Privacy statement


1. Data protection at a glance

General information

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data covers all data that can be used to identify you. For detailed information on data protection, see our privacy statement below.

Data collection on this website

Who is responsible for data protection on this website?

Data processing on this website is conducted by the website operator. Their contact details can be found on this site’s legal notice.

How do we collect your data?

Some of your data is collected by you providing it to us. This may be, for example, when you enter data into a contact form.

Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or the time you accessed the site). This data is collected automatically as soon as you access our website.

How do we use your data?

Some of the data is collected to ensure the smooth running of the website. Other data may be collected to analyse your user behaviour.

What rights do you have regarding your data?

You always have the right to receive free information about the origin, recipient and purpose of the personal data we store about you. You also have the right to request the rectification or erasure of this data. For this and for any other questions regarding data protection, you can contact us at any time using the address provided in our legal notice. Moreover, you have the right to appeal to a relevant supervisory authority.

Under certain circumstances, you also have the right to request a restriction of the processing of your personal data. For details on this, see the “Right to restrict processing” in the privacy statement.

2. Hosting und Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This primarily involves IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated through the website.

The host is used in order to fulfill contracts with our potential and existing clients (Art. 6, para. 1, lit. b GDPR) and in the interest of the secure, fast and efficient provision of our online presence through a professional service provider (Art. 6, para. 1, lit. f GDPR).

Our host will only process your data insofar as this is required to fulfill their service obligations and our instructions regarding this data.

Concluding a contract on order processing

In order to ensure that processing complies with data protection regulations, we have concluded a contract on order processing with our website host.

3. General information and mandatory information

Data protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory provisions on data protection, as well as this privacy statement.

When you use this website, various types of personal data are collected. Personal data covers all data that can be used to identify you. This privacy statement explains what data we collect and what we use it for. It also explains how and why it happens.

We wish to point out that data transfer online (e.g. communication by email) may have gaps in security. The seamless protection of the data from access by third parties is not possible.

Information on the data controller

The data controller for data processing on this website is:

Bio-Backhäusle GmbH
Reinhold-Würth-Straße 11/1
74360 Ilsfeld

Telephone: 07062 915 557 0
Email: info@bio-backhaeusle.de

The data controller is the natural or legal person, who solely or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses etc.).

Revoking your consent to data processing

Many data processing activities are only possible with your explicit consent. You can revoke consent that you have already provided at any time. Sending us a form-free message by email will suffice. The legality of the data processing conducted up to the point of revocation remains unaffected.

Right to object to data collection in special cases and objecting to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS CONDUCTED ON THE BASIS OF ART. 6, PARA. 1, LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS PERTAINING TO YOUR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON ONE OF THESE PROVISIONS. THE RELEVANT LEGAL BASIS THAT THE PROCESSING CONCERNS CAN BE FOUND IN THIS PRIVACY STATEMENT. WHEN YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA IN QUESTION, UNLESS WE CAN PROVIDE EVIDENCE OF DIRECT PROTECTIVE REASONS TO CONTINUE PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR SERVE TO ASSERT, EXECUTE OR DEFEND LEGAL CLAIMS (OBJECTIONS, IN ACCORDANCE WITH ART. 21, PARA. 1 GDPR).

WHEN WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA IN QUESTION FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT RELATES TO THE DIRECT MARKETING. WHEN YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION, IN ACCORDANCE WITH ART. 21, PARA. 2 GDPR).

Right to appeal to a relevant supervisory authority

In the event of a violation of the GDPR, the data subject has the right to appeal to a supervisory authority, particularly in their normal member state of residence, their workplace or the place of the suspected violation. The right to appeal exists irrespective of other administrative legal or judicial remedies.

Right to data portability

You have the right to obtain data or to transfer data to a third party that we process automatically on the basis of your consent or to fulfill a contract, in a conventional, machine-readable format. Insofar as you request a direct transfer of data to another party, this will only take place insofar as technically feasible.

