Privacy statement

Privacy Statement

Table of contents

I. General information on data protection

II Privacy Policy Website

III. Information for applicants

IV. Information for business partners

I. General information on data protection

Note on the responsible body:

Floragard Vertriebs-GmbH

Gerhard-Stalling-Strasse 7

26135 Oldenburg

We attach particular importance to the protection of your personal data. Your personal data will be processed in accordance with data protection regulations, in particular the European Data Protection Basic Regulation (EU DS-GVO) and the Federal Data Protection Act (BDSG-neu).

The following information provides an overview of the type, scope and purpose of the collection, processing and transmission of personal data and the security measures used to protect this data.

Personal data is individual information about personal or factual circumstances of a specific or determinable natural person, such as your name, address, telephone number, date of birth, e-mail and IP address.

Legal basis for the processing of personal data

- If we obtain the consent of the data subject for processing of personal data, Art. 6 (1) (a) EU DS-GVO serves as the legal basis. You can revoke your consent for future processing at any time in accordance with Art. 7 Para. 3 EU DS-GVO.

- Art. 6 (1) lit. b EU DS-GVO serves as the legal basis for the processing of personal data which is necessary for the performance of a contract or the implementation of pre-contractual measures.

- Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c EU DS-GVO serves as the legal basis.

- If the processing is necessary to safeguard a legitimate interest of our company or a third party and does not outweigh the interests, fundamental rights and freedoms of the data subject, Art. 6 (1) lit. f EU DS-GVO serves as the legal basis for the processing. In this case you have a right of objection under Art. 21 EU DS-GVO.

Data erasure and storage period

Personal data will be deleted as soon as the purpose for which it was stored no longer applies. Furthermore, data may be stored if this is provided for by legally prescribed storage obligations to which our company is subject.

Your rights

Upon written request, we will inform you in accordance with Art. 15 EU DS-GVO and our legal obligation under Art. 12 EU DS-GVO whether and which of your personal data is processed or stored by us. Furthermore, you have the right to correct incorrect data in accordance with Art. 16 EU DS-GVO, data transferability in accordance with Art. 20 EU DS-GVO, blocking and deletion of your personal data in accordance with Art. 17 EU DS-GVO - provided there are no legal obligations to retain data - and the right to restrict processing in accordance with Art. 18 EU DS-GVO. You also have the right to contact the competent supervisory authority in accordance with Art. 77 EU DS-GVO.

You also have the right to object in accordance with Art. 21 EU DS-GVO.

Of course, you can revoke your consent to us for the future at any time in accordance with Art. 7 (3) EU DS-GVO. To do so, please contact us at the contact address given below.

If you have any questions regarding the processing of your personal data, you can contact our data protection officer, who is also available to deal with requests for information, suggestions or complaints.

Data protection officer of

Floragard Vertriebs-GmbH

Gerhard-Stalling-Strasse 7

26135 Oldenburg

e-mail: datenschutz@floragard.de

Changes to our privacy policy

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services.

Status: 2020

II Privacy Policy Website

Provision of the website

Use of hosting service providers

Our website is hosted on servers of a hosting service provider located in the EU on the basis of an order processing according to Art. 28 EU DS-GVO. Within the scope of its services, the hosting service provider may have access to personal data of our users, in particular to technical data that are generated in the course of technical communication between you and our website (e.g. server log files). He may not use these for his own purposes. The use of a hosting service provider is based on our legitimate interests in the provision of infrastructure and platform services, computing capacity, e-mail dispatch and security services in accordance with Art. 6 Para. 1 letter f EU DS-GVO.

Server log files

When you visit our website or use its services, the device with which you call up the page automatically transmits log data (connection data) to our server. The corresponding information consists of:

- Type and version of the browser you are using,

- Type and version of the operating system you use,

- Referrer URL of the page from which you reached our website,

- Date and time of access to our website,

- Name of the subpages you have called up,

- IP address of your computer system,

- Amount of data transmitted in each case.

The collected data is used exclusively for statistical evaluations for the purpose of operation, security and optimisation of the offer. For security reasons, however, we reserve the right to subsequently check the log data if there is a justified suspicion of illegal use based on concrete evidence. The data will not be stored longer than necessary for this purpose. This collection is based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f EU DS-GVO.

