COLD-PRESSED SEA BUCKTHORN OIL, ORGANIC

A. Privacy Policy and Personal Data

Principles of handling personal data

Collection and storage of personal data as well as type and purpose of their use

a) Visiting the website

When you visit our website https://www.podoroele.de, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made (referrer URL),

· the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The mentioned data will be processed by us for the following purposes:

Ensuring a smooth connection of the website,
ensure comfortable use of our website,
evaluation of system security and stability as well as
or other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under this data protection declaration.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. A valid e-mail address is required so that we know who sent the request and can respond to it.

The data will be processed for the purpose of contacting us in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent.

The personal data collected by us for the use of the forms will be automatically deleted after your request has been processed.

In addition, personal data is collected when you register for our e-mail newsletter. These data are used by us for our own advertising purposes in the form of our e-mail newsletter, provided that you have expressly consented to this as follows:

"Yes, I would like to subscribe to the newsletter!"

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a corresponding message. Your e-mail address will be deleted from our newsletter distribution list immediately after you have unsubscribed.

Data processing when opening a customer account and for contract processing

According to Art. 6 Para. 1 letter b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time and can be done by sending a message to the above-mentioned address of the responsible person. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.

Passing on of personal data for order processing

2.1 We work together with external shipping partners to fulfil our contractual obligations towards our customers. We pass on your name as well as your delivery address exclusively for purposes of the goods delivery to a shipping partner selected by us.

2.2 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the framework of contract processing, insofar as this is necessary for the delivery of the goods.

2.3 When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Purchase on account" via PayPal, we pass your payment data on to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of the score values. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

2.4 - DHL

If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address in accordance with Art. 6 Para. 1 a GDPR prior to delivery of the goods for the purpose of agreeing a delivery date or for delivery notification to DHL, provided you have given your express consent in the ordering process. Otherwise we only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 letter b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case it is not possible to agree the delivery date with DHL in advance or to give notice of delivery.

This consent can be revoked at any time with future effect vis-à-vis the above-mentioned person in charge or the transport service provider DHL.

- DPD

If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your e-mail address and/or your telephone number to DPD prior to delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of agreeing a delivery date or for delivery notification, provided you have given your express consent in the ordering process. Otherwise we only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to agree the delivery date with DPD beforehand or to give notice of delivery.

This consent can be revoked at any time with future effect vis-à-vis the aforementioned person in charge or the transport service provider DPD.

- GLS

If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 - 7, 36286 Neuenstein), we will pass on your e-mail address in accordance with Art. 6 Para. 1 a GDPR prior to delivery of the goods for the purpose of agreeing a delivery date or for delivery notification to GLS, provided you have given your express consent in the ordering process.Otherwise we only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery in accordance with Art. 6 Para. 1 letter b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to agree the delivery date with GLS beforehand or to transmit status information on the delivery of the consignment.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned person in charge or the transport service provider GLS.

- UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your e-mail address before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of agreeing a delivery date or for delivery notification to UPS, provided you have given your express consent in the order process. Otherwise, only the name of the recipient and the delivery address will be passed on to UPS for the purpose of delivery in accordance with Art. 6 Para. 1 letter b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior agreement of the delivery date with UPS or transmission of status information for shipment delivery is not possible.

This consent can be revoked at any time with effect for the future either with the above-mentioned person in charge or with the transport service provider UPS.

Passing on of personal data for creditworthiness or identity checks and scoring when purchasing an invoice

Should we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit assessment on the basis of mathematical-statistical procedures in order to protect our legitimate interests. We transfer the personal data necessary for a credit assessment to the following service providers:

Creditsafe Germany GmbH

Charlottenstraße 68 - 71

10117 Berlin

The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure; address data is included in the calculation of the score values, among other things. We use the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, execution or termination of a contractual relationship.

Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your mobile device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.

Use of social plugins

Our website uses so-called social plugins ("plugins") of the bookmarking service AddThis, which is operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA ("AddThis"). The plugins are usually marked with an AddThis logo, for example in the form of a white plus sign on an orange background. An overview of the AddThis plugins and their appearance can be found here: https://www.addthis.com/get/sharing

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the AddThis servers. The content of the plugin is transmitted by AddThis directly to your browser and integrated into the page. Through the integration AddThis receives the information that your browser has accessed the corresponding page of our website and stores a cookie on your terminal device to identify your browser. This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there. AddThis uses the data to create anonymous user profiles, which serves as a basis for a personalized and interest-related advertising address of the visitors of Internet pages with AddThis plugins.

The purpose and scope of data collection and the further processing and use of the data by AddThis can be found in AddThis' privacy policy: http://www.addthis.com/privacy/privacy-policy

If you would like to object to the data collection by AddThis for the future, you can set an opt-out cookie, which you can download from the following link: http://www.addthis.com/privacy/opt-out

You can also completely prevent the AddThis plugins from loading with add-ons for your browser, e.g. with the script blocker "NoScript" ( http://noscript.net/).

