Data protection

1. Preamble to the Privacy Policy

2. Name and Address of the Data Controller

Repre­sented by:
Alexander Oesterle, Managing Director at Your Green Mix UG (haftungs­be­schränkt)

Contact:
phone: +49 621 405 483 00
Email: info@yourgreenmix.com

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

3. Blocking and/or Deletion of Personal Data

info@yourgreenmix.com

4. Rights of the Data Subject

a) Right to Confir­mation

info@yourgreenmix.com

b) Right to Access

Every data subject whose personal data are processed has the right, granted by the European legis­lator, to obtain from the data controller free infor­mation about the personal data stored about them and a copy of this infor­mation at any time. Furthermore, the European legis­lator has granted the data subject access to the following infor­mation:

• The purposes of processing
• The categories of personal data being processed
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in parti­cular recipients in third countries or inter­na­tional organiza­tions
• If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine that duration
• The existence of a right to recti­fi­cation or erasure of personal data or restriction of processing by the data controller or a right to object to such processing
• The existence of a right to lodge a complaint with a super­visory authority
• Where the personal data are not collected from the data subject: Any available infor­mation on the source of the data
• The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful infor­mation about the logic involved, as well as the signi­fi­cance and the envisaged conse­quences of such processing for the data subject

Furthermore, the data subject has the right to know whether personal data have been trans­ferred to a third country or to an inter­na­tional organization. If this is the case, the data subject also has the right to obtain infor­mation about the appro­priate safeguards related to the transfer. If a data subject wishes to exercise this access right, they can contact an employee of the data controller at any time.

c) Right to Recti­fi­cation

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to request the immediate correction of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incom­plete personal data, taking into account the purposes of the processing, even by providing a supple­mentary statement.

If a data subject wishes to exercise this right of recti­fi­cation, they can contact an employee of the data controller at any time.

d) Right to Erasure (Right to be Forgotten)

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to request the data controller to erase the personal data concerning them without undue delay if one of the following reasons applies, and to the extent that the processing is not necessary:

• The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• The data subject withdraws their consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
• The personal data has been unlawfully processed.
• The erasure of personal data is required to fulfill a legal obligation under Union law or the law of Member States to which the data controller is subject.
• The personal data has been collected in relation to the offer of infor­mation society services referred to in Article 8(1) of the GDPR.

If one of the above-mentioned reasons applies, and a data subject wishes to request the erasure of personal data stored by us, they can contact an employee of the data controller at any time. The employee will arrange for the erasure request to be complied with immediately.

If the personal data has been made public by us, and our company, as the data controller, is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, taking into account available technology and the imple­men­tation costs, including technical measures, to inform other data controllers processing the published personal data that the data subject has requested erasure of all links to such personal data or copies or repli­ca­tions of such personal data, as far as processing is not required. The employee of Your Green Mix UG (limited liability) will arrange the necessary measures on a case-by-case basis.

e) Right to Restriction of Processing

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to request from the data controller the restriction of processing if one of the following condi­tions applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data.
• The processing is unlawful, and the data subject opposes the erasure of the personal data and requests instead the restriction of its use.
• The data controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the estab­lishment, exercise, or defense of legal claims.
• The data subject has objected to processing pursuant to Article 21(1) of the GDPR, pending the verifi­cation whether the legitimate grounds of the data controller override those of the data subject.

If one of the above-mentioned condi­tions is met, and a data subject wishes to request the restriction of personal data stored by Your Green Mix UG (limited liability), they can contact an employee of the data controller at any time. The employee will arrange the restriction of processing.

f) Right to Data Porta­bility

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to receive the personal data concerning them, which they have provided to a data controller, in a struc­tured, commonly used, and machine-readable format. They also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data has been provided, where the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the perfor­mance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Furthermore, in exercising their right to data porta­bility pursuant to Article 20(1) of the GDPR, the data subject has the right to have personal data trans­mitted directly from one data controller to another, where techni­cally feasible and where this does not adversely affect the rights and freedoms of others.

