Privacy policy

Introduction

1st Vegan GmbH (hereinafter referred to as "we") takes the protection of data of visitors to this website (hereinafter referred to as "you") seriously. We have therefore written this privacy policy to explain to you what data is collected from you, for what purpose this data is collected and what rights you have regarding your data.

Personal Data

With your consent and in accordance with Article 6 (1) (a) of the General Data Protection Regulation 2016/679 of the European Parliament and of the Council (hereinafter referred to as "GDPR"), personal data is collected when you visit this website. Personal data (hereinafter referred to simply as "data") is information by means of which you can be identified as an individual person, directly or indirectly, on its own or together with other information.

Contents

  1. Who is responsible for your data?
  2. What data is collected?
  3. How do we use your data?
  4. Where is your data stored and processed?
  5. How long is your data stored?
  6. Who has access to your data?
  7. What rights do you have regarding your data?
    1. Right to information about your data
    2. Right to rectification of your data
    3. Right to erasure of your data
    4. Right to restrict the processing of your data
    5. Right to object
    6. Right to data portability
    7. Right to complain to a supervisory authority
    8. Conditions for the assertion of your rights
      1. Conditions for the right to erasure of your data
      2. Conditions for the right to restrict the processing of your data
      3. Conditions for the right to object
      4. Conditions for the right to data portability
    9. Assertion of your rights
  8. What are cookies?
    1. Technically necessary cookies
    2. Technically unnecessary cookies
    3. Cookies on this website
    4. Removing cookies
  9. Which plugins and tools does this website use?
    1. Google Analytics
    2. Google reCAPTCHA

1. Who is responsible for your data?

The responsible body is the operator of this website:

1st Vegan GmbH
Heisinger Straße 45
87437 Kempten
Germany

Telephone: +49 1511 9122913
Email: shop@1st-vegan.com

The data protection officer of 1st Vegan GmbH is:

Leon Zanker

Email: lz@gutes.bio

2. What data is collected?

Among others, we may collect the following data from you:

  • Name;
  • Address;
  • Email address;
  • Telephone number;
  • IP address;
  • Device type;
  • Network operator;
  • Browser type;
  • Operating system;
  • Internet domain;
  • Host name;
  • Location;
  • Date and time of your access;
  • Time spent on the individual pages of this website;
  • Referring and forwarding URL.

3. How do we use your data?

In accordance with Article 6 (1) (f) GDPR, we use your data to ensure the operation of our business as well as to enable the provision of our services. For example, we need your data to create and manage your personal account and to process your orders.

We also use your data in accordance with Article 6 (1) (f) GDPR to improve our services by gaining customer insights. For example, we may make assortment adjustments based on your purchasing behavior or improve the user experience on our website by adjusting designs or the navigation.

Furthermore, we use your data in accordance with Article 6 (1) (a) GDPR to communicate with you and to respond to your inquiries. For example, if you send us a message via our contact form, this is to be understood as consent to the processing of your e-mail address as well as your name for the purpose of contacting you, unless otherwise specified by you. In this case, we will use your name and email address to respond to your inquiry.

We can also inform you directly about offers and promotions only by processing your data in accordance with Article 6 (1) (a) GDPR. For example, if you register to receive our newsletter by entering your e-mail and confirm the subsequent e-mail, this is to be understood as consent to the processing of your data for marketing purposes.

In accordance with Article 6 (1) (c) GDPR, we also use your data to comply with our legal obligations, for example the legal obligation to keep records. Your data may also be used to enforce contracts in accordance with Article 6 (1) (b) GDPR.

4. Where is your data stored and processed?

Your data is stored and processed in the European Economic Area (hereinafter referred to as the "EEA") and in other, non-EEA countries.

We point out that in non-EEA countries no level of data protection comparable to the EEA can be guaranteed. We have no influence on the activities of third parties (see Section 6 of this Privacy Policy).

5. How long is your data stored?

Your data will be stored as long as you maintain an account on our website or it is necessary for the provision of our services.

