Privacy policy

Privacy policy

(Last update May 25 2018)

We are glad about your visit on our website and your interest in our project. The protection of your personal data is an important concern for us. Below we inform you, in accordance with Art. 12, 13 and 21 of the General Data Protection Regulation (GDPR), about the handling of your personal data when using our website www.foodauthent.de. Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes information such as civil name, address, telephone number and date of birth.

I. Responsible Body

Responsible body in the sense of the General Data Protection Regulation
GS1 Germany GmbH
Stolberger Straße 108 a
50825 Cologne
E-Mail: info@gs1-germany.de
Fax: +49 221 94714-990

Contact details of our data protection officer:
Tamim Ghazi
Maarweg 133
50825 Cologne
E-Mail: datenschutz@gs1-germany.de
Fax: +49 221 94714-990

II. Purposes and legal bases of data processing

1. Informational use of the website

You can visit our website without providing any personal information. We do not process any personal data on our website www.foodauthent.de, with the exception of data transmitted by your browser to enable you to visit the website.

a. Technical provision of the website

i. Purpose

For the purpose of technically providing the website, we may need to process certain automatically submitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time you visit our website and stored in our server log files. This information relates to the computer system of the accessing computer. The following information is collected:

  • IP address of the user,
  • if applicable User ID for controlling access rights
  • Date and time of access,
  • method of access (Get/Post),
  • request (e.g. which web page or images),
  • status sent from server to client (e.g. error messages),
  • amount of data retrieved,
  • website from which the user accessed this page,
  • browser and operating system of the user.

We also use cookies to make our website available for your use. Cookies are text files that are stored by and within your internet browser when you access a website. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use these cookies exclusively to provide you with our website and its technical functions. Some functions of our website cannot be offered without the use of cookies. Further information can be found in our Cookie Policy.

ii. Legal Basis

We process your personal data for the technical provision of our website on the basis of the following legal bases:

  • to protect our legitimate interests in accordance with Art. Section 6 1 lit. f GDPR in order to provide you with technical access to our website. Our legitimate interest is to provide you with an attractive, technically functional and user-friendly website and to take measures to protect our website against cyber risks and to prevent cyber risks for third parties from emanating from our website.

c. contact inquiries

If you have a contact request with us (e.g. by e-mail, telephone, personally), we process your personal data, which you make available to us, as shown below:

In order to be able to process and answer your enquiries to us, we process the personal data you provide us with in this context. In any case, this includes your name and address information, such as your e-mail address, postal address, or a fax number to send you a reply, as well as any other information you send us in connection with your message.

We process your personal data to respond to user inquiries on the basis of the following legal principles:

  • to protect our legitimate interests in accordance with Art. Section 6 1 lit. f GDPR; our legitimate interest lies in the proper answering of contact enquiries.

d. Compliance with legal regulations

We process your personal data on the basis of the following legal principles:

  • to fulfil a legal obligation to which we are subject in accordance with Art. Section 6 1 lit. c GDPR in connection with, in particular, commercial, industrial or tax law regulations.

e. law enforcement

We also process your personal data in order to assert our rights and assert our legal claims. We also process your personal data in order to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to defend against or prosecute criminal offences.

We process your personal data to enforce the law:

  • to protect our legitimate interests pursuant to Art. Section 6 1 lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or clarify criminal offences.

III. Categories of recipients

Initially, only our employees receive knowledge of your personal data. Depending on the individual request, we pass on your data to employees of the companies participating in Foodauthent. These are Benelog GmbH & Co. KG, Bundesinstitut für Risikobewertung, Eurofins Analytik GmbH, GS1 Germany GmbH, Lablicate GmbH, Universität Konstanz. In addition, we do not pass on your data to third parties.

IV. third country transfer

We do not transfer your personal data to countries outside the EU or to other countries. of the EEA or to international organisations.

V. Duration of storage

1. Informational use of the website

When using our website for purely informational purposes, we store your personal data on our servers for the duration of your visit to our website. After you have left our website, your personal data will be deleted immediately. However, we store server log files for a period of 1 month.

Cookies installed by us are usually also deleted after leaving our website. You have the option of deleting installed cookies yourself at any time.

2. contact inquiries

In the case of contact enquiries, we store your personal data for the duration of the reply to your enquiry. In addition, we then store your personal data in accordance with statutory retention periods.

VI. Your rights as a data subject

Under the statutory conditions, you are entitled to the following rights as a person concerned, which you can assert against us:

Right to information: You are entitled, at any time, to demand information within the scope of Art. 15 GDPR to request confirmation from us as to whether we are processing personal data relating to you; if this is the case, you are entitled to request confirmation within the framework of Art. 15 GDPR, you are also entitled to request information about this personal data as well as certain further information (e.g. processing purposes, categories of personal data, categories of recipients, planned storage period, their rights, the origin of the data, the use of automated decision making and, in the case of third country transfers, the appropriate guarantees) and a copy of your data.

Right to rectification: You have the right, pursuant to Art. 16 GDPR to require us to correct the personal data stored about you if it is inaccurate or erroneous.

Right to deletion: You are entitled, under the conditions of Art. 17 GDPR to demand that we delete your personal data immediately. The right to delete exists among other things not if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) the fulfilment of a legal obligation to which we are subject (e.g., the processing of personal data). B. (i) to fulfil a legal obligation (e.g. the right to freedom of expression and information to which we are subject (e.g. statutory storage obligations) or (iii) to assert, exercise or defend legal claims.

Right to Restrict Processing: You are entitled, under the conditions of Art. 18 GDPR to require us to restrict the processing of your personal data.

Right to data transferability: You are entitled, under the conditions of Art. 20 GDPR that we provide you with the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

Right of withdrawal: You have the right to revoke your consent to the processing of personal data at any time with effect for the future.

Right of objection: You are entitled, under the conditions of Art. 21 GDPR against the processing of your personal data, so that we must terminate the processing of your personal data. The right of objection exists only in the cases set out in Art. 21 GDPR. In addition, our interests may prevent the processing from being terminated, so that we are entitled to process your personal data despite your objection.

Right of appeal to a supervisory authority: You are entitled, under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of presumed infringement, if you are of the opinion that the processing of your personal data violates the GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein- Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: +49 211 38424-0
Fax: +49 211 38424-10
E-Mail: poststelle@ldi.nrw.de

However, we recommend that you always first address a complaint to our data protection officer.

If possible, your requests concerning the exercise of your rights should be addressed in writing to the above address or directly to our data protection officer.

VII. Scope of your obligations to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do this, we will not be able to provide you with our website and will not be able to answer your enquiries.

VIII. Automated decision making / profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).


 

Information about your right to object Art. 21 GDPR

You have the right, at any time, to object to the processing of your data, which is carried out on the basis of Art. 6 para. 1 f GDPR (data processing on the basis of a weighing of interests) or Art. 6 para. 1 e GDPR (data processing in the public interest), you may lodge an objection if there are reasons for doing so which result from your particular situation.

If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

 




The opposition can be made without form and should, if possible, be addressed to

GS1 Germany GmbH
Stolberger Straße 108 a
50825 Cologne
widerspruch@gs1-germany.de