Datenschutz gemäß DSGVO

We as the operator of the website at www.seventrees.eu (also "website" or "online shop") are responsible for the personal data of the user within the meaning of the applicable data protection law, in particular the General Data Protection Regulation ("GDPR") ( "You") of this website.

In the following, we will provide you with clear information as part of our information obligations (Art. 13 ff. GDPR) about which data is processed when you visit our website and on what legal basis this happens. You will also receive information on how we protect your data from a technical and organizational point of view and what rights you have vis-à-vis us and the competent supervisory authority.

Information about the responsible entity

Name and contact details

greenthusiast labs GmbH
Trivastr. 23
80637 Munich

Tel.: 089-38899255 Email.: welcome(at)seventrees.eu

Processing of your personal data

2.1. Use of our website for information purposes

If you access our website just to visit it, so-called log files are processed by being automatically recorded by our system. The following log files are processed automatically:

IP address of the requesting computer
Type of internet browser used
Operating system interface
Pages accessed
Date and time of visit
Access status / http status code
Amount of data transferred
Referrer

The log files contain your IP address, but the last octet is replaced by random numbers before they are saved. It is therefore not possible to assign them to you and your data will not be stored together with other personal data. The processing of the above data is necessary for the provision of our website. The legal basis for processing the data for anonymization purposes is Art. 6 (1) lit. f GDPR.

Use of offers

3.1. Customer account / registration

You have the option of creating a customer account with your personal data on our website. If you opt for a customer account, you must provide us with the following information:

Username
E-mail address

When you submit your application / registration, we save your IP address and the date and time of your registration together with the data you provide. By submitting the registration, you consent to the processing of your data by us.

Your data is used for the purpose of managing your customer account and providing the associated functions, such as the processing of your customer data and the display of your orders. The legal basis for storing your customer account data is Art. 6 (1) lit. a GDPR.

We save your data that you have made available to us as part of your voluntary registration / registration, as long as you do not delete your customer account with us. If you make changes to your information, the old information will be deleted and only the updated data will be saved. Beyond that, we only save your data in order to meet our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes. In addition to this data, we save the time (date and time) when your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These additional data will be deleted as soon as they are no longer needed, at the latest when the contract with you has been completed.

You can delete or change your voluntary customer account with us at any time. You will find the functions for changing your details or canceling your account in your profile.

3.2. Orders

When you place an order on our website, we need the following data to fulfill the contract with you:

First name, last name and (billing and delivery) address to send you your order and the invoice.
E-mail address to send you the order confirmation and to provide you with the contract documents immediately after the order.
Your payment information to process payment for your order

In order to send you your order, we pass on your address data to our shipping or logistics service provider for the purpose of delivery.

The legal basis for processing the data is Art. 6 (1) lit. b GDPR. The data will be stored for as long as is necessary to process the contract. Beyond that, we only save your data in order to meet our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR). In this case, we will block your data to the extent that it is only processed for the necessary purposes.

In addition to this data, we save the time (date and time) when your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These additional data will be deleted as soon as they are no longer required, at the latest when the contract with you has been completed.

3.3 Payment methods

If you select a payment provider on our payment page, this provider will also receive your personal data, such as your name, address and bank account details. In addition, our house bank receives your bank details when an electronic payment is received.

Pre payment: If you pay by direct debit on our website, our house bank will receive your bank details for payment processing.

With the exception of prepayment, we use the following payment service provider to facilitate payments: Mollie B.V., Keizersgracht 1261015CW, Amsterdam. Mollie receives the following information when processing payments:

Your payment details (e.g. bank account number or credit card number)
Your IP address
Your Internet browser and device type
In some cases, your first and last name
In some cases, your address data
In some cases, information about the product or service you purchased from our customer
Other personal data that you actively provide, for example by correspondence or on the phone.

