Data Privacy Statement


Name and address of the controller

For the purposes of the General Data Protection Regulation, other national data protection laws of the member states, and other data protection provisions, the controller is:

Habicht + Sporer GmbH
Laufamholzstraße 116
90482 Nürnberg
Germany

Phone +49 (0)911 95 496-0
Email: kontakt@diekuechenplaner.de
Website: www.diekuechenplaner.de

The official Data Protection Officer of Habicht + Sporer GmbH can be reached under the address listed above, or under datenschutz@diekuechenplaner.de 

Extent of processing personal data

We collect and use personal data from our users only if this is needed for our content and services and to provide a functional website. Your personal data will be collected and processed under observance of applicable data protection laws, especially the General Data Protection Regulation (GDPR).

Legal basis for processing personal data

If the data subject permits us to process personal data, Art. 6(1)(a) GDPR serves as the legal basis.

If personal data must be processed to fulfil a contract whose contracting party is the data subject, the legal basis is Art. 6(1)(b) GDPR. This also applies to processing operations that are necessary to implement pre-contractual measures.

If personal data must be processed to fulfil a legal obligation to which our company is subject, the legal basis is Art. 6(1)(c) GDPR.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and that legitimate interest is not outweighed by the interests, basic rights and freedoms of the data subject, the legal basis will be Art. 6(1)(f) GDPR.

Data erasure and storage period

The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. We may also store those data if such storage is provided for through the European or national legislature in the form of directives under European Union law, statutes or other provisions to which the controller is subject. The data will also be deleted or blocked if a storage period prescribed by the standards mentioned expires, unless the data must be stored for longer to conclude or fulfil a contract.

Provision of the homepage and creation of log files

Whenever our website is accessed, data and information from the computer system of the accessing computer is sent to our website’s server automatically. This includes:

  • Browser type and browser version
  • Operating system used
  • Website from which the access is made (referrer URL)
  • host name of the accessing computer
  • Date and time of server request
  • The user’s IP address

The data and log files are stored to optimise the website and ensure its functionality, and to ensure the security of our IT systems. Those data will not be combined with other data sources. The legal basis for storing the data and the log files temporarily is Art. 6(1)(f) GDPR.

Cookies

This website uses cookies. Cookies are text files which are stored on the user’s computer system in or by the internet browser. If the user accesses a webpage, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that enables an unambiguous identification of the browser when the webpage is accessed again.

Cookies help make our services more user-friendly, effective and secure. A few cookies are “session cookies”. Those cookies will be erased after the end of your browser session. On the other hand, other cookies remain on your end device until you delete them. Such cookies help us to recognise you whenever you return to our website.

On our website, we also use cookies that make it possible to analyse users’ surfing behaviour (see “Google Analytics”).

With a modern web browser, you can monitor, restrict or prevent the placement of cookies. Many browsers can be configured so that cookies will delete themselves when the program is closed. Deactivating cookies can limit our website’s functionality.

The legal basis for using cookies to process personal data is Art. 6(1)(f) GDPR. As this website’s operator, we have a legitimate interest in the storing of cookies so that our services can be provided smoothly and free from technical errors. If other cookies are placed (for analysis functions, for example), those will be treated separately in this data privacy statement.

Contact form and email contact

A contact form is available on our website which can be used for making contact electronically. If a user takes advantage of this possibility, the data entered into the input mask will be transmitted to us and stored. These data are:

  • Name (required field)
  • Email address (required field)
  • Your message

When the message is sent, the following data will be collected as well:

  • IP address of the accessing computer
  • Date and time of registration

In the alternative, contact can be made via the email address provided. In this case, the user’s personal data transmitted along with the email will be stored.

The data you provide in the contact form or send through email will not be forwarded to third parties without your consent.

If the user’s consent has been obtained, the legal basis for processing the data is Art. 6(1)(a) GDPR. The legal basis for processing data transmitted when an email is sent is Art. 6(1)(f) GDPR. If contact is established through the contact form or email to conclude a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.

Processing the personal data from the input mask serves the exclusive purpose of helping us process the contact that is made. Making contact through email also constitutes the required legitimate interest in processing those data.

The other personal data processed during the sending procedure serve to prevent misuse of the contact form and ensure the security of our IT systems.

The user may at any time revoke their consent to have their personal data processed.

Data transmitted via the contact form or email will remain with us until you ask us to erase them, withdraw your consent to their storage, or it is no longer necessary to store them. Compulsory statutory provisions, especially retention periods, remain unaffected.

Newsletter

By subscribing to our newsletter, you are declaring your agreement to receive it and to the procedure described below. We send the newsletter, emails and other electronic notifications with advertising information (hereinafter referred to as “newsletter”) only with your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or if we are so permitted by law in accordance with Article 6 Paragraph 1 Letter b) GDPR. In order to register for the newsletter, it suffices for you to provide us with your name and email address. The registration for our newsletter takes place by means of a so-called double opt-in procedure: Following the registration, you receive an email from us in which you are requested to confirm your registration. This confirmation is necessary so that nobody can register using another person’s email address. The newsletter registrations are recorded in order to prove the registration process in accordance with the legal requirements. This includes saving the time of registration and confirmation, as well as the IP address. Changes to you data saved by the delivery company are also recorded.

