Disclaimer

Data protection

We, Katharina von Ehren International Tree Broker GmbH (International Tree Broker), take the protection of your personal data very serious. We treat your personal data confidential and in accordance with the statutory data protection regulations, in particular the GDPR (General Data Protection Regulation) as well as this data protection policy.

This Data Protection Policy includes the use of the digital offers of International Tree Broker including our Social Media profile via PC, Smartphones, Tablets and all other internet-capable mobile terminal devices.

The digital offers can contain links to other websites of third party service providers, which are not covered by this Data Protection Policy.

1. Controller

Controller for the processing of your personal data is

Katharina von Ehren International Tree Broker GmbH
represented by Managing Directors Katharina von Ehren & Maike Rohde
Buttstraße 4
22767 Hamburg
datenschutz@katharina-von-ehren.de.

If you have questions regarding our data protection, please write to us at the above-mentioned postal address with the addition “Data protection” or via email at datenschutz@katharina-von-ehren.de.

2. Purpose of the processing of personal data

2.1 Data processing to provide contractual performance
We process personal data in order to transact the contractual relationships and to be able to provide need-based contractual offers. The collection of data hereby occurs particularly for the conclusion of a contract.

In any forms, we only collect those personal data necessary for the transaction of contractual relationships and/or your request for information. This information will be marked with an asterisk. The collection of data is not necessary, but in which we are interested, is merely optional. In this case, you decide on a voluntary basis whether and which data you wish to provide to us.

For your order, we require your correct name, address and payment data. We request the provision of your email address and phone number in order to communicate with you in case of questions or issues regarding the performance you ordered.

Article 6 (1) lit. b DSGVO is the basis for data processing, which permits the processing of data to fulfil an agreement or .a preliminary agreement.

2.2 Data processing for the communication with you (contact form etc.)
Next to the contractual data, we process your communication data (name, address, phone number, email address) in order to process your enquiry and/or to contact you. Personal data you provide to this website via email or the contact form are only processed for correspondence purposes with you and/or the purpose to which you have provided the data.

Article 6 (1) lit. b DSGVO is the basis for data processing, which permits the processing of data to fulfil an agreement or a preliminary agreement.

2.3 Newsletter
With your consent, you can subscribe to our newsletter in which we provide you with our current interesting offers. The respective content of a newsletter is explained in the respective consent form. If you wish to receive a newsletter offered by us, we require an email address from you as well as information, which allows us to verify that you are the owner of the stipulated email address and agree to receive the newsletter. In this context, we shall send an email with a confirmation link to the specified email address upon your submission (double opt-in). If you do not confirm your registration within 24 hours, your information is blocked and automatically delete after one month.

Solely your email address is obligatory information for the transmission of the newsletter. The provision of additional, specially identified data is voluntary and is used to be able to address you personally. In addition, we respectively store your utilised IP addresses and the times of registration and confirmation. Purpose of the procedure is to verify your registration and, if required, clarify any possible misuse of your personal data. We do not raise further data in this context. We use this data exclusively for the dispatch of the requested newsletter. If we have utilised an order processor for the dispatch of the newsletter, we naturally comply with the applicable Data Protection Act.

The data is processed based on your consent according to Article 6 (1) lit. a DSGVO. You can revoke your consent regarding the transmission of a newsletter at any time and cancel to the respective subscription. You can declare your revocation by clicking the link provided in each email or by sending a message to us via the contact data specified in Item 1. The legitimacy of the previously performed data processing procedures remains unaffected by the revocation.

2.4 Cookies

We use so-called Cookies on some of our internet offers, among other to be able to offer you website-specific services, to recognise you at a subsequent visit to our website and/or to adapt our offer to your personal preferences.

Cookies are small text files which are stored on the computer of a visitor and which contain data regarding the respective user to allow him/her access to various functions. We use Session Cookies as well as Permanent Cookies on our website. A Session Cookie is stored temporarily on the computer used by you while you are navigating through the website. A Session Cookie is deleted as soon as you close your internet browser or once your session has expired after a certain amount of time. A Permanent Cookie remains on your computer until it is deleted. The storing of a Cookie ensures that you do not have to repeat entering your personal settings and preferences at each visit. This saves time and makes using our website more comfortable for you.

You can delete installed Cookies permanently via the settings of your browser. Most browsers accept Cookies automatically – so, if you would like to suppress the use of Cookies, you may have to actively delete or block Cookies or prevent the storage of the Cookies with the settings of your browser software. However, please note that, although you can continue visiting our website, the mode of some functions could be impaired if your reject the use of Cookies.

The usage of the above-mentioned Cookies occurs in the interest of a uniform design and functionality of our website. The basis for data processing is Article 6 (1) lit f GDPR, which permits the processing of data to maintain legitimate interests of the Controller if this is not outweighed by the interests or basic rights and basic freedoms of the affected person.