Cookies

We use so-called cookies in some areas of the website in order to recognise the preferences of visitors and to be able to design the website accordingly in an optimal and attractive way. This facilitates navigation and makes the website highly user-friendly. Processing by cookies represents a legitimate interest in accordance with Art. 6 Para. 1 lit. f EU DS-GVO (optimisation and economic operation of our online service). In addition, the legal basis is Art. 6 para. 1 lit. a EU DS-GVO, insofar as we require your consent for the use of cookies (for marketing or analysis purposes, among other things).

Cookies are small text files which your browser automatically creates and which are stored on your end device when you visit our website. Cookies do not damage your computer and do not contain viruses. Most of the cookies we use are deleted after the browser session ends (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer on your next visit (so-called permanent or session-spanning cookies). Thanks to these files, it is possible, for example, that information tailored to your interests is displayed on the site.

You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. If you completely exclude the use of cookies, you may not be able to use certain functions of this website.

Security of your data

We use technical and organisational security measures to adequately protect the data you provide against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We therefore use SSL encryption for the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If the SSL encryption is activated, the data that you transmit to us cannot be read by third parties. Our security measures are developed further in accordance with the state of the art.

Contact

If you contact us (e.g. by contact form, e-mail, telephone, social media), your personal data will be stored and processed by us for the purpose of processing your enquiry and, where applicable, related follow-up questions in accordance with Art. 6 Para. 1 letter b EU DS-GVO (in the context of pre-contractual/contractual measures) or Art. 6 Para. 1 letter f EU DS-GVO (general enquiries). We will not pass on this data without your respective consent.

The data provided by you will remain with us until you request us to delete it, object to its storage or until the purpose for which it was stored ceases to apply (i.e. after your enquiry has been processed), provided that this does not conflict with any statutory storage obligations.

Registration

If you register on our website in order to order goods, services and information in our online portal, personal data is collected. Registration enables access to services and contents that are only available to registered users. If necessary, registered users have the option of changing or deleting the data provided during registration at any time. Your data may be passed on to shipping and payment service providers commissioned by us to process your order. We do not pass on your data to third parties beyond this. The processing of your personal data is carried out on the basis of contract processing (in accordance with Art. 6 para. 1 lit. b EU DS-GVO). These data are deleted in accordance with the statutory storage obligations.

Newsletter

If you register for our newsletter on our website, we will use the personal data you provide in this context exclusively for sending the newsletter.

The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to prevent registrations from foreign e-mail addresses. Newsletter registrations are logged in order to be able to prove the registration process in accordance with the legal requirements (consent in accordance with Art. 6 para. 1 lit. a EU DS-GVO). This includes the storage of the time of registration and confirmation as well as the IP address. Any data we receive from you and the information logged will not be passed on to third parties.

You can revoke your consent to the collection and storage of your data and its use for sending the newsletter at any time without giving reasons. You will find a link to cancel the newsletter at the end of each newsletter.

Use of WhatsApp Business

We use WhatsApp Business (hereinafter "WhatsApp") as our communication channel. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

WhatsApp is used in the interest of providing fast and needs-based customer advice. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DS-GVO.

Within the scope of your enquiry, your personal data will be stored and processed by us for the purpose of processing the enquiry and, if necessary, related follow-up questions. The data transmitted by you will remain with us until the purpose for which it was stored ceases to apply or you request us to delete it.

WhatsApp in turn collects data independently, whereby you can find out more about the purpose, scope, processing and use of your personal data, your rights and setting options for protecting your privacy directly from WhatsApp. You can find the WhatsApp privacy policy at: https://www.whatsapp.com/legal/#privacy-policy .

Analysis Tools

The analysis measures listed below and used by us are carried out on the basis of Art. 6 para. 1 lit. a EU DS-GVO (consent). With the use of these analysis measures, we want to ensure that our website is designed to meet your needs and is continuously optimised. By means of the analysis tools, we record the use of our website pseudonymously and evaluate this for the purpose of optimising our offer.

You can withdraw your consent at any time with effect for the future.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google uses this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Browser Plugin / prevention of data collection

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Third party content and services

On the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f EU DS-GVO, content, services and performances of other providers that supplement our offer are integrated within our online offer. By using the services listed below, we aim to ensure that our website is designed to meet the needs of our customers and is continuously optimised.

