Privacy at a Glance

Based on the information obligation pursuant to Article 13 of the General Data Protection Regulation, we would like to inform you transparently about the processing of your data. The following notes provide a simple overview of what data we collect and for what purposes we use it.

Personal data is all data with which you can be personally identified.

Detailed information on the subject of data protection can be found in our privacy policy listed below this text. We inform you about the processing of data for almost all groups of people, such as customers, applicants, suppliers, business partners and also website visitors. For the sake of clarity, we divide this detailed privacy policy into the following sections:

  • General information and mandatory information
  • Information on the processing of data on this website
  • Information on the processing of personal data for our own business purposes
  • General information on data protection on our website

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy. When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission on the Internet (e.g. when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

How do we collect your data on this website?

Your data is collected on the one hand by you providing it to us. This can be data that you enter into a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your user behavior.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Analysis Tools and Third-Party Tools

When you visit our website, your surfing behavior can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you about the possibilities of objection in this privacy policy.

Detailed Privacy Policy

1. General Information and Mandatory Information

Data Controller

The controller for data processing in general and on this website is:

GRASOVKA importowo-eksportowa GmbH
Underbergstraße 3
47495 Rheinberg
Tel.: 0049 2843 / 920 – 0
Email: info@grasovka.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Legally Required Data Protection Officer

We have appointed a data protection officer for our company. You can reach them at:

GRASOVKA importowo-eksportowa GmbH
Underbergstraße 3
47495 Rheinberg
Tel.: 0049 2843 / 920 – 0
Email: datenschutz@grasovka.com

What rights do you have regarding the processing of your data?

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient for this. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Information About Your Data

You have the right to receive information about your personal data processed by us and to request a copy of this data. Components of the information are: processing purposes, data categories, their recipients or categories of recipients, as well as, if possible, the planned duration of data storage or criteria for determining this duration.

Correction, Deletion, Restriction

In addition, you are entitled to demand correction of the data if it is incorrect or deletion of the data if data storage is unlawful. If deletion is not possible – for various reasons – you have the right to request a restriction of processing or blocking of your data.

Right to Object

Insofar as the processing is based on Art. 6 para. 1 f) GDPR (balancing of interests), you have the right to object to the processing of this data at any time. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds that override your legitimate interests. Or the processing is necessary for the establishment, exercise or defense of legal claims.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in data protection matters is the State Data Protection Officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

To exercise your rights, please contact our data protection officer at datenschutz@grasovka.com.

2. Information on the Processing of Data on This Website

1. Objection to Advertising Emails

The use of contact data published as part of the imprint obligation to send unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

2. Recipients

Only our employees who are responsible for the technical administration, maintenance and further development of the website have access to your personal data.

If you contact us, employees who are responsible for processing the respective transaction will also have access to your personal data.

In addition, we employ external IT service companies to maintain our IT systems, who may have access to your personal data as part of their activities. The same applies to the hosting provider.

3. Transfer

Your personal data will not be transferred to a third country outside the EU. Any other transfer only takes place if we are legally or officially obligated to do so or if the transfer is necessary as part of your use of the website.

4. How Long Is Your Personal Data Stored?

Your personal data will be deleted if you have revoked consent given for processing or the personal data is no longer necessary to fulfill the purpose pursued with the processing. Cookies are deleted after 12 months.

Data arising in connection with contact will be deleted after 12 months.

5. Automated Decision-Making and Profiling

Your personal data will not be used by us for automated decision-making. We will also not create profiles from your personal data. We would like to point out that we ourselves do not use identification software and that biometric data is not evaluated. However, we would also like to point out that it cannot be ruled out that such software is used by a social network.

6. Why Is Your Personal Data Collected?

We need your personal data to enable you to use the website. You have the option of refraining from providing your personal data or providing us with incomplete information. However, this may result in us not being able to enable you to use the website or not being able to do so fully, or you not being able to participate in a prize draw or competition.

7. Data Collection on Our Website

Cookies

The website uses so-called cookies in some cases. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and that your browser saves.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them (so-called persistent cookies). These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.

Server Log Files/Protocol Data

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Without additional information, such as information from an internet provider about the connection holder, which is usually not available to us without a specific reason, such as suspicion of a legal violation, we are not able to assign this data to individual, identifiable persons.

Processing of Data (Customer and Contract Data)

We collect, process and use personal data only to the extent that it is necessary for the establishment, content design or change of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form (first name, last name, email, telephone number (voluntary information), message) including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. An informal notification by email to info@grasovka.com is sufficient for this. The lawfulness of the data processing operations carried out until the revocation remains unaffected by the revocation. The data you entered in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after completion of processing your inquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

Age Verification

Your age of majority is requested when you visit our website.

