Legal Notice

Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in this website’s Legal Notice.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, information you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily consists of technical data, such as your internet browser, operating system or the time you access a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website functions correctly. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to obtain information at any time, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent supervisory authority.

For these matters and any other questions about data protection, you may contact us at any time using the address provided in the Legal Notice.

2. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information About the Controller

The controller responsible for data processing on this website is:

ÖKA Bodensee
Holger Decker
Hafenstraße 6
88669 Überlingen
Germany

Telephone: 0171 9749223
Email: oekabodensee@gmail.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Retention Period

Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose of processing no longer applies. If you submit a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining it, such as retention periods required under tax or commercial law. In that case, the data will be erased once those grounds no longer apply.

Information About Data Transfers to the USA

Our website incorporates tools provided by companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities, such as intelligence services, may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Article 21 GDPR)

WHERE DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS FOR EACH PROCESSING OPERATION IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request that the data be transferred directly to another controller, this will only be done where technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, Erasure and Rectification

Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, the right to have this data rectified or erased. For these matters and any other questions about personal data, you may contact us at any time using the address provided in the Legal Notice.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. To do so, you may contact us at any time using the address provided in the Legal Notice. This right applies in the following cases:

If you contest the accuracy of your personal data stored by us, we will generally need time to verify this. For the duration of that verification, you have the right to request the restriction of processing of your personal data.
If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.
If we no longer need your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of erasure.
If you have lodged an objection under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

Where processing has been restricted, your personal data may, apart from storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to Promotional Emails

We hereby object to the use of contact details published in accordance with the statutory obligation to provide a Legal Notice for sending advertising or informational material that has not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

3. Data Collection on This Website

Cookies

Our website uses cookies. Cookies are small text files and do not cause damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services provided by the third-party company, such as cookies used to process payment services.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as the shopping basket function or video playback. Other cookies are used to analyse user behaviour or display advertising.

Cookies required to carry out electronic communications (necessary cookies), to provide certain functions requested by you (functional cookies, such as those required for the shopping basket function), or to optimise the website (such as cookies used to measure website audiences) are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Where consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of that consent (Article 6(1)(a) GDPR). Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to reject cookies in certain cases or generally, and to enable automatic deletion of cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.

Where cookies from third-party companies or cookies for analytical purposes are used, we will inform you separately in this privacy policy and, where applicable, request your consent.

Contact Form

If you send us an enquiry using the contact form, we will store the information you enter in the form, including the contact details you provide, to process your enquiry and address any follow-up questions. We will not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where this has been requested.

The data you enter in the contact form remains with us until you request its erasure, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your enquiry has been fully dealt with. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Enquiries by Email, Telephone or Fax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (such as your name and the details of your enquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

The data you send us in your enquiries remains with us until you request its erasure, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your request has been fully dealt with. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Comment Function on This Website

When you use the comment function on this website, we store your comment, the time it was posted, your email address and, if you do not post anonymously, your chosen username.

Storage of IP Addresses

Our comment function stores the IP addresses of users who post comments. Because we do not check comments before publishing them on this website, we need this data to be able to take action against the author in the event of legal infringements, such as insults or propaganda.

Retention Period for Comments

Comments and the associated data are stored and remain on this website until the content commented on has been completely deleted or the comments must be deleted for legal reasons, such as offensive comments.

Legal Basis

Comments are stored on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time. An informal notification by email is sufficient. Withdrawal does not affect the lawfulness of processing already carried out.

4. Social Media

Social Media Plugins with Shariff

This website uses social media plugins, such as Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn and Tumblr.

You can generally identify these plugins by their respective social media logos. To ensure data protection on this website, we only use these plugins in conjunction with the “Shariff” solution. This application prevents plugins integrated into this website from transmitting data to the respective provider as soon as you first enter the website.

A direct connection to the provider’s server is only established when you activate the relevant plugin by clicking its associated button (consent). As soon as you activate the plugin, the respective provider receives information that you have visited this website with your IP address. If you are also logged into your corresponding social media account, such as Facebook, the provider may associate your visit to this website with your user account.

Activating the plugin constitutes consent within the meaning of Article 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.

Facebook Plugins (Like and Share Buttons)

This website incorporates plugins from the social network Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the data collected is also transferred to the USA and other third countries.

You can recognise Facebook plugins by the Facebook logo or the “Like” button on this website. An overview of Facebook plugins is available here:

https://developers.facebook.com/docs/plugins/?locale=de_DE

When you visit this website, the plugin establishes a direct connection between your browser and Facebook’s server. Facebook thereby receives information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Facebook uses it. Further information is available in Facebook’s privacy policy:

https://de-de.facebook.com/privacy/explanation

If you do not want Facebook to associate your visit to this website with your Facebook user account, please log out of your Facebook account.

Facebook plugins are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available here:

https://www.facebook.com/legal/EU_data_transfer_addendum

https://de-de.facebook.com/help/566994660333381

Instagram Plugin

This website incorporates functions of the Instagram service. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you are logged into your Instagram account, clicking the Instagram button allows you to link content from this website to your Instagram profile. This enables Instagram to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Instagram uses it.

Data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. Where the relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available here:

https://www.facebook.com/legal/EU_data_transfer_addendum

https://help.instagram.com/519522125107875

https://de-de.facebook.com/help/566994660333381

Further information is available in Instagram’s privacy policy:

https://instagram.com/about/legal/privacy/

Pinterest Plugin

This website uses social plugins from the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

When you access a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the addresses of websites you visit that also contain Pinterest functions, your browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

Further information about the purpose, scope and further processing and use of data by Pinterest, as well as your rights and options for protecting your privacy, is available in Pinterest’s privacy policy:

https://policy.pinterest.com/de/privacy-policy

Source: https://www.e-recht24.de