1 Introduction and general provisions
We are delighted that you are interested in our company. Data protection is a particularly high priority for the management of Sunval Baby Food GmbH. It is possible to use Sunval Baby Food GmbH’s website without providing any personal data. If website visitors want to use special company services via our website, it may be necessary to process personal data. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain the data subject’s consent.
As the controller responsible for processing, Sunval Baby Food GmbH has implemented numerous technical and organisational measures to guarantee the smoothest possible protection of personal data processed through this website. However, digital data transmissions may contain security gaps, meaning that absolute protection cannot be guaranteed. For this reason, each data subject may transmit personal data to us in alternative ways, for example by phone.
1.1 Name and address of the controller responsible for processing
The controller within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union, and other provisions that relate to data protection law is:
Sunval Baby Food GmbH
Telephone: 0800/55 00 13 80
1.2 Contact details for the data protection officer
The data protection officer responsible for the processing can be contacted at:
DMK Deutsches Milchkontor GmbH
Telephone: 0800/55 00 13 80
Any website visitor and other interested parties can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
1.3 Sharing data
Your personal data is not shared with third parties for purposes other than those listed below.
We only share your personal data with third parties if
you have given your explicit consent to this under Article 6 (1) (a) of the GDPR, for example sharing with shipping providers by ordering goods to be sent by post, or consent on separate conditions of participation as part of competitions, if sharing is required under Article 6 (1) (f) of the GDPR and there is no reason to believe that you have an overriding legitimate interest in your data not being shared, where there is a legal obligation to share data under Article 6 (1) (c) of the GDPR, and this is legally permissible, and where this is required to perform a contract to which you are party under Article 6 (1) (b) of the GDPR.
2 Notes regarding data collection
2.2 Collecting general data and information
a) When visiting the website
When accessing our website, information is automatically sent to our website’s server by the browser used on your end device. This information is temporarily stored in a ‘log file’. The following information is collected without any action on your part and is stored until it is automatically deleted:
· Name of file accessed · Date and time of access · Amount of data transferred · Meldung, ob der Abruf erfolgreich war · Message confirming whether or not access was successful · Type of web browser used · Site previously visited · Name of your Internet provider · Your IP address The specified data is processed by us for the following purposes:
· to ensure that the website is able to establish a smooth connection; · to ensure comfortable use of our website; · to evaluate system security and stability; and · for other administrative purposes. The legal basis for data processing is Article 6 (1) (f) of the GDPR. Our legitimate interests are based on the above-mentioned purposes for collecting data. We never use the data collected to draw conclusions about you personally.
b) When using our contact form
If you have any questions, you have the option of contacting us via the form on the website. If a website visitor contacts us, the personal data that they voluntarily transmit to us is automatically saved for the purpose of processing or getting in touch. Data processing for the purposes of you contacting us takes place on the basis of Article 6 (1) (a) of the GDPR, if your voluntary consent has been given.
3 Data subject rights
You have the following data subject rights:
a) Right of access
You have the right to obtain confirmation from us as to whether personal data concerning you is being processed.
b) Rectification/erasure/restriction of processing
You also have the right to obtain from us
the immediate rectification of inaccurate personal data concerning you (right to rectification);
the immediate erasure of inaccurate personal data concerning you (right to erasure); and
restriction of the processing of your personal data (right to restriction of processing).
c) Right to data portability
You have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller.
d) Right of withdrawal
You have the right to withdraw your consent at any time. By withdrawing your consent, the lawfulness of processing previously carried out on the basis of consent will not be affected by this.
e) Right to object
If the processing of personal data concerning you is required to carry out a task in the public interest (Article 6  [e] of the GDPR) or to protect our legitimate interest (Article 6  [f] of the GDPR), you have a right to object.
f) Right to lodge a complaint
Without prejudice to any other legal remedy, if you are of the opinion that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority; you can find information about your competent supervisory authority at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm