I. Name and address of the responsible party
- Food Licence Partner GmbH
- Hafeninsel 60
- 63067 Offenbach am Main
- Tel.: +49 69 98193-200
- E-Mail: email@example.com
- Website: www.foodlicencepartner.de
- is the responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
II. Name and address of the data protection officer
- The data protection officer of the responsible party is:
- AGOR AG
- Hanauer Landstr. 151-153
- 60314 Frankfurt am Main
- Tel: +49 (0) 69 – 9043 79 65
- E-Mail: firstname.lastname@example.org
III. General information pertaining to data processing
1. Scope of the processing of personal data
We principally only collect and use personal data of the users of our homepage insofar as this is necessary to provide a functional website, our contents and services. The collection and use of personal data of our users shall principally only be carried out after they have granted their consent. An exception from this principally shall apply in the cases, in which a processing of the data is permitted by statutory regulations or it is not possible to obtain a consent in advance for actual reasons.
2. Legal basis for the processing of personal data
The legal bases for the processing of personal data can principally be derived from:
- 6 Para. 1 lit. a GDPR if a consent of the relevant person is obtained.
- 6 Para. 1 lit. b GDPR in case of processing, which serves to fulfil a contract, of which the relevant person is a contractual party. Also covered here are processing activities, which are necessary in order to carry out pre-contractual measures.
- 6 Para. 1 lit. c GDPR in case of processing, which is necessary in order to fulfil a legal obligation.
- 6 Para. 1 lit. d GDPR if vital interests of the relevant person or another natural person render a processing of personal data necessary.
- 6 Para. 1 lit. f GDPR if the processing is necessary in order to safeguard a legitimate interest of our company or a third party and the interests, basic rights and basic freedom of the data subject do not outweigh the interest mentioned first.
3. Data deletion and storage duration
The personal data of the users will be deleted or blocked as soon as the purpose of the storage ceases to apply. The data can be stored beyond this if this was envisaged by the European or national legislator in regulations under Union law, laws or other regulations which the responsible party has to comply with. A blocking or deletion of the data shall also be carried out if a storage deadline stipulated by the stated standards expires, unless the further storage of the data is necessary for the conclusion of a contract or the fulfilment of a contract.
IV. Use of our website, general information
1. Description and scope of the data processing
Each time our website is called our system will automatically enter data and information from the user’s computer system. The following information will be collected:
- Information about the browser type and the used version
- The operating system of the user
- The IP address of the user
- Date and time of the access
- Websites, from which the user’s system is referred to our website
- Websites, which are called by the user’s system via our website
The described data are stored in the logfiles of our system. These data will not be stored together with other personal data of the user.
2. Purpose and legal basis for the data processing
The temporary storage of the IP address by our system is necessary in order to enable a delivery of the website to the user’s computer. For this purpose the IP address of the user must remain stored for the duration of the session.
The logfiles shall be stored in order to ensure the functionality of the website. Moreover the data help us to optimise the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes will not take place in this context.
The legal basis for the temporary storage of the data and the logfiles is Art. 6 Para. 1 lit. f GDPR.
The entry of your personal data for providing our internet presence is absolute essential for the operation of the website. Therefore, the user has no possibility to file an objection.
3. Duration of the storage
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data are entered in order to guarantee the provision of the website the data will be deleted when the respective session is ended.
If your stored are stored in logfiles, they will be deleted no later than after seven days. A storage beyond this is possible whereby the IP addresses of the users will be deleted or alienated in this case. An allocation of the calling client is therefore no longer possible.
The legal basis for the processing of personal data by using cookies can be derived from Art. 6 Para. 1 lit. f GDPR. The purpose for the use of the technically necessary cookies is to simplify the use of our website.
VI. Your rights / rights of the data subject
According to the EU General Data Protection Regulation you have the following rights as a data subject:
1. Right to information
You have the right to receive the information from us as the responsible party whether we process personal data, which relate to you. In addition, you can request details about the following information:
(1) Purpose of the data processing;
(2) the categories of the processed personal data;
(3) the recipients or the categories of recipients, towards whom the personal data relating to you were disclosed or will be disclosed still;
(4) the planned duration of the storage of the personal data relating to you or, if concrete details in this respect are not possible, criteria for the stipulation of the storage duration;
(5) the existence of a right to rectification or deletion of the personal data relating to you, a right to limitation of the processing by the responsible party or a right of objection against this processing;
(6) the existence of a right to lodge a complaint at a supervisory authority;
(7) all available information about the origin of the data if the personal data are not collected from the relevant person;
(8) the existence of an automatic decision-making including profiling pursuant to Art. 22 Para. 1 and 4 GDPR and – at least in these cases – significant information about the involved logic as well as the scope and the intended implications of such processing for the relevant person.
Finally, you also have the right to request information concerning whether your personal data will be transmitted to a third country or to an international organisation. In this case you can request information about the suitable guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You could assert your entitlement to information under: hallo@taste.
2. Right to rectification
Should the personal data processed by us and which relate to you be incorrect or incomplete, you have a right towards us to rectification and/or completion. The rectification will be carried out without delay.
3. Right to limitation
The right to limitation to the processing of the personal data relating to you can be asserted in the following cases:
(1) the accuracy of the personal data is disputed for a duration, which enables the responsible party to check the accuracy of the personal data;
(2) the processing is unlawful and the deletion of the personal data is rejected, whereby instead the restriction to the use of the personal data is requested;
(3) the responsible party no longer requires the personal data for the purpose of processing, however the data subject requires these for the assertion, exercising or defence of legal claims, or
(4) the data subject has filed an objection against the processing pursuant to Art. 21 Para. 1 GDPR and it has not been determined yet whether the legitimate reasons of the responsible party outweigh the reasons of the data subject.
If the processing of the personal data relating to you was limited, these data may – apart from their storage – only be processed with your consent or for the assertion, exercising or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest of the Union or a member state.
With the existence of a limitation to the processing according to the presented principles, you will be informed by us before the limitation is revoked.
4. Right to deletion
With the existence of the reasons presented below you can request that the personal data relating to you are deleted without delay. The responsible party is obliged to delete these data without delay. The reasons are:
(1) The personal data relating to you are no longer required for the purposes, for which they were collected or were processed in any other manner.
(2) The processing is protected by a consent pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and you revoke the consent. A further prerequisite is that there is no other legal basis for the processing.
(3) You file an objection against the processing (Art. 21 Para. 1 GDPR) and there are no prior legitimate reasons for the processing. A further possibility is that you file an objection against the processing pursuant to Art. 21 Para. 2 GDPR.
(4) The processing of the personal data relating to you is carried out unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation according to Union law or the law of the member states, which the responsible party has to comply with.
(6) The personal data relating to you were collected with regard to offered services of the information society pursuant to Art. 8 Para. 1 GDPR.
If we have published the personal data relating to you and if pursuant to Art. 17 Para. 1 GDPR we are obliged to delete these we shall thus take appropriate measures by taking the available technology and the implementation costs into consideration, also of a technical kind in order to inform parties responsible for the data processing, who process the personal data that you as data subject have request the deletion of all links to these personal data or copies or replications of these personal data.
We would like to point out that the right to deletion shall not exist insofar as the processing is necessary
(1) in order to exercise the right to free expression of an opinion and information;
(2) in order to fulfil a legal obligation that requires the processing according to the law of the Union or of the member states, which the responsible party has to comply with, or to perform a task, which is in the public interest or is carried out while exercising a public authority, that was assigned to the responsible party;
(3) for reasons of public interest in the sector of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the right stated under Section a) is expected to render the realisation of the aims of this processing impossible or seriously impair these, or
(5) for the assertion, exercising or defence of legal claims.
5. Right to notification
If you have asserted the right to rectification, deletion or limitation to the processing we are obligated to inform all recipients, to whom the personal data relating to you were disclosed, of this rectification or deletion of the data or the limitation to the processing, unless this proves to be impossible or is associated with a disproportionate amount of work. You are further entitled to the right to be informed about these recipients.
6. Right to data portability
According to the GDPR your further have the right to receive the personal data relating to you, which were made available to us, in a structured, common and machine-readable format. You further have the right to transmit these data to another responsible party without this being impeded by the responsible party, to which the personal data were made available, if
- the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
- the processing is carried out by using automatic processes.
Within the scope of the exercising of the right to data portability you finally have the right to achieve that the personal data relating to you are transmitted directly by one responsible party to another responsible party insofar as this is technically possible and freedom and rights of other persons are not impaired hereby.
The right to data portability shall not apply to a processing of personal data, which is necessary in order to perform a task, which is in the public interest or is carried out while exercising a public authority that was assigned to the responsible party.
7. Right to revocation of the declaration of consent under data protection law
You are entitled to the right to revoke your declarations of consent under data protection law at all times. We would like to point out that the lawfulness of the processing carried out owing to the consent until the revocation shall not be affected by the revocation of the consent.
8. Right to objection
You further have the right, for reasons, which arise from your special situation, to file an objection at all times against the processing of the personal data relating to you, which is carried out owing to Art. 6 Para. 1 lit. e or f GDPR. The right to objection shall also apply to a profiling supported on these provisions.
The responsible party will no longer process the personal data relating to you, unless it can prove essential reasons worthy of protection for the processing, which outweigh your interests, rights and freedom, or the processing serves the assertion, exercising or defence of legal claims.
If the personal data relating to you are processed for the purpose of you are entitled to the right to file an objection at all times against the processing of the personal data relating to you for the purpose of such advertising. This shall also apply to the profiling insofar as it is associated with such direct advertising. In case of an objection against the processing for purposes of direct advertising the personal data relating to you will no longer be processed for these purposes.
You further have the possibility, in connection with the use of services of the information society (irrespective of the Directive 2002/58/EC), to exercise your right to objection by means of automatic processes, with which technical specifications are used.
9. Automatic decision-making in an individual case including profiling
According to the EU General Data Protection Regulation you further have the right to not be subjected to a decision exclusively based on an automatic processing – including profiling –, which shall have a legal effect against you or which shall substantially impair you in a similar manner. An exception from this principle shall however exist if the decision
(1) is necessary for the conclusion or the fulfilment of a contract between you and the responsible party,
(2) is admissible owing to legal regulations of the Union or the member states, which the responsible party has to comply with, and these legal regulations contain appropriate measures for safeguarding your rights and freedom as well as your legitimate interests or
(3) is carried out with your explicit consent.
If the processing is carried out within the scope of the cases stated in (1) and (3), then the responsible party shall take appropriate measures in order to safeguard the rights and freedom as well as your legitimate interests. This shall at least include the right to achieve the intervention of a person on the part of the responsible party to present the own point of view and to contestation of the decision.
The decisions according to (1) – (3) may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, insofar as Art. 9 Para. 2 lit. a or g does not apply and appropriate measures were taken for the protection of the rights and freedom as well as your legitimate interests.
10. Right to lodge a complaint at a supervisory authority
If you are of the opinion that the processing of the personal data relating to you breaches the GDPR you finally have the right to lodge a complaint at a supervisory authority, in particular in the member state of your place of abode, your workplace or the place of the presumed breach.
VII. Web Analytics
1. Use of Matomo
This website uses the web analytics service Matomo, (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, ("Matomo"), to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 lit. f DSGVO.
The data for the evaluation of the statistics is generated directly in the user's terminal device and transmitted to us in anonymized form. The information collected in this way is stored by the responsible party exclusively on its server in Germany.
We use Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, which means that they cannot be directly linked to a person. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
Information from the third-party provider on data protection is available athttps://matomo.org/privacy/