Privacy policy

Thank you for your interest in our online shop.

The protection of your privacy and your personal data is something we take very seriously.

Our goal in processing data is only to process personal data when this data is relevant to the sensible and economical use of the offerings in our online shop. Our privacy policy complies with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

In this document, we provide detailed information on the data we process when you visit our website, and the form in which we process this data. By doing so, we fulfil our obligation to provide information to you in accordance with Art. 13 of the GDPR.

Responsible person and contact details for data protection officer:

The person responsible for the data processing that takes place on our website is:
foodspring GmbH
Lobeckstr. 30-35
10969 Berlin
Email: data-protection@foodspring.com

Our data protection officer can be contacted at:
JBB Data Consult GmbH
Christinenstraße 18/19
10119 Berlin, Germany
Email: datenschutzbeauftragter@foodspring.com

1. Personal data

According to the GDPR, personal data means “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

2. Functions of our website

In the sections below, we explain which data we process when you use the functions we offer. We also explain the legal basis for the processing of this data, how long we store your data, and which other parties, if any, will receive your data.

a) General use of our website

When you visit our website, we generally only collect and store personal data that you actively provide to us. However, the web service of our host also automatically records visits to our website including, in particular, the IP address of the person visiting the website. Your IP address will not be stored.

To maintain system security, our host also creates log files. These log files include information such as: The date of access, the URL, the content accessed and the information transmitted.

This information is only available to us in an anonymised format and therefore cannot be traced back to individuals.

Your IP address is processed to establish a connection to enable us to provide you with access to our website, in accordance with Art. 6, para. 1(f) of the GDPR. This purpose is classed as a legitimate interest.

Our log files are stored for 30 days.

b) Contact form

We provide a form that enables you to contact us. To use this form, you must provide your email address so that we can respond to your enquiry. You may also provide your name, a subject for your enquiry, and the details of the enquiry itself.

If you contact us via the email address provided on our website, we will obtain your email address and any other information that you include in your email. To enable us to look into your enquiry, we are required to process this data. When you contact us, we will process your data so that we can look into and respond to your enquiry. The legal basis for the processing of this data is Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

We will store your emails and other correspondence with us for as long as required to process your enquiry, plus a further period of three years, in case you contact us again with reference to your original question. This does not apply if the content of your email initiates a contractual relationship with us. In such cases, the retention period will be based on the contract to which the email refers. We will provide a separate explanation of how your data will be processed under the relevant contract.

c) Opening a customer account, purchasing function & reviews

When you open a user account, we will store the required user data, which you provide voluntarily. When you place an order in our online shop, we will automatically create a user account based on your order data. Your order data will be sent to you by email, along with a copy of our General Terms and Conditions. As a registered user, you can view your order data and previous orders in your user account at any time. You can instruct us to delete your user account at any time. We will use the data you provide to fulfil and process your order.

To create a customer account and when you place an order with us, we will collect the following data: Your title, first name(s), surname, email address, password (of your choice), company, house name/number, street and any additional address data, country, postcode, region, telephone number

Your reviews are also linked to your customer account. This enables us to ensure that you can only review products that you have purchased. To provide this function, we collect the following data: Your name, title of your review, your review, your rating (number of stars). At no point will we publish any of the personal data in your account. Your customer account data will be processed solely to provide you with the customer account functions and – if you make a purchase – to process and fulfil your order. This data is also processed based on Art. 6, para. 1(b) of the GDPR. Furthermore, we are obliged by law to store certain types of data, such as invoices, contracts and other information relevant to our accounting processes, for a specific period of time. Data is processed for this purpose based on Art. 6, para. 1(c) of the GDPR and §147 of the German Fiscal Code (AO) and §257 of the German Commercial code (HGB). We will store the data processed in connection with your customer account until you close your customer account. Upon closure, we will store your data for a further three years, in case any claims arise as a result of your legal relationship with us. Personal data contained in contracts or invoices will be stored for a period of 11 years from the end of the year in which you closed your account. Data contained in business correspondence or other documents that is relevant to taxation will be stored for a period of seven years from the end of the year in which you closed your account.

As part of the contract fulfilment process, we will contact you to invite you to review the products you have ordered. The information you provide will be used solely for this purpose and, in particular, will not be used for marketing purposes or passed to third parties. This data is also processed based on Art. 6, para. 1(f) of the GDPR; the aforementioned purpose is classed as a legitimate interest. We will store your review for as long as we continue to sell the product.

