Source: https://www.freeze-dry-foods.com/en/data-safety/
Timestamp: 2019-04-24 02:47:36+00:00

Document:
In principle, we process the personal data of our users only insofar as this is necessary to provide a functioning website with content and services. The processing of the personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons beyond our control and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of their personal data, the legal basis is provided by Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR).
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR provides the legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation to which our company is subject, the legal basis is provided by Art. 6 para. 1 lit. c GDPR.
In the event that the vital interests of the data subject or another person require the processing of personal data, Art. 6 para. 1 lit. d GDPR provides the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, then Art. 6 para. 1 lit. f GDPR provides the legal basis for processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to be valid. In addition, such storage may be provided for by European or national legislation in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
Storage in log files ensures the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. Evaluation of data for marketing purposes does not take place in this context.
For these purposes, our legitimate interest in the processing of data is in according with Art. 6 para. 1 lit. f GDPR.
The data is deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting data for provision of the website, this occurs when the respective session is completed.
In the case of storing the data in log files, this is the case after 60 days at the latest. Additional storage is possible. In this case, the IP addresses of the users are deleted or separated, so that assignment to the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. There is consequently no possibility of refusal by the user.
User data collected in this way are anonymised by technical means. Therefore, assignment of the data to the calling user is no longer possible. Data will not be stored together with other personal data of the users.
The use of analysis cookies is for the purpose of improving the quality of our website and its contents. Through use of analysis cookies, we learn how the website is used thereby enabling us to constantly optimise our service.
Alternatively, contact is possible via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored.
The legal basis for the processing of the data is provided by the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Processing of the personal data from the input mask is used only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input section of the contact form and for those sent by e-mail, this is the case when the particular conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The user has the possibility at any time to revoke his consent to the processing of personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot continue.
In this case, all personal data stored in the course of the contact will be deleted.
You may ask the person responsible to confirm whether personal data relating to you is processed by us.
8 - the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information has been transferred to a third country or an international organisation. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in relation to any transfer.
You have a right to rectification and / or completion by the person responsible, if the personal data relating to you is incorrect or incomplete. The person responsible must make the correction without delay.
4- if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the restriction of the processing according to the above conditions is limited, you will be informed by the person in charge before the restriction is lifted.
1- Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed.
2- You revoke your consent, on which the processing rested, according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. GDPR, and there is no other legal basis for processing.
3- You raise an objection to the processing in accordance with Art. 21 para. 1 GDPR and there are no prior justifiable reasons for the processing, or you raise an objection to the processing in accordance with Art. 21 para. 2 GDPR.
4- Your personal data has been processed unlawfully.
5- The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
6- The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
If the person in charge has made the personal data concerning you public and is under Article 17 (1) of the GDPR required to delete them, he shall take appropriate measures, including technical means and taking into account available technology and implementation costs, to inform data controllers who process the personal data that you have been identified as being affected, and requesting deletion of all links to such personal data or of copies or replications of such personal data.
5- to assert, exercise or defend legal claims.
If you have the right of rectification, deletion or restriction of processing by the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have a right to demand from the person responsible that you be informed about these recipients.
2- the processing is done using automated procedures.
In exercising this right, you also have the right to expect that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data, which arises from Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or that the processing is for the purpose of enforcing, exercising or defending legal claims.
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of processing carried out on the basis of the consent prior to the revocation.
3- occurs with your express consent.
However, these decisions may not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 6
 Art. 9
 Art. 9