Mollie's data privacy information can be found at: https://www.mollie.com/privacy

Mollie's payment information can be found at: https://help.mollie.com/hc/en/categories/201309549-Payment Methods

PayPal: If you pay on our website with PayPal (PayPal (Europe) S.A. r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg), PayPal will receive your payment details for payment processing. For more information:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#rAnnex

credit card: If you pay with your credit card on our website, your credit card provider will receive the information that you have placed an order with us. Your credit card provider may be performing a credit check. For more information, visit your credit card provider's website.

SOFORT banking: You log in with your online banking data. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and bank details.

Klarna Slice it : If you select Klarna Slice it in the ordering process, you can select a financial plan with rates between 3 and 36 months. In the background, Klarna automatically performs a credit check (by Klarna and through third parties, cf. https://www.klarna.com/en/privacy/ and https://help.mollie.com/hc/en/articles/360009858434-was-is-Klarna-).

Klarna Pay Later: If you select Klarna Pay Later in the ordering process, you can order first and pay later. In the background, Klarna automatically performs a credit check (by Klarna and through third parties, cf. https://www.klarna.com/en/privacy/ and https://help.mollie.com/hc/en/articles/360009858434-was-is-Klarna-).

Giropay: You log in with your online banking data. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and bank details.

EPS: If you pay with the Austrian Electronic Payment Standard (EPS), you will log in with your online banking data from the bank participating in EPS. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and, if applicable, your bank details.

iDEAL: If you pay with the Dutch iDEAL payment system, select iDEAL as the payment method and then your bank. Then you will be redirected to the online banking environment of your bank log in. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and bank details.

Belfius Pay Button: If you order with the Belfius Pay button, you can pay with your Belfius bank account and make a transfer to us directly in the online banking area of Belfius or via the Belfius app. If you authorize the payment, our bank will receive your bank transfer and bank details.

ING Home'Pay: If you pay inG Home'Pay using the Belgian online payment method, you can log in to your ING account and then select the correct bank account. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and bank details.

KBC/CBC payment button: If you select KBC or CBC as an online payment method, you can pay in your usual online banking. You have the option to pay later (up to a maximum of 2 months). If you authorize the payment, our bank will receive your bank transfer and, if applicable, your bank details.

Bancontact: If you pay bancontact using the Belgian payment method, enter the card number of the Bancontact card associated with your current account. You can then authorize the transaction from your usual online environment. If you authorize the payment, our bank will receive your bank transfer and bank details.

Przelewy24: If you want to pay using the Polish payment method Przelewy24, you will be redirected to the Przelewy24 system and can select your bank. The amount and beneficiary of the transfer are already pre-filled. If you authorize the payment, our bank will receive your bank transfer and bank details.

3.4. Contact form / feedback

You can contact us electronically using our contact form, e.g. to give us feedback or to ask us questions. If you use this option, send us the following data:

Mailadresse (um mit Ihnen Kontakt aufzunehmen)
Vor- und Zunamen (um Sie anzusprechen und zu Zwecken der Missbrauchsprävention)

In addition to the data that you voluntarily provide to us, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These data, which we also collect when you contact us, will be deleted as soon as they are no longer needed, at the latest when the request for contacting you has been fully clarified.

By submitting the contact form, you consent to the processing of your data by us. The legal basis for processing your data for the purpose of processing your contact is Art. 6 (1) lit. a GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the request for contacting you has been fully clarified.

If your contact is aimed at concluding a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. These data are stored for as long as they are necessary to carry out the contract. Furthermore, we only save your data in order to meet contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR).

3.5. Contact by email, phone or fax

You can contact us by email, telephone or fax. Your personal data transmitted in this way will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process your contact. The legal basis for processing your personal data is Art. 6 (1) lit. f GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the request for contacting you has been fully clarified.

In addition to the data that you voluntarily provide to us, we may receive the time (date and time) when your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in order to guarantee the security of our systems and to counteract misuse. These data, which we also collect when you contact us, will be deleted as soon as they are no longer required, at the latest when the request for contacting you has been fully clarified.

You can inform us at any time (see section 1 above) that we should delete the data communicated in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and the conversation cannot be continued.