To exercise the right to data porta­bility, the data subject can contact an employee of Your Green Mix UG (limited liability) at any time.

g) Right to Object

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to object, on grounds relating to their parti­cular situation, at any time, to the processing of personal data concerning them, which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provi­sions.

Your Green Mix UG (limited liability) will no longer process the personal data in the event of the objection, unless we can demons­trate compelling legitimate grounds for the processing, which override the interests, rights, and freedoms of the data subject, or for the estab­lishment, exercise, or defense of legal claims.

If Your Green Mix UG (limited liability) processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Your Green Mix UG (limited liability) processing personal data for direct marketing purposes, Your Green Mix UG (limited liability) will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to their parti­cular situation, to object to the processing of personal data concerning them by Your Green Mix UG (limited liability) for scien­tific or histo­rical research purposes, or for statis­tical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the perfor­mance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject can directly contact an employee of Your Green Mix UG (limited liability). It is also possible to exercise this right in the context of the use of infor­mation society services, notwi­th­standing Directive 2002/58/EC, by automated means using technical speci­fi­ca­tions.

h) Right to Automated Decisions, Including Profiling

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly signi­fi­cantly affects them, unless the decision (1) is necessary for entering into or the perfor­mance of a contract between the data subject and the data controller, or (2) is permitted by Union or Member State law to which the data controller is subject and which contains appro­priate measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.

If the decision (1) is necessary for entering into or the perfor­mance of a contract between the data subject and the data controller, or (2) is based on the data subject’s explicit consent, the Your Green Mix UG (limited liability) shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human inter­vention on the part of the data controller, to express their point of view, and to contest the decision.

If the data subject wishes to exercise rights concerning automated decisions, they can contact an employee of the data controller at any time.

i) Right to Withdraw Consent for Data Processing

Any individual whose personal data is processed has the right, as granted by the European legis­lator for direc­tives and regula­tions, to withdraw consent for the processing of personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they can contact an employee of the data controller at any time.

j) Right to Lodge a Complaint

If a data subject believes that the processing of their personal data by Your Green Mix UG (limited liability) violates the provi­sions of the GDPR, they have the right to lodge a complaint with the State Commis­sioner for Data Protection and Freedom of Infor­mation as the competent super­visory authority (Article 77 of the GDPR).

5. Legal Basis for Processing

Article 6(1)(a) of the GDPR serves as the legal basis for processing opera­tions for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the perfor­mance of a contract to which the data subject is a party, such as processing opera­tions required for the delivery of goods or the provision of other services or conside­ration, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing opera­tions that are necessary for carrying out pre-contractual measures, for example, in the case of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as fulfilling tax obliga­tions, the processing is based on Article 6(1)© of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and their name, age, health insurance data, or other vital infor­mation had to be passed on to a doctor, hospital, or other third party. Then the processing would be based on Article 6(1)(d) of the GDPR.

Ultim­ately, processing opera­tions could be based on Article 6(1)(f) of the GDPR. This legal basis is used for processing opera­tions that are not covered by any of the afore­men­tioned legal bases if processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests or funda­mental rights and freedoms of the data subject. Such processing opera­tions are parti­cu­larly permitted because they have been speci­fi­cally mentioned by the European legis­lator. He considered that a legitimate interest could be assumed if the data subject is a client of the data controller (Recital 47 Sentence 2 GDPR).

