Hessische Erzeugerorganisation für Medizinal- und Gewürzpflanzen


DATA PROTECTION DECLARATION (Privacy Statement)

The responsible body for the purposes of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

agrimed Hessen

Hessische Erzeugerorganisation für Medizinal- und Gewürzpflanzen 
wirtschaftlicher Verein (w.V.) 
 

Authorised representative - Managing Director: Michael Hechler 
Außerhalb Wallerstädten 14 
64521 Groß-Gerau / Wallerstädten 
Germany

Your rights as a data subject

Using the provided contact data of our data protection representative, you can exercise the following rights at any time:

  •          Access to your data stored with us and its processing (Art. 15 GDPR),
  •          Rectification of inaccurate personal data (Art. 16 GDPR),
  •          Erasure of your data stored with us (Art. 17 GDPR),
  •          Restriction of data processing, if we are not yet able to delete your data on account of legal obligations (Art. 18 GDPR),
  •          Objection to the processing of your data by us (Art. 21 GDPR) and
  •          Data portability, provided that you have agreed to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given your consent to us, you can revoke this at any time with effect for the future.

You can contact a regulatory authority at any time with a complaint, e.g. the competent supervisory authority of the federal state of your domicile or the authority responsible for us as responsible authority.

You can find a list of the supervisory authorities (for the private area) with address at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
 


Recording general information when visiting our website

Type and purpose of the processing:

If you access our website, i.e. if you do not register yourself or otherwise transmit information, information of a general nature is automatically gathered. This information (server-log files) possibly contains the kind of web browser, the operating system used, the domain names of your internet service provider, your IP address and similar. In this case, it exclusively concerns information that does not allow any conclusions to be drawn about your person.

It is processed for the following purposes in particular:

  • Ensuring the establishment of a trouble-free connection to the website,
  • Ensuring a smooth use of our website,
  • Evaluation of the system security and system stability, as well as
  • for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is possibly evaluated by us statistically to optimise our website and the underlying technology.

Legal basis:

The processing occurs in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest to improve the stability and functionality of our website.

Recipient:

Recipients of the data are possibly technical service providers who become active for the company and the maintenance of our website as order processors.

Storage duration:

The data will be deleted as soon as it is no longer necessary for the purpose of the survey. This is basically the case for the data that is used to provide the website when the current session ends.

Mandatory or required provision:

The provision of the aforesaid personal data is neither legally nor contractually prescribed. However, without your IP address, the service and the operability of our website is not guaranteed. Additionally, individual services may not be available or may be limited. That is why an objection is excluded.


Cookies

Type and purpose of the processing:

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically gives us certain data, e.g. IP address, browser used, operating system and your connection to the internet.

Cookies cannot be used to launch programs or to transfer viruses to a computer. Based on the information contained in cookies, we can facilitate navigation and enable the correct display of our webpages.

In no event will the data collected by us be passed on to third parties, or will a link with personal data be established without your consent.

Of course, you can basically also view our website without cookies. Internet browsers are regularly set so that they accept cookies. Generally, you can deactivate the use of cookies at any time via the settings of your browser. Please, use the help functions of your internet browser to find out how you can change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

Storage duration and used cookies:

If you allow us to use cookies through your browser settings or give your consent for us to use them, the following cookies may be used on our webpages:

Necessary cookies:

Necessary cookies help to make a website usable, by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. 

Cookie name: PHPSESSID Source: agrimed.de Storage period: Session 
Cookie purpose description: Maintains the user status for all page requests. 
Initiator: Webserver 
Source: agrimed.de 
Data sent to: Germany (appropriate) 

Cookie name: c4s_session Source: agrimed.de Storage period: Session 
Cookie purpose description: Maintains the user status for all page requests. 
Data sent to: Germany (appropriate) 

Statistics:

Statistics cookies help website owners understand how visitors interact with webpages by collecting and reporting information anonymously. 

