Privacy Policy

1. Name and contact details of the controller and the company data protection officer

This privacy policy applies to data processing by:

Responsible person:

Promotional Gifts Hauptfleisch GmbH
Greschbachstraße 39, 76229 Karlsruhe
represented by the managing director: Christian R. Hauptfleisch

Telephone: +49 (0)721 / 66329 – 0
Fax: +49 (0)721 / 66329 – 21
Email: [email protected]

Data Protection Officer: Sabine Coveli

Telephone: +49 (0)721 / 66329 – 17
Fax: +49 (0)721 / 66329 – 21
Email: [email protected]

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website When accessing our website www.shop.hauptfleisch.de your browser automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
• Ensuring a smooth connection to the website,

We process the aforementioned data for the following purposes:

• Ensuring a comfortable user experience on our website,
• Evaluation of system security and stability as well as
• for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your identity. The data in the log files is deleted after seven days at the latest. Furthermore, we use cookies and analytics services when you visit our website. You can find more detailed explanations in sections 4 and 5 of this privacy policy.

b) When you subscribe to our newsletter

You can subscribe to our free newsletter on our website. The only required field (*) for sending the newsletter is your email address. Providing any other information is voluntary.

Your consent for data processing will be obtained during the registration process, and you will be referred to this privacy policy. We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store your IP address and the date and time of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, investigate any potential misuse of your personal data.

To document the registration process in accordance with legal requirements, we also store the registration and confirmation times, as well as your IP address. Your email address is collected so that we can send you the newsletter. Any additional data you voluntarily provide will be used to personalize our communications with you.

Die Erhebung des Anmelde- und Bestätigungszeitpunkt, sowie Ihrer IP-Adresse erfolgt zur Erfüllung unserer rechtlichen Verpflichtung, den Anmeldevorgang nachzuweisen.

Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. a DS-GVO für Ihre E-Mailadresse, sowie Ihre weiteren freiwilligen Angaben, sowie Art. 6 Abs. 1 S. 1 lit. c DS-GVO für den Anmelde- und Bestätigungszeitpunkt, sowie Ihre IP-Adresse.

You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can do this by clicking the link provided in every newsletter email, by sending an email to [email protected], or by contacting us using the contact details provided in the legal notice.

c) When using our contact form and online inquiry

Our website includes a contact form that can be used to contact us electronically. You can also request specific items directly via the sample request form.

If you choose to use one of these options, the data entered in the input form will be transmitted to us and stored.

The mandatory fields required for electronic contact are marked with an asterisk (*). This is your email address. Any additional information you provide (name, surname, etc.) is voluntary.

The data is processed to enable contact and processing of your request, as well as to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for processing the mandatory information is Article 6(1)(f) GDPR. The aforementioned purpose also constitutes the legitimate interest in processing the data. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

The legal basis for processing the data you voluntarily provide to us is Art. 6 para. 1 sentence 1 lit. a GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form, this is the case when the respective conversation with you has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved. Should a contract be concluded, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obligated to store it for a longer period due to tax and commercial law retention and documentation requirements (from the German Commercial Code, the German Criminal Code, or the German Fiscal Code), or you have consented to further storage in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

Furthermore, you have the right to withdraw your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. (For information on exercising your right of withdrawal, see section 10).

All personal data stored during the contact process will be deleted in this case.

3. Data transfer

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

• You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the transfer is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred,
• in the event that there is a legal obligation to disclose the data pursuant to Article 6(1)(c) GDPR, as well as
• This is legally permissible and necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, nor do they contain viruses, Trojans, or other malware. Information is stored in the cookie that relates to the specific device used. However, this does not mean that we thereby gain direct knowledge of your identity.

We use the following cookies:

• Session Cookies
• Temporary cookies
• Cookies for analytical purposes/third-party cookies (See section 5 – Analytical tools)

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is created. Completely disabling cookies may prevent you from using all the features of our website.

The use of cookies serves, among other things, to make your use of our website more convenient. For example, we use so-called session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted when you leave our site.

Furthermore, we also use temporary cookies to optimize user-friendliness. These cookies are stored on your device for a specific, predetermined period. When you revisit our site to use our services, it is automatically recognized that you have already been here and what entries and settings you have made, so you don't have to enter them again.

Secondly, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you (see section 5). These cookies allow us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Article 6(1)(f) GDPR. These purposes also constitute our legitimate interest in processing the collected data.

Session cookies are automatically deleted after you leave our site.

Temporary cookies are automatically deleted after a defined period of time, in this case 2 months.

Cookies used for analysis purposes are automatically deleted after the times specified by the providers of the analysis tools.

5. Analysis Tools

Tracking-Tools

The tracking measures listed below and used by us are carried out on the basis of Article 6(1)(f) GDPR. We use these tracking measures to ensure the needs-based design and continuous optimization of our website. We also use them to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you. These interests are considered legitimate within the meaning of the aforementioned provision.

The specific data processing purposes and data categories can be found in the respective tracking tools.

Google Analytics

For the purpose of tailoring our website to user needs and continuously optimizing it, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of server request,

are transferred to a Google server in the USA and stored there.