Unless you have indicated otherwise, we will use the email address provided when you purchased our merchandise or services to send advertisements, in electronic form, for products or services we offer that are similar to those you previously purchased. You can ask us to refrain from using your email address for this purpose at any time. To do so, contact us using the contact details provided in our legal notice or via the link provided in our advertisement emails. You will not incur any costs aside from the basic charges levied by your telecommunications provider. The legal basis for processing this data is Art. 6, para. 1(f) of the GDPR and Art. 95 of the GDPR and §7, para. 3 of the German Act Against Unfair Competition (UWG). We will store the data required to send you marketing communications until you revoke your consent for us to send marketing communications.

d) Newsletter and Advisory Services

When you register for our newsletter, your email address and your permission is saved and is used exclusively for our own advertising purposes until you request to stop receiving the newsletter. You can request to stop receiving the newsletter at any time this resulting in any costs other than the communications costs based on basic rates.

As a foodspring customer, you will receive a free advisory service as well as product recommendations via email. The advisory service as well as product recommendations are provided to every customer, whether they are subscribed to the newsletter or not. With that, we would like to provide you with information about all of our products and offers that suit your order history and might interest you based on what your most recent purchases may have been. We comply with relevant legal requirements as a matter of course. You can request to unsubscribe from our advisory service and product recommendations at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter). You will additionally find a cancellation link in each email that you receive.

When you register for our newsletter, your email address and your permission is saved and is used exclusively for our own advertising purposes until you request that delivery of the newsletter be stopped. To do this, we use a so-called “Double Opt-In” process, so we will only send you our email newsletter once you have expressly let us know that is what you want. We send you a confirmation email, in which we request that you click the link contained in said email, which then sends us your confirmation. You can request to cancel at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter). You will additionally find a cancellation link in each newsletter that you receive.

The processing is based on Art. 6 para. 1 lit. a) GDPR. We store your data until you revoke your consent.

We use the information that is automatically generated as well as the information you provide us with to constantly improve your shopping experience, protect you against unwanted advertisements and to individually tailor our promotions to your interests. To do this, we solely use the information in its pseudonymous form, so for example, receipt and confirmation of emails being read, your order history, dates and times that you have visited our online store and product pages that you have visited. The analysis and evaluation of this information makes it possible for us to send you promotions tailored to you. Our goal is to make our advertisements more useful and interesting to you. In doing this, we aim to prevent you from receiving unwanted ads and only sending you things that might be of interest to you, for example in the form of newsletters, product recommendation emails, postal advertisements or brochures in packages. If you do not wish to receive any personalised advertisements, you can request to completely stop or tailor them to your wishes at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter).

The processing here is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to promote our products. We store your data for this purpose until you object to its use.

d) Newsletters and consulting services

We will process your data based on Art. 6, para. 1(a) of the GDPR. We will store your data until you revoke your consent for us to do so.

This data is processed based on Art. 6, para. 1(f) of the GDPR. Marketing our products is classed as a legitimate interest. We will store your data for this purpose until you revoke your consent for us to do so.

e) Body check

As part of our body check, we will collect and process data on your lifestyle and health status. This data is collected via a questionnaire; all of the data provided is stored. We then analyse this data to make targeted recommendations for products that match your current health status and objectives.

If you opt to receive a detailed evaluation of your body check results by email, we will link your email address to the data you provide to enable us to send you the evaluation.

In such cases, this data will be processed based on Art. 6, para. 1(a) and Art. 9, para. 2(a) of the GDPR. You will be asked separately to provide your express consent. We will store your data until you revoke your consent for us to do so.

f) Adyen

We aim at offering various payment options to our customers. To do so, foodspring authorizes a payment service provider – Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ, Amsterdam, The Netherlands – to handle payments on behalf of foodspring. Offering a wide range of convenient payment options to our customers is classed as a legitimate interest. In accordance with Art. 6, para. 1(f) of the GDPR, foodspring passes relevant payment information to a payment service provider (Adyen) and a payment service provider handles related matters around these financial transactions. In case when customer’s credit card has expired Adyen may request the relevant payment scheme or lookup up your up-to-date card information on the Adyen platform, to facilitate the payment. Further information on how Adyen is processing data can be found at https://www.adyen.com/legal/terms-and-conditions and https://www.adyen.com/policies-and-disclaimer/privacy-policy.

g) PayPal and Payone

Existing product subscriptions are handled through the payment service providers PayPal and Payone. The providers of these payment services are PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) and BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, Germany. If you opt to make a payment via these payment providers, the payment data you provide will be passed to the relevant payment provider in accordance with Art. 6, para. 1(f) of the GDPR. Offering a wide range of convenient payment options to our customers is classed as a legitimate interest. Further information on data processing at PayPal and Payone can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full and https://www.payone.com/datenschutz/. In addition, our affiliate companies may also have access to personal data (see below for more information).

