Privacy policy

In the following, we would like to inform you about which personal data is processed during your visit on our website and the processes described below.

Personal data (hereinafter "data") is all data that can be personally related to you, e.g. your name, your e-mail address and your use of our website.

Responsible Entity

The responsible entity as defined by the General Data Protection Regulation (GDPR) is Bohnkaf-Kolonial GmbH & Co. KG, Veit-Stoss-Ring 65, 24539 Neumünster, email address: sales@bohnkaf.de.

Browser data

As soon as you access our website, our web server on (where our website’s files are held) automatically collects the following data transmitted by your browser:

• your computer’s IP address
• date and time of the request
• content of the request (specific page)
• access status and amount of data transferred
• product and version information of your browser
• your computer’s operating system
• the website from which our website was accessed

This data is technically necessary for us to display the pages of our website to you and to ensure the stability and security of our website.

The IP address of your computer is only stored for the time you are using the website and then immediately deleted or anonymised by being shortened.

The legal basis is Section 6 para. 1 s. 1 lit. f GDPR.

Your request

You are offered various contact options, e.g. our address, our e-mail address, our telephone number and our contact form.

If you contact us, we will use the data you have provided, such as your e-mail address, your name and the content of your request, to process your request.

For communication purposes, we may also use the messenger system. You are entitled to use our other means of communication at any time. If the messenger system uses end-to-end encryption, the messenger service provider cannot access the content of the message. However, the messenger service provider may have access to the information that communication has taken place and which device has been used. This data is, however, processed by the messenger provider; please refer to the provider’s privacy policy.

We delete the data accrued after storage is no longer required, or we restrict processing if there are statutory retention requirements.

The legal basis is Section 6 para. 1 s. 1 lit. b GDPR.

Functional cookies

We use cookies to make your visit of our website more convenient.

Cookies are small text files that are sent from our web server to your browser, when you visit our website, and are stored by your browser on your computer for later retrieval. The cookies facilitate the recognition of your web browser.

We use cookies to make your default settings available, to have your personal data entered in the input mask for future interactions with our website or to ensure your authorisation.

Session cookies are automatically deleted when you close the browser. Other cookies are automatically deleted after a specified period, which can vary depending on the cookie. Please refer to your browser’s settings to find the exact storage periods.

You can configure your browser settings according to your preferences and decline, for example, to accept third-party cookies or all cookies. We would like to point out that in this instance you may not be able to use all the functions of this website.

You can delete cookies at any time in the security settings of your browser.

The legal basis is Section 6 para. 1 s. 1 lit. f GDPR.

Applications

If we are looking for employees, we publish job advertisements.

In order to process your application, we need certain data from you.

In addition to your name and your contact details, we also need and process your other applicant data, e.g. your letter of application, CV, diplomas, references, or meeting notes.

We delete the data arising in the application process when the data is no longer needed for application purposes. If an employment relationship is not established, the data will be deleted after a period of no more than six months after the end of the application process. This does not apply if statutory provisions prevent deletion, the data is required for the purpose of providing evidence or if you have expressly consented to a longer storage period.

If we ask for your consent, for example to a longer storage of your data, the legal basis is Section 6 para. 1 s. 1 lit. a GDPR, Section 26 para. 2 BDSG [German Federal Data Protection Act], otherwise Section 6 para. 1 s. 1 lit. b GDPR, Section 26 BDSG.

Business relationship

We need personal data for the conclusion as well as for the execution of a contract for the services offered by us or by you.

As part of the initiation or implementation of the contract, you must provide the personal data that are required for the establishment, implementation and termination of the contractual relationship and the fulfilment of the contractual obligations involved. We process your data in order to fulfil the contract concluded with you and to comply with existing legal requirements, e.g. of commercial or tax law nature. This can include the transfer of data to subcontractors, payment service providers or authorities.

Due to commercial and tax law requirements, we are obliged to save the contract data for ten years. However, after two years we will restrict processing, i.e. your data will only be used for compliance with statutory obligations.

The legal basis is Section 6 para. 1 s. 1 lit. b GDPR.

Credit assessment

We reserve the right to obtain a credit report from a credit agency in individual cases, prior to contract conclusion, in the event of a significant advance payment obligation on our part, to protect against payment defaults.

The data obtained from the credit agency will be deleted after the decision concerning the conclusion of the respective contract has been taken.

The legal basis is Section 6 para. 1 s. 1 lit. f GDPR.

Advertising for existing customers

If you become a customer of ours, we can use the email address received in this context to send you advertising for similar goods or services.

You may object to this advertising at any time, in particular by informing us thereof using the contact options provided in the imprint. If we do not send you any advertising for a period of two years, we will also block your e-mail address for sending you advertising. The storage of your e-mail address is subject to the provisions of commercial and tax law in connection with your purchase of our products or services.

The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG.

Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.

