Privacy

Privacy Policy for the use of the Krombacher website

The following Privacy Policy applies to the use of the websites belonging to Krombacher International GmbH, Hagener Straße 261, 57223 Kreuztal (hereinafter „Krombacher“), under the top-level domain www.krombacher.com and www.krombacher-hub.com as well as all sub-domains and country domains associated with the top-level domain.

The protection of your personal data is very important to Krombacher. Of course, we strictly adhere to the data protection regulations when processing your data.

Our information systems are protected by technical and organisational measures designed to safeguard the data protection objectives, confidentiality, integrity, availability and reliability (Art. 24, 32 of the General Data Protection Regulation, GDPR).

Our Data Protection Supervisor can be reached at:
privacy@krombacher.com.

1. Key terms

Cookies: Text files, which the accessed web server places on the browser of the user’s computer. This stored cookie information may contain both an identifier (cookie ID), which serves as recognition, as well as content information, such as registration status or information about websites visited. With subsequent new visits to this page, the browser sends the cookie information back to the web server with each request. Most browsers accept cookies automatically. You can manage your cookies by using your browser’s settings (usually under ‘options’ or ‘preferences’). This allows you to disable or otherwise limit the storing of cookies depending on your individual approval. You can also delete cookies at any time. We do not use IP addresses or cookies to identify you personally. If you have chosen in your login/profile settings to automatically remain logged in, a long-term cookie will be used to submit an anonymous login token.

Browser: Computer programme for displaying websites (such as Chrome, Firefox, Safari).

GDPR: Regulation (EU) 2016/679 of the European Parliament and Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, replacing Directive 95/46/EC (General Data Protection Regulation), available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.

Personal data: Personal data is any information relating to identified or identifiable natural persons. Natural persons are considered to be identifiable, if they can be identified directly or indirectly, in particular by association with an identifier such as a name, identification number, location data, online identifier, or one or more special features that embody the physical, physiological, genetic, mental, economic, cultural, or social identity of this natural person.

Processing: Any operation performed with or without the help of automated procedures or any such sequence of operations related to personal data , such as collecting, recording, organising, ordering, storing, adapting or modifying, reading, querying, using, disclosing, submitting, distributing or any other form of providing, adjusting, linking, limiting, erasing, or destroying the data.

2. Cookies

For the duration of your visit to our website, cookies will be stored on your hard drive and, depending on your browser settings, will be deleted when you exit the browser again. Cookies can be disabled or turned off in your browser settings. Session cookies are automatically deleted when you close your browser. Persistent cookies remain even after the browser is closed.

A cookie is a data record that is generated by a web server and stored on your device. These are required to ensure the smooth and improved functioning of the website.

In addition, cookies are used for anonymous statistical evaluation for the duration of a session. Cookies do not contain personal information and are not intended to identify you on third-party websites.

Local storage
To enable you to adapt the Krombacher Mediathek to your personal needs and use, we use cookies and the so-called Local Storage Technology (also called "Local Data" and "Local Storage"). Here, data is stored locally in the cache of your browser, which will continue to exist and can be read out even after closing the browser window or exiting the program - as long as you do not delete the cache.

Local Storage enables your preferences when using the Krombacher media library to be stored on your computer and used by you. The data from Local Storage is used, for example, to provide you with recommendations based on your anonymous usage or to enable you to create a watch list and subscription list. The following information is stored by the Krombacher Mediathek as local data:

- the addresses of the pages you call up in the Krombacher Mediathek,

- the addresses of the Krombacher Mediathek pages that you have added to your watch list

Third parties cannot access the data stored in the Local Storage. They are not passed on to third parties and are not used for advertising purposes. We use these techniques in the legitimate interest to be able to make you an attractive fully functional offer on the basis of article 6 paragraph 1 letter f DSGVO.

If you do not want online offers to use cookies and local storage functions, you can control this in the settings of your respective browser, depending on the platform in the operating system of the respective app. There you will also get an overview of your stored cookies. You can delete cookies at any time or block them from the outset. You can manage local storage content in the browser via the settings for "Chronicle" or "Local Data", depending on which browser you use. We would like to point out that this may result in functional restrictions.

3. Purpose and legal basis of data processing

As far as required for carrying out contractual obligations for providing services or for processing requests (Art. 6, paragraph 1 b) of the General Data Protection Regulation, GDPR) and for the company’s own advertising purposes.

Data will not be disclosed to other third parties.

