Data protection
Personal data (hereinafter mostly just called "data") are only processed by GEMMA PEPPER to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing through transmission, dissemination or any other form of provision, comparison or the linking, the restriction, the deletion or the destruction.
With the following data protection declaration you will be informed about the type, scope, purpose, duration and legal basis of the processing of personal data, as far as GEMMA PEPPER decide either alone or together with others about the purposes and means of the processing. You will also be informed below about the third-party components used by GEMMA PEPPER for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
The data protection declaration is structured as follows:
I. Information about GEMMA PEPPER as responsible
II. Rights of users and data subjects
III. Information on data processing
I. Information about GEMMA PEPPER as responsible
Responsible provider of this website in terms of data protection law is:
GEMMA PEPPER
gemmapepper@gmx.com
A separate data protection officer is not necessary due to the size of the company.
II. Rights of users and data subjects
With a view to the data processing described in more detail below, users and data subjects have the right to confirmation as to whether the data concerning them are being processed, to information about the processed data, to further information about data processing and to copies of the data (see also Art. 15 GDPR); to correct or complete incorrect or incomplete data (see also Art. 16 GDPR); to the immediate deletion of the data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary in accordance with Art. 17 Para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR; to receive the data concerning them and provided by them and to transfer this data to other providers / responsible parties (cf. also Art. 20 GDPR); to complain to the supervisory authority if they are of the opinion that the data concerning them are being processed by the provider in violation of data protection regulations (cf. also Art. 77 GDPR).
In addition, the provider is obliged to notify all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 GDPR teach. However, this obligation does not exist if this notification is impossible or involves disproportionate effort. Irrespective of this, the user has a right to information about these recipients.
According to Art. 21 GDPR, users and data subjects also have the right to object to the future processing of the data concerning them, provided that the data is processed by the provider in accordance with Art. 6 Para. 1 lit.f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory retention requirements and no other information on individual processing methods is given below.
For technical reasons, in particular to ensure a secure and stable website, your internet browser transmits data to us or to our web space provider. These so-called server log files record, among other things, the type and version of your Internet browser, the operating system, the website from which you switched to our website (referrer URL), the website (s) of our website that you are visiting, the date and time of the respective access as well as the IP address of the internet connection from which our website is used. The data collected in this way is temporarily stored, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 Para. 1 lit.f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data will be wholly or partially excluded from deletion until an incident has been finally clarified.
Homepage provider
We use the services of the homepage provider Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel. Hereafter referred to as "wix.com". The registered office in Europe: Wix.com Luxembourg Sarl, 5 Rue Guillaume Kroll, L - 1882 Luxembourg. You can also send inquiries about the EU General Data Protection Regulation to privacy@wix.com. We are therefore users of Wix.com, if you use our homepage, you are "user of user" in the sense of Wix.com. We have summarized the most important information from Wix.com's privacy policy below. The full version can be found at https://de.wix.com/about/privacy and at https://support.wix.com/de/article/eu-datenschutz-grundverordnung-dsgvo .
What information does Wix.com collect?
Wix.com collects two types of information: personal information (which can be used to uniquely identify an individual) and non-personal information (which is not used for identification).
Wix.com collects such data about our users and visitors as well as users of users and other persons who make it available to us.
Wix.com may - exclusively for and in the interest of our users - also collect similar data in connection with visitors and users of the websites or services of our users ("users of users").
Why does Wix.com collect such information?
Wix.com collects and uses data to provide our services and to make them better and safer, as well as to contact our visitors, users and job applicants and for those for Wix.com to comply with applicable statutory provisions.
Where is the data stored
Wix.com can store and process personal data in the USA, Europe, Israel or other jurisdictions - either itself or through our affiliated companies and service providers. The data storage providers that Wix.com works with are contractually committed to protecting your data. Among other things, Wix.com fulfills the data protection principles of the EU-US and the Swiss-US Privacy Shield Agreement in order to better protect our users' data. Some jurisdictions require us to manage and store their citizens' data locally. Wix.com may also collect, process and store such data in other locations, including the USA.
Data from users of users
Wix can collect and process data about the users of our users. We do this exclusively in the name and on instructions of our users. Our users are solely responsible for the data of their users of users, including for their legality, security and integrity. Wix has no direct relationship with users of users.
Transfer of personal data to third parties
We may share the data of our visitors, users, and their users of users with various third parties, including certain service providers, law enforcement agencies and application developers. The data may only be passed on in accordance with this guideline.
Cookies
a) Session cookies / session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, more effective and more secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 Paragraph 1 lit b.) GDPR, provided that these cookies are used to process data to initiate or process contracts.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 (1) (f) GDPR.
When you close your internet browser, these session cookies are deleted.
b) Third party cookies
Our website may also use cookies from partner companies with whom we work for the purpose of advertising, analyzing or improving the functionality of our website.
Please refer to the following information for details on this, in particular on the purposes and legal basis for processing such third-party cookies.
c) possibility of elimination
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required for this, however, depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via the browser settings. Instead, you have to change the setting of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, should you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
Contract processing
The data transmitted by you for the use of our range of goods and / or services will be processed by us for the purpose of processing the contract and are required in this respect. It is not possible to conclude and process the contract without providing your data. The legal basis for the processing is Article 6 (1) lit. b) GDPR.
We delete the data when the contract is fully processed, but must observe the retention periods under tax and commercial law.
As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for forwarding the data is then Art. 6 Para. 1 lit.
b) GDPR.
Customer account / registration function
If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of Customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called memo function) collect and save. At the same time, we then save the IP address and the date of your registration along with the time. This data will of course not be passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us will only be used to provide the customer account.
