Privacy Policy

We appreciate your interest in our company and our products. We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

 

We would like to point out that data transmission over the Internet may be subject to security vulnerabilities. Complete protection of data from access by third parties is not possible.

 

In brief:

  • For all data protection matters, please contact us by email at  hello@loewenzahnorganics.de
  • Your rights are listed in detail under point 13.
  • The General Data Protection Regulation refers to Regulation (EU) 2016/679, which has been in force since May 25, 2018.
  • Please note that we are obliged to provide a comprehensive privacy policy that covers scenarios that will never or only very rarely be applicable.
  • Normally, we only collect and process your personal data in the following cases:

 

if you contact us via the contact form at  loewenzahnorganics.com/pages/contact,

 

if you create a customer account at loewenzahnorganics.com/account/login,

 

if you place an order in our shop (loewenzahnorganics.com/collections/shop) for the first time without having previously created a customer account,

 

if you subscribe to the newsletter,

 

when using the website through cookies and other elements.

 

Your personal data may also be collected and processed, for example, if you use other contact options available on the website loewenzahnorganics.com. Furthermore, personal data is collected and processed when you pay for products that you have purchased through the online shop. In some cases, processing is then carried out by third parties, such as PayPal.

 

I. Name and address of the data controller

The controller within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation) and other data protection provisions is:

Löwenzahn Organics GmbH
Adalbertstraße 6a
10999 Berlin
Germany

Tel: +49 30 398217600
Email:  hello@loewenzahnorganics.com
Website:  loewenzahnorganics.com

 

II. Purposes for which personal data are processed and legal basis for processing

1. General data when visiting our website

 

Every time you access our website, your internet browser automatically transmits the following data to our web server:

 

a) browser types and versions used

b) the operating system used by the accessing system

c) the website from which an accessing system reaches our website

d) the sub-webpages that are accessed on our website via an accessing system

e) the date and time of an access to our website

f) an Internet Protocol address (IP address)

g) the Internet service provider of the accessing system

h) other similar data and information that serve to avert danger in the event of attacks on our information technology systems

 

The legal basis for the collection of this data, insofar as it concerns personal data (e.g. IP address), is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in processing this data is to carry out our business activities for the benefit of the well-being of all our employees and the owners of the company, as well as the comfortable, stable and secure operation of the website and the online shop.

 

2. Technically necessary cookies

 

We use cookies to assign your requests and requirements. Cookies enable us to measure the frequency of page views and general navigation. Cookies are small text files that are stored on your computer system. We would like to point out that technically necessary cookies are transferred from our server to your computer system when you visit our website, most of which are so-called "session cookies". "Session cookies" are characterized by the fact that they are automatically deleted from your hard drive after the browser session ends. Other cookies remain on your computer system and allow us to recognize your computer system on your next visit (so-called permanent cookies). Technically necessary cookies are required to operate the website and cannot be rejected when visiting our website.

 

The legal basis for the collection of data via technically necessary cookies, insofar as it concerns personal data (e.g. IP address), is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in processing this data is the secure and stable operation of our website.

 

3. Google Analytics

 

We have integrated Google Analytics (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering, and evaluation of data about the behavior of visitors to websites.

 

The operating company of the Google Analytics component is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google Inc. from the USA.

 

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to show and compile the activities on our website for us, and to provide further services associated with the use of our website.

 

The cookie stores personal information, such as the access time, the location from which an access originated, and the frequency of your visits to our website. Each time you visit our website, these personal data, including the truncated IP address of the internet connection you use, are transferred to Google servers worldwide. Data may also be transmitted to the servers of Google LLC in the USA. There is neither an adequacy decision for the USA nor have appropriate safeguards been agreed with Google to ensure a level of data protection according to the GDPR. This means that data is transferred to a so-called unsafe third country.

 

Note on the processing of your data collected on this website in the USA by Google: If you accept the Google Analytics cookies, you simultaneously consent in accordance with Art. 6 Para. 1 lit. a) in conjunction with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data will be processed in the USA. The USA is a country with an inadequate level of data protection according to EU standards (unsafe third country). There is a particular risk that your data may be processed by US authorities for control and monitoring purposes. If you do NOT wish to consent to this, only select the necessary cookies in the settings of the cookie consent banner.

 

You can revoke your consent at any time, either in writing to us or by changing the cookie settings of our website via your browser.

