Source: https://green-alley-award.com/privacy-policy/
Timestamp: 2019-04-22 16:26:38+00:00

Document:
Data protection and the security of your personal data are important to us and we implement appropriate technical and organisational measures to protect personal data that is subject to our access.
We, the Controller, (also referred to as “[Controller]”; “we”; “us”; or “our”), would like to inform you below about the type and extent of the processing of personal data when you visit and use our website.
This Policy also contains information about your data protection rights, including a right to object to some of the processing which Landbell carries out. More information about your rights, and how to exercise them, is set out in the “Your Rights” section.
• and, if applicable, the URL of the referring web page.
This data is only collected for data security purposes, to improve our website and for error analysis. As we pursue our legitimate business interests when processing your personal data for these purposes, we rely on the basis of Art. 6 par. 1 lit f) GDPR for doing this.
Please refer to the Applicants Privacy Notice available here.
To report „Mengenstrom“ and packaging amounts we have our webportals(landbelleasy-shop.de; kunden.landbell.de/web/meldeportal; mengenstrom.landbell.de;) in place. You need to check in regularly by using your username or e-mail address as well as your password. This requires registration via a registration form, where you need to input the name of your company, postal address and a person to contact as well as the contact´s e-mail address. The information you entered will only be used for this specific purpose. This Data processing is based on Art 6 par.1 lit b) GDPR, as the processing is necessary for the performance of a contract to which you are party or in order to take steps at the request of you prior to entering into a contract with us.
Personal data (e.g. your name, address data or contact data) that you voluntarily provide to us, e.g. in the context of an enquiry by e-mail to the contact persons named on our homepage, are stored with us and processed only for correspondence with you and only for the purpose for which you have made these data available to us. Therefore, we may use your information to provide products and services you have requested, if any, (Art. 6 par. 1 lit. b) GDPR). We may also process your data for responding to any comments or complaints you may send us or send you information on products and services provided by us, our affiliates and carefully selected partners. As all this is required by us to conduct our business and pursue our legitimate interest, we base the respective processings on Art. 6 par. 1 lit f) GDPR. In respect to the sending of direct marketing communication, you have the right to object to such processing. Please find further information on this right in the “Your rights” section below.
If you give us your consent, we may process your data based on Art 6 par. 1 lit a) GDPR for performing direct marketing via email or telephone in relation to our relevant products and services, or other products and services provided by us or our affiliates.
You can register on our website to use additional features on the site (e.g. for using our webportal as described above). We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration is marked with an asterisk under the data field and must be given in full. Otherwise, we will reject the registration. For important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration to inform you in this way. The processing of the data entered during registration takes place on the basis of Art. 6 par. 1 lit. f) GDPR, as the processing is necessary for pursuing our legitimate business interest in providing the additional services available for our registered users.
We offer you the possibility to subcribe to our newsletter via our homepage. We will only send you our newsletter if you consent us to do so, the respectice data processing is based on Art. 6 par. 1 a) GDPR. To subscribe we need at least your e-mail address. To ensure that the Newsletter was requested by you or from your e-mail address, you will first receive a confirmation e-mail. Only when you click on the activation link will you be added to our e-mail distribution list and receive the newsletter. The subscription to the newsletter is logged for verification purposes (IP address, date, time). You can unsubscribe from the newsletter at any time by contacting us directly or by notifying us using the link at the end of each newsletter.
Vimeo guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.
When you access a page on our website that has Vimeo embedded in it, a connection to Vimeo’s servers in the USA is established. For technical reasons, it is necessary for Vimeo to process your IP address. In addition, the date and time of your visit to our website will also be recorded.
If you are logged into Vimeo while visiting one of our webpages containing a Vimeo video, Vimeo will associate information about your interaction with our site to your Vimeo account. If you wish to prevent this, you must either log out of Vimeo before visiting our website or configure your Vimeo user account accordingly.
For the purpose of functionality and usage analysis, Vimeo uses Google Analytics. Google Analytics stores cookies on your terminal device via your browser and transmits information about the use of those websites in which a Vimeo video is embedded to Google. It is possible that Google will process this information in the USA.
The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website and in Vimeo’s legitimate interest in statistically analyzing user behavior for optimization and marketing purposes.
Your personal data may be shared with other entities of the Landbell Group when insofar as answering your question or providing you the service you requested requires the involvement of other group entities. Except from the Landbell Group, we will only be passed on to third parties if it is necessary for the execution of a contract and/or its technical processing, which regarding the website, includes our suppliers in charge of processing your data for the dispatch of the newsletter and for the hosting and maintenance of our website. When we subcontract such activities, we make sure your data is managed in compliance with the GDPR rules and this includes, where information is transferred outside the EEA, and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, that data is adequately protected by EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or a vendor’s Processor Binding Corporate Rules.
According to Art. 15-21 GDPR you can assert the following rights with regard to the personal data processed by us if the conditions described there are met.
5.1 Right to access (Art. 15 GDPR). You have the right to be informed about the personal data concerning you that is processed by us and be provided with a copy of your personal data we hold about you.
5.2 Right to rectification (Art. 16 GDPR). You may request the rectification of inaccurate personal data, or to complete personal data when it is incomplete.
• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing of your data is based.
• You have asserted a right to objectto the processing and there are no overriding legitimate grounds for the processing, or you asserted your right to object where your personal data is processed for direct marketing puprposes.
• Your data has been processed unlawfully.
• if personal data is required to assert, exercise or defend legal claims.
• if deletion is not possible due to storage obligations.
If data cannot be deleted, however, there may be a right to restrict processing (see below).
• you have objected to the processing of your data pursuant to Art. 21 par. 1 GDPR and it is not yet clear whether our legitimate grounds overide those of yours.
5.5 Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without our interference, provided that the processing is based on your consent (e.g. Art. 6 par. 1 lit a) GDPR)) or a contract (Art. 6 par. 1 lit b) GDPR) and the processing is carried out by us with the help of automated means.
5.6 Right to object (Art. 21 GDPR). You have the right to object at any time to the processing of personal data relating to you on the basis of Art. 6 par. 1 e) or f) GDPR for reasons arising from his particular situation, including profiling based on those provisions. Where your personal data is processed for direct marketing purposes without your consent and based on our legitimate interests, you have the absolute right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing (Art. 21 par. 2 GDPR). The respective personal data will no longer be processed for direct marketing purposes then.
5.7 Right to revoke consent (Art. 7 par. 3 GDPR). If you have consented to the processing of your personal data by us, you have the right to revoke your consent at any time. The legality of processing your personal data before revocation remains unaffected. We may further process such data pursuant to another applicable legal basis, e.g. for the fulfilment of our legal obligations.
5.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). If you have not received an answer after a reasonable period of time from the DPO, or have received an answer which is incomplete or unsatisfactory in your view, you shall have the right to lodge a complaint with a supervisory authority, in accordance with Art. 77 GDPR, if you onsider that the processing of personal data relating to you infringes the GDPR. Such complaint may be lodged in particular with the supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
6.1 If a legal regulation for the retention of data does not exist, the data will be deleted or destroyed if they are no longer necessary to achieve the above described purposes of data processings. Different periods apply to the storage of personal data, for instance due to tax law or according to some commercial law regulations. Finally, the storage period can also be based on the statutory limitation periods according to the respective applicable national laws.
6.2 The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted 3 years after this, beginning with end of the respective year.
6.3 Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
6.4 Where we process personal data for site security purposes, we retain it for 12 months.
6.5 Where we process personal data in connection with performing a contract, we keep the data as required according to the statutory retention period.

References: Art. 6
 Art 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 21
 Art. 6
 Art. 6
 Art. 77