Types of Processed Data:
 

• Personal data (e.g. name, address)
• Contact data (e.g. email address, telephone number)
• Content data (e.g. text input, images, videos)
• Usage data (e.g. websites visited, interest in content, access time)
• Meta and communications data (e.g. device information, IP addresses)
 

Categories of Data Subjects
 

• Visitors and users of the online offer (hereinafter referred to as "user").
• Customers utilising our website (hereinafter referred to as "user").
 

Processing Purposes

Provision of the online offer, its functions and content.
• Processing of all orders including the related physical processes, in particular, that of package dispatch and in respect to the possible reverse transaction in case of warranty.
• Responding to contact requests and communication with users.
• Security measures
• Audience measurement/marketing

Definitions

"Personal data" means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. 

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. In accordance with Article 13 of the GDPR, we provide information in regard to the legal basis of our data processing. Provided the legal basis in the data protection statement is mentioned, the following applies: The legal basis for obtaining consent is Article 6 paragraph letter 1 and Article 7 of the GDPR, the legal basis for the processing for the fulfilment of our services and the execution of contractual measures as well as the answer to inquiries is Article 6 paragraph 1 letter b of the GDPR, the legal basis for the processing in order to fulfil our legal obligations is article 6 (1) letter c of the GDPR, and the legal basis for the processing in order to safeguard our legitimate interests is Article 6 (1) letter. f of the GDPR. Processing is necessary in order to protect the vital interests of the data subject or of another natural person as stated in Article 6 paragraph 1 letter d of the GDPR.

Your personal data will be stored by GOURMEL for the above processing (s) for the period:
- During the period that you are engaged with the company for a maximum of 7 years

Data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
    
Security

We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing, for example we have taken the following measures;
- All persons who can access your data on behalf of GOURMEL are bound to secrecy.
- We have a username and password policy on all our systems;
- We pseudonymise and ensure the encryption of personal data if there is reason to do so;
- We make backups of the personal data in order to be able to restore them in the event of physical or technical incidents;
- We regularly test and evaluate our measures.
 

Rights regarding your data

You have the right to inspect, correct or delete the personal data that we have received from you. You can also object to the processing of your personal data (or part thereof) by us or by one of our processors. You also have the right to have the information provided by you transferred by us to yourself or directly to another party on your instructions. We may ask you to identify yourself before we can respond to the aforementioned requests.
If we are allowed to process your personal data on the basis of your permission, you always have the right to withdraw this permission.

Contact Information

If you have any questions about this Online Privacy Notice, or if you would like to exercise your data protection rights, please contact GOURMEL at: info@gourmelgroup.com