 

4. Google Ads

 

Our website uses certain functions of Google Ads, an advertising system for websites and products on the Internet. The operating company of the component is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google Inc. from the USA.

 

Note on the processing of your data collected on this website in the USA by Google: If you accept Google Ads cookies, you also consent, in accordance with Art. 6 para. 1 lit. a) in conjunction with Art. 49 para. 1 S. 1 lit. a) GDPR, that your data will be processed in the USA. The USA is a country with an inadequate level of data protection according to EU standards (unsafe third country). There is a particular risk that your data may be processed by US authorities for control and monitoring purposes. If you do NOT wish to consent to this, only select the necessary cookies when visiting the website.

 

You can revoke your consent at any time, either in writing to us or by changing the cookie settings of our website via your browser.

 

We use the following Google Ads functions related to personal data:

 

a) Remarketing

 

This function enables the linking of advertising target groups created with Google Ads Remarketing. In this way, interest-based, personalized advertising messages, which have been adapted to you depending on your previous usage and browsing behavior on one device (e.g., mobile phone), can also be displayed on another of your devices (e.g., tablet or PC).

 

If you have given your consent, Google links your web and app browser history with your Google Account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google Account.

 

To support this function, Google collects authenticated user IDs that are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.

 

b) Conversion

 

If you click on an ad served by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

 

Each Google customer receives a different cookie. The cookies cannot be tracked across customer websites. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking.

 

5. Contact form

Personal data is collected on our website if you voluntarily provide this data as part of the contact process via our contact form (loewenzahnorganics.com/pages/contact). We use the transmitted personal data (usually only name and email address) without separate express consent in accordance with the provisions of European and German data protection law exclusively to fulfill your request as part of a contact. If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

 

You can also contact us via the email addresses provided on the website. Personal data transmitted by email is also automatically stored by us. Such personal data voluntarily transmitted by you to us will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties without your consent.

 

Art. 6 para. 1 lit. b) GDPR is the legal basis for the processing of your personal data for the fulfillment of a contract or the implementation of pre-contractual measures (inquiries about specific products or, for example, the creation of a user account).

 

For all other contact inquiries via the contact form that do not serve to fulfill a contract or to carry out pre-contractual measures, Art. 6 para. 1 lit. f) GDPR is the legal basis. Our legitimate interest in this case is the execution of our business activities within the online shop for the benefit of the well-being of all our employees and the owners of the company, as well as answering the inquiries addressed to us.

 

6. Social Media

 

a) Facebook and Instagram

 

You can access our Facebook and Instagram presence via the corresponding links on our website. Please note the data protection information on the respective platforms.

 

b) Use of YouTube on our website

 

We have integrated YouTube components on our website. The operating company of YouTube is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google Inc. from the USA.

 

YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge.

 

All YouTube videos embedded on our website are integrated in "extended data protection mode". No data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is data transferred. We have no influence on this data transfer.

 

You must explicitly activate the video and agree to the transfer of data to Google before a video starts.

 

The legal basis for the transfer to and processing by Google within the framework of YouTube is Art. 6 para. 1 lit. a) GDPR.

 

Note on the processing of your data collected on this website in the USA by Google: If you activate a YouTube video, you also consent in accordance with Art. 6 para. 1 lit. a) in conjunction with Art. 49 para. 1 S. 1 lit. a) GDPR that your data will be processed in the USA. The USA is a country with an inadequate level of data protection according to EU standards (unsafe third country). There is a particular risk that your data may be processed by US authorities for control and monitoring purposes. If you do NOT wish to consent to this, only select the necessary cookies.

 

You can revoke your consent at any time.

 

7. Creating a customer account and using the online shop

 

If you decide to create a customer account, we will initially use your information exclusively for these purposes. For this, you must log in with an email address and a password. The provision of the email address may already include the transmission of personal data if, for example, it allows conclusions to be drawn about your person. With access to your online customer account, you can then leave further personal data, e.g., create and manage your addresses and payment methods, and view your previous orders.

 

Of course, you can close the online customer account at any time. Please send us an email to  hello@loewenzahnorganics.com, preferably from the email address associated with your account. The online customer account will then no longer be accessible from the Internet.

 

Art. 6 para. 1 lit. b) GDPR is the legal basis for the processing of your personal data for the fulfillment of a contract. The creation of a user account without any ordering activity, on the other hand, is a pre-contractual measure and is also covered by Art. 6 para. 1 lit. b) GDPR.