4. When does Krombacher use and process personal data?

In some cases we need your personal data, for example:
• when you enter a competition
• when you contact us
• for catalogue requests
• for subscribing or unsubscribing to our newsletter

As far as required for carrying out these services or for processing enquiries, we collect and process personal data you have submitted (in particular your surname, given name, date of birth, and e-mail address).
We know that careful handling of your personal data is very important. Privacy is a high priority at Krombacher.
Of course, when collecting, processing, and using data, we comply in full with the legal provisions of the Federal Telecommunications Digital Services Data Protection Act (TDDSG). Your data helps us to tailor our service to your needs and constantly improve our offer.

You may request information about the stored data, why it is being stored, and its possible recipients at any time. Additionally, in accordance with legal provisions, you have the right to correct, block, or delete any personal data. You may submit such a request to Krombacher International GmbH, HagenerStraße 261, 57223 Kreuztal in writing, by e-mail privacy@krombacher.com, or by telephone +49 2732 - 880 880.

5. Applicant Privacy

We collect and process the personal data of applicants for the purpose of handling applications. Processing may also be digital. This is always the case when a candidate submits application documents digitally, for example by e-mail or on our website using an online form. If we enter into an employment contract with an applicant, the data transmitted will be stored for the purposes of processing the employment relationship in compliance with the legal requirements. If no employment contract is entered into with the applicant, the application documents will be automatically deleted four months after the announcement of the cancellation decision unless deletion would preclude other legitimate interests, such as burden of proof in proceedings under the General Equal Treatment Act (AGG).

6. Automated decision-making

We currently do not use automated decision-making methods or profiling.

7. Data processing for advertising purposes

We use your data for our own advertising purposes. We would like to inform you about new products, our services and interesting events.

Our Newsletter will only be sent to you, if you subscribe to it.

You can object to your consent at any time.

Google Tag Manager

Description of Service

This is a tag management system. Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager allows to control when a particular tag is triggered.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

This list represents the purposes of the data collection and processing.

Tag Management

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Website tags

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Aggregated data about tag firing

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.

Singapore
Taiwan
Chile
United States of America

Data Recipients

In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

Usercentrics Consent Management Platform

Description of Service

This is a consent management service. Usercentrics GmbH is used on websites and apps as a processor for the purpose of consent management.

Processing Company

Usercentrics GmbH

Sendlinger Str. 7, 80331 Munich, Germany

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

datenschutz@usercentrics.com

Data Purposes

This list represents the purposes of the data collection and processing.

Compliance with legal obligations
Consent storage

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Local storage
Pixel

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. c GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The consent data (given consent and revocation of consent) are stored for one year. The data will then be deleted immediately.

Data Recipients

In the following the recipients of the data collected are listed.

Usercentrics GmbH

Click here to read the privacy policy of the data processor

https://usercentrics.com/privacy-policy/

Stored Information

Name: ucString; This holds the ControllerID and SettingsID, the language, settings version and services with their consent history.; Type: web; Domain: usercentrics.com;
Name: ucData; This holds information about the Google Consent Mode.; Type: web;

DoubleClick Ad

Description of Service

This is an advertising service. With this service it is possible to provide relevant ads to users and get campaign reports.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Data Purposes

This list represents the purposes of the data collection and processing.

Advertisement
Analytics
Optimization

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Browser information
Click path
Cookie information
Date and time of visit
Demographic data
Device identifiers
Location information
Hardware/software type
Internet service provider
IP address
Number of times ads are seen
Serving domains
Interaction data
Page views
Search history

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

United States of America

Data Recipients

In the following the recipients of the data collected are listed.

Google Ireland Limited
Google LLC
Alphabet Inc.

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

Storage Information

Maximum age of cookie storage: 1 year

Stored Information

Name: test_cookie; This cookie is used t store user preferences.; Type: cookie; Duration: 1 day; Domain: doubleclick.net;
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 1 year; Domain: doubleclick.net;
Name: DSID; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 14 days; Domain: doubleclick.net;
Name: pm_sess; This cookie is used to prevent malicious sites from acting on behalf of a user without their knowledge; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net;
Name: pm_sess_NNN; This cookie is used to prevent malicious sites from acting on behalf of a user without their knowledge.; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net;
Name: aboutads_sessNNN; This cookie is used to store information about a user's preferences regarding online behavioral advertising, specifically whether they have opted out of receiving personalized ads.; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net, google.com;
Name: FLC; This cookie is used for creating targeted ads.; Type: cookie; Duration: 10 seconds; Domain: doubleclick.net;
Name: RUL; This cookie is used to store user consent for cookies and session information; Type: cookie; Duration: 1 year; Domain: Set from partner domain.;
Name: PAIDCONTENT; This cookie is used to track whether a user has paid access for premium content.; Type: cookie; Duration: 30 days; Domain: doubleclick.net;
Name: APC; This cookie is used for remembering user preferences, authenticating users, preventing fraud, and improving website performance.; Type: cookie; Duration: 6 months; Domain: doubleclick.net;

Google Analytics

Description of Service

This is a web analytics service. With this, the user can measure the advertising return on investment "ROI" as well as track user behavior with flash, video, websites and applications.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

This list represents the purposes of the data collection and processing.