8. Analysis Tools and Advertising

Matomo (formerly Piwik)

On this website, data is collected and stored using the web analysis service software Matomo (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 para. 1 lit. f GDPR. From this data, pseudonymized usage profiles can be created and evaluated for the same purpose. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s internet browser. The cookies enable, among other things, the recognition of the internet browser. The data collected with Matomo technology (including your pseudonymized IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

If you do not agree with the storage and evaluation of this data from your visit, you can object to the storage and use at any time with a mouse click below. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies will result in the opt-out cookie also being deleted and may need to be reactivated by you.

9. Social Media

Information on Data Processing with Regard to Online Presences in Social Media

We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users who are active there and to inform them about our services. The processing of users’ personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers for consent to data processing (i.e. declare their consent, for example, by checking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.

According to the ECJ ruling of 05.06.2018, we must inform you comprehensively about the data processing that takes place via and through the Facebook page (and possibly other social media). Since we unfortunately do not currently have sufficient information available, we would like to refer you to the data processing policy and objection options (opt-out) of the respective social network. Information requests and assertion of data subject rights can only be asserted with the respective providers, as only they have access to the users’ data.

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

3. Information on the Processing of Personal Data for Our Own Business Purposes

1. Purposes and Legal Bases of Processing

We collect and process your personal data for the following purposes:

Applicant Data

We collect and process applicant data sent to us (usually address, contact details, qualifications, CV, certificates, etc.) for the purpose of conducting application procedures, insofar as this is necessary for the decision on establishing an employment relationship with us. The legal basis is Art. 88 GDPR in conjunction with § 26 para. 1 in conjunction with para. 8 sentence 2 BDSG. If we hire applicants, we may continue to process the personal data already received in accordance with § 26 para. 1 BDSG if this is necessary for the purposes of the employment relationship.

We store the data of rejected applicants for the possible defense of asserted legal claims from the application process for up to 6 months after receipt of the rejection in text form on the basis of Art. 6 para. 1 f) GDPR. Our legitimate interest is a possible burden of proof in proceedings under the General Equal Treatment Act (AGG). Storage beyond this only takes place with the express consent of the applicant. The applicant is free to exercise the rights mentioned under 1.

Processing of Personal Data

  1. For carrying out pre-contractual measures or initiating a purchase contract or business relationship. This processing is based on Article 6 para. 1 b) GDPR. You can object to the storage of your data at any time, in which case we will delete your data, provided there are no legal retention periods.
  2. For contract fulfillment and customer support. This processing is based on Article 6 para. 1 b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. The data will be deleted after termination of the business relationship, provided there are no legal retention periods. These result, among other things, from tax law provisions and extend up to ten years.
  3. To carry out promotions and competitions, we also process personal data. This processing is based on your consent in accordance with Article 6 para. 1 a) GDPR. After the end of the competition, all data you have submitted to us to participate in the competition will be deleted, unless other legal or contractual retention regulations exist.
  4. We can also use the addresses of our existing customers for direct mail advertising; this processing is based on Article 6 para. 1 f) GDPR. Our legitimate interest lies in personal direct advertising. You have the right at any time to object to the use of your data for the purpose of direct advertising.
  5. For advertising contact by email, we use the email addresses of our existing customers, i.e. only those who are already in a business relationship with us. This processing is based on Article 6 para. 1 f) GDPR in conjunction with § 7 para. 3 UWG. Our legitimate interest lies in the simple and inexpensive advertising contact with our existing customer data. Naturally, in compliance with the high requirements of § 7 para. 3 UWG, which defines the exceptions for the use of the email address of existing customers. You have the right at any time to object to the use of your email address for the purpose of direct advertising.

To exercise your rights, please contact our data protection officer at datenschutz@grasovka.com.

2. Transfer of Data

We may transfer your personal data to other companies to the extent that this is permitted or necessary within the framework of the stated purposes and legal bases. Otherwise, personal data is processed on our behalf by external service providers, particularly in the area of information technology and data processing, on the basis of contracts for order processing in accordance with Art. 28 GDPR. Under no circumstances will your data be transferred outside the EU.

3. Storage of Data

Your personal data will only be stored as long as knowledge of the data is necessary for the purposes of the contractual relationship or the purposes for which it was collected, or if legal or contractual retention regulations exist. Legal retention periods result, among other things, from social law and tax law provisions and extend up to ten years for tax-relevant documents and receipts.