3.6. Newsletter per Mailchimp

We offer you on our website that you register for our newsletter free of charge. In addition to your declaration of consent, we need your email address for this. Further information, e.g. the indication of your name are voluntary and serve to address you personally. The legal basis for sending the newsletter as well as additional voluntary information is Art. 6 (1) lit. a GDPR. By submitting the newsletter registration, you consent to the processing of your data by us.

We will only send you the newsletter if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link provided. We want to ensure that only you can register for the newsletter yourself. Your confirmation in this regard must be made promptly after receipt of the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

In addition, as part of your newsletter registration, we save the time (date and time) at which your data was transmitted to us, as well as your IP address. The processing of this data corresponds to our legitimate interest in accordance with. Art. 6 (1) lit. f GDPR, to ensure the security of our systems and to counteract misuse.

Your data will only be processed in connection with sending newsletters. The purpose of processing your email address is to be able to send you the newsletter. Additional data during the registration process is used either to address you personally or to ensure the security of our services and to prevent misuse of the email address used.

Your data will only be stored for as long as is necessary to achieve the purpose. Your email address will therefore be saved for the period of your active newsletter subscription if you have given your consent. The data that we also automatically collect during your registration (IP address, date and time) will be deleted at the latest when you end your newsletter subscription.

We use MailChimp, the Rocket Science Group LLC, 675 Ponce de Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA, to send newsletters. The data is transferred to the US (a non-EU country), but with MailChimp we use the EU standard contractual clauses to ensure an appropriate level of data protection. After some deliberation, we came to the conclusion that it is in our interests to use this service provider for our purposes (because MailChimp is simply great, and we are convinced that your data is also safe with MailChimp), and we are also in the context of a weighing of interests Having come to the conclusion with your interests that your interests and fundamental rights do not conflict with the use of MailChimp and do not outweigh our interests. We therefore base the transfer of data to MailChimp on the legal basis of Art. 6 (1) lit. f GDPR (objection by unsubscribing from the newsletter possible at any time, more on this below).

With MailChimp it is possible to see whether the newsletter has been opened and whether the links in the newsletter have been clicked. We cannot turn this off; however, if you want to object, you can unsubscribe from the newsletter (more on this below). This function is helpful for us to understand whether our newsletter is opened and which topics are particularly interesting. This corresponds to our business and economic interests. The legal basis for data processing here is therefore also Art. 6 (1) lit. f GDPR.

We are not interested in who specifically clicks on the newsletter (this is technically possible), but we are interested in the aggregated statistics that MailChimp automatically creates. As a rule, we only have a look at what percentage of recipients opened the newsletter, or what content was particularly well received. If you make a specific support request for the newsletter, we could (technically) also consider your behavior with regard to the newsletter individually.

Unsubscribe from the newsletter

You can unsubscribe or terminate our newsletter at any time. You will find the link for this at the end of every newsletter. In doing so, you revoke your consent or object to further use of your data for the purpose of sending the newsletter.

Cookies

4.1 Facebook Pixel

Auf unserer Website setzen wir das Analysetool Facebook Pixel der Facebook Inc., Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, ein („Facebook„). Facebook Custom Audiences funktioniert mit einem JavaScript-Codesnippet, das ausgeführt wird, wenn jemand eine Seite öffnet. Wir analysieren damit die Effektivität unserer Werbung. Wir können über unser Facebook Business Profil keinen einzelnen Nutzer identifizieren oder speziell mit Werbung adressieren, sondern ausschließlich Benutzergruppen.

Wir setzen Facebook Pixel so ein, dass das Senden von Pixel-Aktionen an Facebook so lange unterbrochen wird, bis die Cookie-Zustimmung erfolgt ist. Mit Facebook Pixel wollen wir dafür sorgen, dass solchen Besuchern unserer Website bei Facebook Werbung angezeigt wird, die bestimmte Merkmale (Interesse an bestimmten Produkten, Geschlecht, bestimmtes Alter, wohnen in einer bestimmten Stadt etc.) erfüllen. Die Gruppierungen von Nutzern anhand bestimmter Merkmale nennt Facebook „Custom Audiences“. Die Werbung soll auf Facebook den potentiellen Interessenten gezeigt werden und nicht denjenigen, die sich für unser Produkt voraussichtlich nicht interessieren.

