Data Protection Policy
1. Data protection at a glance
General Information
The following information provides a basic overview of what happens with your personal data when you visit our website. Personal data are data by way of which you can be personally identified. For detailed information about data protection, please see our Data Protection Policy stated in this text.
Data recording on our website
Who is responsible for the data recording on this website?
On this website, data are recorded by a website operator. You can find its contact data in the publication details of this website.
How do we record your data?
On the one hand, your data are recorded in that you state such data to us. This may, for example, be data that you enter in the contact form.
Other data are automatically recorded by our IT systems when you visit the website. These are, above all, technical data (e.g. internet browser, operating system or the time at which pages are viewed). Such data are recorded automatically as soon as you establish contact with our website.
What do we use your data for?
Some of the data are collected to guarantee the fault-free provision of the website. Other data may be used to analyse your data behaviour.
What rights do you have in respect of your data?
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. In addition, you have the right to request the rectification, blocking or erasure of such data. To that end and with regard to additional questions on the subject of data protection, you can contact us at any time at the address stated in the publication details. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. For details in this respect, please see “Right to restriction of processing” in the Data Protection Policy
Analysis tools and tools of third party suppliers
Your surf behaviour may be evaluated when you visit our website. This applies, above all, by way of Cookies and so-called analysis programmes. Your surf behaviour is normally analysed anonymously. The surf behaviour cannot be traced back to you.
You may object to such an analysis or prevent it by not using certain tools You can find detailed information about these Tools and your objection options in the following Data Protection Policy.
2. General Information and Compulsory Information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data in confidence and in line with the statutory data protection requirements as well as this Data Protection Policy.
Various personal data are recorded when you use this website.
Personal data are data by way of which you can be personally identified. This Data Protection Policy explains which data we record and what we use the data for. It also explains how, and for what purpose, that applies.
We draw attention to the fact that the transmission of data in the internet (e.g. in the case of communication by e-mail) may be subject to security gaps. Data cannot be completely protected against access by third parties.
Information about the responsible body
The body responsible for the data processing on this website is:
Erdbeerhof Osterloh
Halter 21
D-49429 Visbek
Tel.: +49 (0) 4447 8988
E-mail: info@erdbeerhof-osterloh.de
The responsible body is the natural or legal person who solely or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses and the like).
Withdrawal of your consent to data protection
Many data processing procedures are only possible on the basis of your express consent. You may withdraw granted consent at any time. To that end notifying us by e-mail, without complying with any formal requirements, is sufficient. The withdrawal does not affect the legality of the data processing that applies up until the withdrawal.
Right to object to the data recording in certain cases and
direct advertising (Article 21, GDPR)
If data are processed on the basis of Article 6(1), Point e or f, GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data. This also applies to profiling based on these provisions. Please see this Data Protection Policy for the respective legal basis on which the processing is based. If you make an objection, we shall no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection in accordance with Article 21(1) GDPR).
If your personal data are not processed to implement direct advertising, you have the right to object at any time to the processing of personal data that affects you for the purpose of such advertising. This also applies to pooling where it is associated with such direct advertising. If you object, your personal data shall subsequently no longer be used for the purposes of direct advertising (objection in accordance with Article 21(2), GDPR.
Right to lodge a complaint with the relevant supervisory authority
In the event of violation of the GDPR, the affected person shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their customary place of residence, workplace or the place of the presumed violation. The right to lodge a complaint applies irrespective of other administrative laws or court remedies.
Right to data portability
You have the right for the data that we automatically process based on your consent, or in executing a contract, to be handed over to you, or to a third party, in a structured, commonly used and machine-readable format. Where you request the direct transmission of such data to another controller, this shall only apply where it is technically feasible.st.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted link in that the address line of the browser changes from “http://” to “https://” and via the padlock symbol in your browser line.
If the SSL or TLS encryption is activated, the data that you forward to us cannot be read by third parties.
Information, blocking, deletion and rectification
As part of the valid, statutory provisions, you are entitled at any time to free information about the personal data stored about you, its origin and recipients and the purpose of the data processing and, where applicable, you have a right to correction blocking or deletion of such data. To that end and with regard to questions on the subject of personal data, you can approach us at any time under the address stated in the publication details.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To that end you can approach us at any time at the address stated in the publication details. The right to restriction of processing applies in the following cases:
• If you dispute the accuracy of the personal data we are storing, we normally require time to review this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, instead of the deletion you may request the restriction of the data processing.
