Vegshelf UG (haftungsbeschränkt) i. Gr., Leopoldstr. 49, 40211 Düsseldorf, Germany, email: email@example.com (see Imprint) (“Vegshelf," "we," "us" or "our"), as operator of the website and the Platform www.vegshelf.com is the controller for the use of the personal data of users of the website pursuant to Art. 4 (7) of the EU General Data Protection Regulation (“GDPR”).
You can contact our data protection officer via: tel.: +49 176 7133 6317, e-mail: firstname.lastname@example.org or our postal address.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. This may include data such as name, email address, telephone number and mailing address. We process your data in the context of our Service and use of Platform only when you have given us your consent to do so.
COLLECTION OF PERSONAL INFORMATION
If you are an individual in the European Economic Area (EEA), we collect and process information about you only where we have a legal basis for doing so under applicable European Union laws.
When you access our Platform, Services or contact us, data is being collected. We collect and use your information only where:
We need it to provide you access and functions on the Platform;
You give us consent to do so for a specific purpose;
It satisfies a legitimate interest (which is not overridden by your data protection interests) such as for research and development, to market and promote the Platform and Services, and to protect our legal rights and interests; or
We need to process your data to comply with a legal obligation.
If you have given us consent for processing your data, you can withdraw this at any time. Revocation of this kind affects the admissibility of processing your personal data after you have expressed this to us.
Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using the Platform. If you wish to submit a subject access request or a request for erasure of data, please contact our data protection officer via email@example.com.
At Vegshelf we delete your personal data as soon as it is no longer necessary for the respective purpose. It is possible that your personal data is kept for the time during which possible claims may be asserted against us (e.g. statutory limitation period of 3 or in some cases, 30 years). Furthermore, we are required by law to store certain data due to the duties of proof and retention, inter alia from the German Commercial Code, the German Tax Code or the Money Laundering Act. The data storage periods can be up to 10 years.
USE OF PERSONAL INFORMATION
By using Vegshelf Platform, you agree that we may collect, process and use your personal information for the purpose of providing you with the Platform and the Services and developing our business which includes (without limitation):
Personalising your visits to the Platform and developing the design and style of the Platform to improve the services provided to you;
Contacting you via email or phone in case you haven't finalised your order to follow up on your quote and/or to see if there was a problem with your use of the Platform;
Providing personalized communication with you via telephone, email, SMS, in-app chat messaging or any other means available to us;
Informing you about the latest changes to the Platform, Services, products, or promotional offers that you might find interesting;
Carrying out technical and statistical analysis to measure the performance of our Services and the Platform;
Enabling you to share our Content with others;
Conducting market research.
On our Platform you can register and set up an account to use our Services in the form of digital B2B plant-based food marketplace. When you sign up as a supplier or manufacturer of plant-based food products (“Supplier”), you are required to enter your personal data such as name, surname, e-mail, position, company name, company or brand logo, website and information regarding the products you want to sell through the Platform. Vegshelf may contact Supplier to determine further information required and update the profile accordingly. Signing up as a trade buyer, e.g. supermarket product category buyer, restaurant, coffee shop or independent store owner (“Buyer”) requires to enter your name, surname, position, company name, company logo, location, number of stores, e-mail, website, phone number and other information. The information required for the implementation of the contract relationship will be processed for this purpose only. In most cases, companies access the profiles of Suppliers by themselves on the Platform after searching for certain products and contact the Supplier directly. Furthermore, however, Vegshelf can contact Buyer via phone, email or messaging service and suggest Suppliers which fit Buyer's company's profile and requests. The legal basis of this processing is Art. 6 sentence 1 lit. b) GDPR. A storage of data can be repealed at any time.
The specified data and your entire user account can always be deleted via the Platform in your settings page or by contacting us via firstname.lastname@example.org. You agree to treat personal access data confidentially and not to make such data available to unauthorized third parties. We do not assume liability for misused passwords. You should notify us immediately if you are concerned about a third party having knowledge of your password, if the password is used unauthorized or this seems to be likely. You are responsible for ensuring that your information is accurate and complete and that you notify us of any changes to the information provided. You can review and update the information provided and your account settings via the Platform. After completing use of Vegshelf Platform you should log out and close the browser window, especially if you share a computer with other people.