If you consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Article 6 (1) lit. b) GDPR.
The consent given to us to open and maintain the customer account can be revoked at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. All you have to do is inform us of your revocation.
The data collected in this regard will be deleted as soon as processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.
Newsletter
If you register for our free newsletter, the data you have requested for this purpose, i.e. your e-mail address and - optionally - your name and address, will be transmitted to us. At the same time, we save the IP address of the Internet connection from which you access our website, as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to the sending of the newsletter, describe the content in detail and refer to this data protection declaration. We use the data collected in this way exclusively for sending the newsletter - therefore, in particular, it is not passed on to third parties.
The legal basis for this is Article 6 (1) (a) GDPR.
You can revoke your consent to the sending of the newsletter at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. To do this, all you have to do is inform us of your revocation or use the unsubscribe link contained in every newsletter.
Contact inquiries / contact options
If you contact us via the contact form or email, the data you provide will be used to process your request. The specification of the data is necessary for processing and answering your request - without this provision we cannot answer your request, or at most only to a limited extent.
The legal basis for this processing is Article 6 (1) lit. b) GDPR.
Your data will be deleted if your request has been finally answered and the deletion does not conflict with any statutory retention requirements, e.g. in the event of a subsequent contract processing.
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through the certification according to the EU-US data protection shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU's data protection requirements will also be complied with when processing data in the USA.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 Paragraph 1 lit.f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or the EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and of the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it will not associate your IP address with other data. In addition, Google maintains
https://www.google.com/intl/de/policies/privacy/partners
Further data protection information is available for you, for example also on the possibilities of preventing the use of data.
Google also offers https://tools.google.com/dlpage/gaoptout?hl=de a so-called deactivation add-on along with further information on this. This add-on can be installed with common internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about visiting our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out in this data protection declaration whether and which other web analysis services are used by us.
YouTube
We use YouTube on our website. This is a video portal from YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.
YouTube is a subsidiary of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through the certification according to the EU-US data protection shield ("EU-US Privacy Shield")
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google, and thus also its subsidiary YouTube, guarantees that the EU's data protection requirements will also be complied with when processing data in the USA.
We use YouTube in connection with the "Extended data protection mode" function in order to be able to show you videos. The legal basis is Art. 6 Paragraph 1 lit.f) GDPR. Our legitimate interest lies in improving the quality of our website. According to information provided by YouTube, the "extended data protection mode" function means that the data described in more detail below are only transmitted to the YouTube server when you actually start a video.
Without this "extended data protection", a connection to the YouTube server in the USA will be established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time and the website you visited. A connection to the Google “DoubleClick” advertising network is also established.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze usage behavior, YouTube permanently saves cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by setting your Internet browser. You can find more information on this under "Cookies" above.
Further information on the collection and use of data as well as your rights and protection options in this regard is available from Google https://policies.google.com/privacy available data protection information.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data will not be merged with other data sources.
The basis for data processing is Article 6 (1) (b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
YouTube plugins, YouTube videos and channels
13.1 Our websites use plugins from Youtube.de/Youtube.com, which - represented by Google Inc. - is operated by YouTube, LLC, Cherry Ave., USA (hereinafter referred to as "YouTube"). The plugins can be recognized by one of the YouTube logos (for example a white “Play” symbol on a red background or the word “YouTube” in white with “Tube” on a red background). If you visit our website with such a plugin, a connection to the YouTube servers will be established and the plugin will be displayed on the website via a message to your browser.
13.2 This will transmit to the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube or Google, YouTube will assign this information to your personal user accounts on these platforms. When using these plugins, such as clicking / start buttons on a video or sending a comment, this information is assigned to your YouTube user account, for example, which you can only prevent by logging out before using the plugin. We therefore have no influence on the amount of data that YouTube collects with the help of this plugin and therefore inform you according to our level of knowledge. Information on the collection and use of data by the platform or plugins can be found at
https://www.google.de/intl/de/policies/privacy/
13.3 Various of our websites contain so-called embeddings of videos on YouTube or videos from the YouTube channels operated by us. However, these only enable the connection to YouTube. YouTube is an offer from Google Inc. If you would like information on the purpose and scope of data collection and use by Google, as well as your rights and setting options for protection as a YouTube customer, please refer to the data protection information from YouTube ( https: // www.google.de/intl/de/policies/privacy/ ).
Instagram plugins
14.1 Plugins from the Instagram service are integrated into our websites. These plugins are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This enables Instagram to assign your visit to our website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram.
14.2 Further information can be found in Instagram's data protection declaration at: https://www.instagram.com/about/legal/privacy/ . Since Instagram belongs to Facebook, please also note the information listed under (14.).
Hotjar
This website uses functions of the Hotjar web service, operated by Hotjar Ltd. Hotjar Ltd. is a European company based in Malta. Hotjar uses cookies. These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Hotjar server and stored there.
You can object to the use of Hotjar. Instructions are available at: https://www.hotjar.com/opt-out
Left
If you use external links that are offered on our website, this data protection declaration does not extend to these links. Insofar as we offer links, we assure that at the time the link was set, no violations of applicable law were recognizable on the linked websites. However, we have no influence on compliance with data protection and security regulations by other providers. We do not adopt this external content as our own and do not show solidarity with it. This third-party content does not reflect our opinion or the opinion of the operator of the website concerned. Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there.
Questions, suggestions, complaints
If you have any questions about our information on data protection or the processing of your personal data, please contact us using the contact form or by email at gemmapepper@gmx.com