• If we no longer require your personal data, but however you require such data for the establishment, exercise or defence of legal claims, instead of the deletion you shall have the right to request the restriction of the processing of your personal data.
• If you have made an objection in accordance with Article 21(1), GDPR, your interests must be weighed against our interests. As long as it is not clear whose interests override in such a situation, you shall have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may only be processed – apart from the storage of such data – following your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Objection to advertising mails
The use of contact data published as part of the obligation to provide publication details to forward advertising and information material not expressly requested is hereby rejected. The site operators expressly reserve the right to take legal action in the event of the unsolicited forwarding of advertising information, for example by way of spam mails.
3. Data Recording on our Website
Cookies
The website uses so-called Cookies at various points. Cookies do not cause any damage on your
computer and do not contain viruses. They are aimed at making our service more user-friendly, more effective and safer. Cookies are small text files that are placed on your computer and which your browser stores.
Most of the Cookies we use are so-called Session Cookies. They are automatically deleted at the end of your visit. Other Cookies remain stored on your terminal until you delete them. These Cookies enable us to recognise your browser during the next visit.
You can adjust your browser so that you are informed of the placing of Cookies and only permit Cookies in an individual case, exclude the acceptance of Cookies for certain cases or in general and activate the automatic deletion of Cookies when the browser is closed. The functionality of this website may be restricted in the case of deactivating Cookies.
Cookies that are necessary to implement the electronic communications procedure or to provide certain functions you have requested (e.g. goods basket function), are stored on the basis of Article 6(1), Point f, GDPR. The website operator has a justified interest in the storage of Cookies for the technical fault-free and optimised provision of its services. Insofar as other Cookies (e.g. Cookies for analysing your surf behaviour) are stored, these are addressed separately in the Data Protection Policy.
Server log files
The provider of the web pages automatically collects and stores information in so-called server log
files that your browser automatically forwards to us. These are as follows:
• Browser type and browser version
• Used operating system
• Referrer URL
• Host name of the accessing computer
• Time of the server enquiry
• IP address
Such data shall not be merged with other data sources.
Such data is recorded on the basis of Article 6(1), Point f, GDPR. The website operator has a justified interest in the technically fault-free presentation and optimisation of its website – the server log files need to be recorded to that end.
Contact form
If you use the contact form to make an enquiry, we shall store your details stated in the enquiry form, including the contact data you state there, for the purpose of processing your enquiry and to cover the eventuality of follow-up enquiries We shall not forward such data without your approval.
The data entered in the contact form are therefore processed exclusively on the basis of your consent (Article 6(1), Point f, GDPR). You may withdraw such granted consent at any time. To that end notifying us by e-mail, without complying with any formal requirements, is sufficient. The withdrawal does not affect the legality of the data processing procedures that apply up until the withdrawal.
We shall retain the data you enter in the contact form until you ask us to delete such data, withdraw your consent to the storage of such data or the purpose for the data storage becomes inapplicable (e.g. following completed processing of your enquiry). This does not affect compulsory statutory provisions – in particular storage periods.
Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we shall store and process your enquiry including all personal data resulting from such an enquiry (name, enquiry) to deal with your enquiry. We shall not forward such data without your approval.
Such data shall be processed on the basis of Article 6(1), Point b, GDPR, provided your enquiry is associated with executing a contract or is necessary to adopt pre-contractual measures. In all other cases, the processing shall be based on your consent (Article 6(1), Point a, GDPR) and/or our justified interests (Article 6(1), Point f, GDPR) because we have a justified interest in the effective processing of the enquiries directed to us.
We shall retain the data you have forwarded to us in the contact form until you ask us to delete such data, withdraw your consent to the storage of such data or the purpose for the data storage becomes inapplicable (e.g. following completed processing of your enquiry). This does not affect compulsory statutory provisions – in particular statutory storage periods.
Processing data (customer and contract data)
We collect, process and use personal data only provided such action is necessary for the justification, content organisation or amendment of a legal relationship (personal data) This applies on the basis of Article 6(1), letter b, GDPR, which permits the processing of data to execute a contract or adopt pre-contractual measures. We collect, process and use personal data about the use of our web pages (use data) only where such action is necessary to facilitate, or settle, the use of the service for the user.
The collected data is deleted following the completion of the order or the end of the business relationship. This does not affect the statutory storage periods.
4. Analysis Tools and Advertising
Google Analytics
This website uses the functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called "Cookies". They are text files that are stored on your computer and facilitate an analysis of how you use the website The information created by the cookie about how you use this website is normally transferred to a Google server in the USA and stored there.
