Data protection

Privacy policy

 

Data protection

We have written this privacy statement (version 06.01.2021-311247731) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679, what information we collect, how we use data and what decision-making options you have as a visitor to this website.

Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible.

Automatic data storage

Nowadays, when you visit websites, certain information is automatically created and stored, including on this website.

When you visit our website as you are doing right now, our web server (computer on which this website is stored) automatically stores data such as

  • the address (URL) of the accessed website
  • Browser and browser version
  • The operating system used
  • the address (URL) of the previously visited page (referrer URL)
  • the host name and IP address of the device from which access is being made
  • Date and time

in files (web server log files).

As a rule, web server log files are stored for a fortnight and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed in the event of unlawful behaviour.

Cookies

Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.

What exactly are cookies?

Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to the cookies, our website knows who you are and offers you your usual default setting. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie is to be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programmes and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC.

Cookie data, for example, can look like this:

  • Name: _ga
  • Expiry time: 2 years
  • Use: Differentiation of website visitors
  • Example value: GA1.2.1326744211.152311247731

A browser should support the following minimum sizes:

  • A cookie should be able to contain at least 4096 bytes
  • At least 50 cookies should be able to be stored per domain
  • A total of at least 3000 cookies should be able to be stored

What are the different types of cookies?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

One can distinguish between 4 types of cookies:

Essential cookies
These cookies are necessary to ensure the basic functions of the website. For example, these cookies are needed when a user places a product in the shopping basket, then continues surfing on other pages and only goes to the checkout later. These cookies do not delete the shopping cart even if the user closes his browser window.

Functional cookies
These cookies collect information about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behaviour of the website with different browsers.

Target-oriented cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are saved.

Advertising cookies
These cookies are also called targeting cookies. They are used to deliver individually adapted advertising to the user. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you would like to allow. And of course, this decision is also stored in a cookie.

How can I delete cookies?

You decide how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, only partially allow or disable cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate and manage cookies in Chrome

Safari: Managing Cookies and Website Data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer.

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. The best thing to do is to search for the instructions in Google with the search term "Delete Cookies Chrome" or "Deactivate Cookies Chrome" in the case of a Chrome browser or replace the word "Chrome" with the name of your browser, e.g. Edge, Firefox, Safari.

What about my data protection?

The so-called "Cookie Guidelines" have been in place since 2009. These state that the storage of cookies requires your consent. Within the EU countries, however, there are still very different reactions to these directives. In Germany, the Cookie Directives have not been implemented as national law. Instead, this directive was largely implemented in § 15 para.3 of the German Telemedia Act (TMG).

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Storage of personal data

Personal information that you submit to us electronically on this website, such as your name, email address, address or other personal details when submitting a form or commenting on the blog, together with the time and IP address, will only be used by us for the purpose stated, kept secure and not passed on to third parties.

We therefore only use your personal data for communicating with those visitors who expressly wish to be contacted and for processing the services and products offered on this website. We do not disclose your personal data without your consent, but we cannot exclude the possibility that this data may be accessed in the event of unlawful conduct.

If you send us personal data by e-mail - thus away from this website - we cannot guarantee secure transmission and protection of your data. We recommend that you never send confidential data by e-mail without encryption.

According to Article 6 (1) a DSGVO (lawfulness of processing), the legal basis is that you give us consent to process the data you have entered. You can revoke this consent at any time - an informal email is sufficient, you will find our contact details in the imprint.

Rights under the General Data Protection Regulation

According to the provisions of the GDPR, you are generally entitled to the following rights:

  • Right of rectification (Article 16 GDPR)
  • Right to erasure ("right to be forgotten") (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to notification - obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object (Article 21 GDPR)
  • Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Source: Created with the data protection generator from AdSimple in cooperation with slashtechnik.de

Personal data (hereinafter referred to as "data") are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

Pursuant to Art. 4 no. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as data controllers
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the responsible party

The responsible provider of this website in terms of data protection law is:

ITPS GmbH
Rollbarg 12
25482 Appen
Germany

Phone number: 04101 4800486
E-mail: info@tea-herbs-spices.de

The provider's data protection officer is:
Udo Schlott

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right to

  • to confirmation as to whether data concerning them are being processed, to information about the data being processed, to further information about the data processing and to copies of the data (cf. also Art. 15 DSGVO);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 DSGVO);
  • to the immediate erasure of the data relating to them (cf. also Art. 17 of the GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17(3) of the GDPR, to restriction of processing in accordance with Art. 18 of the GDPR;
  • to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
  • to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 of the GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 DSGVO. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding the above, the user has a right to information about these recipients.

Likewise, users and data subjects have the right to object to the future processing of data concerning them in accordance with Art. 21 DSGVO, insofar as the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) DSGVO. In particular, an objection to data processing for the purpose of direct advertising is permitted.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is provided below on individual processing procedures.

Server data

For technical reasons, in particular to ensure a secure and stable internet presence, data is transmitted by your internet browser to us or to our web space provider. These so-called server log files are used to collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which the use of our website takes place.

The data collected in this way is temporarily stored, but not together with other data about you.

This storage takes place on the legal basis of Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted again after seven days at the latest, unless further storage for evidence purposes is required. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.

Cookies

a) Session cookies / session cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.  

This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit b.) DSGVO, insofar as these cookies data are processed for contract initiation or contract processing.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO.

When you close your internet browser, these session cookies are deleted.

b) Third-party cookies

Where applicable, cookies from partner companies with which we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website.

Please refer to the following information for details on this, in particular the purposes and legal bases of the processing of such third-party cookies.

c) Elimination option

You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.

Contract processing

The data provided by you for the purpose of using our range of goods and/or services is processed by us for the purpose of processing the contract and is necessary to this extent. Conclusion and processing of the contract are not possible without the provision of your data.