2.5 Google Analytics
This website uses Google analytics, a web analysis service of Google Inc. (hereinafter referred to as “Google”). Google analytics uses Cookies (see above), which permit the analysis of your usage of the website. The information regarding your usage of this website created with the Cookie is generally transmitted to a server of Google in the USA and stored there.

As IP-anonymity is activated on our website, your IP-address is initially limited within the member states of the European Union or in other contracting states of the treaty throughout the European economic area. Your full IP-address is only transmitted to a Google server in exceptional cases and limited there. Google will utilise this information on behalf of the operator of this website in order to evaluate your usage, to compile reports regarding the website activity and to provide further services to the operator of the website related to the usage of the website and the Internet.

Google has executed the certification according to the current EU-US-Privacy Shield (s. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and thus created the legal prerequisites for the appropriateness of the data protection level for the provision of the Google Analytics services by way of order processing. We have concluded a data processing agreement with Google and comply with the strict parameters of the German Data Protection Authorities using Google Analytics.
Please see http://www.google.com/analytics/terms/de.html or
https://www.google.de/intl/de/policies/ for further information regarding general terms and conditions and data protection.

The data transmitted by your browser in the context of Google analytics is not linked with other data by Google. You can prevent the storing of Cookies with a respective setting of your browser software; however, we would like to inform you that in this case you might not be able to utilise all functions of this website. You can furthermore prevent the compilation of data (incl. your anonymised IP-address) created by the Cookie and related to your usage of the website to Google as well as the processing of this data by Google by downloading and installing the browser-Plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. In addition, you can prevent the collection by Google Analytics by clicking the following link. An Opt-Out-Cookie is placed which prevents the future collection of your data when visiting this website: Disable Google Analytics

The storage of Google Cookies and the analysis for statistical purposes occurs based on Article 6 (1) lit f GDPR. We have a legitimate interest in the analysis of the user behaviour in order to optimise our offer as well advertising for our offer, if required.

2.6 Data processing for advertising purposes
In the event of your data being used to advertise our products and other products of our cooperation partners, we shall obtain your consent, if applicable. The data is subsequently processed based on your consent according to Article 6 (1) lit. a DSGVO. You can revoke your consent at any time. The legitimacy of the previously performed data processing procedures remains unaffected by the revocation. In addition, we use your email address for product recommendations if you have previously ordered from us. You receive these product recommendations regardless whether or not you have subscribed to a newsletter. In this manner, we would like to inform you of products from our range, which may interest you based on your last purchases from us. We hereby comply strictly with the statutory regulations. If you no longer wish to receive product recommendations or messages from us in general, you may object at any time. A message in text form to the contact information under No. 1 (e.g. email, fax, letter) is sufficient.

The basis for data processing is Article 6 (1) lit f GDPR, which permits the processing of data to maintain legitimate interests of the Controller if this is not outweighed by the interests or basic rights and basic freedoms of the affected person.

2.7 Data processing for market research and opinion polling
We furthermore use your data for market research and opinion polling. Naturally, we use the data exclusively in anonymised form for statistical purposes and only for International Tree Broker. Your replies to surveys are not transferred to third parties or published.

2.8 Log files
When accessing our website, user data is transferred by the respective internet browser and stored in protocol files, the so-called server log files. The data sets stored in the process contain the following data: browser type and browser version, operating system used, referrer URL, time of server request, truncated IP address.

This data cannot be allocated to certain persons. This data is not amalgamated with other data sources. We reserve the right to retrospectively check this data if we become aware of specific indications of illegal usage.

2.9 Data processing for the fulfilment of statutory obligations
In addition, we process your data for the fulfilment of statutory obligations (e.g. specifications under supervisory law, storage and verification obligations according to trade and tax laws).

Article 6 (1) lit. b DSGVO is the basis for data processing, which permits the processing of data to fulfil a legal obligation.

2.10 Data Processing in the context of our Facebook Corporate Website
We run a corporate site (fanpage) in the social network facebook.com. We are jointly responsible with Facebook for the operation of the Facebook fan page within the meaning of Art. 26 GDPR. The agreement on joint responsibility can be found here: https://www.facebook.com/legal/terms/page_controller_addendum. The primary data controller is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

The nature and extent of your information provided to Facebook, the related purposes of Facebook’s data processing, its legality, and information regarding the exercise of your rights can be found in the Data Policy and other information provided by Facebook regarding the processing of “Insights Data”. https://de-de.facebook.com/policy.php

Facebook provides us with so-called page insights for our page. Page Insights (https://www.facebook.com/business/a/page/page-insights) is aggregated information that can help us understand how people interact with our site. The creation and provision of these page insights is the responsibility of Facebook, we have no influence on it. This also applies to data processing, which is carried out exclusively for the purposes of Facebook. Facebook also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing of the data provided by Facebook by us is the statistical evaluation of the use of our fan page. For example, we can determine our users’ preferred visiting and contribution times and use them to optimize our contributions and our fan page. In addition, we process personal data made publicly accessible by you on Facebook (e.g. clear names in the user profile) as well as data directly connected with activities on our fan page (e.g. contributions, posts, likes, tags), also for the purpose of communicating with you.

