Data protection policy
WE ARE COMMITTED TO SAFEGUARDING YOUR PRIVACY
We are fully committed to treating your personal data responsibly whenever you use our website or communicate with us via electronic means. We take all and any steps required to protect the personal data provided by you, and to comply with all applicable national and European data protection legislation and standards.
This data protection policy statement is designed to provide you with transparency regarding the way we process your personal data. Please note that the company responsible for your personal data for a specific website is that named in that website’s “legal notice” (Impressum) section.
Contact data for data protection officer:
Post: Datenschutzbeauftragter, Marabu GmbH & Co. KG, Asperger Straße 4, 71732 Tamm
WHAT DATA ARE CAPTURED AND HOW WHEN YOU VISIT THIS WEBSITE?
We only capture those personal data that you wish to provide to us, or which are necessary to the provision of our services. When you visit our website, we routinely save information that includes your browser and operating system, the website via which you visited ours, the pages on our website that you visit, the date of your visit, and, for security reasons, e.g. to identify cyber-attacks on our website, and for a period of seven days, the Internet Protocol address (IP address) assigned to you by your Internet service provider (ISP). Other personal data are only stored when these are provided by yourself voluntarily. For example, you may provide your email address, name, postal address, telephone number, and additional information, in order to gain information on our products, to enter competitions or prize draws, to take part in surveys, to purchase products or to simply keep up to date with products of interest to you. When you access our website, or enter data into text fields, or for example, post comments, our systems save your Internet Protocol address (IP address). We require this information for security reasons, i.e. to prevent misuse and as a safeguard against other hazards.
We implement technical and organisational security mechanisms to protect your data against manipulation, loss, destruction, and access by unauthorised parties. These mechanisms are regularly improved and updated in line with technological progress.
Only authorised employees/persons have access to your personal data. Under certain circumstances, this may include authorised employees of our service providers who process data on our behalf or who may have access to such data. To this end, we have concluded a corresponding data processing contract with the service provider (the processor).
TO WHAT PURPOSES DO WE USE YOUR PERSONAL DATA?
We use your data for technical administration of the website, for customer management, to answer your questions within the scope of customer service, for product inquiries and product surveys, and for marketing, in each case only within the scope required for the stated purpose. We only use your personal data for the purpose for which you made them available.
Such data shall also, where you have provided your express consent to the processing of your personal data, be used for the purposes given in such consent, e.g., without limitation, for the distribution of newsletter, the shipment of products. You may withdraw your consent to future processing at any time.
We wish to make our advertising/promotional materials, such as newsletters, and your website visit as user-friendly and personalised as possible. In this context, information that is automatically generated or transferred/submitted by you help us to tailor content to your needs. Such information may include, without limitation, technical data (such as your IP address, the operating system, your browser), the date and time of your website visit, and data on your (purchasing) behaviour (service history, order history, viewed recipes and products).
If you subscribe to our newsletter, technical information is automatically made available to us that enable us to analyse how often the newsletter was opened, and what content was viewed/clicked on how frequently (e.g. opening rate and click rate). This analysis enables us to improve our digital content/media, such as our newsletter, and to personalise our communications with you. Our goal is to only provide you with content that is truly of interest to you.
TRANSFER OF YOUR DATA TO THIRD PARTIES AND OTHER COUNTRIES
We do not provide your personal data to any third-party company that would use them for direct marketing purposes unless you have expressly given us your consent to do so. In strictly limited scope, we provide your personal data to the following:
Your personal data can be transferred to other countries if a service provider of ours is headquartered outside of Germany. In this instance, we conclude a contract for data processing with this service provider that ensures the same degree of data protection and security as in Germany. For example, without limitation, the service provider is contractually obliged to act only upon our express instructions, and to continuously implement all technical mechanisms necessary to protect your personal data to the same degree as in Germany.
In so far as personal data are processed in a country outside the EU or the EEA, we ensure an appropriate degree of data protection by concluding a standard contract specified by the EU or a corresponding adequacy decision has been adopted by the EU Commission for that country.
If you participate in our Training Center, which is subject to a fee, the processing of your personal data is necessary for the fulfilment of the contract concluded with you. Without an appropriate collection and processing of your data, the training cannot be carried out. In addition, your personal data will be processed as part of the application process on the basis of declarations of consent that you have actively submitted, e.g. for sending newsletters.
Insofar as the processing of your personal data is necessary for the fulfilment of our legal obligations (e.g. for the storage of data), we are obliged pursuant to Art. 6 (1) lit. c DSGVO is authorised.
In addition, we process personal data for the purposes of safeguarding our legitimate interests in accordance with Art. 6 para. 1 letter f DSGVO. Maintaining the functionality of our IT systems, but also marketing our own products are, for example, such legitimate interests.