The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.

We delete the data once the contract has been fully processed, but must observe the retention periods under tax and commercial law.

As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.

The legal basis for the transfer of the data is then Art. 6 para. 1 lit. b) DSGVO.

Customer account / registration function

If you create a customer account with us via our website, we will collect and store the data you entered during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function). At the same time, we also store your IP address and the date of your registration together with the time of day. Of course, this data will not be passed on to third parties.

Within the scope of the further registration process, your consent to this processing is obtained and reference is made to this data protection declaration. The data collected by us in this process will be used exclusively for the provision of the customer account. 

Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.

In accordance with Art. 7 (3) DSGVO, you can revoke the consent you have given us to open and maintain the customer account at any time with effect for the future. To do so, you only need to inform us of your revocation.

The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.

Checking creditworthiness and scoring

Insofar as we offer you the basic option of payment by invoice within the scope of our range of goods or services and you make use of this option, we reserve the right to obtain a credit report from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore) on the basis of mathematical-statistical procedures. For this purpose, your data, insofar as it is relevant to the contract, such as your name and address, will be forwarded to the credit agency. We use the subsequent information on the statistical probability of a payment default for our decision as to whether we offer you payment by invoice.

The legal basis for this processing is our legitimate interest in the default security of the claim pursuant to Art. 6 para. 1 lit. f) DSGVO.

Contact requests / contact possibility

If you contact us via the contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry - without their provision we cannot answer your enquiry or at best only to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.

Your data will be deleted as soon as your enquiry has been finally answered and there are no legal obligations to retain the data, e.g. in the case of subsequent contract processing.

User contributions, comments and ratings

We offer you the opportunity to publish questions, answers, opinions or evaluations, hereinafter referred to as "contributions", on our website. If you make use of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym used by you, if applicable.

The legal basis for this is Art. 6 para. 1 lit. a) DSGVO. In accordance with Art. 7 (3) DSGVO, you can revoke your consent at any time with effect for the future. To do so, you only need to inform us of your revocation.

In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in taking or supporting further action if your contribution infringes the rights of third parties and/or it is otherwise unlawful.

The legal basis in this case is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the legal defence that may be necessary.

Google Maps

We use Google Maps on our website to display our location and to provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

If you call up the Google Maps component integrated into our website, Google will store a cookie on your end device via your internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in optimising the functionality of our website.

The connection to Google established in this way enables Google to determine which website your request was sent from and to which IP address the directions should be sent.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your internet browser. Details on this can be found above under the item "Cookies".

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

In addition, Google offers

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

for further information.

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our website.

Through the connection to Google established when you call up our website, Google can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.

Google offers under

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

for further information, in particular on the possibilities of preventing the use of data.

FontAwesome

In order to be able to display fonts and visual elements of our website, we use the external fonts of FontAwesome. FontAwesome is a service provided by the

Fonticons Inc, 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, hereinafter referred to only as "FontAwesome".

When you access our website, a connection is established to the FontAwesome server in the USA in order to enable and update the display of fonts and visual elements.

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our website.

Through the connection to the FontAwesome server established when you call up our website, FontAwesome can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.

FontAwesome offers under

https://fontawesome.com/privacy

for further information, in particular on the possibilities of preventing the use of data.

Google AdWords with conversion tracking

In our website, we use the advertising component Google AdWords and the so-called conversion tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

We use conversion tracking for the targeted advertising of our offer. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

If you click on an ad placed by Google, the conversion tracking we use saves a cookie on your terminal device. These so-called conversion cookies lose their validity after 30 days and do not serve to identify you personally.

If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.

Google uses the information collected in this way to provide us with statistics about visits to our website. In addition, we receive information about the number of users who have clicked on our ad(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.

You can also prevent or restrict the installation of cookies through the corresponding settings of your internet browser. At the same time, you can delete cookies already stored at any time. However, the steps and measures required for this depend on your specific Internet browser used. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.

Furthermore, Google also offers

https://services.google.com/sitestats/de.html

https://www.google.com/policies/technologies/ads/ 

http://www.google.de/policies/privacy/

for further information on this topic and in particular on the possibilities of preventing the use of data.

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function allows Google to truncate the IP address within the EU or EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the internet.

Google states that it does not associate your IP address with any other data. In addition, Google keeps under

https://www.google.com/intl/de/policies/privacy/partners

The website also provides you with further information on data protection law, for example on the options for preventing data use.

In addition, Google offers

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on together with further information on this. This add-on can be installed with the most common internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Of course, you can also find out whether and which other web analytics services we use in this privacy policy.

Model data protection declaration of the law firm Weiß & Partner

Cookie-Banner

Zur Verwaltung der eingesetzten Cookies und ähnlichen Technologien (Tracking-Pixel, Web-Beacons etc.) und diesbezüglicher Einwilligungen setzen wir das Consent Tool „Real Cookie Banner“ ein. Details zur Funktionsweise von „Real Cookie Banner“ findest du unter https://devowl.io/de/rcb/datenverarbeitung/. Rechtsgrundlagen für die Verarbeitung von personenbezogenen Daten in diesem Zusammenhang sind Art. 6 Abs. 1 lit. c DS-GVO und Art. 6 Abs. 1 lit. f DS-GVO. Unser berechtigtes Interesse ist die Verwaltung der eingesetzten Cookies und ähnlichen Technologien und der diesbezüglichen Einwilligungen. Die Bereitstellung der personenbezogenen Daten ist weder vertraglich vorgeschrieben noch für den Abschluss eines Vertrages notwendig. Du bist nicht verpflichtet die personenbezogenen Daten bereitzustellen. Wenn du die personenbezogenen Daten nicht bereitstellst, können wir deine Einwilligungen nicht verwalten.