Cookie name: _ga Source: agrimed.de Storage period: 2 years 
Cookie purpose description: Registers a unique ID that is used to generate statistical data about how the visitor uses the website. 
Data sent to: Germany (appropriate) 

Cookie name: _gat Source: agrimed.de Storage period: Session 
Cookie purpose description: Used by Google Analytics to limit the request rate 
Data sent to: Germany (appropriate) 

Cookie name: _gid Source: agrimed.de Storage period: Session 
Cookie purpose description: Registers a unique ID that is used to generate statistical data about how the visitor uses the website. 
Data sent to: Germany (appropriate) 

Cookie name: collect Source: google-analytics.com Storage period: Session 
Cookie purpose description: Used to send data to Google Analytics about the device and the behaviour of the visitor. Traces the visitor through devices and marketing channels. 
Data sent to: The Netherlands (appropriate) 

Cookie name: p.gif Source: typekit.net Storage period: Session 
Cookie purpose description: Retrieves fonts from the Adobe type kit. 
Data sent to: Great Britain (appropriate)

As far as these cookies can (also) concern personal data, we inform you about it in the following paragraphs.

You can use your browser settings to delete individual cookies or the entire cookie portfolio. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:


Registration on our website

Type and purpose of the processing:

When registering for the use of our personalised services, some personal information will be collected, such as name, address, contact and communication information (e.g. telephone number and e-mail address). If you are registered with us, you can access the content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data specified during registration at any time. Of course, we also provide you with information about the personal data we hold about you at any time.

Legal basis:

The processing of the data entered with the registration occurs on the basis of consent of the user (Art. 6 para. 1 lit. a GDPR).

Recipients:

Recipients of the data are possibly technical service providers who are active for the company and the maintenance of our website as order processors.

Storage duration:

Data is only processed in this connection as long as appropriate consent is given. Then it is deleted, insofar as no legal retention duties stand in the way. To contact us in this context, please use the contact details given at the end of this Data Protection Declaration.

Mandatory or required provision:

The provision of your personal data occurs voluntarily, only on the basis of your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.


Provision of paid services

Type and purpose of the processing:

To provide paid services, we ask for additional data, like for example payment information, in order to be able to carry out your order.

Legal basis:

The processing of the data which is necessary for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipients:

Recipients of the data are order processors if necessary.

Storage duration:

We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years for reasons of proper bookkeeping and tax requirements.

Mandatory or required provision:

The provision of your personal data occurs voluntarily. Without the provision of your personal data, we cannot grant you access to our offered content and services.


Contact form

Type and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. This requires the provision of a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent answering of the same. Disclosure of other data is optional.

Legal basis:

The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. Your information will be stored for the purpose of processing the request and for possible follow-up questions.

If you get in touch with us to ask for an offer, the processing of the data entered in the contact form occurs for the realisation of pre-contractual measures (Art 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data are order processors if necessary.

Storage duration:

Data will be deleted no later than 6 months after processing the request.

If it comes to a contractual relationship, we are subject to the legal retention periods in accordance with HGB (German Commercial Code) and delete your data at the end of these periods.

Mandatory or required provision:

The provision of your personal data occurs voluntarily. We can edit your inquiry, however, only if you inform us of your name, your e-mail address and the reason for your inquiry.


Use of Google Analytics

Type and purpose of the processing:

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “Cookies”, i.e. text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address submitted by your browser as part of Google Analytics will not be merged with other Google data.

The purposes of the data processing lie in the evaluation of the use of the website and in the compilation of reports on activities on the website. Based on the use of the website and the internet, other related services will then be provided.

Legal basis:

The processing of the data occurs on the basis of consent of the user (Art. 6 para. 1 lit. a GDPR).

Recipient:

The recipient of the data is Google as an order processor. For this, we have concluded a suitable order-processing contract with Google.

Storage duration:

The deletion of the data occurs as soon as it is no longer necessary for our recording purposes.