The sending of the newsletter takes place with the consent of the recipient in accordance with Article 6 Paragraph 1 Letter a) and Article 7 GDPR. Our interest is represented by the use of a user-friendly and secure newsletter system, which serves both our commercial interests and corresponds to the expectations of our users and also allows us to prove the consent which has been issued.

How can I cancel my newsletter subscription?

You can terminate your newsletter subscription at any time, i.e. you can revoke your consent. You can find a link which allows you to terminate your newsletter subscription at the end of each newsletter. We can save the email addresses which have been provided for up to three years in accordance with our legitimate interests before we delete them. This allows us to provide proof that consent was issued in the past. The processing of this data is limited to the purpose of defending against possible claims. It is possible to request an individual deletion request at any time, provided that the previous existence of consent is confirmed at the same time.

Reservation for cooking course

On our website, there is a contact form you can use to register for the cooking courses we offer. If a user takes advantage of this possibility, the data entered into the input mask will be transmitted to us and stored. These data are:

  • Number of participants (required field)
  • First name (required field)
  • Last name (required field)
  • Street and house number (required field)
  • Postcode (required field)
  • Place (required field)
  • Telephone number (required field)
  • Email address (required field)
  • Credit
  • Names of participants

When the message is sent, the following data will be collected as well:

  • IP address of the accessing computer
  • Date and time of registration

The data you provide in the contact form will not be forwarded to third parties without your consent.

If the user’s consent has been obtained, the legal bases for processing the data are Art. 6(1)(a and b) GDPR.

Processing the personal data from the input mask serves the exclusive purpose of helping us process the reservation.

The other personal data processed during the sending procedure serve to prevent misuse of the contact form and ensure the security of our IT systems.

The user may at any time revoke their consent to have their personal data processed.

Data transmitted via the contact form will remain with us until you ask us to erase them, withdraw your consent to their storage, or it is no longer necessary to store them. Compulsory statutory provisions, especially retention periods, remain unaffected.

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. Those are text files which your web browser stores on your end device and which enable an analysis of website use. The information the cookie generates about your use of our website is transferred to a Google server and stored there. The server is normally located in the USA.

The legal basis for placing Google Analytics cookies is Art. 6(1)(f) GDPR. As this website’s operator, we have a legitimate interest in analysing user behaviour to optimise our web services and possibly advertisement.

IP anonymisation

We use Google Analytics with activated IP anonymisation. This ensures that Google will truncate your IP address within the member states of the European Union, or in other contracting party states to the EEA Agreement, before the address is sent to the USA. There are exceptional cases in which Google transmits the full IP address to a server in the USA, where it is then truncated. On our behalf, Google will use this information to evaluate your use of the website, create reports about website activities and render additional services for us which are related to website use and internet use. The IP address transmitted by Google Analytics will not be combined with other Google data.

Browser plug-in

You can prevent cookies from being placed through your web browser. However, this might limit some of our website’s functions. Likewise, you can prevent Google from collecting data regarding your website use, including your IP address, and from processing it further. To do so, download and install the browser plug-in reachable at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to the collection of data

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be placed which will prevent your data from being recorded during future visits: CLICK TO OPT-OUT

Google’s data privacy statement contains more details about how Google Analytics handles user data: https://support.google.com/analytics/answer/6004245?hl=en

Commissioned data processing

To completely fulfil the statutory data protection requirements, we’ve concluded a contract for commissioned data processing with Google.

Demographics of Google Analytics

Our website uses the “Demographics” function of Google Analytics. This function allows you to create reports which contain statements on the age, gender and interests of site visitors. These data come from Google’s interest-related advertising and from visitor data from third-party providers. Those data cannot be allocated to any particular person. You can deactivate this function at any time. This can be done in the ad settings of your Google account, or by prohibiting Google Analytics from collecting your data as explained in the item “Objection to the collection of data”.

Google Maps

Our website uses Google Maps. When Google Maps are used, Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) will also collect, process and use data about how website visitors use the map function. You can find more information in Google’s privacy statement, which is accessible under www.google.com/privacypolicy.html.

We are also on Facebook and Instagram

We also have a company page on Facebook and Instagram in order to communicate with active customers, potential customers and users on these sites and in order to be able to provide information concerning our services. We wish to point out that during this process, data is processed outside of the territory of the European Union. This may lead to risks for the users, as it may be made more difficult for the users to claim their rights. Both of these American providers are certified under the privacy shield. This means that they have undertaken to comply with the data protection standards of the EU.