The basis for data processing is Art. 6 Para. 1 S. 1 lit. a GDPR, insofar as you have given Facebook the corresponding consent. You can revoke your consent to Facebook at any time with effect for the future. Otherwise, the basis for our data processing is Art. 6 Para. 1 S. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the person responsible, provided that the interests or fundamental rights and freedoms of the data subject do not predominate. We are interested in providing content and communicating with Facebook users and improving the reach and effectiveness of our contributions.

Please assert your rights to information, correction, deletion, restriction of processing and data transferability of your stored Insights data vis-à-vis Facebook, as Facebook has assumed the corresponding obligations:

Facebook Inc.
1601 S. California Ave
Palo Alto, CA 94304, USA
Privacy Information: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

2.11 Online presences in other social networks
We have established online presences in various social networks in order to be able to communicate with you, interested parties and customers and to inform you about our services and current offers. In addition to our interaction with you, the social networks process data from visitors to their websites for the purpose of market research and advertising, i.e. a user profile may be created by the respective operator of the social network from the respective visit or usage behaviour and the preferences and interests of a visitor derived from this. Such user profiles can be used, among other things, to display advertisements within the respective social network and possibly on other websites that are individually adapted to the respective user profile. Cookies (see above) may be stored on visitors’ devices, which can be used to collect data on user behaviour. The collection of this data can also be carried out across several browsers and/or end devices used by a user, especially for logged-in members of the respective social network. Even if a visitor does not have a profile with the respective social network, it cannot be ruled out that personal data relating to this visitor will be stored through the visit of the respective website. Requests for information regarding the data stored via our online presence in social networks or the use of other relevant rights (see below) can be addressed to the provider of the respective service. Only the providers of the social networks have access to the respective data stored there and can give the appropriate information. With regard to the purpose and scope of data processing by the various social networks, we refer you to their respective data protection notices and contact details:

Instagram
Facebook Ireland Ltd.
4 Grand Canal Square
Dublin 2, Ireland
Data Protection Declaration: https://www.facebook.com/about/privacy/
Contact: https://www.facebook.com/help/contact/540977946302970
Opt-out: https://www.facebook.com/settings?tab=ads

XING AG
Dammtorstraße 29-32
20354 Hamburg, Germany
Data Protection Declaration: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2, Irland
Data Protection Declaration https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

The processing of data in the context of our online presence in social networks is based on our legitimate interest in effective information and direct communication with interested parties and customers of our company. Basis for the data processing is art. 6 Abs. 1 lit. f GDPR, which permits the processing of data for the protection of legitimate interests of the responsible person, provided that the interests or fundamental rights and freedoms of the person concerned do not outweigh.

3. Categories of recipients of personal data

The personal data is only transferred to third parties or otherwise transmitted if this is required to process contracts or for accounting purposes or if you have previously consented or in the event of a statutory basis for the transfer.

If this is necessary to process an agreement or to send and deliver products, the data is transferred to partner companies commissioned to support the contractual transactions. Our partners are obligated to comply with and observe the regulations according to the Data Protection Act. Our partners are furthermore not permitted to use the data for any purposes other than the contractual transaction.

Service providers supporting us in the provision of our services to you are distribution and marketing partners (SaaS) providers, IT service providers, particularly service providers for software and hardware maintenance, hosting providers and email service providers.

4. Duration of data storage

We principally delete your data as soon as it is no longer required for the above-mentioned purposes unless the temporary storage is still required. Thus, we store your data based on statutory verification and storage obligations, which – among other – are based on the German Commercial Code and the German Fiscal Code. Accordingly, the storage periods are up to ten full years. We furthermore store your data for the period during which claims may be asserted against our company (statutory limitation period of three or up to thirty years).

5. Data security

We transfer your personal data securely by way of encryption. For this process, we utilise the SSL (Secure Socket Layer) encryption system. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and the padlock symbol in your browser line. We furthermore secure our websites and other systems through technical and organisational measures against loss, destruction, access, alteration or distribution of your data by unauthorised persons.

6. Rights of data subjects

Within the context of the applicable statutory regulations, you are at any time, free of charge, entitled to the right of information regarding your personal data, their origin and recipient and the purpose of the data processing as well as the correction, suspension or deletion of your data. Please contact us at any time in case of questions regarding this topic as well as other issues pertaining to personal data under the contact data specified in No. 1. You may furthermore have the right to limit the processing of your data as well as the right for the surrendering of the data provided by you in a structural, conventional and machine-readable format. If you have given us your consent to process personal data for certain purposes, you may revoke it effective for the future at any time. If we process your data to preserve legitimate interests, you can object to this processing for reasons based on your specific situation. In addition, you have the option to contact a Supervisory Data Protection Authority (right to lodge a complaint). The Authority responsible for us is:

Freie und Hansestadt Hamburg
The Representative for data protection and freedom of information for Hamburg.
Prof. Dr. Johannes Caspar
Klosterwall 6
20095 Hamburg