3. Recipients of the data

Within our company, the departments involved in processing your orders and responding to your enquiries have access to your data. We also use external service providers where we cannot (or cannot feasibly) complete a specific action or implement a specific process ourselves. These external service providers are primarily providers of IT and telecommunications services.

4. Rights of data subjects

The General Data Protection Regulation guarantees you certain rights, which you can exercise against us if there are legal grounds for you to do so.

Art. 15 of the GDPR – Right of access by the data subject: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, which data is being processed and how the data is being processed.
Art. 16 of the GDPR – Right to rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Art. 17 of the GDPR – Right to erasure (‘right to be forgotten’): You have the right to obtain from the us the erasure of personal data concerning you without undue delay. Please take note of the exception described under Point II. 4.
Art. 18 of the GDPR – Right to restriction of processing: You have the right to obtain from the controller restriction of processing.
Art. 20 of the GDPR – Right to data portability: Where we are processing your data based on your consent or to fulfil a contract, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from us, or to have the data transmitted to another controller, either directly or indirectly and insofar as it is technically feasible to do so.
Art. 21 of the GDPR – Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on our legitimate interests or required in the public interest, or in the exercise of official authority.
If you object to the processing of your personal data, we will no longer process your personal data unless we can demonstrate that there are compelling grounds to do so which outweigh your interests, rights and freedoms, or where we are required to process your data to file, exercise or defend a legal claim.
If we process your personal data for direct marketing purposes, you have the right to object to such processing of your data at any time. If you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for this purpose.
Art. 77 of the GDPR and §19 of the BDSG – Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the applicable regulations.

If you have granted your consent, you may revoke this consent at any time. In such cases, all data processing that has taken place prior to the revocation of your consent will be deemed legally compliant. To revoke your consent, you may click on the link provided in any email you receive from us to unsubscribe from our email service. You can also change the appropriate setting in your user account or send an email to {{config path="general/imprint/email"}}. If you send us a message stating that you no longer wish to receive emails from us, we will not send any further emails to the email address you indicate.

5. Obligation to provide data

You have no contractual or legal obligation to provide your personal data to us. However, without the data you provide, we will be unable to offer you our services.

6. Existence of automatic decision-making systems (including profiling)

We do not use automatic decision-making systems with any legal impact or other effect on you.

7. Internet-specific data processing

We use "cookies" to enhance the functionality of our Internet site and to make its use more convenient for you. When you enter our website, these “cookies” may be used to store data on your computer. You can adjust the settings on your browser to prevent cookies from being stored on your computer. However this may limit the functionality of our website.

a) The website uses cookies to the following extent: Transient cookies (for temporary use), persistent cookies (time-limited use), third party cookies (from third parties).

b) Transient cookies are deleted automatically, once you close your browser. These include specifically the so-called session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to a common session. It allows your computer to be recognised when you visit the website next time. Session cookies are deleted once you log out or close your browser.

c) Persistent cookies are deleted automatically after a specified time, which can vary from one cookie to the next. You have the option to delete all stored cookies at any time via the setting options of your browser.

d) You can configure the settings of your browser according to your wishes. Which means you can e.g. refuse to accept third party cookies or all cookies. This setting option may, however, result in you not being able to use this website’s full functionality. You can also change the settings in your browser to ask for your permission every time a cookie tries to access your computer. You can find detailed information on how to change your browser settings in this guide.

Google Analytics

Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

We use Google Analytics on our website. Google Analytics is a web analysis service that optimises the use of our website. The IP address that is communicated from your browser through the use of Google Analytics is not combined with other data from Google. As part of Google’s tracking system, information on products that you have ordered will also be transmitted.

The data sent by us and linked to cookies, user IDs and advertising IDs will be deleted automatically after 36 months. Further information on the terms of use and privacy policy can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

The legal basis for the use of Google Analytics is Art. 6, para. 1(f) of the GDPR.

