Information on Data Protection and Data Security
1. Information on the collection of personal data
Below we inform you about the collection of personal data when using our website https://www.lemon-aid.de. Personal data are all data that can be related to an identified or identifiable natural person, e.g. name, address, email address and user behaviour.
The responsible body (data controller) according to Art. 4 para. 7 of the EU General Data Protection Regulation (hereinafter: “GDPR”) is Lemonaid Beverages GmbH, Neuer Kamp 31, 20359 Hamburg, Germany, email: info@lemonaid.de (also see our Imprint).
Contact details of our Data Privacy Officer:
PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschutzexperte.de
When contacting the Data Protection Officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information such as a copy of an identity card with your request.
If you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and your telephone number) will be stored by us so that we can answer your questions. We delete these data as soon as their storage is no longer necessary for the relevant purpose, or we limit the processing to the extent that is necessary to fulfil any legal storage obligations.
If we use the services of third parties for individual functions of our offer or if we wish to use your data for advertising purposes, we will inform you in detail below about the associated processes and about the defined criteria for the storage period.
Please note that the website accessible on our site by clicking on “Shop” is not operated by us and that these data protection regulations do not apply when you visit it, but exclusively those of the website operator designated there. The personal data collected during a visit to our site will not be transmitted to the site.
2. Your rights
You are entitled to the following rights with regard to your personal data (Art. 15 to 20 GDPR):
- The right to be informed,
- The right to correction or deletion,
- The right to limitation of processing,
- The right to objection to processing,
- The right to transferability.
You are also entitled to complain to a data protection supervisory authority about our processing of your personal data if you believe that it is not lawful (Art. 77 GDPR).
3. Collection of personal data when visiting our website
- Data transmitted
If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
When you visit our website, we collect the following information, which is technically necessary for us to display our website to you and to ensure its stability and security:
- IP address
- Date and time of request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Request status/HTTP status code
- The amount of data transmitted
- The website making the request
- Browser
- Operating system and device
- Language and version of your browser software.
The legal basis is Art. 6 para. 1 p. 1 lit. f of the GDPR.
- Cookies and browser settings
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are assigned and stored on your hard disk to the browser you use. By setting cookies, we receive certain information that serves to make the Internet offer more user-friendly, convenient and effective overall. You can configure your browser settings yourself according to your own wishes and refuse the acceptance of third party cookies or all cookies, for example. Please note that you may not be able to use all functions of this website.
This website uses so-called transient cookies and persistent cookies:
- Transient Cookies
Transient cookies are automatically deleted when the browser is closed. This includes in particular the session cookies. These store a session ID, which assigns the various requests made by your browser during the joint session. When you return to our website, your computer can be recognised. When logging out or closing the browser, the session cookies are deleted.
- Persistent cookies
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie in question. You can delete cookies at any time in the security settings of your browser.
4. Further features and offers on our website
If you are interested, you can use various functions and services beyond the purely informational use of our website. As a rule, you will have to provide additional personal data for this purpose. The aforementioned principles of data processing apply to these and we use them to provide the respective service. In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
Furthermore, we may pass on your personal data to third parties if we offer services as part of promotions, competitions or similar together with partners. You can obtain more detailed information on this by entering your personal data or in the description of the respective function or the respective offer.
If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
5. Objection to the processing of your data or revocation of consent
If you have given your consent to the processing of your data, you can revoke this at any time. If you exercise this right, this will affect our ability to process your personal data after you have already given it to us.
If we base the processing of your personal data on a balance of interests and not on the fact that processing is necessary to fulfil a contract with you, you can object to the processing. If you wish to exercise such objection, we ask you to explain to us the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue processing.
Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising objection by email at info@lemonaid.de or by using the contact details given in the imprint.
6. Newsletter
With your consent we can send you our newsletter to inform you about our current interesting offers.
To subscribe to our newsletter, we use the so-called double opt-in procedure: after your registration, we send an email to the email address provided, in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 7 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation in order to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
Your email address, first and last name are required for sending the newsletter. After your confirmation we will save your email address for the purpose of sending you the newsletter. The legal basis is art. 6 para. 1 p. 1 lit. a GDPR.
To send our newsletter, we use the service of Rocket Science Group, LLC d/b/a MailChimp 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Their servers are located in the USA. MailChimp has submitted to the EU-US-Privacy Shield. In this respect, data transfer to the USA can be legally compliant, since a standard comparable to EU law can be assumed https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active. More information about data protection of MailChimp can be found here: https://mailchimp.com/legal/privacy/. By registering for our newsletter you expressly agree to the transmission of your email address and its processing by MailChimp.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email or by email to info@lemonaid.de or by sending a message to the contact details given in the imprint.
7. Web Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and facilitate analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is enabled on this website, your IP address will first be abbreviated by Google within the member states of the European Union or other parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use.
The IP address transmitted by your browser as part of Google Analytics is not brought together with other Google data.
You may refuse the saving of cookies by selecting the appropriate settings in your browser. In this case, not all functions of this website may be fully usable. You can also prevent the data generated by cookies concerning your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in truncated form, so that reference to individuals can be ruled out. If the data collected about you is personally identifiable, it will be blocked immediately and the personal data deleted as soon as possible.
(5) We use Google Analytics to analyse and regularly improve the use of our website. We can use the knowledge gained in this way to improve our offer and make it more interesting for you as a user. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, for exceptional cases in which personal data is transferred to the USA.
The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f of the GDPR.
Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User Conditions:
http://www.google.com/analytics/terms/de.html, Overview of data security: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics for an analysis of visitor flows across all devices that is carried out via a user ID (Google Universal Analytics). You can disable the device cross-analysis of your use in your account under “My data”, “personal data”.
8. Social plug-ins
We currently use social plug-ins from Facebook and Instagram and use the so-called two-click solution: when you visit our website, no personal data is initially passed on to the provider of the plug-ins, which you can recognize from the mark on the box above its initial letter or logo. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the provisions set out above under No. 3 of this declaration. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there. Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the greyed-out box using your browser’s security settings.
We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider. The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation is also made for users who are not logged in, to display customised advertising and to inform other users of the social network about activities on our website. You have the right to object to the creation of these user profiles, which you must exercise directly vis-à-vis the plug-in provider.
Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.
The data transfer is independent of whether you have an account with the plug-in provider and whether you are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. When you click the activated button and link to the page, for example, the plug-in provider also stores this information in your user account and communicates this to your contacts in public.
We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
For more information on the purpose and extent of the data collection and its processing by the plug-in provider, please refer to the privacy statements of these providers provided below. Here, you will also find further information on your rights and the settings options for protecting your privacy.
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework
9. Inclusion of YouTube videos
We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and are directly playable from our website. [These are all integrated in the “Extended Privacy Mode”, i.e. no data about you as user are transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.]
When you visit this website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the provisions set out above under No. 3 of this declaration. This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your corresponding rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
10. Integration of Google Maps
On this website we use the offer of Google Maps to show you interactive maps directly in the website and to enable you the comfortable use of the map function.
When you visit this website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the provisions set out above under No. 3 of this declaration. This takes place regardless of whether Google makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated to your Google profile, you must first log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, which you must exercise vis-a-vis Google.
For more information about the purpose and scope of data collection and its processing by Google Maps, please refer to the provider’s data protection policy. There you will also find further information on your corresponding rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
25.05.2018