Third country transfer:

Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Moreover, we have concluded standard data protection clauses with Google for the use of Google Analytics.

Mandatory or required provision:

The provision of your personal data occurs voluntarily, only on the basis of your consent. If you prevent access, this can lead to functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by a suitable setting of your browser software; we point out you, however, that in this case you will possibly not be able to use all functions of this website to the fullest extent. You can also prevent Google from capturing the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to disable Google Analytics.

In addition or as an alternative to the Browser-Add-On, you can prevent the tracking on our sites by Google Analytics if you click this link. An opt-out cookie will then be installed on your device. This will prevent collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Profiling:

With the help of the Google Analytics tracking tool, the behaviour of the visitors to the website can be evaluated and their interests analysed. For this we create a pseudonymous user profile.


Use of Adobe Typekit

Type and purpose of the processing:

We use Adobe Typekit for the visual design of our website. Typekit is a service of

Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter “Adobe”), which grants us access to a font library. For the integration of the fonts used by us, your browser must build up a connection to a server of Adobe in the USA and download the font required for our website. Through this, Adobe receives the information that our website has been called by your IP address. You find further information about Adobe Typekit in the Data protection information of Adobe which you can retrieve here: https://www.adobe.com/de/privacy/policy.html

Legal basis:

The legal basis for the integration of Adobe Typekit and the data transfer connected with it to Adobe is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. You can find information about the use of your data by Adobe Typekit Web Fonts under https://typekit.com/ and in the Adobe Typekit Data Protection Declaration: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage duration:

We do not collect personal information through the inclusion of Adobe Typekit Web Fonts.

Third country transfer:

Adobe is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European Data Protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Mandatory or required provision:

The provision of personal data is neither statutory nor contractually required. However, without the correct representation, the contents of standard fonts cannot be made possible.


Use of Google Maps

Type and purpose of the processing:

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to show you interactive maps directly on the website, allowing you to conveniently use the map feature.

You can get further information about the data processing by Google from the Google-data protection notice. There you can also change your personal data protection settings in the Data Protection centre.

You can find detailed instructions for the administration of your own data in connection with Google products here.

Legal basis:

The legal basis for the integration of Google Maps and the data transfer to Google connected with it is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

By visiting the website, Google receives information that you have accessed the corresponding sub-page of our website. This is done regardless of whether Google provides a user account that you are logged into, or there is no user account. When you are logged in to Google, your data will be assigned directly to your account.

If you do not want the allocation in your profile in Google, you must log out of Google before activating the button. Google will store your data as usage profiles and uses them for the purposes of advertising, market research and/or need-based design of its website. Such an evaluation is in particular carried out (even for users who are not logged in) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the formation of these user profiles and for the exercise of that right you must directly contact Google.

Storage duration:

We do not collect personal information through the integration of Google Maps.

Third country transfer:

Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:

If you do not want Google to collect, process or use information about you through our website, you can disable JavaScript in your browser settings. In this case, you cannot or can only partially use our website.

Mandatory or required provision:

The provision of your personal data occurs voluntarily, only on the basis of your consent. If you prevent access, this can lead to functional restrictions on the website.


SSL encryption

To protect the security of your data during transmission, we use the latest state of the art encryption methods (e.g. SSL) via HTTPS.

Order processors used

Recipients of the data are order processors if necessary.

Changes to our Data Protection policy

We reserve the right to amend this Data Protection Declaration in order always to comply with the latest legal requirements or to implement changes to our services in the Data Protection Declaration, e.g. when introducing new services. Your new visit will be subject to the new Data Protection Declaration.

Questions to the Data Protection representative

If you have questions on data protection, please write us an e-mail or directly contact the person responsible for data protection in our organisation:

Peter Berg

Söhngen Informationssysteme GmbH 
Dudenstr. 21 
D-65193 Wiesbaden 
pb@soehngen-infosys.de

The Data Protection Declaration has been created with the Data Protection Declaration generator of activeMind AG  (Version 2018-06-22).