1.1. Facebook

We use social plugins ("plugins") of the social network Facebook.com, which is operated by Facebook Inc., Palo Alto, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Facebook" or "Like".

If you visit our pages and activate the Facebook plugin by clicking on the "Recommend" button, which has been grayed out until then, a direct connection between your browser and the Facebook server is established via the plugin. The content of the plugin is transmitted directly from Facebook to your browsers. We have no control over the type and extent of data transmitted to Facebook or its use by Facebook. As far as we know, Facebook receives the information that you have visited our site using your IP address. If you click the Facebook "Recommend" button while logged into your Facebook account, you can link the contents of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. You can find further information on this in the facebook data protection declaration at http://de-de.facebook.com/policy.php.

For the purpose and scope of data collection, further processing and use of the data by Facebook and your rights and setting options for protecting your privacy, please refer to Facebook's data protection information at http://de-de.facebook.com/policy.php.

If you do not want Facebook to collect personal data about you via our website, you can prevent this by logging out of your Facebook profile before you visit our website or by deactivating the plugin (the default setting).

1.2. Twitter

We use social plugins ("plugins") of the social network Twitter, which is operated by Twitter Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are marked with a Twitter logo or the addition "Tweet" or "Twitter". The plugin is deactivated by default when you visit our website. You can activate and deactivate it by clicking on the grayed-out "Tweet" button.

By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that, as the provider of the pages, we are not aware of the content of the data transmitted or how it is used by Twitter. For more information on the purpose and scope of data collection, further processing and use of data by Twitter and your rights and setting options for protecting your privacy, please refer to Twitter's privacy policy at http://twitter.com/privacy .

You can change your Twitter privacy settings in your Twitter account settings at http://twitter.com/account/settings

1.3. Google +

We use the "+1″ button of the social network Google Plus, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). The button is deactivated by default when you visit our website and can be activated or deactivated again by clicking on the grayed-out "g +1" button.

After activating the button your browser establishes a direct connection to the Google servers. We have no knowledge and no influence on the amount of data Google collects with the button. According to Google, personal data is collected and processed by logged in members. For the purpose and scope of data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy, please refer to Google's data protection information on the "+1″ functionality at http://www.google.com/intl/de/+/policy/+1button.html.

If you do not wish Google to collect data via the button, you can prevent this by unsubscribing from the Google +1 service before visiting our website or by having the button on our website deactivated/deactivated.

Use of videos (e.g. Youtube, Vimeo)

This website uses the Youtube embedding function to display and play videos from the provider "Youtube". The extended data protection mode is used here, which, according to the provider, does not initiate the storage of user information until the video(s) are played. If the playback of embedded YouTube videos is started, the provider uses "YouTube" cookies to collect information about user behavior. According to "Youtube", these serve, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive practices. Regardless of the playback of the embedded videos, every time this website is accessed, a connection to the Google network "DoubleClick" is established, which can trigger further data processing operations without our influence.

Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Web analysis service

This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again):

(https://tools.google.com/dlpage/gaoptout?hl=en)

Please note that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses are only processed in abbreviated form in order to exclude direct personal reference.

Retargeting / Remarketing / Recommendation advertising

- This website uses retargeting technology from Google Inc. "("Google"). This makes it possible to address visitors of our Internet pages specifically with personalized, interest-related advertising who have already been interested in our shop and our products. The advertising media are displayed on the basis of a cookie-based analysis of the previous usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device to collect anonymous data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will be shown advertisements that most likely correspond to your product and information interests. You can permanently object to the setting of cookies for advertising preferences by downloading and installing the browser plug-in available under the following link:

https://www.google.com/settings/ads/onweb/

Further information and the data protection regulations regarding advertising and Google can be viewed here:

http://www.google.com/policies/technologies/ads/

Your rights and contact

You have a right to free information about your stored data and, if necessary, a right to correction, blocking or deletion of this data. If you have any further questions about the collection, processing or use of your personal data, please contact us. The same applies to information, blocking, deletion and correction requests regarding your personal data as well as to revocations of consents given. You will find the contact address in our imprint.

Rights of individuals concerned

You have the right:

· to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;

· to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR;

· to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

· pursuant to Art. 18 GDPR, to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing pursuant to Art. 21 GDPR;

· pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;

· in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future and

· to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

Right of revocation

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@podor.uk.com

Data integrity

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Up-to-dateness and amendment of this data protection declaration

This data protection declaration is currently valid and has the status as of May 18, 2018.

Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be called up by you at any time on the website under https://www.podor.co.uk/terms-and-conditions

1 Data protection authorities require the conclusion of an order data processing agreement for the permissible use of Google Analytics. A corresponding template is offered by Google at http://www.google.com/analytics/terms/de.pdf