 

The creation of a user account is also covered by a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this case is the simplified execution of orders in the online shop by users, especially for repeat orders, information about our products, etc.

 

If you decide to make a purchase in our online shop, we will need further data from you. Specifically, a billing and delivery address are required, as well as payment method data. You can pay us by prepayment, PayPal, or credit card.

 

For our website and the online shop, we use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). The "Shopify" shop system is used to display the online shop, and all personal data collected in our online shop is processed on "Shopify" servers. For this purpose, we have concluded an order processing agreement with "Shopify."

 

The "Shopify" shop system is a tool for creating and hosting websites. When you visit our website, the system collects your IP address as well as information about the device and browser used. With the "Shopify" shop system, we analyze visitor numbers and customer behavior. User statistics are also created. This is largely done without collecting personal data. If you purchase products in our online shop, the "Shopify" shop system collects the data required for the purchase (see above). The "Shopify" shop system uses cookies that are necessary for operating the online shop.

 

All personal data transferred to "Shopify" in Ireland may be transferred to other companies within the Shopify group of companies in Canada and the USA. According to "Shopify", this is done in compliance with the GDPR, as personal data is not transferred directly to the USA, but always only via Canada. Unlike the USA, Canada has an adequate level of data protection recognized by the EU, so the transfer is permissible under Art. 45 GDPR. Further details can be found in Shopify's privacy policy, which you can find here: https://www.shopify.de/legal/datenschutz

 

Further information on data protection and the transfer of personal data to third countries by "Shopify" can be found in two "whitepapers":

https://help.shopify.com/pdf/cross-border-whitepaper.pdf

https://help.shopify.com/pdf/gdpr-whitepaper.pdf

 

Note on the processing of your data collected on this website in the USA by "Shopify": Insofar as personal data is transferred by "Shopify" from Canada to the USA, we point out that the USA is a country with an insufficient level of data protection according to EU standards (unsafe third country). There is a particular risk that your data may be processed by US authorities for control and monitoring purposes.

 

 

8. Payment Methods

 

Depending on the chosen payment method, personal data will be processed by a service provider. You can choose between PayPal, prepayment, or credit card.

 

a) PayPal

 

We have integrated PayPal components on our website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, so there is no classic account number. PayPal allows online payments to be initiated to third parties or payments to be received. PayPal also assumes trustee functions and offers buyer protection services.

 

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

 

If you select "PayPal" as a payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data required for payment processing.

 

The personal data transmitted to PayPal usually includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the processing of the purchase contract.

 

The purpose of the data transfer is payment processing and fraud prevention. We will only transmit personal data to PayPal if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. The purpose of this transmission is identity and creditworthiness checks.

 

PayPal may pass on personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill contractual obligations or if the data is to be processed on our behalf.

 

The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR, as the processing of data is necessary for payment with PayPal and thus for the performance of the contract.

 

b) Credit Card

 

You can also purchase from us using Visa, Mastercard, or American Express credit cards. In this case, the following data will be transmitted to the credit card institution or affiliated companies:

 

  • Credit card number
  • Name of the credit card holder
  • Credit card validity period
  • Security code

 

The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR, as the processing of data is necessary for payment by credit card and thus for the performance of the contract.

 

c) Direct Debit

 

You can also pay by direct debit. In this case, the necessary information for processing the purchase (e.g., IBAN) will be transmitted to the involved banks.

 

The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR, as the processing of data is necessary for payment and thus for the performance of the contract.

 

9. Trusted Shops 

 

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any collected reviews, as well as to offer Trusted Shops products to buyers after an order.

 

This serves to safeguard our overriding legitimate interests in optimal marketing by enabling a secure purchase, in accordance with Art. 6 para. 1 lit. f) GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of contract processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured.

 

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. Individual access data is stored in a security database for the analysis of security anomalies.

 

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for their use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data from the order data is automatically collected. Whether you, as a buyer, are already registered for product use is automatically checked on the basis of a neutral parameter, the email address hashed using a cryptographic one-way function. The email address is converted into this hash value, which cannot be decrypted by Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

 

This is necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in providing buyer protection and transactional review services linked to the specific order, in accordance with Art. 6 para. 1 lit. f) GDPR.

 

10. Existing Customer Advertising, Newsletter and Email Marketing with ActiveCampaign and Klaviyo


We send our existing customers promotional content, customer surveys, and other information related to our products that they have previously purchased from us via email.