This website uses Google Analytics with the extension "_anonymizeIp()". This shortens IP addresses before further processing, thus preventing them from being linked to a specific individual. Therefore, any personal data collected about you is immediately anonymized and promptly deleted.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics we gather allow us to improve our services and make them more interesting for you as a user. This information is used to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage for market research and to tailor these web pages to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be combined with other Google data. IP addresses are anonymized so that they cannot be associated with a specific individual (IP masking).

The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR. The aforementioned purpose also constitutes the legitimate interest in processing the data.

For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework.

You can prevent the installation of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to fully utilize all the functions of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).

Third-party information:

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/de.html,
Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html,
as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

6. Registration

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input form, transmitted to us, and stored.

The following data is collected as mandatory information (*) during the registration process:

• E-mail address

The following data is also stored at the time the message is registered:

• The user's IP address
• Date and time of registration
• Providing further information is voluntary.

As part of the registration process, the user's consent to the processing of this data is obtained.

User registration, including providing the required information, is necessary to access certain content and services on our website, specifically to utilize our full range of services. Any additional data you voluntarily provide will be used to personalize our communication with you. The collection of your registration and confirmation timestamps, as well as your IP address, is necessary to fulfill our legal obligation to verify your registration.

The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR for the mandatory information, as well as your further voluntary information, and Art. 6 para. 1 sentence 1 lit. c GDPR for the registration and confirmation time, as well as your IP address.

You can withdraw your consent to the use of the data transmitted during registration at any time. You can declare your withdrawal by email to [email address] or by contacting us using the contact details provided in the legal notice.

7. Contact via the live chat function/offline contact form

We use a live chat function on our website to guide you through it and address your individual questions and requests. During our business hours, you can connect with one of our staff members by clicking the corresponding chat button (speech bubble). This allows you to send them your inquiry and, if desired, your personal data for the purpose of sending you offers, etc. You can also chat with us anonymously without providing your name.

Outside of our business hours, you can access an input form by clicking the chat button (envelope icon) to send us your inquiry (offline contact form). Required fields for electronic contact are marked with an asterisk (*). This is your email address. Any additional information you provide (name, surname, etc.) is voluntary.

We use the live chat function to provide you with real-time support in navigating our website and to offer personalized advice on our product portfolio. The data you submit via the contact form when a consultant is unavailable will be processed to enable us to contact you, handle your request, prevent misuse of the contact form, and ensure the security of our IT systems.

The legal basis for processing the mandatory information is Article 6(1)(f) GDPR. The aforementioned purpose also constitutes the legitimate interest in processing the data. If the contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

The legal basis for processing the data you voluntarily provide to us is Art. 6 para. 1 sentence 1 lit. a GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form, this is the case when the respective conversation with you has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved. Should a contract be concluded, the data will also be stored until the expiry of the statutory retention periods (6 years after the end of the year in which the contract was terminated) and then deleted, unless we are obligated to store it for a longer period due to tax and commercial law retention and documentation requirements (from the German Commercial Code, the German Criminal Code, or the German Fiscal Code), or you have consented to further storage in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

Furthermore, you have the right to withdraw your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. (For information on exercising your right of withdrawal, see section 10).

8. Cooperation with processors and third parties

In some cases, we use external service providers (data processors) to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. These are external service providers who support us technically (web hosts, programmers, SaaS providers). This is done on the basis of data processing agreements pursuant to Article 28 GDPR.

We only share your personal data with third parties if:

• You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the transfer is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred,
• where there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or
• This is legally permissible and necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.

The engagement of service providers in a third country only takes place if the special requirements of Art. 44 et seq. GDPR are met.

9. Rights of data subjects

You have the right:

• In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved.
• In accordance with Article 16 GDPR, you have the right to request the immediate rectification of inaccurate or incomplete personal data concerning you that we hold;
• In accordance with Article 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• In accordance with Article 18 GDPR, you have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Article 21 GDPR;
• In accordance with Article 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. This means that we will no longer be permitted to process your data based on this consent in the future.
• According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your place of residence or place of business.

10. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided there are grounds relating to your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. This also applies to profiling insofar as it is related to such direct marketing.

11. Right to withdraw consent under data protection law

In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. This means that we will no longer be permitted to process your data based on this consent. The lawfulness of the processing carried out based on your consent before its withdrawal remains unaffected.

If you wish to exercise your right of withdrawal or objection, simply send an email to [email protected].

12. Datensicherheit

During your visit to our website, we use the widely used SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed padlock symbol in the lower status bar of your browser.

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13. Updates and changes to this privacy policy

This privacy policy is currently valid and was last updated in May 2018.

Due to the ongoing development of our website and related services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website at www.hauptfleisch.de.

14. Google Analytics Opt-Out

Cookie settings

15. Google reCaptcha

We use the Google service reCAPTCHA to determine whether a human or a computer is making a specific entry in our contact or newsletter form. Google uses the following data to verify whether you are a human or a computer: the IP address of the device you are using, the website you are visiting on our site where the CAPTCHA is integrated, the date and duration of your visit, the identification data of the browser and operating system you are using, your Google account if you are logged in to Google, mouse movements on the reCAPTCHA areas, and tasks in which you have to identify images. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (GDPR). We have a legitimate interest in this data processing to ensure the security of our website and to protect ourselves from automated entries (attacks).