In addition, the data of the users is generally processed in the above social media for market research and advertising purposes. For example, use profiles can be compiled from the user behaviour and the resulting interests. The use profiles can be used in turn, for example to place adverts inside and outside of the platform, which are presumed to correspond to the interests of the users. For this purpose, cookies are generally saved on the computers of the users in which the use behaviour and interests of the users are saved. In addition, data outside of the devices deployed by the users can also be saved in the use profiles (in particular if the users are members of the respective platforms and are logged in to these).

The processing of the personal data of the users takes place in accordance with our legitimate interests in ensuring the effective provision of information and communication with the users (Article 6 Paragraph 1 Letter f) GDPR). Should you be requested by the respective providers to issue your consent to the data processing (for example declaring your agreement by clicking a check box or confirmation of a button), the legal basis for the processing is Article 6 Paragraph 1 Letter a) and Article 7 GDPR.

Also in case that information is requested and user rights claimed, we wish to point out that it is most effective to contact the providers in this respect. Only the providers have access to the data of the users and can take relevant measures directly and provide information. However, should you require assistance, you can get in touch with us.

For a detailed description of the respective processing and rights of objection (opt-out), we refer below to the linked information provided by Facebook and Instagram:

Facebook:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection declaration: https://facebook.com/about/privacy
Opt-out: facebook.com/login and youronlinechoices.com,
Privacy Shield: privacyshield.gov/participant

Instagram:
Instagram is a product of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration and opt-out instructions: https://help.instagram.com/155833707900388
Information concerning the possible private sphere settings can be viewed here: https://help.instagram.com/402411646841720

Handling of applicant data

You can apply to us electronically, in particular by email. We only use your information in order to process the application and do not pass this on to third parties. Please bear in mind that emails sent without encryption cannot be protected against unauthorised access.

Following completion of the application process, your personal data is deleted after a maximum of 6 months, unless you have expressly issued us with your consent to your data being saved for longer or unless a contract has been concluded. The legal basis is § 26 of the German Federal Data Protection Act (BDSG).

Rights of the data subject

If your personal data are processed, you are the data subject as defined by the GDPR and are entitled to the following fights toward the controller:

Right of access

You can demand that the controller confirm whether we are processing personal data concerning you.

You have the right at any time under the applicable statutory provisions (Art. 15 GDPR) to free information about the personal data concerning you which has been stored, the origin of those data, their recipient, the purpose of the data processing and the planned duration of the storage, or if no specific information is available to this end, the criteria for determining the storage period. To that end, and regarding further issues about the topic of personal data, you can contact us at any time using the contact options indicated in the legal notice.

Right to rectification

Under Art. 16 GDPR, if the processed personal data concerning you are incorrect or incomplete, you have the right against the controller to have them corrected, deleted, or both. The controller must undertake such correction without undue delay.

Right to erasure

Under Art. 17 GDPR, you may demand the erasure of personal data about you we have stored, unless those data must be processed to exercise the right to free information and expression of opinion, to fulfil a legal obligation, for reasons in the public interest, or to assert, exercise or defend against legal claims.

Right to restriction of processing

Under Art. 18 GDPR, you may demand the restriction of the processing of your personal data if you dispute its correctness, or the processing is illegal but you waive your right to have those data erased or we no longer need the data but you need them to assert, exercise or defend against legal claims, or you have lodged an objection against their processing under Art. 21 GDPR.

Right to data portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided.

Right to object

You have the right to object at any time, for reasons arising from your particular situation, if personal data concerning you are processed based on Art. 6(1)(e or f) GDPR. This also applies to profiling based on these provisions.

The controller will cease processing the personal data concerning you unless the controller can verify compulsory legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is done to assert, exercise or defend against legal claims.

If the personal data concerning you are processed for direct marketing purposes, you may object to that processing at any time. This also applies to any profiling connected to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.

If you would like to take advantage of your right to object, sending an email to datenschutz@diekuechenplaner.de will be sufficient.

Right to withdraw the declaration of consent granted under data protection laws

You have the right to withdraw your declaration of consent under data protection laws at any time. Withdrawing your consent will not affect the legality of processing that has already occurred based on your consent.

If you would like to take advantage of your right of revocation, sending an email to datenschutz@diekuechenplaner.de will be sufficient.

Right to complain to a supervisory authority

If you believe that the processing of the personal data concerning you breaches the GDPR, you have the right to complain to a supervisory authority—especially in the member state of your abode, your workplace, or the place of the suspected breach—without prejudice to other administrative rights or judicial remedies.

The supervisory authority to which the complaint is submitted will inform the complainant about the status and results of that complaint, including the possibility for judicial remedy under Art. 78 GDPR.

Contakt

DIE KÜCHENPLANER
habicht + sporer GmbH
Hans-Vogel-Str. 42
90765 Fuerth

Tel.: +49 911 79106-0
Fax: +49 911 79106-33
Email: kontakt@diekuechenplaner.de