The following plugin enables you to opt out of Google tracking: http://tools.google.com/dlpage/gaoptout?hl=d

Hotjar

Hotjar Ltd., Level 2, St Julian’s Business Centre, 3 Elia Zammit Street, St Julian’s STJ 1000, Malta

When you use this website, Hotjar (web analytics service provider) collects and stores data, which is then used to create pseudonymised use profiles. These use profiles are intended to analyse visitor behaviour and are used to improve our online offering based on user needs.

The use of Hotjar services is based on Art. 6, para. 1(f) of the GDPR. Analysing your use of our website is classed as a legitimate interest.

You can revoke your consent for the use of Hotjar services at: http://www.hotjar.com/privacy

VWO

VWO, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India

When you use this website, VWO (web analytics service provider) collects and stores data, which is then used to create pseudonymised use profiles. These use profiles are intended to analyse visitor behaviour and are used to improve our online offering based on user needs.

The use of VWO services is based on Art. 6, para. 1(f) of the GDPR. Analysing your use of our website is classed as a legitimate interest.

You can revoke your consent for the use of VWO services at: https://vwo.com/privacy-policy/

Adnymics

adnymics GmbH (“Adnymics”), Denisstraße 1b, 80335 Munich, Germany

Our website uses technology by adnymics GmbH. Adnymics uses cookies to enable us to create personalised brochures (which are shipped with the package when the user places an order) with content that may be of interest to the user.

The recommendations are generated based on the products that the user has viewed and purchased.

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Outbrain

Outbrain UK Limited (“Outbrain”), 5 New Bridge Street, London, EC4V 6JA, UK

Our website uses technology by the provider Outbrain. Outbrain uses cookies stored on your computer to enable us to display content that may be of interest to you on our website or on third-party websites. The recommendations are defined based on the content you have viewed. Outbrain is responsible for the automatic technical delivery and control of the content. No personal data is stored.

Further information on the terms of use and privacy policy can be found at http://outbrain.com/legal/privacy

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

You can revoke your consent at the following link: https://www.outbrain.com/legal/privacy#advertising_behavioral_targeting

Google Maps

Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

We use the map service Google Maps on our website. Google Maps provides an address completion option to ensure that your address is correct.

Further information on the terms of use and privacy policy can be found at https://www.google.com/intl/de_de/help/terms_maps.html and https://policies.google.com/?hl=de.

The legal basis for the use of Google Maps is Art. 6, para. 1(f) of the GDPR.

Criteo

Criteo GmbH (“Criteo”), Gewürzmühlstraße 11, 80538 Munich, Germany

Our website uses the technology provided by Criteo GmbH to collect and store anonymised information on the browsing habits of our website visitors for marketing purposes.

For remarketing purposes, when you access our website, a Criteo code is executed and remarketing tags are integrated into the website. This process places a cookie on the user’s device. The cookie stores information on which pages the user has accessed, what kind of content he or she is interested in, and which offers the user has clicked on.

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

You can revoke your consent for the use of this service at the following link: http://www.criteo.com/de/privacy/.

Bing Ads

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Bing Ads collects and stores data on our website. The stored data allows us and Microsoft to see that you have clicked on an advertisement, have been redirected to our website and have made a purchase. No information on your identity is stored.

You can revoke your consent for the use of this service at the following link: http://choice.microsoft.com/de-de/opt-out

Push notifications

CleverPush UG (limited liability company) (“CleverPush”), Tondernstr. 1, 22049 Hamburg, Germany

Our website uses the CleverPush service to send you information on your order or subscribed topics via browser push notifications.

To enable us to display push notifications, CleverPush collects and processes your browser ID or your device ID, if you are using a mobile device, on our behalf.

Further information is available at https://cleverpush.com/faq

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Webtrekk

Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany

Our website uses services provided by Webtrekk GmbH. Webtrekk is a company that collects and stores use data for web analytics purposes.

The use data collected is anonymised by shortening the IP addresses.

Further information is available at https://www.webtrekk.com/de/index/opt-out-webtrekk/

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Optinmonster

Retyp LLC.

Our website uses the Optinmonster service. This service allows us to display overlays on our website to offer additional services to our visitors.

No personal data is transferred to Optinmonster.

Further information is available at https://optinmonster.com/privacy/.

Click here to revoke your consent for the use of this service.