Our custom audience consists of the function "Custom audience through websites", i.e. the Facebook pixel matches visitors to our website with people on Facebook. The following data is sent to Facebook:

Context data: This includes the redirect URL, browser information and the person's Facebook user ID (hashed).

In addition, the pixel helps to statistically understand the effectiveness of advertisements, this is what Facebook calls "conversion". The Facebook pixel tells us whether people from the target group have visited our website, searched for a specific product on our website, viewed a specific product or product category, whether a purchase has been initiated, whether a purchase has been made. The Facebook pixel tells us whether people have been directed to our page by a paid search engine result and whether people are interested in special offers. We can only see from the statistics that this has happened - we cannot identify individual people.

We noticed that our product gets a lot more attention when we use Facebook Pixel. It is therefore in our legitimate interest to integrate Facebook Pixel on our website (legal basis Art. 6 lit. f GDPR). We also obtain your consent before placing cookies and pixels (legal basis Art. 6 Para. 1 lit. a GDPR).

In your Facebook profile, you can choose whether you want to receive personalized advertising. You can object to the collection by Facebook pixels and the use of your data for Facebook Ads (as part of a custom audience). If your browser does not accept third-party cookies, the Facebook pixel will not be set.

You can find the Facebook data policy here: https://www.facebook.com/policy.php . You can find more information from Facebook about the Facebook Pixel here: https://www.facebook.com/business/ help / 651294705016616

We have concluded contracts with Facebook for data transfer to the USA, including the standard contractual clauses. You can find more about this here https://www.facebook.com/legal/technology_terms

Facebook is still certified under the Privacy Shield; however, we do not base the data transfer to the USA on this basis. Information on this can be found at: https://www.facebook.com/about/privacyshield and < a href = "https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC" target = "_self"> https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC

Social Media

5.1. Icon-Links to Social Networks

We use small icons on our website that refer to third-party platforms (Instagram) on our website. They are hyperlinks, so no data from you is automatically transferred, but only when you click on the icons and a new tab with the third-party website opens in your browser.

Sonstige Inhalte Dritter, die auf unserer Website eingebunden sind

6.1. YouTube

For the purpose of the appealing design of our website, we incorporate videos from YouTube by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA (hereinafter: "YouTube"). We use the extended data protection mode so that information about you is only shared with YouTube if you activate the video by clicking the play button on the video.

If you activate the video, YouTube uses cookies to collect information for analysis purposes and to improve user-friendliness. According to YouTube, the data is processed pseudonymized. However, if you are signed in to your Google or YouTube account, the data can be linked directly to your YouTube account. You can find more information on data protection, including how long your data is stored on YouTube, in Google's data protection guidelines at: https://policies.google.com/privacy?hl=de&gl=de.

The legal basis for the integration of the YouTube service on our website and the associated processing of your data is Art. 6 (1) lit. f GDPR.

Your rights

If we process your data, you are "data subject" within the meaning of the GDPR. You have the following rights: right to information, right to correction, right to restriction of processing, right to deletion, right to information and the right to data portability. In addition, you have a right of objection and a right of withdrawal and the right to complain to the supervisory authority. You will find details on the individual rights below:

a. right of providing information

You have the right to request confirmation from us as to whether your personal data is being processed. If we process your personal data, you have the right to receive information about the following information:

