“We take the topic of data protection and the requisite reporting obligations seriously. You can find our data protection policy pursuant to Article 13 GDPR here.”
We, i.e. Yogi Tea GmbH as represented by the managing directors, collect and process data for the purposes of contract performance and to meet our contractual and pre-contractual obligations.
We collect and store the following data:
Data collection and data processing are necessary for the performance of contracts and are performed pursuant to Article 6 (1 b) GDPR.
In the event that there is a legitimate commercial interest on our part, the legal basis for this is Article 6 (1 f) GDPR. In such an instance, the various interests are weighed up without encroaching on the basic rights and freedoms of natural persons.
When recording the data of vendors, we also process the data after seeking permission to do so. The legal basis for this is 6 (1 a) GDPR in conjunction with Article 7 GDPR.
We process personal data for the following purposes:
Personal data are only forwarded to third parties in the context of contract performance or to safeguard business operations. This includes the forwarding to service providers commissioned by us, or to third parties whose services are required for contract performance. These include suppliers and logistics companies. Personal data may be used by third parties only for the above-named purposes. External processors commissioned by us, in particular IT and back-office providers, also receive personal data from us where this is necessary for service performance. All external processors are contractually obligated to keep personal data confidential and process it solely for the purposes of service performance.
The data are deleted as soon as they are no longer required for the purpose of their processing and no statutory regulations prevent their deletion.
Data subjects have the right to demand information regarding their data stored by us. In the event of errors, data subjects can demand rectification. Data subjects can also demand that the data we have stored be deleted, insofar as there are no statutory regulations preventing this. In certain cases, it is possible that we limit the processing of data on demand.
Data subjects can contact us at any time with any questions regarding data protection, either via e-mail to firstname.lastname@example.org or by telephone on +49 40 42 30 11 0. You can also direct questions to our data protection officer. This is: Tabea Knabe, GWS GmbH, Krokusweg 11, D-72525 Münsingen, tel. (+49 (0) 73 81) 9 31 63 58, e-mail: email@example.com.
You also have the right to lodge a complaint with the supervisory authority. This is the Hamburg Representative for Data Protection and Freedom of Information.