Privacy Notice – YOGI TEA GmbH
As of May 3rd 2018
The following Privacy Notice applies to the website of YOGI TEA GmbH.
We, YOGI TEA GmbH, Burchardstraße 24, D-20095 Hamburg, telephone: +49 (0)40 – 42 30 11-0, e-mail: info.eu@yogiproducts.com are responsible within the meaning of the laws on data protection for processing data in connection with this Privacy Notice (hereafter also referred to as “YOGI TEA”, “we” or “us”).
For more than 40 years YOGI TEA has been synonymous with delicious herbal and spice teas based on unique Ayurveda tea recipes whose roots go back to the 3,000-year-old Indian philosophy of Ayurveda.
Should you have any questions on this Privacy Notice or generally on the processing of your data by YOGI TEA, please refer to our data protection officer:
GWS GmbH (managing director: Tabea Knabe), can be contacted through dataprotection.eu@yogiproducts.com
Personal data means “any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (Article 4 no. 1 of the General Data Protection Regulation). Personal data includes for example name, e-mail address, address and data of birth.
When we process personal data, that means that we, for example, record, store, use, transmit to others or delete this data.
Registration data: We process firstly all data from you that you send us in connection with your registration to the Yogi Tea media data bank under https://www.yogitea.com/en/medialibrary/. These are the personal data that are necessary in order to justify and fulfil registration (e.g. name, company, e-mail address).
Competitions: We first process all your data that you send us in connection with participation in competitions. These are the personal data required in order to carry out the competition (e.g. name, company, e-mail address).
Data on online behaviour and preferences: We also process data such as IP addresses and information on visits to our website.
Customer complaints and compensation products: We process data from you that you send us in connection with a complaint. These are the personal data that are necessary in order to conduct and handle complaints as well as for the shipment of compensation products (e.g. name, e-mail address, address).
We process your data for the following purposes and on the basis of the legal principles stated:
Please note your rights to object when data is processed for purposes of direct marketing or for personal reasons and your right to revoke your consent (see section What rights do you have? and the section Information on your rights to object).
As a matter of principle, we only give your data to third parties provided this is necessary in order to fulfil the contract, we or the third party have a legitimate interest in forwarding the data or you have given your consent to the data being forwarded. Should data be forwarded to a third party on the basis of a legitimate interest, this is explained in the Privacy Policy. Furthermore, data may be forwarded to third parties should this be required of us due to provisions of the law or enforceable orders by a public authority or court of law.
We reserve the right to use service providers in recording or processing data. Service providers only receive personal data from us that they require for their specific function. Therefore, your e-mail address may be forwarded to a service provider, for example in order that it can deliver a newsletter you have ordered. Service providers may also be appointed to make server capacity available.
Specifically, the following types of service provider are involved:
We also give data to data processors that have a registered office in non EEA countries (so called third countries).
This refers to data processors in the following countries: USA, Switzerland
In this case, prior to forwarding the data, we ensure either that the recipient has an appropriate level of data protection (e.g. through the recipient’s self certification for the EU-US Privacy Shield in conjunction with the appropriate adequacy decision by the Commission in accordance with article 45 GDPR or in the agreement of so called EU standard contractual clauses of the European Commission with the recipient in accordance with article 46 GDPR) or our users have explicitly given their consent.
You can obtain a summary from us of recipients in third countries and a copy of the specifically agreed rules in order to ensure an adequate level of data protection. Please use the information in the section Contact for this purpose.
We store your data for as long as this is required in order to provide our online offer and the related services or should we have a legitimate interest in continued storage. In all other cases, we delete your personal data with the exception of such data as we must continue to hold in fulfilment of legal (e.g. tax and commercial law) retention requirements (e.g. invoices). We block data subject to a retention period until the retention period ends expires.
The following exact retention periods apply:
Registration data: For as long as you are registered with our media data bank and after it has ended [immediate deletion]
Data derived from competitions: As long as the competition is being carried and processed after it has ended for [2 months]
Data relating to online behaviour and preferences: [2 years]
Data relating to complaints of customers: As long as the complaint is being handled by us and after it has been handled for 1 year.
Every time you use the Internet, certain information is automatically transmitted from your Internet browser and stored by us in so called log files.
We store the log files for a period of seven to ten days in order to identify malfunctions and for security reasons (e.g. in order to clarify attempted attacks) and they are then deleted. Log files that are retained longer for purposes of proof are excluded from deletion until the case concerned is finally clarified and may in certain cases be forwarded to the investigating authorities.
The following information in particular is stored in the log files:
Selected information derived from log-files (not the IP address) is also used in order to analyse the web.
Cookies are small text files that are sent when a website is visited and stored in the browser. If this website is visited again, the user’s browser returns the contents of the cookie and thus enables the user to be recognised again. Certain cookies are automatically deleted after the end of the browser session (so called session cookies), and others are stored for a specified length of time or stored permanently in the user’s browser and then delete themselves automatically (so called temporary or permanent Cookies).
As a matter of principle, no personal data are stored in the cookies but only an online identification.