6. Purposes of Processing, Recipients of Data

7. Glossary & Defini­tions

Your Green Mix UG (limited liability)‘s privacy policy is based on the termi­nology used by the European legis­lator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily readable and under­stan­dable for the general public as well as for our customers and business partners. To ensure this, we would like to explain the termi­nology used in advance. In this privacy policy, we use, among other things, the following terms:

a) Personal Data

Personal data refers to any infor­mation relating to an identified or identi­fiable natural person (herein­after referred to as the “data subject”). An identi­fiable natural person is one who can be identified, directly or indirectly, in parti­cular by reference to an identifier such as a name, an identi­fi­cation number, location data, an online identifier, or one or more specific charac­te­ristics that express the physical, physio­lo­gical, genetic, mental, economic, cultural, or social identity of that natural person.

b) Data Subject

c) Processing

Processing is any operation or set of opera­tions performed on personal data, whether or not by automated means, such as collection, recording, organization, struc­turing, storage, adapt­ation or alteration, retrieval, consul­tation, use, disclosure by trans­mission, disse­mi­nation, or otherwise making available, alignment, or combi­nation, restriction, erasure, or destruction.

d) Restriction of Processing

Restriction of processing involves marking stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in parti­cular to analyze or predict aspects concerning work perfor­mance, economic situation, health, personal prefe­rences, interests, relia­bility, behavior, location, or movements of that natural person.

f) Pseud­ony­mization / Anony­mization

Pseud­ony­mization is the processing of personal data in such a way that the personal data can no longer be attri­buted to a specific data subject without the use of additional infor­mation, provided that such additional infor­mation is kept separately and is subject to technical and organiza­tional measures to ensure that the personal data are not attri­buted to an identified or identi­fiable natural person.

In contrast to pseud­ony­mization, in the case of anony­mized processing of personal data, no inference can be made to the personal data of an identified or identi­fiable natural person. This possi­bility is irrever­sible.

g) Data Controller

The data controller is a natural or legal person, authority, agency, or other body that alone or jointly with others deter­mines the purposes and means of the processing of personal data. Where the purposes and means of such processing are deter­mined by Union law or the law of a Member State, the data controller or the specific criteria for their appointment may be provided for by Union law or the law of a Member State.

h) Data Processor

A data processor is a natural or legal person, authority, agency, or other body that processes personal data on behalf of the data controller.

i) Recipient

A recipient is a natural or legal person, authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, autho­rities that may receive personal data in the framework of a parti­cular inquiry in accordance with Union law or the law of a Member State are not considered recipients.

j) Third Party

A third party is a natural or legal person, authority, agency, or body other than the data subject, the data controller, the data processor, and the persons who, under the direct authority of the data controller or the data processor, are autho­rized to process personal data.

k) Consent

Consent is any freely given, specific, informed, and unambi­guous indication of the data subject’s wishes by which they, by a statement or by a clear affir­mative action, signify agreement to the processing of their personal data.

l) Classi­fi­cation of Personal

Data We have catego­rized the following personal data into individual classes:

• Address Data:
  • name
  • Address (private/company address, department)
• Date of Birth:
• Contact Data:
  • Salutation
  • Name
  • Company (if appli­cable)
  • Phone Data (office, mobile, private)
  • Email Address
• Browser Data:
  • IP Address
  • Hostname
  • Referrer
  • User-Agent
• Tracking Data:
  • IP Address
  • Access Times
  • Browser Type
  • Resolution
  • Device Type
  • Referrer
• Tracking Behavior:
  • Anonymous
  • Pseud­onymous
  • Perso­na­lized

8. Security Measures

Your Green Mix UG (limited liability) has imple­mented numerous technical and organiza­tional measures as the data controller to ensure the most compre­hensive protection of personal data processed through this website. However, internet-based data trans­mis­sions can generally have security vulnerabi­lities, so absolute protection cannot be guaranteed. For this reason, it is open to every data subject to transmit personal data to us through alter­native means, such as by telephone.

Our security measures are conti­nually improved in line with techno­lo­gical develo­p­ments. Furthermore, in the collection and processing of personal data, we only employ staff who have undergone qualified data protection training.

9. Appli­ca­tions

a) Visiting Our Website

For the mere visit to our website and accessing the infor­mation contained therein, it is not necessary for you to provide personal data.

During your visit to our website, we only collect and use data that your internet browser automa­ti­cally transmits to us.