The storage of Google Analytics Cookies and use of these Analysis Tools apply on the basis of Article 6(1), Point f, GDPR. The website operator has a justified interest in the analysis of the user behaviour to optimise both its web services and its advertising.
Rendering IP details anonymous
We have activated the functions of IP anonymisation on this website. As a result, Google shortens your IP address in Member States of the European Union or in other contracting states to the Agreement of the European Economic Area prior to forwarding to the USA. The full IP address is only forwarded to a Google server in the USA and stored there in exceptional cases. By order of the operator of this website, Google shall use this information to evaluate your use of the website, to put together reports on the website activities and to render additional services associated with the website and internet use for the website operator. The IP address forwarded as part of Google Analytics from your browser shall not be grouped together with other data from Google.
Browser Plugin
You can prevent the storage of the Cookies by way of a corresponding setting in your browser software. However, we draw attention to the fact that in such a case you may not be able to use all the functions of this website in full. Furthermore, you can prevent the recording of the data created by the Cookie and related to your use of the website (including your IP address) and forwarding to Google as well as the processing of such data by Google by downloading and installing the browser Plugin via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data recording
You can prevent the recording of your data by Google Analytics by clicking on the following link. An Opt-Out Cookie is placed that prevents the recording of your data during future visits to this website. Deactivate Google Analytics.
For more information about how Google Analytics deals with user data, please see Google’s data protection policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have entered into an order processing contract with Google and apply to stringent requirements of the German data protection authorities in full to the use of Google Analytics.
Demographic features in the case of Google Analytics
This website uses the function “demographic features” of Google Analytics. As a result,
reports can be drawn up containing statements about the age, sex and interests of the site visitors. Such data emanates from interest-related advertising of Google and from visitor data of third party providers. Such data cannot be attributed to a certain person. You can deactivate this function at any time via the display settings in your Google account or generally prevent the recording of your data by Google Analytics as set out in the point “Objection to data recording”.
Storage period
User and event level data stored by Google that are linked to Cookies, User ID or advertising IDs (e.g. DoubleClick Cookies, Android Advertising ID) are rendered anonymous or deleted after 14 months. For details in this respect, please see the following link:
https://support.google.com/analytics/answer/7667196?hl=de
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an oniline advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google AdWords we use the so-called Conversion-Tracking. A Cookie is placed for the Conversion-Tracking when you click on an advertisement placed by Google. Cookies are small text files that the internet browser places on the user's computer. These Cookies are no longer valid after 30 days, and are not used to personally identify the users. If a user visits certain pages of the website and the Cookie has not yet expired, we and Google may determine that the user has clicked on the advertisement and was forwarded to that page.
Each Google AdWords customer is provided with a different Cookie. Cookies can therefore not be traced via the websites of the AdWords customers. Information obtained by way of the Conversion Cookie is aimed at drawing up conversion statistics for AdWords customers who have decided in favour of Conversion Tracking. The customers are informed of the total number of users who have clicked on their advertisement and who were forwarded to a page equipped with a conversion tracking tag. However, they are not provided with any information with which they can personally identify users. If you do not wish to take part in Tracking, you can object to such use by simply deactivating the Google Conversion Tracking Cookie via your internet browser settings. Thereupon you will not be incorporated in the Conversion Tracking statistics.
Conversion Cookies are stored and this Tracking Tool is used on the basis of Article 6(1), Point f, GDPR. The website operator has a justified interest in analysing the user behaviour to optimise both its advertising services and its advertising.
For more information about Google AdWords and Google Conversion-Tracking, please see the Google data protection provisions: https://policies.google.com/privacy?hl=de.
You can adjust your browser so that you are informed about the placing of Cookies and you can only permit Cookies in an individual case, exclude the acceptance of Cookies for certain cases or in general and activate the automatic deletion of Cookies when the browser is closed. The functionality of this website may be restricted in the case of deactivating Cookies.
5. Plugins and Tools
YouTube with extended data protection
Our website uses Plugins from the YouTube website. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in an extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about the visitors to this website before they view the video. By contrast, the forwarding of data to YouTube partners is not automatically ruled out by way of the extended data protection mode. Therefore – irrespective of whether or not you view the video – YouTube establishes a link to the Google DoubleClick network.