You can deactivate the storage of cookies through your browser settings and delete cookies that are already stored in your browser at any time (see Technical advice). Please note however that without cookies this online offer might possibly not function or only function subject to limitations.
Please also note that objections to the creation of user profiles function partly through the use off a so called “opt out cookie”. If you delete all cookies, an objection might not therefore be considered and you will have to submit the objection again.
Cookies that are absolutely necessary
Certain cookies are required so that we can provide our online offer securely. This category includes for example:
Analysis cookies
We use analysis cookies in order to record the behaviour of our users (e.g. subpages visited, search enquiries entered) and to analyse this behaviour statistically
We require statistical information on the use of our online facility in order to make it more user friendly, to measure its reach and to be able to operate market research.
We use the following web analysis tools for this purpose. The user profiles created by these tools with the aid of cookies or through the evaluation of log files are not amalgamated with personal data.
The providers of the tools only process data as job processors in accordance with our instructions and not for their own purposes.
The tools either do not use the users’ IP addresses at all or abbreviate them immediately after they have been recorded.
For each tool you will find information on the provider concerned and also how to object to the recording and processing of data by the tool.
It should be noted in the case of tools that work with opt out cookies, that the opt out function is equipment and browser based and only applies to the terminal or browser that is currently used. Should you use several terminals or browsers, you must set the opt out function on each terminal and on each browser used.
Moreover, you can prevent the creation of any user profiles by deactivating the use of cookies in general.
Google Analytics is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Analytics with the additional function offered by Google to anonymise IP addresses: according to this function, Google generally abbreviates the IP address within the EU already and only in exceptional cases actually in the USA and in all cases only stores the IP address in abbreviated form.
You can object to the recording and evaluation of your data by this tool by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
In order to assert your rights, please use the inform in the Contact section. When doing this, please ensure that we can identify who you are with absolute certainty.
You may demand that we confirm to you whether we process personal data relating to you and you are entitled to information with respect to which of your data we process. Should your data be incorrect or incomplete, you may demand that they be corrected or completed. Should we have forwarded your data to third parties, we inform them of the correction, to the extent that this is stipulated by law.
Provided the legal conditions apply, you may demand that we delete your personal data immediately. This is particularly the case if
Should we have forwarded your data to third parties, we inform these third parties that the data have been deleted to the extent that this is stipulated by law.
Please note that your right to deletion is subject to limitations. For example, we must not and may not delete any information that we must continue to hold due to legal retention periods. Also your right to have data deleted does not apply to data that we require in order to assert, exercise or defend legal claims.
Provided that the legal conditions apply, you may demand that we restrict processing. This is particularly the case if:
In the event of right to restrict processing, we mark the data concerned in order in this way to ensure that these data are only processed within the strict limits that apply to restricted data (namely, in particular the defence of legal interests or with your consent).
You have the right to object to our processing data for reasons relating to your particular situation provided that this is based on the legal grounds of a legitimate interest. You may also object to the processing of your data for advertising purposes (“objection to advertising”). Please also note in this context the section Information on your rights to object.
You have the right to receive personal data, which you have given us in order to fulfil a contract or on the basis of consent, in a form that can be transferred. In this case, you may also demand that we transmit these data directly to a third party provided that this is technically feasible.
Should you have given us your consent to process your data, you may revoke this consent at any time to come into effect for the future. This does not affect the legality of any processing of your data that has taken place until the time consent is revoked.
You have the right to submit a complaint to a data protection authority. You may refer to the data protection authority that is responsible for your place of residence for this purpose. Alternatively, you may also refer to the data protection authority that is responsible for us, which is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Klosterwall 6 (Block C)
20095 Hamburg
E-Mail: mailbox@datenschutz.hamburg.de
You can also visit our website without providing us with any data on yourself. In order to register however you are required to give us the personal data (e.g. name, date of birth, e-mail address) needed in order to establish and implement the contract; we identity this compulsory information with *. Should you not wish to give us this information, we are unfortunately unable to register you as a member.
We do not make any fully automated decisions in connection with this data protection declaration in individual cases with legal or comparable consequences.
We do not collect any data on you from third parties (e.g. credit agencies or social networks).
You may submit an objection to the processing of your personal data for advertising purposes at any time (“objection to advertising”). We will then cease processing your data for advertising purposes. Please bear in mind however that, for organisational reasons, there might be an overlap between your objection and use of the data as part of a campaign that is already in progress.
You have a right to object to our processing personal data for reasons that relate to your particular situation, provided that this is based on the legal grounds of a legitimate interest. We will then cease processing your personal data, unless we are able to prove compelling reasons for continued processing that are worthy of protection, which override your rights or interests or are only processing this information in order to assert, exercise or defend legal claims.
Objections are not bound to any particular form. Please send your objection if possible to:
YOGI TEA GmbH
Burchardstraße 24
D-20095 Hamburg
Telephone: +49 (0)40 – 42 30 11-0
E-mail: dataprotection.eu@yogiproducts.com
You can contact us as follows:
YOGI TEA GmbH
Burchardstraße 24
D-20095 Hamburg
Telephone: +49 (0)40 – 42 30 11-0
E-Mail: dataprotection.eu@yogiproducts.com