Due to commercial and tax regulations, Vegshelf may be obliged to store part of the personal data transferred (e.g. payment data) for a period of 10 years. After a certain period (e.g. 2 years) we restrict the use of specific data and, as a consequence, the data may be used to comply with legal obligations only.
SHARING YOUR PERSONAL INFORMATION WITH THIRD PARTIES
We share your personal information to third parties only if you have provided us with your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR, if the transfer is necessary for the performance of the use of Platform and Services, or we are forced to do so by law.
We may share information about you with our partners that help us provide certain Services and/or functionality of the Platform, e.g. online payment processing. We highly respect your privacy and thus will use reasonable attempts to control and be responsible for the use of your information by such partners. The legal basis of this processing is Art. 6 sentence 1 lit. b) and f) GDPR.
If we transmit personal information outside the European Economic Area (EEA), we will do so only if the European Union Commission has decided that the third country secures an adequate level of data protection or a person has given its consent to do so.
In addition to the personal data you provide, cookies are automatically stored on your computer when you access the Platform, Content or Services. Cookies are small text files that are stored on your computer's hard drive by your browser and through which Vegshelf receives certain information. However, cookies cannot run programs or transmit viruses to your computer.
Your information collected by cookies is pseudonymised by technical precautions and, thus, it is not attached to your personal information (e.g. your name, e-mail, position etc.). It only includes general information about your computer settings and your connection to the internet such as (without limitation) operating system, your browsing patterns and timing of browsing, IP address, geographical location and other.
We use session cookies to detect whether you have already visited individual pages on our website. These are automatically deleted when you close your browser or log out. These cookies enable us to recognize your computer when you return to our Platform.
In contrast, persistent cookies are automatically deleted after a specific period of time. Moreover, you can delete these cookies at any time in the security settings of your browser. Generally, most internet browsers accept cookies automatically, however you can configure the settings of your browser to your demands and delete cookies or decline automatic acceptance, if you prefer. However, if you choose not to receive our cookies, you may not be able to use some of the core functions of the Platform and Services.
The legal basis for the processing of personal data using cookies is Art. 6 sentence 1 lit. f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 sentence 1 lit. a) GDPR, if the user has given his consent.
USE OF GOOGLE ANALYTICS
Vegshelf uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google analytics uses “cookies”, which are text files that are stored on your computer and allow an analysis of the use of Platform by Google. The information collected by the cookie about the use of our Platform (including your IP address) is usually transmitted to and stored by Google on servers in the United States of America.
However, in the event of activation of IP anonymization on our Platform, your IP address will be truncated and recorded in abbreviated form by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area (EEA). This guarantees anonymisation and does not allow to conclude your identity. Only in exceptional cases, the full IP address be transmitted to and truncated by Google on servers in the United States. On behalf of Vegshelf, Google will use this data to evaluate your use of our Platform, to compile reports on Platform activity and provide other services related to website activity and internet usage to Vegshelf. The IP address transferred by your browser as part of Google Analytics will not be combined with other data collected by Google.
Vegshelf uses Google Analytics with IP anonymization, which means that all IP addresses are truncated and thus, reference to user identity can be eliminated.
You can prevent the storage of cookies by adjusting the settings of your browser, however by doing so, you may limit the use of full range of functions of Platform and Services. Also, you may prevent collection of the information collected by the cookie (including your IP address), as well as the processing of this data by Google by downloading and installing a browser plug-in available here https://tools.google.com/dlpage/gaoptout?hl=en-GB
For the exceptional cases in which personal data is transferred to the United States, Google is part of the EU-US Privacy Shield, you can access more information on it here: https://www.privacyshield.gov/EU-US-Framework.
The legal basis of this processing is Art. 6 (1) sentence 1 lit. f) GDPR.