We also reserve the right to store your data for as long as we have a legitimate interest in your data in accordance with Article 6 (1) GDPR.

In accordance with Section 147 (3) AO in conjunction with Section 147 (1) numbers 1, 4 and 4a AO (German statutory retention period), data relevant to said legal texts may be stored for up to 10 years after their collection in accordance with Article 6 (1) (c) GDPR.

6. Who has access to your data?

Access to your data is granted to the operator of this website and to companies in non-EEA countries.

The transfer of your data to non-EEA countries will only take place for the purposes explained in this Privacy Policy (see Section 3 of this Privacy Policy).

Under no circumstances will your data be transmitted by us to third parties for advertising purposes.

7. What rights do you have regarding your data?

7.1 Right to information about your data

In accordance with Article 15 GDPR, you have the right to obtain information about your collected data. This includes the data itself and the following information:

  • In accordance with Article 15 (1) (a) GDPR, the processing purposes of your data;
  • In accordance with Article 15 (1) (b) GDPR, the categories of your data processed;
  • In accordance with Article 15 (1) (c) GDPR, where applicable, the recipients or intended recipients of your data;
  • In accordance with Article 15 (1) (d) GDPR, the planned storage period of your data or, if this is not possible, the criteria on the basis of which this storage period is determined;
  • In accordance with Article 15 (1) (e) GDPR the existance of your right to rectification (see Section 7.2 of this Privacy Policy) and erasure of your data(see Section 7.3 of this Privacy Policy), as well as your right to restrict the processing of your data (see Section 7.4 of this Privacy Policy) and your right to object to processing of your data (see Section 7.5 of this Privacy Policy);
  • In accordance with Article 15 (1) (f) GDPR the existence of your right to complain to a supervisory authority;
  • In accordance with Article 15 (1) (g) GDPR the origin of your data if it has not been collected from you;
  • In accordance with Article 15 (1) (h) GDPR, the existence of an automated decision-making process, as well as its logic and purpose;
  • In accordance with Article 15 (2) GDPR, appropriate safeguards when your data is transferred to a third country or an international organization.

The data and information relating to your data will be provided to you in a commonly used electronic format in accordance with Article 15 (3) GDPR, provided that you have requested access to your data by electronic means and have not indicated otherwise.

For each copy of your requested data beyond the first copy, you may be charged a reasonable fee based on administrative costs in accordance with Article 15 (3) GDPR.

7.2 Right to rectification of your data

In accordance with Article 16 GDPR, you have the right at any time to have inaccurate data about you corrected or supplemented without undue delay.

7.3 Right to erasure of your data

In accordance with Article 17 (1) GDPR, you have the right to have all or part of your data deleted.

There are certain conditions for the right to erasure of your data (see Section 7.8.1 of this Privacy Policy).

7.4 Right to restrict the processing of your data

You have the right to restrict the processing of your data in accordance with Article 18 GDPR.

There are certain conditions for the right to restrict the processing of your data (see Section 7.8.2 of this Privacy Policy).

7.5 Right to object

You have the right to object to the processing of your data in accordance with Article 21 (1) GDPR.

There are certain conditions for the right to object in accordance with Article 21 (1) GDPR (see Section 7.8.3 of this Privacy Policy).

In accordance with Article 21 (2) GDPR, you have the right, without any specific conditions that have to be met, to object to receiving direct marketing (for example, receiving newsletters), including any associated profiling.

If you exercise these rights, your data may no longer be used for these purposes in accordance with Article 21 (3) GDPR.

7.6 Right to data portability

In accordance with Article 20 GDPR, you have the right to receive your data that you have provided to us in a common and machine-readable format or to transfer it directly to another responsible party.

There are certain conditions for the right to data portability (see Section 7.8.4 of this Privacy Policy).

7.7 Right to complain to a supervisory authority

In accordance with Article 77 (1) GDPR, you have the right to file a complaint against us with a supervisory authority at any time if you believe that our processing of your data violates the GDPR.