We send our newsletter to our customers and website users with their explicit consent.

The legal basis for processing personal data in the context of existing customer advertising is Art. 6 para. 1 lit. f) GDPR, according to which data processing is permissible to safeguard our legitimate interests. We have a legitimate interest in informing our existing customers about our products and learning from them through surveys whether they are satisfied with our products and company or what we can improve.

If you do not wish to receive existing customer advertising, you can unsubscribe at any time using a corresponding link in the existing customer advertising emails or notify us by email or post (see 1.) that you do not wish to receive existing customer advertising. We will then ensure that you do not receive any further advertising. For your other rights, see below under 13.)

You can subscribe to the newsletter offered on our website with your explicit consent. In this case, we need your name and email address. We will then use this data exclusively for sending the newsletter. If you consent to receiving the newsletter or other emails, this constitutes consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time. The easiest way to do this is to unsubscribe from the newsletter via the link in the newsletter emails or to write to us by email or post stating that you no longer wish to receive emails from us.

As service providers for sending existing customer advertising and newsletters, we use the services of ActiveCampaign LLC from the USA, with a branch in Ireland (Charlemont Exchange, Charlemont Street, Dublin, D02VN88, Ireland), and Klaviyo, Inc. from the USA, with its headquarters at 125 Summer St., floor 6, Boston, MA 02111.

ActiveCampaign and Klaviyo are services that can be used to organize and analyze the sending of newsletters and promotional emails, among other things. ActiveCampaign and Klaviyo may also process your data on ActiveCampaign and Klaviyo servers in the USA. With the help of ActiveCampaign and Klaviyo, we can analyze email campaigns, e.g., our newsletter campaigns. The results of these analyses can be used to better adapt future emails or the newsletter to the interests of the recipients.

If you do not want analysis by ActiveCampaign and Klaviyo, you can unsubscribe from existing customer advertising or other advertising by email via the corresponding link in the emails or write to us by email/post. We will then ensure that you no longer receive any further promotional emails from us and that no further analysis activities take place.

We have concluded a data processing agreement with ActiveCampaign and Klaviyo, in which we oblige ActiveCampaign and Klaviyo to protect our customers' data and not to pass it on to third parties. Furthermore, we have agreed on standard contractual clauses provided by the EU with ActiveCampaign, which – together with supplementary measures – ensure that ActiveCampaign maintains a level of data protection equivalent to that of the EU, despite the possible data transfer to the USA.

Klaviyo Privacy:


We use Klaviyo on our website. Klaviyo is an email marketing service. The service provider is the American company Klaviyo, 125 Summer St, Boston, MA 02110, USA. Klaviyo processes your data, including in the USA. We point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks for the legality and security of data processing.


As a basis for data processing involving recipients in third countries (outside the European Union, Iceland, Liechtenstein, Norway) or a data transfer to such countries, Klaviyo uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred and stored in third countries such as the USA. Through these clauses, Klaviyo commits to observing the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places:


The data processing condition (Data Processing Agreement) that corresponds to the standard contractual clauses can be found at https://www.klaviyo.com/legal/dpa


You can find more information about the data processed through the use of Klaviyo in the Privacy Policy at https://www.klaviyo.com/legal/privacy-policy

 

11. Zendesk Support

 

We use the customer contact tool Zendesk to process user inquiries. The provider is Zendesk Inc. from the USA with a branch in Germany (Neue Schönhauser Straße 3-5, 10178 Berlin).

 

We use Zendesk to process your inquiries quickly and efficiently, e.g., by phone, email, or social media. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

 

We have concluded a data processing agreement with Zendesk. This ensures that Zendesk only uses user data within the framework of EU data protection standards exclusively for processing inquiries and does not pass them on to third parties.

 

Zendesk has Binding Corporate Rules (BCR) approved by the Irish data protection authority. These are binding internal company rules that legitimize internal company data transfers to third countries outside the EU and the EEA.

 

12. Duration of Data Storage and Cookie Expiration

 

If you have created a user account, we store your data permanently until you decide to delete the user account. If you only unsubscribe from existing customer advertising, we do not delete the user account data, but only block the data from being used for advertising purposes and ask ActiveCampaign and Klaviyo to delete your data.