Facebook

Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304 USA

This website uses the “Custom Audiences” remarketing function provided by Facebook. This function is designed to allow targeted advertising to be displayed to Facebook users who have visited our website (“Facebook ads”). For this purpose, the fact that you have visited this website is communicated to the Facebook server; Facebook then links this information to your personal user account.

Further information is available at: https://www.facebook.com/about/privacy/

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Google AdWords

Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Our website uses Google AdWords. AdWords is an online advertising program. We use conversion tracking as part of this program. If you click on an ad hosted by Google, a conversion tracking cookie is placed on your system. The cookie allows us and Google to see that you clicked on the ad and were redirected to our website. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking.

Further information is available at: https://www.google.de/policies/privacy/

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Zopim

Zendesk Singapore Pte. Ltd., 401 Commonwealth Drive, Haw Par Technocentre, #07-01, Singapore 149598

Our website uses the chat service Zopim to simplify communication with visitors to our website. All communications are passed to the service provider Zopim, and visitors are identified using cookies to ensure seamless communication.

Further information is available at: https://www.zendesk.com/company/customers-partners/privacy-policy/

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Awin

AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

We use the Awin/Zanox service for the “affiliate programme” on our website. The service transmits and stores information on pages you visit and purchases you make.

Further information is available at: https://www.awin.com/de/rechtliches/privacy-policy

The legal basis for the use of Awin/Zanox is Art. 6, para. 1(f) of the GDPR.

You can revoke your consent for the use of the service at the following link: https://www.awin.com/de/rechtliches/cookieoptout

Squarelovin

Anchor Media GmbH, Budapester Straße 45, 20253 Hamburg, Germany

This website uses the Squarelovin service to display a collage of recommended images on Instagram. For analysis purposes, the product page you have visited and your aggregated purchase data is transferred to the service.

Further information is available at: https://squarelovin.com/business/home/privacy/

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

Click here to revoke your consent for the use of this service.

Transactionale

Flyer Tech S.r.l., Via San Donato, 82, 40127 Bologna, Italy

We use the Transactionale service for the “affiliate programme” on our website. The service transmits and stores information on pages you visit and purchases you make.

Further information is available at: https://www.transactionale.com/privacy-end-users

The legal basis for the use of Transactionale is Art. 6, para. 1(f) of the GDPR.

You can revoke your consent for the use of the service at the following link: https://www.transactionale.com/privacy-end-users

Newrelic

New Relic Inc., 188 Spear St, San Francisco, CA 94105, USA

When you use this website, Newrelic (web analytics service provider) collects and stores data. This data is intended to analyse visitor behaviour, and is used to improve our online offering based on user needs. No personal data is transferred.

The legal basis for the use of Newrelic is Art. 6, para. 1(f) of the GDPR.

Click here to revoke your consent for the use of this service.

DC Analytics

DCMN GmbH, Boxhagener Str. 18, 10245 Berlin, Germany

On this website, DCMN (web analysis services) collects and stores data from which user profiles are created. These user profiles are used to analyze visitor behavior and are evaluated to improve and tailor our services to meet the needs of our customers. Your IP address is not stored in plain text. In the course of the tracking, the order number and the order amount are also transmitted to DCMN.

The use of DC Analytics is based on Art. 6 para. 1 lit. f) DS-GVO. Our legitimate interest is to analyze your use of our website.

You can object to this process at the following link: https://dcanalytics.dcmn.com/privacy-policy/

Sovendus

Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe

Voucher offers of Sovendus GmbH: In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP- address in encrypted form to Sovendus GmbH, Moltkestrasse 11, D76133 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 Abs.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 Abs.1 f GDPR). If you are interested in a voucher offer of Sovendus, while there is no objection existing to receive such offers, and if you click on the voucher banner, we will transmit your form of address, your name and your email address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).

You will find further information about the processing of your data by Sovendus in their Online Data Protection Notice at https://www.sovendus.co.uk/privacy_policy.

Taboola

Taboola, Inc.,1115 Broadway, 7th fl., NY, 10010, USA

On our website we use the technology of the Taboola. By using cookies stored on your computer, Taboola may provide the user with potentially interesting content within our website or on third-party websites. The recommendations are defined on the basis of the content you read. The content is delivered / controlled automatically by Taboola. Personal data is not stored.

For more information about Terms of Use and Privacy, please seehttps://www.taboola.com/privacy-policy

The use of the service is based on Art. 6 para. 1 lit. f) DS-GVO. Our legitimate interest results from the purpose described above.