7.8 Conditions for the assertion of your rights

7.8.1 Conditions for the right to erasure of your data

In order to assert the right to erasure of your data in accordance with Article 17 (1) GDPR (see Section 7.3 of this Privacy Policy), at least one of the following conditions must be met:

  • Your data is no longer necessary for its intended purpose;
  • You withdraw your consent on which the processing of your data was based in accordance with Article 6 (1) (a) GDPR and there is no other legal basis for the processing of your data;
  • You object to the processing of your data in accordance with Article 21 (1) GDPR (see Section 7.5 of this Privacy Policy) and there are no overriding legitimate grounds for processing your data (see Section 7.8.3 of this Privacy Policy);
  • You object to receiving direct marketing and to related profiling in accordance with Article 21 (2) GDPR (see Section 7.5 of this Privacy Policy);
  • Your data has been processed unlawfully;
  • The erasure of your data is necessary to fulfill another legal obligation.

7.8.2 Conditions for the right to restrict the processing of your data

In order to assert the right to restrict the processing of your data in accordance with Article 18 GDPR (see Section 7.4 of this Privacy Policy), at least one of the following conditions must be met:

  • You dispute the accuracy of your data in accordance with Article 16 GDPR (see Section 7.2 of this Privacy Policy) for a period of time that allows us to verify the accuracy of your data;
  • The processing of your data is unlawful and you request the restriction of the processing of your data in accordance with Article 18 GDPR (see Section 7.4 of this Privacy Policy) instead of the erasure of your data in accordance with Article 17 (1) GDPR (see Section 7.3 of this Privacy Policy);
  • We no longer need your data for the purposes of their processing, but you need your data to assert, exercise or defend legal claims;
  • You have objected in accordance with Article 21 (1) GDPR (see Section 7.5 of this Privacy Policy), but it is not yet clear whether our legitimate grounds for processing your data override yours (see Section 7.8.3 of this Privacy Policy).

7.8.3 Conditions for the right to object

In order to assert the right to object in accordance with Article 21 (1) GDPR (see Section 7.5 of this Privacy Policy), the following conditions must be met:

  • We cannot demonstrate any legitimate grounds for further processing of your data that override your interests, rights and freedoms;
  • The processing of your data does not serve the assertion, exercise or defense of our legal claims.

7.8.4 Conditions for the right to data portability

In order to assert the right to object in accordance with Article 20 GDPR (see Section 7.6 of this Privacy Policy), at least one of the following conditions must be met:

  • The processing of your data is based on your consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR;
  • The processing is based on a contract in accordance with Article 6 (1) (b) GDPR.

7.9 Asserion of your rights

To assert your rights, you may contact the responsible body for this website or preferably the data protection officer of the responsible body of this website (see Section 1 of this Privacy Policy) via the contact form on this website or via any other means indicated in this Privacy Policy (see Section 1 of this Privacy Policy). We will respond to your inquiries without undue delay and within a reasonable period of time.

We expressly point out that the assertion of your rights may have an impact on our ability to provide you with our services.

8. What are cookies?

Cookies are text files that can be stored in your Internet browser by websites. Cookies are not intrinsically harmful software, but tools used by websites to provide certain services, such as customer accounts. They can be created by the website operator or by third parties. Cookies created by third parties are often used for advertising purposes.

Cookies are commonly divided into two categories, which will be briefly explained below.

8.1 Technically necessary cookies

Technically necessary cookies are a prerequisite for the error-free functioning of websites.

These are often so-called session cookies, which are only stored in the browser for a limited time. Session cookies are used, for example, to store the contents of the shopping cart in online stores or provide websites with information about whether a user is currently logged in with a customer account.

Another type of cookies, which are often technically necessary, are persistent cookies. Persistent cookies remain stored in the browser for a longer period of time. They are used, for example, to store whether a user has consented to the collection of personal data by clicking "OK" on a cookie banner or the preferred settings of a user, for example the language in which the page should be displayed.

8.2 Technically unnecessary cookies

Technically unnecessary cookies have no influence on the error-free functioning of websites.

These cookies are often used by advertisers to analyze the browsing behavior of users over time and on different websites. Due to this, these cookies are mostly persistent cookies.