SSL and TLS encryption

For security reasons and to protect the transfer of confidential content such as orders or requests that you send to us as the website operator, this website uses SSL and TLS encryption. You can recognise an encrypted connection by noting that the browser address changes from “http://” to “https://” and the padlock symbol will appear in your browser bar.

When SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.

Information, erasure and rectification

In the context of the applicable statutory provisions, you have the right to free information about the personal data we store about you at any time, as well as information on its origin, recipients and the purpose for processing the data. You also have a right to the rectification or erasure of this data. For this and for any other questions regarding personal data, you can contact us at any time using the address provided in our legal notice.

Right to restrict processing

You have the right to request a restriction of the processing of your personal data. For this, you can contact us at any time using the address provided in our legal notice. The right to restrict processing exists in the following cases:

If you have restricted the processing of your personal data, this data may only be processed (aside from your storage) with your consent or to assert, execute or defend legal claims or to protect the rights of another natural or legal person or for reasons of a significant public interest in the European Union or a member state.

Objection to marketing emails

The use of the contact details, published in connection with the obligation to provide a legal notice, for sending unrequested marketing and information materials will hereby be objected. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails, being sent.

4. Data collection on this website

Cookies

Our webpages use so-called “cookies”. Cookies are small text files and they do not harm your end device. They are stored on your end device either temporarily for the duration of a visit (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or conduct an automatic deletion via your web browser.

Some cookies from third party companies can also be stored on your end device when you visit our website (third party cookies). These allow us or you to use specific services provided by third party companies (e.g. cookies to process payment services).

Cookies have various functions. Many cookies are required for technical reasons, as certain website functions would not function without them (e.g. the shopping basket or the display of videos). Other cookies serve to analyse user behaviour or display advertisements.

Technically necessary cookies (e.g. shopping basket cookies) are stored on the basis of Art. 6, para. 1, lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically seamless and optimised provision of our services. Other cookies are only stored with your consent on the basis of Art. 6, para. 1, lit. a GDPR. You can revoke your consent at any time.

You can set your browser to inform you when cookies are placed, to only permit cookies in individual cases, to accept cookies for certain cases or to generally prevent cookies, as well as to automatically delete cookies when you close your browser. If you deactivate cookies, the functionality of this website may be restricted.

Insofar as cookies are used by third parties or for analysis purposes, we will inform you about this separately in the privacy statement and, where required, obtain your consent.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically sends to us. These are:

This data will not be merged with other data sources.

This data is collected on the basis of Art. 6, para. 1, lit. f GDPR. The website operator has a legitimate interest in the technically seamless presentation and optimisation of their website, hence why server log files are collected.

Contact form

When you contact us using the contact form, your details from the form, including the contact details you have provided, will be stored by us in order to process your request and in the event of any subsequent queries. This data will not be passed on without your consent.

The processing of this data takes place on the basis of Art. 6, para. 1, lit. b GDPR, insofar as your request relates to the fulfillment of a contract or is required to conduct pre-contractual measures. In all other cases, processing is in our legitimate interest in the effective handling of queries sent to us (Art. 6, para. 1, lit. f GDPR) or on the basis of your consent (Art. 6, para. 1, lit. a GDPR) insofar as this was requested.

The data provided by you in the contact form will be held by us until you request its deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after fully dealing with your query). Direct statutory provisions, in particular retention periods, remain unaffected.

Requests by email, telephone or fax

If you contact us by email, telephone or fax, your request will be stored and processed by us, including all personal data provided by you (name, request) for the purpose of dealing with your enquiry. This data will not be passed on without your consent.

The processing of this data takes place on the basis of Art. 6, para. 1, lit. b GDPR, insofar as your request relates to the fulfillment of a contract or is required to conduct pre-contractual measures. In all other cases, processing takes place on the basis of your consent (Art. 6, para. 1, lit. a GDPR) and/or on the basis of our legitimate interests (Art. 6, para. 1, lit. f GDPR), as we have a legitimate interest in the effective handling of queries sent to us.

The data provided by you in the contact form will be held by us until you request its deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after fully dealing with your query). Direct statutory provisions, in particular statutory retention periods, remain unaffected.