable. Right of Revocation and Objection You have the right to revoke your consent at any time for future processing. Additionally, you may object to the processing of your data under legitimate interests by adjusting your Instagram privacy settings or using browser tools to block tracking scripts. For further details on how Instagram processes your data, please refer to Instagram’s Privacy Policy (https://privacycenter.instagram.com/policy/). Third-Party Data Processing Please note that data collected via Instagram features is transmitted directly to Meta Platforms Ireland Limited and may be processed on servers outside the EU, including in the United States. We have no influence over this data transfer or processing.
9. Newsletter
(1) Purpose of data processing
When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links. You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: 'Subscribe to Newsletter'-Button.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
if necessary: newsletter provider
(4) Duration of Storage
Your e-mail address will only be stored for the respective duration of your registration.
(5) Right of revocation
You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe via the Unsubscribe from newsletter link in the newsletter itself.
10. Your rights as a data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:
(1) Right to information
You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.
(2) Right to rectification
If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.
(3) Right to erasure
You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.
(4) Right to restriction of processing
You have the right to restrict the processing your personal data under Article 18 of the GDPR.
(5) Right to data portability
You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
(6) Right to revoke the consent given under data protection law
You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
(7) Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).
Please also note your right of objection under Article 21 GDPR:
a) In general: reasoned objection required
If the processing of personal data concerning you takes place in order
- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)
or
- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),
you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Responsible for data processing:
Farmwell GmbH
Großbeerenstr. 2-10
12107 Berlin
Phone: +49 (30) 75437468
admin@farmwellfoods.de