 

If you place an order as a guest, we permanently store your email address, title, and name in order to send you existing customer advertising. More information on this can be found above under 10.). We only store your other personal data for the period necessary for the fulfillment of the contract, the implementation of pre-contractual measures, or your request, and the corresponding data is routinely deleted. If there is a legally prescribed duration for data storage, we will naturally observe this. Contract documents, such as invoices, must be retained by us for up to ten years.

 

In the case of other inquiries, e.g., via the contact form, we only store your data for as long as it appears necessary. This depends on your request. The messages addressed to us that are processed via Zendesk remain with us until you ask us to delete them or the purpose for data storage ceases (e.g., after your inquiry has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

 

The data you have stored with us for the purpose of sending the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Active Campaign and Klaviyo after unsubscribing from the newsletter. Data that has been stored with us for other purposes (e.g., email addresses for the member area) remains unaffected by this.

 

Trusted Shops automatically deletes the log files created when the Trustbadge is called up after 90 days at the latest.

 

 

Cookie Name

Lifespan

Hostname

Default Category

__kla_id

PERSISTENT

loewenzahnorganics.com

Targeting Cookies

__kla_id

PERSISTENT

static-tracking.klaviyo.com

Targeting Cookies

__kla_id

PERSISTENT

static.klaviyo.com

Targeting Cookies

__stripe_mid

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

__stripe_sid

PERSISTENT

loewenzahnorganics.com

Functional Cookies

__zlcid

PERSISTENT

static.zdassets.com

Functional Cookies

__zlcmid

PERSISTENT

loewenzahnorganics.com

Functional Cookies

__zlcstore

PERSISTENT

loewenzahnorganics.com

Functional Cookies

_ga

PERSISTENT

loewenzahnorganics.com

Performance Cookies

_gid

PERSISTENT

loewenzahnorganics.com

Performance Cookies

_landing_page

SESSION

loewenzahnorganics.com

Performance Cookies

_orig_referrer

SESSION

loewenzahnorganics.com

Strictly Necessary Cookies

_s

SESSION

loewenzahnorganics.com

Performance Cookies

_secure_session_id

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_shopify_country

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_shopify_d

SESSION

loewenzahnorganics.com

Performance Cookies

_shopify_evids

SESSION

cdn.shopify.com

Performance Cookies

_shopify_evids

SESSION

loewenzahnorganics.com

Performance Cookies

_shopify_m

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_shopify_s

SESSION

loewenzahnorganics.com

Performance Cookies

_shopify_sa_p

SESSION

loewenzahnorganics.com

Performance Cookies

_shopify_sa_t

SESSION

loewenzahnorganics.com

Performance Cookies

_shopify_tm

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_shopify_tw

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_shopify_y

SESSION

loewenzahnorganics.com

Performance Cookies

_tracking_consent

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

_y

SESSION

loewenzahnorganics.com

Performance Cookies

AWSALB

PERSISTENT

widget-mediator.zopim.com

Functional Cookies

AWSALBCORS

PERSISTENT

widget-mediator.zopim.com

Functional Cookies

cart

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

cart_currency

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

cart_sig

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

cart_ts

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

cart_ver

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

CONSENT

PERSISTENT

youtube-nocookie.com

Targeting Cookies

CONSENT

PERSISTENT

youtube.com

Targeting Cookies

cookietest

SESSION

cdn.shopify.com

Strictly Necessary Cookies

cookietest

SESSION

loewenzahnorganics.com

Strictly Necessary Cookies

lifepr_session

SESSION

www.lifepr.de

Targeting Cookies

locale_bar_accepted

SESSION

geolocation-recommendations.shopifyapps.com

Functional Cookies

locale_bar_accepted

SESSION

loewenzahnorganics.com

Functional Cookies

localization

PERSISTENT

loewenzahnorganics.com

Functional Cookies

OptanonAlertBoxClosed

PERSISTENT

.loewenzahnorganics.com

Strictly Necessary Cookies

OptanonConsent

PERSISTENT

.loewenzahnorganics.com

Strictly Necessary Cookies

prism_650006925

PERSISTENT

loewenzahnorganics.com

Targeting Cookies

prism_650006925

PERSISTENT

prism.app-us1.com

Targeting Cookies

secure_customer_sig

PERSISTENT

loewenzahnorganics.com

Strictly Necessary Cookies

XSRF-TOKEN

PERSISTENT

www.lifepr.de

Functional Cookies

 

13. Your Rights

 

a) Right to Confirmation

 

You have the right to request confirmation as to whether personal data concerning you is being processed by us. If you wish to exercise this right of confirmation, you can contact us at any time.