RIGHTS OF DATA SUBJECTS
Your rights with respect to your personal data are as follows:
The right of access, the right to rectification, the right to erasure, the right to restriction of pro-cessing, the right to object, and the right to data portability.
You are also entitled to withdraw consent to future processing of your personal data at any time.
To exercise these rights, please contact our data protection officer via the contact details you will find at the beginning of this policy statement. Please also note that all our newsletters include an option to withdraw your consent and unsub-scribe from the service. Unfortunately, we cannot provide information on your personal data by telephone as it is not pos-sible to verify your identity. In addition, you have the right to lodge a complaint with a data protection oversight agency.
By using our website, you consent to the use and storage of cookies on your device. However, you can also view the website without cookies. Most browsers enable cookies by default. You can disable cookies on your device by selecting “Disable cookies” in your browser settings. You can delete cookies stored on your device at any time. Please refer to the user guide for your browser or device for details. If you use multiple devices at differing locations, you need to make sure your preferred cookie option is selected in all your browsers.
Personal data may be stored in cookies if you have given your consent or if this is essential for technical reasons, such as for secure login.
The following cookies are required for the correct operation of our website.
The click on Accept & Close in the cookie banner is stored in a cookie so that the visitor is not confronted with the banner every time the website is called up.
The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as your relevant rights and setting options for the protection of your privacy can be found in YouTube's data protection information at: https://www.google.de/intl/de/policies/privacy
DoubleClick von Google
The purpose and scope of data collection and the further processing and use of data by Google Maps as well as your relevant rights and setting options for the protection of your privacy can be found in the Google Maps data protection information at: http://www.google.de/intl/de/policies/privacy/
Saves the current PHP session
WEB ANALYTICS USING GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, that enable an analysis of your use of the website. As a rule, the information generated by the cookie on your use of the website is transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, Google will truncate your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area before transmission.
In light of the controversy surrounding complete IP addresses, we wish to emphasise that this website uses Google Analytics with the extension “_anonymizelp()”. This means that IP addresses are only processed in an abbreviated form, preventing information from being personally identifiable.
For more information on how Google uses your data, go to http://www.google.com/analytics/terms/gb.html and http://www.google.com/intl/en-GB/analytics/privacyoverview.html.
This website uses functions of Google Analytics of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, which support interest-based advertising and advertising based on the surfing behavior of users. Google Analytics uses a third-party cookie from DoubleClick to evaluate data about the surfing behavior of users on various websites. This data can be used to make statistical statements about the demographic data and areas of interest of website users.
We expressly point out to you that we cannot see any data about individual users and cannot trace the statistical data that we use back to certain users.
You can disable the DoubleClick cookie at any time: http://www.google.com/ads/preferences/html/opt-out.html
GOOGLE TAG MANAGER
The Google Tag Manager is used on our website. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
NEWSLETTERS VIA RAPIDMAIL
Our newsletter informs you of new products, promotions, prize draws, and our latest activities. We will only send you the newsletter with your consent. When it is distributed, we automatically receive information of a technical nature that allows us to determine, for example, how often the newsletter is opened and how many clicks specific content receives (e.g. open and click rates). Analysing this information also enables us to improve our digital media, services and content, such as our newsletter, in order to personalise our communications with you. Our goal is to ensure you only receive what truly interests you.
We manage our newsletter with software from rapidmail GmbH:
79098 Freiburg i.Br.
Our website contains many links to the external social network, Facebook. Links to Facebook are easy to recognise on our website through the use of the Facebook logo, for example. We do not generally use Facebook’s social plugins. When you click on Facebook icons, you are redirected to Facebook’s website, operated by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA (“Facebook”).
We do, however, use Facebook social plugins on our blog and for the Share Page feature. These plugins are identifiable by a Facebook icon (e.g. the Like button). For a full list of all social plugins and their icons, please see https://developers.facebook.com/docs/plugins.
To distinguish between links and plugins, hover your mouse cursor over the Facebook icon. If a social plugin has been used, the message “Two clicks for more privacy” appears.
When you visit a page on our website that features a social plugin, the above message indicates that if you click a second time, your browser will establish a direct connection to Facebook’s servers. Facebook directly transfers the plugin content to your browser, which embeds it in the website. This informs Facebook that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged onto Facebook. This information (including your IP address) is transmitted by your browser to a Facebook server in the United States and stored there.
If you are logged onto Facebook, Facebook can directly associate your visit to our website with your profile. If you interact with the Facebook plugins, e.g. click the “Like” button, or leave a comment, this information is also transmitted to a Facebook server in the United States and stored there. This information is also posted on your Facebook profile and shown to your Facebook friends.