USE OF SOCIAL MEDIA PLUG-INS
Vegshelf uses following social media plug-ins on our Platform: Linkedin, Facebook, Twitter and Instagram. We use so-called two-click solutions, which means that, by visiting our Platform, no personal data is initially passed on to providers of social media plug-ins. However, we want to emphasize that your use of any of these social media plug-ins and their functions is on your own responsibility.
Through activation of the plug-in, personal data relating to you is transferred to the respective plug-in provider and stored there (in the case of US providers, in the USA). Data collection is mainly done by plug-in providers via cookies.
We have no influence on the collected data or the way in which it is processed, nor are we aware of the full scope of personal information collection, the purposes of processing or storage periods. Moreover, we have no information about the deletion of the collected data by the plug-in provider. The plug-in provider stores the collected data about you in a form of user profiles and uses them for marketing, creating tailored design of its website and market research. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of tailor-made advertising and to inform other users of the social network about your activities on our Platform. You have a right to object against the creation of these usage profiles and in order to do so, you need to contact the respective plug-in provider.
We use social media plug-ins to interact with social networks and other users so that we can improve our Platform, Services and make Content more engaging for you as a user. The legal basis for the use of the plug-ins is Art. 6 sentence 1 lit. f) GDPR.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged into it. However, if you are logged into the plug-in provider, the data relating to you collected by us will be directly assigned to your account with the plug-in provider. If you activate the social media button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, and in particular before activating the button, as this prevents the plug-in provider from linking this data to your profile.
For more information on the purpose and scope of the data collection and processing by the plug-in provider, please read the privacy statements of the relevant providers, which can be found below. These policies also contain further information about your rights and settings to protect your privacy.
Addresses of the respective plug-in providers and URLs where you can read their privacy policies:
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn is part of the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland; http://www.facebook.com/policy.php; further information to the collection of data: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook is part of the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
DIRECT INQUIRY DATA
If you direct an inquiry to us, Vegshelf saves the communication history with you and information submitted during this communication (e.g. email address, email text) to optimally answer your request and make further follow-ups. We will delete the relevant information after the storage of such data is no longer required or it restricts the processing if statutory retention periods exist.
SECURITY OF YOUR PERSONAL INFORMATION
At Vegshelf we take the security of your personal information very seriously and have appropriate technical, physical and administrative procedures in place to help protect your personal data from unauthorized access, loss, manipulation, use or disclosure by third parties. Our systems are secured against unauthorized access. However, we need to emphasize that the internet does not ensure absolute data security despite all technical measures. We are not liable for actions of third parties.
NEWSLETTER AND UNSUBSCRIPTION FROM EMAILS
When requesting a Supplier or Buyer membership to Vegshelf, or creating a Buyer or Supplier account, or submitting your email address to access our Content, you will be automatically opted in for transactional (emails about your activity and business management on the Platform) emails and marketing (content and promotional) newsletters. Transactional emails are crucial to successfully operate your account on the Platform and cannot be unsubscribed from. However, if you wish to unsubscribe from newsletters, please click on the unsubscribe link at the bottom of email or contact us via email@example.com.
YOUR RIGHTS IN RELATION TO VEGSHELF
If you wish to edit your user data, you can do so anytime in your Supplier or Buyer profile on the Platform.
You have the right of access, erasure and restriction of processing of your personal information.
You also have the right to lodge a complaint concerning the processing of your personal data by us with a supervisory authority. However, we encourage you in case of an issue, firstly to get in touch with us and we will do our best to find a solution.
If we are legally required to disclose data to local, state, national or international authorities, we will comply with this obligation. Also, we will disclose data to third parties, when forced by applicable laws and regulations. In addition, we may disclose information to investigate, prevent, or initiate countermeasures against illegal activities or suspected fraud, or to apply or enforce any of our contracts and licensing rights.
If you have questions, comments or inquiries with regard to the collection, processing and use of your personal data by us, please direct written requests to:
Vegshelf UG (haftungsbeschränkt) i. Gr.
40211 Düsseldorf, Germany
or via email: firstname.lastname@example.org
Last revised on November 4, 2019.