Data protection delcaration

The following information gives you an overview of the processing of your personal data by our company and your rights resulting from the General Data Protection Regulation (GDPR).

1. Name and address of the controller and data protection officer

The controller (“we”) within the meaning of the GDPR is:

DESERTFOODS International GmbH
Beseliner Parkweg 5
18196 Dummerstorf
Germany

Phone: +49 170 22 58 101
Email: datenschutz@desertfoods-international.com

The controller’s data protection officer can be contacted at the above phone number and/or email address.

2. Collection of personal data

a) on the basis of our business relationship

We process personal data which we receive from you within our business relationship in your function as customer/contractual partner or as representative/authorised representative/contact person of the company which is our customer/contractual partner. In the business initiation phase and during the business relationship, we and you generate personal data. In the case of companies, this data essentially relates to the contact person responsible at your company and, if applicable, the company management (managing director, executive board).

The personal data usually generated are:

First name, surname, title, address, telephone number (landline and/or mobile phone number), fax number, a valid e-mail address, account data, your company/company (with VAT ID), division, position, date of birth, subject matter of the contract, credit ratings, enquiries and correspondence regarding the conclusion, administration, performance and settlement of the contract.

b) when visiting our website

When using our website merely for informational purposes i.e. if you do not transmit information to us, we shall collect only the personal data which your browser transmits to our server. If you wish to view our website, we shall collect the following data which are technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 sentence 1 lit. f GDPR):

• Informationconcerning the browser type and the version used
• User’s operating system and its interface
• User’s internet service provider
• User’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites which are accessed by the user’s system via our website
• Volume of data transmitted
• Access status/HTTP status code

aa) Contact form

If you have any questions, we offer you the possibility to contact us via a contact form provided on the website. A valid e-mail address must be provided so that we know who sent the request and can answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us occurrs in accordance with Art. 6 Para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent.

The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.

bb) Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your terminal device and do not contain viruses, Trojans or other malware.

Information is stored in the cookie, which results in each case in connection with the specifically used terminal device. This does not, however, mean that we will immediately become aware of your identity.

The use of cookies serves on the one hand to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our website.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your terminal device for a specified period of time. If you visit our website again in order to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to record the use of our website statistically and for the purpose of optimising our offer for you (see “when visiting our website” and “Web analytics software”). These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes of our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you deactivate cookies completely, you may not be able to use all the functions of our website.

3. Purpose and legal basis of data processing

Your personal data will be processed in accordance with the applicable data protection regulations, in particular the GDPR and the Federal Data Protection Act (BDSG). In detail this takes place for the following purposes and on the basis of the following legal bases: 

a) On the basis of your consent pursuant to Art. 6 Para. 1 sentence 1 lit. a GDPR

If you have given us your consent to the processing for certain purposes, we will process your data on the legal basis of the consent. The scope and purpose of the data processing are described in the corresponding declaration of consent, which you have been given separately.

b) For the performance of contractual obligations pursuant to Art. 6 Para. 1 sentence 1 lit. b GDPR

The processing of personal data takes place for reasons of the handling of contracts, in particular for the execution of your contract.

Further information on the purposes and scope of the contractual services for which the data is processed can be found in the respective contract concluded with you and the general terms and conditions included therein.

c) For compliance with legal obligation persuant to Art. 6 Para. 1 sentence 1 lit. c GDPR

As a company, we are subject to various legal obligations for the fulfilment of fiscal control and reporting obligations. To ensure that these obligations are met, personal data are processed within the business initiation and processing in accordance with the statutory requirements.

d) for the purposes of the legitimate interests persuant to Art. 6 Para. 1 sentence 1 lit. f GDPR

We process your data, which we receive in the context of our business relation, beyond the actual fulfilment of the contract for the protection of legitimate interests of us or third parties.

4. Who receives my data?

Your personal data, which we receive within the scope of our business relationship, are only accessible to the parties who need them to fulfil their contractual and legal obligations. If service providers and vicarious agents are also involved in the data processing process, a data transfer is only possible if the legal obligations prescribed for this in the GDPR as well as our own specifications for the handling of personal data are complied with.

5. Will my personal data be transferred to a “third country”?

A transfer of your personal data, which we have received within our business relationship, to countries outside the EU or the EEA will only take place if you have given us your consent or if this is a necessary condition for the execution of a contract.

6. How long will my data be stored?

Your personal data, which we receive within the scope of our business relationship, will be processed and stored as long as it is necessary to fulfil our contractual and legal obligations. After fulfilment of the contractual and legal obligations, the personal data will be deleted. Special retention periods apply in particular to:

• compliance with commercial and tax law requirements. The deadlines for this are two to ten years.
• the preservation of evidence. According to §§ 195 et seq. of the German Civil Code, these limitation periods may be up to thirty years. The regular limitation period here is three years until the end of the year.

7. What data protection rights can I exercise?

As a “data subject”, you have the following rights towards us with regard to the personal data relating to you:

You have the right pursuant to Art. 7 Para. 3 GDPR to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.

You have the right to request confirmation from us as to whether personal data concerning you will be processed; if so, you have the right to know the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended duration of the storage, the existence of a right of rectification, cancellation, limitation or opposition, the existence of a right of appeal, the origin of your data if it has not been collected from us, and the existence of automated decision making, including profiling and, where appropriate, meaningful information on its details.

You have the right to demand from us immediately the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to demand that we delete personal data relating to you immediately, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (right to deletion).

You have the right to demand that we restrict the processing if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR.

Pursuant to Art. 20 GDPR, you have the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person.

In addition, as a data subject you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR). The revocation is effective for the future. Processing of personal data prior to the declaration of revocation is not affected by this.

If you wish to exercise your right to object, simply send an e-mail to datenschutz@desertfoods-international.com.

Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority if you consider that the processing of your personal data violates the GDPR (Art. 77 GDPR). You have the right to exercise this right with a supervisory authority in the Member State in which you are located, in which you work or in which the alleged infringement occurred.

Your consent to the processing of personal data may be revoked at any time. The revocation only takes effect for the future. Processing of personal data prior to the declaration of revocation is not affected.

8. Obligation to provide data

As part of our business relationship, you must only provide personal data that is necessary for the establishment, performance and termination of a business relationship or which we are legally obliged to collect. Without this data we will normally have to refuse the conclusion of a contract or will no longer be able to execute an existing contract and may have to terminate it.

Last updated: June 3rd, 2019