Links to third party websites

On the basis of our legitimate interest, it may happen that links to other providers which supplement our offer are included within this online offer. When calling up websites referred to on this website, you may be asked again for information such as name, IP address, browser characteristics, etc. This privacy policy does not regulate the collection, transfer or handling of personal data by third parties. In this context, please note the special data protection declarations of the individual third-party providers and service providers whose links we include on our website.

Social media

We maintain publicly accessible online presences in social networks to communicate with the customers and interested parties active there and to present our services.

We point out that user data may be processed outside the European Union. Furthermore, user data is generally processed for market research and advertising purposes. To the best of our knowledge, the providers also use cookies which store your usage behaviour (also across different terminals). This enables targeted advertising to be played out within the framework of their own platform as well as on third party sites.

The processing of users' personal data is based on our legitimate interest in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. EU DS-GVO. If the users are asked by the respective platform providers for their consent to data processing or if the user voluntarily sends information to our online presences, the legal basis for processing is Art. 6 para. 1 lit. a EU DS-GVO in conjunction with Art. 7 EU DS-GVO. If the information contains contractually relevant content, the legal basis is Art. 6 para. 1 lit. b EU DS-GVO.

For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information provided by the providers.

Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.

- Facebook: Facebook Ireland Ltd, Grand Canal Square, Grand Canal Harbour, Dublin 2 and Facebook Inc, 1601 Willow Road, Menlo Park, California 94025. privacy policy: https://www.facebook.com/about/privacy/ , opt-out: https://www.facebook.com/settings?tab=ads

- Instagram: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. Privacy Policy/Opt-Out: https://instagram.com/about/legal/privacy/ .

- Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland Privacy Policy: https://twitter.com/de/privacy . Opt-Out: https://twitter.com/personalization .

- LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. Privacy Policy: https://www.linkedin.com/legal/privacy-policy . Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy / Opt-Out: https://policies.google.com/privacy?hl=de&gl=de .

Facebook fan page

When you interact with our Facebook fan page (make a comment, link to a post or send us a message) your data is stored by us.

The operation of a fan page is a joint responsibility under data protection law according to Art. 26 EU DS-GVO between Facebook Ireland Ltd. and our company. Accordingly, we have entered into an agreement with Facebook Ireland which regulates the respective obligations under the EU DS-GVO: https://www.facebook.com/legal/terms/page_controller_addendum .

The legal basis for the processing of the data is

- If you "link" to a contribution from us, comment on it or upload content to our Facebook page, Art. 6 para. 1 lit. a EU DS-GVO serves as the legal basis. You can revoke this processing for the future at any time in accordance with Art. 7 para. 3 EU DS-GVO by deleting the comment or content.

- If you send us an enquiry relevant to the contract, Art. 6 para. 1 lit. b EU DS-GVO serves as the legal basis.

Facebook provides fan page operators with statistics and insights into the types of actions of our fan page visitors ("page insights"). We have no influence on Facebook collecting these data. According to Facebook, this data is only provided to us in anonymised form, so that the user cannot be identified from the information.

Personal data will be deleted as soon as the purpose for which it was stored no longer applies. Furthermore, data may also be stored if this was provided for by legally prescribed storage obligations to which our company is subject.

Please note that when using and calling up our Facebook page, your personal data is also processed by the provider "Facebook". Facebook is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and by Facebook Inc, 1601 Willow Road, Menlo Park, California 94025, USA. Facebook processes your data in addition to the above-mentioned processing for analysis and advertising purposes. To the best of our knowledge, Facebook also uses cookies to store your usage behaviour (also across different end devices). This enables Facebook to play out targeted advertising within the framework of its own platform as well as on third party sites. You can find further information in the Facebook privacy policy: https://www.facebook.com/about/privacy/ . Facebook also offers the possibility to object to certain data processing; information on this and opt-out options can be found at: https://www.facebook.com/settings?tab=ads . Please note that in accordance with Facebook's privacy policy, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which an adequacy decision by the European Commission under Art. 45 EU DS Block Exemption Regulation exists or on the basis of appropriate guarantees under Art. 46 EU DS Block Exemption Regulation.