As soon as you start a YouTube video on our website, a connection is established to the Youtube servers. In that respect, the YouTube server is informed of the pages of our website that you have visited. If you have logged into your YouTube account, you enable YouTube to directly allocate your surfing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can place various Cookies on your terminal once the video has started. By way of these Cookies, YouTube can obtain information about visitors to our website. Such information shall be used, inter alia, to establish video statistics, improve user-friendliness and prevent fraud attempts. The Cookies remain on your terminal until you delete them.
Where applicable, further data processing procedures may be prompted, upon which we do not exert any influence, following the start of a YouTube video.
YouTube is used in the interest of an appealing presentation of our online services. This constitutes a justified interest within the meaning of Article 6(1), Point f, GDPR.
You can find more information about data protection at YouTube in its Data Protection Policy https://policies.google.com/privacy?hl=de.
Google Web Fonts
This site uses so-called Web Fonts for the standardised presentation of fonts; Web Fonts are made available by Google. Google Fonts are installed locally. In that respect, a connection to Google servers is not established.
Adobe Typekit Web Fonts
Our website uses so-called Web Fonts of Adobe Typekit for the standardised presentation of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When visiting our sites, your browser loads the required fonts directly from Adobe to correctly display them on your terminal. In that respect, your browser establishes contact with the Adobe servers in the USA. By way of this, Adobe gains knowledge that our website was visited via your IP address. According to Adobe, Cookies are not stored in the case of the provision of the fonts.
Adobe is certified in accordance with the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union that is aimed at guaranteeing compliance with the European data protection standards. For more detailed information see https://www.adobe.com/de/privacy/eudatatransfers.html.
Use of Adobe Typekit Web Fonts is required to guarantee a standardised font on our website. This constitutes a justified interest within the meaning of Article 6(1), Point f, GDPR. For more detailed information about Adobe Typekit Web Fonts, please see https://www.adobe.com/de/privacy/policies/typekit.html.
Below is Adobe’s Data Protection Policy: https://www.adobe.com/de/privacy/policy.html
Google Maps (with consent)
This site uses the card service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To guarantee data protection on our website, Google Maps is deactivated when you visit our website for the first time. A direct link is only established with the Google servers if you independently activate Google Maps (consent in accordance with Article 6(1), Point a, GDPR). This prevents your data from being transferred to Google during your first visit of the site.
Google Maps shall store your IP address following the activation. The IP address is normally then forwarded to a Google server in the USA and stored there. Following the activation of Google Maps, the provider of this website cannot exert any influence on the data forwarding.
Please see the Google Data Protection Policy for more information about user data https://www.google.de/intl/de/policies/privacy/.
6. Own Services
Applications
We give you the option of filing an application with us (e.g. by e-mail, post or via an online application form). Below are details about the scope, purpose and use of your personal data collected as part of the application process. We assure that the recording, processing and use of your data comply with the valid data protection law and all additional statutory provisions and that your data are treated in absolute confidence.
Scope and purpose of the data collection
If you send us an application, we shall process personal data associated with that application (e.g. contact and communication data, application documents and notes as part of application discussions etc.) provided this is necessary to decide on the justification of an employment relationship. The legal basis in this respect is Section 26 BDSG (German Data Protection Act, new version, in accordance with German law (initiating an employment relationship), Article 6(1), Point b, GDPR (General contractual initiation) and – provided you have granted consent – Article 6(1), Point a, GDPR. The consent may be withdrawn at any time. Your personal data shall be forwarded within our company exclusively to persons who are involved in processing your application.
Provided the application is successful, the data you have submitted shall be stored in our data processing systems on the basis of Section 26, BDSG, new version, and Section 6(1), Point b, GDPR, for the purpose of implementing the employment relationship.
Data storage period
If we do not offer you a job; you reject a job offer; withdraw your application; withdraw your consent to the data processing or ask us to delete the data; the data you forward, including where applicable remaining physical application documents, shall be saved or stored (storage period) at most for 6 months following conclusion of the application process to determine the details of the application process in the event of discrepancies (Article 6(1), Point f, GDPR.
YOU MAY OBJECT TO SUCH STORAGE PROVIDED YOU HAVE JUSTIFIED INTERESTS THAT OVERRIDE OUR INTERESTS.
Following expiry of the storage period, the data shall be deleted provided a statutory storage period, or another legal reason for additional storage, does not apply. Where it is evident that it will be necessary to store your data following expiry of the storage period (e.g. as a result of a threatened or pending legal dispute), the data shall only be deleted if they have become irrelevant. This does not affect the statutory storage obligations.