You can contradict using the following link:https://www.taboola.com/privacy-policy

Amazon ad system

Amazon Europe Core S.à.r.l., 5 Rue Plaetis, L-2338 Luxembourg

On our website we use the Amazon Ad system. Amazon allows us to increase the effectiveness of Internet-based advertising by using cookies stored on your computer. The stored data will be used to detect if you have clicked on an ad, been redirected to our website and made a purchase. There is no information for the direct identification of individuals such. Name or e-mail address used.

Please see https://www.amazon.com/gp/help/customer/display.html/ref=help_search_3-25?ie=UTF8&nodeId=201909010&qid=1543915330&sr=3-25 for more information about terms of service and privacy.

The legal basis for the use of the Amazon Ad system is Art. 6 para. 1 lit. f) GDPR.

You can disagree at the following link: https://www.amazon.com/adprefs

Many Chat

Many Chat Inc., 535 Everett Ave, Apt. 312, Palo Alto, CA 94301, United States

Our website uses the chat bot service provided by Many Chat Inc. to simplify communication with visitors to our website. The use of Many Chat requires the login to an existing facebook inc. account. All communications including profile data of the respective facebook inc. account are passed to the service provider ManyChat.

Please see https://manychat.com/privacy.html for more information about terms of service and privacy.

The legal basis for the use of the ManyChat chat bot service is Art. 6 para. 1 lit. f) GDPR.

Pinterest Ads

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Data is collected and stored on our website using Pinterest Ads. The stored data enables us and Pinterest to recognize that you have clicked on an ad, have been redirected to our website, and made a purchase. In addition, browsing behaviors will be used to show appropriate pinterest ads on the platform that may be of interest to you. Information about your identity will not be saved.

Please see https://policy.pinterest.com/de/privacy-policy for terms of use and privacy and https://policy.pinterest.com/de/cookies

The legal basis for the use of Pinterest Ads is Art. 6 para. 1 lit. f) GDPR.

Click here to contradict.

M6 Digital Services

89 avenue Charles de Gaulle - 92575 Neuilly-sur-Seine Cedex

We use the M6 Digital Services service for the “affiliate programme” on our website. The service transmits and stores information on pages you visit and purchases you make.

Further information is available at: https://www.groupem6.fr/charte-de-confidentialite-cookies/

The legal basis for the use of M6 Digital Services is Art. 6, para. 1(f) of the GDPR.

Click here to contradict.

NETILUM S.A.R.L, affilae.com

9 Rue André Darbon, 33000 Bordeaux, France

We use NETILUM S.A.R.L, affilae.com for the "affiliate program" on our website. The service transmits and stores information about the pages you visit and the purchases you make.

For more information, please consult the following link https://affilae.com/en/privacy-cookie-policy/

The legal basis for the use of NETILUM S.A.R.L, affilae.coml services is Art. 6, para. 1(f) of the GDPR.

Click here to oppose it.

4w Marketplace S.p.A,

Via Giovanni Paolo II, 100 • 84084 Fisciano (Salerno)

4w Marketplace collects and stores data on our website. The saved data allows us and 4w to know that you have clicked on an advertisement, that you have been redirected to our website and that you have made a purchase. We do not store any information about your identity.

You can have more information and opt-out from the use of this tool by clicking on the following link https://www.4wmarketplace.com/informativa-cookie/

The legal basis for the use of 4w Marketplace S.p.A services is Art. 6, para. 1(f) of the GDPR.

Through LinkedIn's conversion tracking and website demographics features, we can understand what happens after a LinkedIn user clicks on our Ad by using analytics methods and systems provided by LinkedIn (e.g., Insight tags, pixels and APIs) that allow us to send data to LinkedIn and its affiliates about actions that people take on our websites ("Event Data").

Through LinkedIn Matched Audiences and associated data integrations, we can target Ads to audiences based on data we provide to LinkedIn, whether directly or on our behalf through an authorized third party. Information about your identity will not be saved.

Further information on the terms of use and privacy policy can be found at https://www.linkedin.com/legal/privacy-policy

The use of this service is based on Art. 6, para. 1(f) of the GDPR. The aforementioned purpose is classed as a legitimate interest.

You can revoke your consent for the use of this service at the following links can be found in section 2.4 of the privacy policy: https://www.linkedin.com/legal/privacy-policy

Sleeknote

Sleeknote ApS, Jens Baggesens Vej 90A, 8200 Aarhus

Our website uses the Sleeknote service. This service allows us to display overlays on our website to offer additional services to our visitors.

