Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.

“Personal data” is any information relating to an identified or identifiable natural person.

Server-Logfiles

You can use our websites without submitting personal data.

Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services. 

Contact

Responsible person / data protection officer

Please contact us if you wish. The contact details of the data controller can be found in our imprint. You can reach our data protection officer directly at: dataprotection@kleffmann.digital

Customer initiating contact by e-mail

If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.

If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) GDPR for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.

If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) GDPR for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in compliance with retention periods, unless you have consented to the further processing and use of your data.

WhatsApp Business

If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves the purpose of processing and answering your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided and other data to the extent provided by you. We use a mobile device for the service, the address book of which only contains data of users who have contacted us via WhatsApp. Personal data will not be passed on to WhatsApp without your prior consent.
Your data will be transmitted by WhatsApp to servers of Facebook Inc. in the USA.
There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overriding legitimate interest in providing a quick and easy way of contacting you and answering your enquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) (f) of the German Data Protection Act (DSGVO) for reasons relating to your particular situation.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
For more information on the terms of use and data protection when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Registering in the MyDataPlant Online Portal

The MyDataPlant Portal (https://portal.mydataplant.com) is completety independent of the MyDataPlant website. There is no data exchange. The MyDataPlant portal is only linked to the MyDataPlant website.

Customer account in the MyDataPlant Portal

When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.

Collection, processing, and transfer of personal data when ordering in the MyDataPlant Portal

When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you. Your data is transferred here for example to the payment service providers.. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.

Voluntary entries, for example about your area, your crop, etc. are stored in our database. The data is stored exclusively on a computer system physically located in Germany.

Advertisement

Use of the e-mail address for sending newsletters

We use your e-mail address, irrespective of the processing of the contract, exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is based on Art. 6 Para. 1 lit. a GDPR with your consent.

You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

Technically necessary Cookies

Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on § 15 para. 3 p. 1 TMG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Analysis Advertising

Use of Google Analytics

Our website uses the web analysis service Google Analytics from Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you are ordinarily resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google responsible for processing your data and for compliance with the applicable data protection legislation. The processing of data serves to analyse this website and its visitors and for marketing and advertising purposes.

Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. In this process the following information, inter alia, can be collected: IP address, date and time of the website access, click path, information on the browser and the device you are using, the pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. The IP address transmitted from your browser within the scope of Google Analytics is not associated with any other data held by Google.

Google Analytics uses technology such as cookies, web storage in the browser and tracking pixels which enable an analysis of your use of the website. The information generated by these regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

In accordance with the US-EU Data Protection Agreement, Google has become subject to the “Privacy Shield” and is therefore obliged to observe European data protection laws.

Use of Google Ads Conversion-Tracking

Our website uses the online marketing program “Google Ads”, including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

If you are ordinarily resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google responsible for processing your data and for compliance with the applicable data protection legislation.

If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers.

The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users.

Your data may be transmitted to the USA. In accordance with the US-EU Data Protection Agreement, Google has become subject to the “Privacy Shield” and is therefore obliged to observe European data protection laws.

The data processing, particularly the placing of cookies, is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.

Plug-ins

Verwendung von Google reCAPTCHA

We use the reCAPTCHA service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website.

If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company associated with Google which is responsible for processing your data and complying with the applicable data protection laws. The purpose of the query is to distinguish between input by a human being or by automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and, if applicable, other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to the USA. There is no EU Commission adequacy decision for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks?hl=en-GB.

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 para. 3 p. 1 TMG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. A GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

You can find more information on Google reCAPTCHA and the associated privacy policy at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy .

Use of GoogleMaps

We use the function for embedding GoogleMaps maps of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website.
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company associated with Google which is responsible for processing your data and complying with the applicable data protection laws.
The function enables the visual display of geographical information and interactive maps. In the process, Google also collects, processes and uses data from visitors to the websites when they call up the pages in which GoogleMaps maps are integrated.
Your data may also be transmitted to the USA. There is no EU Commission adequacy decision for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can find more detailed information on the collection and use of data by Google in Google’s data protection information at https://www.google.com/privacypolicy.html. There you also have the option to change your settings in the data protection centre so that you can manage and protect your data processed by Google.

Use of YouTube

Our website uses the function for embedding YouTube videos by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature shows YouTube videos in an iFrame on the website. The option “advanced privacy mode” is enabled here. This prevents YouTube from storing information on visitors to the website. It is only if you watch a video that information is transmitted to and stored by YouTube. Your data may be transmitted to the USA. In accordance with the US-EU Data Protection Agreement, Google has become subject to the “Privacy Shield” and is therefore obliged to observe European data protection laws.
The data processing is carried out on the basis of Article 6(1)(f ) GDPR due to our legitimate interest in the needs-based and targeted design of the website. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out in accordance with Article 6(1)(f) GDPR.
Further information on the data collected and used by YouTube and Google and your associated rights and options for protecting your privacy can be found in YouTube’s privacy policy ( https://www.youtube.com/t/privacy ).

Rights of persons affected and storage duration

Duration of storage

The data is stored in accordance with statutory retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the affected person

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: the right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, you have the right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct marketing in accordance with Art. 21 (1) GDPR.

Right to complain to the supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Germany
Phone.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de

Right of objection

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.

After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

last update: 01.12.2021