The analysis of browsing behavior is also often used to better understand how users interact with websites and to be able to improve the user experience through the insights gained.

8.3 Cookies on this website

This website uses both technically necessary and technically unnecessary cookies with your consent in accordance with Article 6 (1) (a) GDPR.

The technically necessary cookies on this website are used in accordance with Article 6 (1) (f) GDPR to ensure the operation of our company and to be able to provide our services such as customer accounts, shopping cart, checkout and language settings.

The technically unnecessary cookies on this website are used in accordance with Article 6 (1) (f) GDPR to improve our services by gaining customer insights. Through these insights, for example, assortment adjustments can be made and the presentation of the website can be improved by prioritizing frequently accessed pages of the website. Restructuring navigation for a smoother user experience is also an example for the purpose of these cookies.

8.4 Removing cookies

Since cookies are stored on your device and not on the servers of the websites you visit, they can be deleted in most internet browsers, for example Google Chrome, Mozilla Firefox, Microsoft Edge, Opera and Internet Explorer.

In the settings of most internet browsers, there is a menu item for data protection or cookies, in which cookies can be managed. Stored cookies can be viewed or deleted here. Some Internet browsers only offer the option to delete the entire browser data. As a rule, this option deletes the cookies as well as other data.

In addition, add-ons can be found for most modern internet browsers that can specifically block or delete cookies.

9. Which plugins and tools does this website use?

9.1 Google Analytics

This website uses Google Analytics to analyze your user behavior in accordance with Article 6 (1) (f) GDPR. The insights gained from this are used to optimize this website.

Google Analytics is provided by

Google Ireland Limited
Gordon House
Barrow Street 4
Dublin
Ireland

(hereinafter referred to as "Google").

Google processes your data on our behalf and is contractually obligated to take measures to ensure security and confidentiality with respect to your data.

During your visit to this website, the following data, among others, is collected by Google:

  • The pages accessed on this website;
  • The products ordered on this website including the sales generated by them;
  • The achievement of specific goals, for example, contact requests or newsletter signups;
  • Your behavior on pages of this website, for example clicks or scrolling behavior;
  • Your approximate location in the form of the country as well as the city from which this website is accessed;
  • Your shortened IP address, via which no clear assignment is possible;
  • Information about your device, its screen resolution and the browser used, as well as your Internet service provider;
  • The referring URL of the visit, that is, the way you found this website.

This data is transmitted to a server in the USA (see Section 4 of this Privacy Policy).

Under no circumstances will personal data such as your name, address or contact details be transferred to Google.

Google stores cookies in your internet browser for a period of two years after your last website visit. You will receive a randomly generated identification number that enables Google to recognize you the next time you visit this website. The above data is stored in connection with your identification number. In this way, an anonymized user profile of you is created.

The data of this user profile will remain for 14 months and will be deleted automatically after this period. Other data remains stored indefinitely.

If you do not agree with this collection, you can refuse cookies when visiting the website via our cookie banner. Please note that the error-free function of the website cannot be guaranteed in this case. There is also an add-on for most modern internet browsers, with the one-time installation of which the data collection by Google can be prevented. In this case, the error-free function of this website will not be affected.

9.2 Google reCAPTCHA

This website uses Google reCAPTCHA (hereinafter referred to as "reCaptcha") to protect against misuse by automated processes in accordance with Article 6 (1) (f) GDPR.

In the course of this, Google (see Section 9.1 of this Privacy Policy) collects the following data from you:

  • IP address;
  • Language set in the internet browser;
  • Screen resolution;
  • Window resolution;
  • Timezone;
  • Add-ons installed on the internet browser.

This data is only collected when you visit a page of this website with an embedded reCaptcha plugin.

Data collected using reCaptcha is transmitted to a server in the USA (see Section 4 of this Privacy Policy) and may be stored there indefinetly.

If you do not agree with the collection of your data, you can refuse cookies when visiting this website via our cookie banner. Please note that the error-free function of this website cannot be guaranteed in this case.