Marketing
Analytics

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies
Pixel
JavaScript

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Click path
Date and time of visit
Device information
Location information
IP address
Pages visited
Referrer URL
Browser information
Hostname
Browser language
Browser type
Screen resolution
Device operating system
Interaction data
User behaviour
Visited URL
Cookie ID

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The Retention Period depends on the type of the saved data. Each user can choose how long Google Analytics retains data before automatically deleting it.

Transfer to Third Countries

United States of America
Singapore
Chile
Taiwan

Data Recipients

In the following the recipients of the data collected are listed.

Google Ireland Limited, Alphabet Inc., Google LLC

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

Click here to opt out from this processor across all domains

https://tools.google.com/dlpage/gaoptout?hl=de

Storage Information

Maximum age of cookie storage: 2 years

Stored Information

Name: __utmb; This cookie is used to track the time of the visit.; Type: cookie; Duration: Session;
Name: _ga; This cookie is used to distinguish between users.; Type: cookie; Duration: 2 years;
Name: _gid; This cookie is used to identify the user.; Type: cookie; Duration: 1 day;
Name: __utma; This cookie is used to record the time and date of the first visit, the total number of visits and the start time of the current visit. ; Type: cookie; Duration: Session;
Name: __utmz; This cookie is used to record where the visitor came from. ; Type: cookie; Duration: Session;
Name: IDE; This is used to show personalised ads. ; Type: cookie; Duration: 1 year, 1 month;
Name: CONSENT; This is used to store the consent choices of the user. ; Type: cookie; Duration: 2 years;
Name: __utmt; This is used to throttle the request rate. ; Type: cookie; Duration: 10 minutes;
Name: _gat; This is used to read and filter requests from bots.; Type: cookie; Duration: 1 minute;
Name: __utmc; This is used to store the time of the visit.; Type: cookie; Duration: 30 minutes;
Name: FPID; This is used to store a value used for setting the Client ID in the request to Google's servers.; Type: cookie; Duration: 2 years;
Name: FPLC; This is used to register a unique ID that is used to generate statistical data about how the visitor uses the website.; Type: cookie; Duration: 20 hours;

Google Fonts

Description of Service

This is a collection of fonts for commercial and personal use.

Processing Company

Google Ireland Limited

Gordon House, 4 Barrow St, Dublin 4, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

This list represents the purposes of the data collection and processing.

Providing fonts
Improvement of service

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

APIs

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

IP address
Aggregated usage numbers
Font file requests
Referrer URL
CSS requests
User agent
Browser information

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

United States of America
Singapore
Taiwan
Chile

Data Recipients

In the following the recipients of the data collected are listed.

Alphabet Inc., Google LLC, Google Ireland Limited

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

Google Translate

Description of Service

This is a translation service.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes

This list represents the purposes of the data collection and processing.

Providing Service

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

IP address

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

Taiwan
Chile
Singapore
United States of America

Data Recipients

In the following the recipients of the data collected are listed.

Google Ireland Limited

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?fg=1&hl=en

Storage Information

Maximum age of cookie storage: 2 years

Stored Information

Name: googtrans; Used to store language settings.; Type: cookie; Duration: Session;
Name: PREF; This cookie remembers basic preferences, such as choice of language, format of search
results and how to display information: so the visitor doesn’t need to set preferences each time he uses the site.; Type: cookie; Duration: 2 years;

YouTube Video

Description of Service

This is a video player service. It can be used by user to watch, like, share, comment and upload videos.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

This list represents the purposes of the data collection and processing.

Displaying Videos

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies (if Privacy-Enhanced Mode is not activated)

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Device information
IP address
Referrer URL
Videos viewed

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

Chile
United States of America
Taiwan
Singapore

Data Recipients

In the following the recipients of the data collected are listed.