 

b) Right of Access

You have the right to obtain, free of charge, from us at any time information about the personal data stored about you and a copy of this information. You also have the right to request information about the following:

 

  • the purposes of processing
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from the data subject, any available information as to their source
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the General Data Protection Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

 

You also have the right to obtain information as to whether your personal data has been transferred to a third country or to an international organization. If this unlikely event has occurred, you also have the right to obtain information about the appropriate safeguards relating to the transfer.

 

If you wish to exercise your rights of access, you can contact us at any time.

 

c) Right to Rectification

 

You have the right to demand the immediate rectification of inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to have incomplete personal data completed – including by means of providing a supplementary statement.

 

If you wish to exercise your right to rectification, you can contact us at any time.

 

d) Right to Erasure ("Right to be Forgotten")

 

You have the right to demand from us that personal data concerning you be erased without undue delay, provided that one of the following reasons applies and insofar as the processing is not necessary:

 

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • The data subject withdraws consent on which the processing is based according to Article 6(1)(a) of the General Data Protection Regulation or Article 9(2)(a) of the General Data Protection Regulation, and where there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) of the General Data Protection Regulation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the General Data Protection Regulation.
  • The personal data have been unlawfully processed.
  • The erasure of personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the General Data Protection Regulation.

 

If one of the aforementioned reasons applies to you and you wish to arrange for the erasure of personal data stored by us, you can contact us at any time. We will promptly review and process the erasure request.

 

If your personal data has been made public by us and our company, as the controller pursuant to Article 17(1) of the General Data Protection Regulation, is obliged to erase your personal data, our company shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure by such other controllers of any links to, or copy or replication of, those personal data, insofar as processing is not required.

 

e) Right to Restriction of Processing

 

You have the right to demand from us the restriction of processing of your personal data if one of the following conditions is met:

 

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful, and you oppose the erasure of the personal data and request instead the restriction of their use.
  • We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims.
  • You have objected to processing and it is not yet clear whether our company's legitimate grounds outweigh your legitimate grounds for the objection.

 

If the above conditions are met and you wish to request the restriction of personal data stored by us, you can contact us at any time. We will then arrange for the restriction of processing.

 

f) Right to Data Portability

 

You have the right to receive the personal data concerning you, which you have provided to our company, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

 

When exercising your right to data portability, you have the right to have your personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

 

You can contact us at any time to exercise the right to data portability.

 

g) Right to Object

 

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or where processing of personal data concerning you is necessary for the purposes of the legitimate interests pursued by us or by a third party.

 

In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

 

If we process personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to us processing data for direct marketing purposes, we will no longer process the personal data for these purposes.

 

Furthermore, you have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you carried out by us for scientific or historical research purposes or statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

 

To exercise your right to object, you can contact us directly. You are free, in the context of the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

 

h) Automated Individual Decision-Making, Including Profiling

 

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, unless the decision

 

(1) is not necessary for entering into, or performance of, a contract between you and us, or

 

(2) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

 

(3) is based on your explicit consent.

 

If the decision

 

(1) is necessary for entering into, or performance of, a contract between you and us, or

 

(2) is based on your explicit consent,

 

we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

 

You can contact us at any time regarding your rights concerning automated decisions.

 

i) Right to Withdraw Data Protection Consent

 

You have the right to withdraw consent to the processing of personal data at any time. You can contact us at any time for this purpose.

 

j) Right to Lodge a Complaint with a Supervisory Authority

 

You have the right to lodge a complaint with a competent supervisory authority. For example, you can contact the authority responsible for Berlin:

 

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219, 10969 Berlin
Visitor entrance:
Puttkamerstr. 16-18

Tel.: +49 30 13889-0
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

 

14. Obligation to Provide Personal Data

 

We inform you that the provision of personal data may be legally required (e.g., by tax regulations) or may also arise from contractual provisions (e.g., details about the contracting party). It may be necessary for the conclusion of a contract that you provide us with personal data, which must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you as a natural person. Non-provision of personal data would result in the contract with you not being able to be concluded. Before you provide us with personal data, you can contact us. We will inform you on a case-by-case basis whether the provision of personal data is legally or contractually required or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the non-provision of personal data would have.

 

As of: October 11, 2022