die Verarbeitungszwecke
die Kategorien personenbezogener Daten, die verarbeitet werden;
die Empfänger oder Kategorien von Empfängern, gegenüber denen Ihre personenbezogenen Daten offengelegt worden sind oder noch offengelegt werden, insbesondere bei Empfängern in Drittländern oder bei internationalen Organisationen;
falls möglich die geplante Dauer, für die Ihre personenbezogenen Daten gespeichert werden, oder, falls dies nicht möglich ist, die Kriterien für die Festlegung dieser Dauer;
das Bestehen eines Rechts auf Berichtigung oder Löschung der Sie betreffenden personenbezogenen Daten oder auf Einschränkung der Verarbeitung durch uns oder eines Widerspruchsrechts gegen diese Verarbeitung;
das Bestehen eines Beschwerderechts bei einer Aufsichtsbehörde;
wenn die personenbezogenen Daten nicht direkt bei Ihnen erhoben wurden, alle verfügbaren Informationen über die Herkunft der Daten;
das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling gemäß Art. 22 (1) und (4) DSGVO und – zumindest in diesen Fällen – aussagekräftige Informationen über die involvierte Logik sowie die Tragweite und die angestrebten Auswirkungen einer derartigen Verarbeitung für Sie.

If we transfer your data to an international organization or to a third country, you also have the right to request information as to whether suitable guarantees in accordance with. Art. 46 GDPR exist in connection with the transmission.

b. Right to rectification

You have the right to correct and / or complete the data that we have stored about you if this data is incorrect or incomplete. We will correct or complete the data immediately.

c. Right to restrict processing

Under certain conditions you have the right to demand that we restrict the processing of your personal data. To do this, at least one of the following requirements must be met:

You dispute the accuracy of the personal data for a period that enables us to check the accuracy of the personal data, The processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted; We no longer need the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or You have lodged an objection to the processing in accordance with Art. 21 (1) GDPR, as long as it has not yet been determined whether our legitimate reasons outweigh your interests.

d. Löschungsrecht

You have the right to demand that we delete your personal data immediately if we are obliged to do so. This is the case if one of the following requirements is met:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based in accordance with Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR and there is no other legal basis for the processing.
You object to the processing according to Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing according to Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.
Your personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

If we have made your personal data public and we are obliged to delete it in accordance with the aforementioned requirements, we will take appropriate measures, including technical measures, taking into account the technologies available to us and implementation costs, to inform other data controllers who process the personal data, to inform you that you have asked us to delete all links to this personal data or copies or replications of this personal data.

However, you do not have the right to erasure if processing is necessary for the following reasons (exceptions):

To exercise the right to freedom of expression and information; to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which we are subject, or to perform a task that is in the public interest or in the exercise of official authority that has been assigned to us; for reasons of public interest in the area of public health according to Art. 9 (2) lit. h and i as well as Art. 9 (3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the law mentioned in (1) is likely to make the realization of the objectives of this processing impossible or seriously impaired, or for the establishment, exercise or defense of legal claims.

e. Unterrichtungsrecht

If you have exercised your right to rectification, erasure or restriction against us, we are obliged to notify all recipients to whom we have disclosed your personal data of the correction, deletion or restriction of the processing of your data, unless this proves is impossible or involves a disproportionate effort.

f. Right to data portability

Under the following condition, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format and the right to have this data transmitted to another person responsible:

The processing is based on consent in accordance with Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR or on a contract according to Art. 6 (1) lit. b and
the processing takes place with the help of automated procedures.

You have the right to have us transfer your personal data directly to another person responsible, provided that this is technically feasible and the freedoms and rights of other people are not impaired. This right to data portability does not apply if the processing is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been assigned to us.

G. Right to object

You have the right, for reasons that arise from your particular situation, at any time to object to the processing of your personal data based on Art. 6 (1) lit. e or lit. f DSGVO is based to file an objection. This also applies to profiling mentioned in these provisions.

After an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data in order to operate direct mail, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with direct mail.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58 / EC (Data Protection Directive for Electronic Communication) - you have the option of exercising your objection by means of automated procedures in which technical specifications are used.

H. Right of withdrawal

You have according to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. Revoking your consent does not retroactively invalidate the legality of the processing.

i. Right of appeal to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you can assert your right of appeal in the Member State of your place of residence, your place of work or the place of the alleged violation if you are of the opinion that the processing of your personal data violates the GDPR. You can find an overview of the respective state data protection officers of the states and their contact details under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Up-to-dateness and changes to these data protection information

Stand: Februar 2021