Alphabet Inc.
Google LLC
Google Ireland Limited

Click here to read the privacy policy of the data processor

https://business.safety.google/privacy/?hl=en

Click here to read the cookie policy of the data processor

https://policies.google.com/technologies/cookies?hl=en

Click here to opt out from this processor across all domains

https://safety.google/privacy/privacy-controls/

Storage Information

Maximum age of cookie storage: 8 months

Stored Information

Name: __sak; This is used to store information about the visitor's video preferences.; Type: web;
Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Type: web;
Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor's device and network settings.; Type: web;
Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user's video player preferences using embedded YouTube video.; Type: web;
Name: YEC; This is used to store the user's video player preferences using embedded YouTube video.; Type: cookie; Duration: 1 year, 1 month;
Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Type: cookie; Duration: 2 years;
Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Type: cookie; Duration: 5 months, 26 days;
Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Type: cookie; Duration: Session;
Name: test_cookie; This is a test for cookie setting permissions in user's browser.; Type: cookie; Duration: 1 day;
Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Type: cookie; Duration: 6 months;
Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Type: cookie; Duration: Session;
Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Type: cookie; Duration: 8 months;
Name: pm_sess; This is used to maintain your browsing session.; Type: cookie; Duration: 30 minutes;
Name: CGIC; This is used to provide search results by auto-completing search queries based on a user's initial input.; Type: cookie; Duration: 6 months;
Name: UULE; This is used to determine the users geographic location. ; Type: cookie; Duration: 6 hours;
Name: _Secure-YEC; This is used to store the user's video player preferences using embedded YouTube videos.; Type: cookie; Duration: 1 year, 1 month;

8. Objection to promotional advertising

You are entitled to object to the use of your data for advertising purposes without incurring any costs other than the transmission costs according to the basic rates. To do this, the following contacts are available:

Krombacher International GmbH
Hagener Straße 261
57223 Kreuztal-Krombach, Germany

privacy@krombacher.com
Tel. +49 (0)2732 880-880

9. Recipients of personal data

Within the scope of the relevant legislative powers, your personal data will be disclosed to the following companies:
• Postal service providers, freight forwarders, shipping services, disposal of file/data media
• IT service providers for maintenance and software support
• Other service providers as part of payment processing, credit checks
• Collection and dialogue marketing.

10. Duration of data storage

We store your data for as long as the purposes involved require. Appropriate deletion protocols are available and are continuously adapted to the statutory and required conditions.

11. Rights of the party offected

Your rights as the party affected are fully guaranteed by Krombacher.

Information requirements pursuant to article 13, 14 and 34:
• Right to rectification art. 16
• Right to cancellation art. 17
• Right to restricted processing art. 18
• Notification obligation pursuant to art. 19
• Right to data portability pursuant to art. 20
• Right to object of the party affected pursuant to art. 21
• Right to information of the party affected pursuant to art. 15.
• Right of appeal to supervisory authorities under Art. 77.

If you assert one or more of the above listed data subject rights against us, we will store this circumstance on the basis of Article 6 paragraph 1 letter f) DSGVO. The fact that we can also prove that we have duly complied with your request in cases of doubt is to be considered a legitimate interest within the meaning of this provision.

Right of appeal to the competent supervisory authority:
In the event of violations of data protection laws, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection commissioner of the federal state of North Rhine-Westphalia, where our company has its headquarters. You can reach the authority via the link: https://www.ldi.nrw.de/

12. Other rights

The person responsible for your stored personal data is entitled to the following rights:
• Information
• Correction
• Deletion or limiting of processing
• Objection to processing
• Data portability
• Right of appeal to regulatory authorities

13. Contacts: How can I exercise the rights listed above?

In order to exercise your rights, you can contact the Data Protection Officer (see above) or the person responsible (see above). We will process your requests in accordance with the legal requirements as soon as possible, free of charge, and inform you of any action that we have taken.

14. Withdrawal of consent

You may withdraw your consent to the processing of the data you have provided at any time. The easiest way to withdraw your consent is by sending an e-mail to the contact details listed above. This withdrawal of consent shall not affect the legality of the processing of your data until your consent has been fully revoked. Please note, however, that you may need to submit your data again, before making a purchase.

15. Right to object

You have the right to object to the processing of your personal data at any time.

Should you wish to file an objection, we will no longer process your personal data in this case, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing is for the purposes of enforcing, pursuing, or defending legal claims.

Send any objections to privacy@krombacher.com.

16. Update and changes

The privacy policy needs to be adjusted from time to time to suit actual conditions and legal requirements. Please check our privacy policy on a regular basis before using our services to remain up-to-date with any changes or updates.