If you do not wish Facebook to associate the data captured via our website with your profile, you must log out of Facebook before visiting our website. You can also prevent Facebook plugins from loading by using add-ons for your browser such as Facebook Blocker, which is available from
Our website contains links to the social network Google+. We do not use so-called "social plugins" from Google for this purpose. You recognize the references in the context of our web appearance e.g. by the Google+ logo. By clicking on these icons you will be forwarded directly to the Google website. This website is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Our website contains links to the microblogging service Twitter. You can recognise these links through the use of the Twitter logo, e.g. the blue Twitter Bird. We do not generally use Twitter social plugins for these links. When you click on Twitter icons, you are redirected to the Twitter website, operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA, (“Twitter”).
We do, however, alternatively use Twitter social plugins on our blog and for the share page function. These plugins are identifiable by a Twitter icon, e.g. the blue Twitter Bird.
To distinguish between links and plugins, hover your mouse cursor over the Twitter icon. If a social plugin has been used, the message “Two clicks for more privacy” appears.
When you visit a page of our website that features a social plugin, the above message indicates that if you click a second time, your browser will establish a direct connection to Twitter’s servers. Twitter directly transfers the plugin content to your browser, which embeds it in the website. This informs Twitter that your browser has accessed the corresponding page on our website, even if you do not have a Twitter account or are not currently logged onto Twitter. This information (including your IP address) is transmitted by your browser to a Twitter server in the United States and stored there.
If you are logged onto Twitter, Twitter can directly associate your visit to our website with your account. If you interact with the Twitter plugins, e.g. click the “Tweet” button, this information is also transmitted to a Twitter server in the United States and stored there. This information is also posted on your Twitter account, and shown to your contacts.
If you do not wish Twitter to associate the data captured via our website with your account, you must log out of Twitter before visiting our website. You can also prevent Twitter plugins from loading by using add-ons for your browser, such as the script blocker “NoScript” (http://noscript.net).
Our website contains links to the Google-owned site YouTube, operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. We do not use YouTube social plugins for this purpose. When you click on YouTube icons, you are redirected to YouTube‘s website.
Our website contains links to the Pinterest social network, operated by Pinterest, Inc. – located at 808 Brannan St, San Francisco, CA 94103, USA.
We do not generally use Pinterest social plugins for this purpose. When you click on Pinterest icons, you are redirected to the Pinterest website.
Our website contains links to Instagram, operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. We do not use Instagram social plugins. When you click on Instagram icons, you are redirected to Instagram’s website.
We use Google Maps (API) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website. Google Maps is a web service for interactive maps that visually present geographic information. When you use this service you are shown our location, which can making finding us easier.
When you access any subpages that have an embedded map from Google Maps, information on your use of our website (e.g. your IP address) is transmitted to a Google server in the United States and stored there – even if you are not logged onto a Google account, or do not have an account with Google. If you are logged onto Google, Google can directly associate your data with your account. If you do not wish Google to associate this data with your Google user profile, you must log out of your Google account before using the map. Google stores your data (even for users who are not logged on) as a user profile, and analyses this information. This processing is conducted in accordance with GDPR Article 6, paragraph 1, in particular on the basis of the legitimate interests of Google in the display of personalised advertising, market research, and/or website design tailored to specific needs. You have the right to object to the creation of these user profiles.
Google LLC, headquartered in the United States, is certified to the EU-U.S. and Swiss-U.S. Privacy Shield program, which ensures compliance with EU data protection requirements.
References (links) to XING are implemented on our website. We do not use so-called "social plug-ins" from XING for this purpose. Clicking these icons takes you directly to the XING website. This website is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Links to LinkedIn are implemented on our website. We do not use so-called "social plugins" from LinkedIn. By clicking on these icons you will be redirected to the LinkedIn website. This website is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
HOW LONG DO WE STORE YOUR DATA?
We store personal data that you transmit to us via our website on our databases. The data are stored for as long as they are needed – for the purpose for which you transferred the data to us, or for compliance with statutory requirements (e.g. statutory retention obligations). This means, for example, without limitation, that the data are stored until we have answered a question you have posed, or until a competition or prize draw has concluded. If you have given us your consent to store your personal data for marketing purposes, we will store your data for the duration of our marketing activities, or until you revoke your consent. You can revoke your consent to receive advertising at any time, with effect for the future.
LINKS TO OTHER WEBSITES
Our websites contain links to other websites. We do not have any influence on the content or design of websites from other providers, and our own data protection policy does not apply to them.
Last updated: 24 May 2018