After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

For more details, please see Sendinblue's privacy policy at: https://de.sendinblue.com/datenschutz-uebersicht/.

Sendinblue

This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Sendinblue is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data you enter for the purpose of receiving the newsletter is stored on Sendinblue's servers in Germany.

Data analysis by Sendinblue

With the help of Sendinblue, it is possible for us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way, we can determine, among other things, which links were clicked on particularly often.

In addition, we can recognize whether certain predefined actions were performed after opening/clicking (conversion rate). For example, we can see whether you have made a purchase after clicking on the newsletter.

Sendinblue also allows us to subdivide ("cluster") newsletter recipients based on various categories. In doing so, the newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups.

If you do not want Sendinblue to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

For detailed information on Sendinblue features, please refer to the following link: https://de.sendinblue.com/newsletter-software/.

Legal basis

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Order processing

We have concluded a contract on order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Third party services

We use third-party services to optimise our website and our offers.

When you visit a page that contains such a service, your browser establishes a direct connection with the third-party servers. The third-party provider therefore receives the information that you or your IP address has accessed the respective page on our website.

If you are logged in with the provider of the service, the third party provider can assign your visit to our website to your account. If you interact with the services, for example by pressing a button, this will be transmitted directly from your browser to the third party provider. If you do not want a thirdparty provider, with which you have an account, to collect data about you via our website, you must log out of the respective account before visiting our website.

Cookies or similar procedures are sometimes used.

Cookies are small text files that are sent from our web server to your browser, when you visit our website, and are stored by your browser on your computer for later retrieval. The cookies facilitate the recognition of your web browser.

With regard to the purpose and extent of the collection and use of your data by the third party provider, as well as your rights and setting options for the protection of your privacy, please refer to the respective provider’s privacy policy.

You have the following or specified methods to deactivate the services we use. You can also use the settings in your browser to determine whether cookies can be set and retrieved. For example, you can completely deactivate the storage of cookies in your browser or activate an express approval for any website.

Embedded content:

We embed content from third-party providers on our website in order to make our website more attractive for you through additional content.

In particular, we embed content from the following providers:

• Elementor — https://www.elementor.com
• Complianz

We have embedded the content in such a way that initially no data is passed on to the providers of the third-party content. Only if you click on the third-party content and thereby activate it, the thirdparty provider will receive the information that you have accessed our website.

Analysis services:

We use analysis services on our website to record the user behaviour of visitors to our website, to evaluate it statistically and to use the knowledge so obtained to improve our website and make it more interesting for you as a user.

In particular, we use the following analysis tools:

• Matomo Analytics — https://matomo.org

Advertising services:

We use advertising services on our website to show you suitable advertising based on your potential interests and to measure the effectiveness of our advertising. Your usage behaviour when you visit our or other websites is evaluated thereby and/or advertising is specifically tailored to your needs based on other data available from the advertising service.

In this context, we do not collect or process any data ourselves. We only receive statistical evaluations from the advertising service. On the basis of these evaluations, we can recognise which of the advertising measures used are particularly effective and make optimisations.

In particular, we use the following advertising services:

• None

If we ask for your consent to use such services, the legal basis is Section 6 para. 1 s. 1 lit. a GDPR. Otherwise, the legal basis is Section 6 para. 1 s. 1 lit. f GDPR.

Service provider

Insofar as we use service providers that work for us in the context of so-called order processing according to Section 28 GDPR, we have concluded a corresponding contract with them.

Insofar as we use service providers in so-called third countries outside the European Union or the European Economic Area, we only have your data processed in third countries with a data protection level checked by the EU Commission, on the basis of special guarantees, such as, for example, contractual obligations in line with so-called standard protection clauses of the EU Commission.

We will be happy to provide you with further information on request.

Appearances in social networks

We appear in social networks in order to communicate with our customers, interested parties and users and to inform them about our services. As a rule, cookies are stored on the users’ computers. Cookies are small text files that are stored on the hard disk and assigned to the browser used and through which certain information is directed to the body that sets the cookie (in this case the social network).

The cookies enable the compilation of statistics on the use of a website’s appearance in social networks. For this reason, we have concluded an agreement on joint processing of personal data, if necessary. Furthermore, the user data is also regularly used for advertising purposes by creating usage profiles (in particular of the registered users) about usage behaviour and to place appropriate advertisements.

The legal basis is Section 6 para. 1 s. 1 lit. f GDPR. Our legitimate interest is the comprehensive and optimised information of users. Please note that only the respective social network has access to the entire data and that your right to information should be effectively asserted directly against the social network. Of course, you can also assert your rights against us.

Your rights

You have the following rights against us with regard to your personal data:

• right to information
• right to correction or deletion
• right to restriction of processing
• right to object to processing
• right to data portability
• right to complain to a data protection supervisory authority

If you have given us your consent to process your data, you may revoke it at any time with effect for the future.