No personal data is transferred to Sleeknote.

Further information is available at https://sleeknote.com/privacy-policy.

Click here to revoke your consent for the use of this service.

6H GmbH, Voluum

6H GmbH, Brüsseler Str. 21, 50674 Köln

Foodspring delegates the processing of some marketing data to its partner agency, 6H, for the purpose of increasing the effectiveness of our advertising campaigns and only to the extent needed to fulfil this task. 6H uses a tool called Voluum, which matches Taboola ads to transactions on the foodspring web site. For this purpose, Voluum tracks unique click IDs, and the information about the clicks is stored in Voluum.

Further information is available at: https://verbraucher-bild.de/datenschutz and https://voluum.com/privacy-polic.

The legal basis for use of Voluum is Art. 6, para. 1(f) of the GDPR.

TikTok

Tiktok Technology Limited 10 Earlsfort Terrace, D02 T380, Co. Dublin, Dublin, D02t380, Ireland

This website uses TikTok Pixel, provided by TikTok, in order to serve targeted advertising and to measure the performance of our advertising campaigns. The TikTok Pixel enables us to retarget you with products and services seen on our website, and to identify when you clicked or bought the products on our website after having seen the TikTok ads.

Information about how TikTok collects, uses and protects information collected using the TikTok Pixel is available in TikTok's user privacy policy: https://www.tiktok.com/legal/privacy-policy-row?lang=en.

The legal basis for the use of Tiktok Ads is Art. 6 para. 1 lit. f)

RTB House FZ-LLC

Floor 1, Building 5, Dubai Internet City, Dubai, UAE, license no. 93763

Data is collected and stored on our website using RTB House ads. The stored data enables us and RTB House to recognize that you have clicked on an ad, have been redirected to our website, and made a purchase. In addition, browsing behaviors will be used to show appropriate RTB House ads on the platform that may be of interest to you. Information about your identity will not be saved. Please see https://www.rtbhouse.com/privacy-center/services-privacy-policy/ for more information. Legal basis for the use of RTB House Ads is Art. 6 para. 1 lit. f) GDPR. Click here to opt out https://optout.rtbhouse.com/.

fraud0

fraud0 GmbH, Sendlinger Straße 7, 80331 Munich

We foodspring as the website provider use fraud0, a service provided by fraud0 GmbH Sendlinger Straße 7, 80331 Munich, to detect invalid traffic and low-quality traffic and to prevent fraud on our website. By using the fraud0 service, we can detect invalid traffic on our site, improve our online marketing efforts, clean marketing-relevant statistics and improve the usability of our website.

The data obtained from this service is only used for analysis and mitigation of invalid and low-quality traffic. fraud0 processes data on our behalf and is contractually committed to measures to ensure the confidentiality of the processed data. A data processing agreement with fraud0 has been concluded. The fraud0 technology uses JavaScript pixels. During your website visit, the following data are collected by or through the use of this service:

Browser and device information, such as the device type and model, manufacturer, operating system type and version (e.g. iOS or Android), web browser type and version (e.g., Chrome or Safari), user-agent, flash version, location information, IP address, JavaScript support, pages visited, time zone, the network connection type, hardware-based identifiers (e.g. MAC address), referrer URL, number of fonts, fonts hash, number of plugins, plugins hash, screen height and width, colour depth, platform, whether the resolution has been tampered, language or OS, whether ad blocking is enabled, whether do not track is enabled.

End-user’s behaviour on Controller’s sites, information, such as click path, session ID, session start/stop time, timezone offset, date and time of visit, usage and behavioural data.

In our admin interface From fraud0 we receive a classification for invalid and low quality traffic, no personal data. There is no transfer of data to third parties - except as otherwise stated in our data processing agreement with you. When invalid or low quality traffic is detected, we generate invalid audience lists using our tag manager to automatically de-targeted this traffic across all our major buying channels like GoogleAds, Facebook, DV360 etc. Data processing by fraud0 only continues until a classification is done. Data processing by fraud0 will only continue until a classification has been made. The data is stored for further bot analysis with a period of one year.