We use this data to enable your visit to our site from a technical stand­point. Furthermore, we use this data for statis­tical purposes to improve the design and layout of our website. We only store your complete IP address for the duration of your visit.

Personal Data Categories: Browser Data

b) Use of the Contact Form

c) Use of Services Offered on Our Website

d) Use of Cookies

• Techni­cally Necessary Cookies

  These cookies are necessary for the technical provision of our internet services. They are parti­cu­larly required to enable certain functions such as logging into your user account or playing video or audio content, identi­fying your browser for the duration of your visit, deter­mining the speed of your internet connection necessary for content delivery, or accessing personal settings. We also use these cookies for billing purposes, especially for the required measu­rement of the usage scope of free content.

• Analy­tical Cookies
  We use these cookies for the statis­tical evaluation of the use of our websites, including tracking new and returning visitors, estimating the number of individual visitors, identi­fying the most important search terms leading to our website through search engines, or uncovering display and navigation issues on our websites.
• Cookies for Displaying Perso­na­lized Adver­tising / Tracking
  We use cookies to display content and adver­ti­se­ments tailored to your specific interests. For this purpose, we collect your interests based on your usage behavior on our websites using these cookies. It is also possible to capture your usage behavior across various websites.
• Third-Party Cookies
  Third-party cookies are cookies that can be used and evaluated by other providers. These third-party providers can be companies respon­sible for displaying adver­tising or operators of social networks. With your consent, we allow our partners to send cookies to your browser via our website and evaluate them during the further use of online services.

10. Ad-Technology

a) Google AdWords and Google Conversion Tracking

This website uses Google AdWords, an online adver­tising program by Google Inc., 1600 Amphi­theatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within Google AdWords, we use a feature called Conversion Tracking. When you click on an adver­ti­sement provided by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser places on your computer. These cookies expire after 30 days and are not used for personal identi­fi­cation of users. If you visit certain pages of this website and the cookie has not expired, Google and we can tell that you clicked on the ad and were redirected to this page. Each Google AdWords customer receives a different cookie. These cookies cannot be tracked through the websites of AdWords customers. The infor­mation obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive infor­mation about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any infor­mation that perso­nally identifies users. If you do not want to parti­cipate in tracking, you can opt out by disabling the Google Conversion Tracking cookie in your internet browser under User Settings. You will then not be included in the conversion tracking statistics. For more infor­mation about Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: http://www.google.de/policies/privacy/ You can also set your browser to notify you when cookies are being stored and allow cookies only on a case-by-case basis, accept cookies for specific cases, or block them entirely. Disabling cookies may limit the function­ality of this website.

11. Social sharing

a) Facebook

(http://de-de.facebook.com/privacy/explanation.php).

b) Google+

c) Twitter

13. Analytics Tools

a) Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphi­theatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The infor­mation generated by the cookie about your use of this website is usually trans­mitted to a Google server in the USA and stored there. If IP anony­mization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being trans­mitted. Only in excep­tional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this infor­mation to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. For the excep­tional cases in which personal data is trans­ferred to the USA, Google has self-certified under the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

IP Address Anony­mization: On this website, Google Analytics has been expanded with the code “gaTracker(‘set’, ‘anony­mizeIp’, true)” to enable the anony­mized collection of IP addresses (so-called IP masking).

Infor­mation from the third-party provider: Terms of Use: http://www.google.com/analytics/terms/de.html Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html Privacy Policy: http://www.google.de/intl/de/policies/privacy

14. Scope, Version, and Changes to the Privacy Policy

This privacy policy exclu­sively applies to the use of the internet services we offer. It does not apply to the websites of other service providers to which we only refer via a link. We do not assume any respon­si­bility or liability for external state­ments and guide­lines unrelated to our website.

We reserve the right to adjust the above privacy provi­sions from time to time in accordance with future changes in the collection and processing of personal data. Signi­ficant changes will be announced with a clearly visible notice on our website.