With regard to data processing via our Facebook fan page, you also have the opportunity to assert your data subject rights vis-à-vis Facebook. Further information on this can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/ .

Participation in the competition

To enable you to participate in the competition, we collect personal data. The data you provide will be used exclusively for the purpose of the competition. The collection and processing of your data is based on the participation contract in accordance with Art. 6 Paragraph 1 lit. b EU DS-GVO. Your data will only be transferred to third parties if this is necessary for the implementation of the competition. No further transfer of data will take place without your consent. Participation in the competition is voluntary.

If you have not been determined as the winner, your data will be deleted after the end of the competition. If you have been determined as the winner, your data will be deleted after the legally required retention periods have expired.

Minors

Our online offer is basically aimed at persons of full age. Personal information from persons under the age of 16 may only be made available to us if the express consent of a parent or guardian has been obtained (Art. 8 EU DS-GVO). Processing without the consent of a parent or guardian is not permitted. We therefore reserve the right to delete all data relating to minors unless we have the consent of a parent or guardian.

III. Information for applicants

Purpose and legal basis for the collection and processing

Your data will be processed by us for the purpose of processing your application in accordance with Art. 88 EU DS-GVO in conjunction with § 26 BDSG-neu If special categories of personal data within the meaning of Art. 9 Para. 1 EU DS-GVO are voluntarily communicated as part of the application procedure, they will also be processed in accordance with Art. 9 Para. 2 lit. b EU DS-GVO.

Recipient of your data

The recipients of your data are the departments involved in the human resources management process (including human resources, managers and department heads) of the responsible unit. Your data will be treated as strictly confidential and will not be passed on to third parties without your respective consent. A transfer to third countries or international organisations is not intended.

Storage of your data

Your application data will be deleted 180 days after filling the position. If you are also interested in future vacancies, we need your written consent to store your application documents for a longer period of time. You can revoke this consent at any time for the future in accordance with Art. 7 Para. 3 EU DS-GVO. To do so, please send an e-mail with a corresponding note to the contact address given above.

IV. Information for business partners

Purpose and legal basis for the collection and processing

The primary purpose of data processing is to establish, implement and terminate the contractual relationship. The primary legal basis for this is Art. 6 (1) lit. b EU DS-GVO. Without this type of use of your data, the business relationship existing between you and us cannot be carried out.

We also process your data on the basis of Art. 6 para. 1 lit. f EU DS-GVO to protect our legitimate interests or those of third parties (e.g. public authorities). This may be necessary, for example, to maintain IT security and IT operations or for purposes of corporate management, internal communication and other administrative purposes. You can object to this processing by giving special reasons in accordance with Art. 21 EU DS-GVO.

In addition, we process your data to fulfil legal obligations such as regulatory requirements, commercial and tax law storage obligations or documentation obligations. The legal basis for this is Art. 6 para. 1 lit. c EU DS-GVO in conjunction with the nationally applicable laws.

In individual cases, it may also happen that we process your data on the basis of your separately granted consent in accordance with Art. 6 para. 1 lit. a, 7 EU DS-GVO (e.g. in the context of registering for our newsletter or publishing photo and video recordings). You are always free to decide whether you wish to give your consent. Once you have given your consent, you can revoke it at any time with effect for the future. To do so, please use the link provided in the respective campaign or send corresponding enquiries to the contact address given above.

Should we process your personal data for a purpose not mentioned above, we will inform you in advance.

Recipient of your data

Within our company, only those persons who need your personal data to fulfil our contractual and legal obligations will receive it. In addition, we sometimes use different service providers to fulfil these obligations, so that it may be necessary to transfer your personal data to other recipients outside the company, insofar as this is necessary to fulfil our contractual and legal obligations. These third parties may be, for example, public authorities, financial institutions, suppliers, etc.

To process your data technically, we sometimes use external service providers. It is possible that we may transfer and process your data outside the country in which you have your residence / company headquarters or in one of the countries in which we operate. These may also be located outside the European Economic Area. If we transfer personal data to service providers or companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place. Detailed information can also be requested from the contact details above.

Storage of your data

We only store your personal data for as long as they are required for the above-mentioned purposes. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and to retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods thereafter are up to ten years. In addition, personal data may be stored for the time during which claims can be made against us (statutory limitation period of three or up to thirty years).