Tracking across websites does not happen at any time. We process data by using the fraud0 bot detection service based on Art. 6 lit. f GDPR. It is in the interest of the website operator to classify the users of its website as valid or as invalid traffic. First and foremost, we are preventing fraud (recital 47 of the GDPR), but we can also correct the website statistics by removing invalid traffic shares from our statistics. This will allow us to use our online marketing budget more efficiently and therefore continue to provide our services (as usual/free of charge/at a reasonable price). In case of using additional fraud0 services, we may process your data on another legal basis such as your consent, see further information:https://fraud0.com/privacy-policy/. The data processing is performed exclusively in the European Union and Data is stored on Google's servers within the European Union and is not intended to be transferred to Google servers in the USA.The User may object to the processing by fraud0 at any time. The privacy policy and contact details of fraud0's data protection officer can be found at the following link:https://fraud0.com/privacy-policy/.

The Trade Desk

This website uses The Trade Desk ("TTD" for short), a targeted advertising service provided by The UK Trade Desk Ltd. 10th Floor, 1 Bartholomew Close London EC1A 7BL United Kingdom. TTD provides a technology that helps advertisers to manage digital advertising campaigns across many channels such as websites or apps. TTD collects and uses data as our data processor to ensure that the ads you see on the internet are relevant through personalization and to measure and evaluate the effectiveness of the ads, e.g. to remember which ads you have clicked on.

The platform collects and processes pseudonymized - i.e. not directly identifying - data about users, devices and ads, as well as where they are shown. The following data is processed: IP address, device IDs, cookie IDs, advertising IDs, other IDs, location data, browsing behavior data, interests and demographic data.

In order to be able to transfer requests for ads and other data about users or devices between sellers and buyers and to show you ads that match your likely interests, TTD performs cookie synchronization, i.e. the IDs created by The Trade Desk are matched with IDs of TTD's customers and partners.

Data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future by changing your currently set preferences in our Cookie Consent Manager. In addition, you have the option of removing the data already stored in the cookie directly via TTD's cookie page adsrvr.org and thus no longer receiving personalized advertising via the platform. In this case, opting out means that you will no longer be shown targeted advertising across TTD customers / partners. Further information about The Trade Desk can be found here: https://www.thetradedesk.com/, and about data protection at The Trade Desk, https://www.thetradedesk.com/general/privacy

8. Data processing on social media platforms

We maintain profiles on several social media networks through which you can get in touch with us. Currently these networks are Facebook, Instagram, Youtube, Pinterest, and WhatsApp. As a general rule, only the respective network operator is responsible under data protection law for all processing of personal data that takes place there, for example when you visit a profile or leave a comment. We ourselves have no knowledge of the data processed by the respective operator or of the individual data processing operations carried out by the operator. This information is not shared with us in an individual-specific format. In this context, like any other user of social networks, we can only access the information you have published in your profile or otherwise made accessible. You can obtain more detailed information on the data processing that takes place on each network at the following addresses:

However, you provide us with personal information when you send us a message or leave a post on our site. We use this personal information to respond to your message. To do this, we may import your message from the social network in question into our own processing systems to enable us to respond more efficiently and quickly. For this reason, we may use external IT service providers to respond to your messages. We store your messages for as long as is necessary to process your request. We then store them for a period of 3 years in case you contact us again with reference to your original question. These purposes also constitute our legitimate interest, in aid of which we carry out this data processing. (Art. 6 para. 1 lit. f) DSG-VO). Special conditions apply to data processing on our Facebook profile page. These can be found in the separate Facebook Privacy Policy.

9. Joint processing

We work in close cooperation across our group of companies, which consists of Foodspring GmbH, enduria GmbH Lobeckstr. 30-35, 10969 Berlin, and Goodminton AG, Lobeckstr. 30-35, 10969 Berlin. The other companies may therefore be granted access to personal data to the extent necessary to safeguard our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in the efficient and highest-quality processing of the inquiries or tasks in question or for group-wide purposes, such as group-wide reporting.

However, this does not result in any disadvantage for you. We have concluded a joint processing agreement with the other companies in accordance with Art. 26 GDPR. You can contact any of our companies to assert your aforementioned rights. The fulfilment of data protection obligations, in particular information obligations, is guaranteed by us.

10. Questions and comments

We do everything within our power to protect and maintain the security of your data. Please do not hesitate to contact us if you have any questions or comments on our privacy policy. If you have any questions regarding the collection, processing, or use of your personal data, regarding the disclosure, correction, blocking, or deletion of data, and regarding the retraction of any consents that have been granted, please contact: data-protection@foodspring.com