DATA PROTECTION

1 Introduction and general provisions

We are delighted that you are interested in our company. Data protection is a particularly high priority for the management of Sunval Baby Food GmbH. It is possible to use Sunval Baby Food GmbH’s website without providing any personal data. If website visitors want to use special company services via our website, it may be necessary to process personal data. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain the data subject’s consent.

The processing of personal data, for example a data subject’s name, address, e-mail address or telephone number, always takes place in compliance with the General Data Protection Regulation, as well as any other relevant laws. Our company intends to use this privacy policy to provide the public with information regarding the type, scope and purpose of personal data collected, used and processed by us. Website users are also informed of their rights through this privacy policy.

As the controller responsible for processing, Sunval Baby Food GmbH has implemented numerous technical and organisational measures to guarantee the smoothest possible protection of personal data processed through this website. However, digital data transmissions may contain security gaps, meaning that absolute protection cannot be guaranteed. For this reason, each data subject may transmit personal data to us in alternative ways, for example by phone.

1.1 Name and address of the controller responsible for processing

The controller within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union, and other provisions that relate to data protection law is:

Sunval Baby Food GmbH
Havellandstr. 10
68309 Mannheim
Germany

Telephone: 0800/55 00 13 80
E-mail: info@sunvalbabyfood.com

1.2 Contact details for the data protection officer

The data protection officer responsible for the processing can be contacted at:

DMK Deutsches Milchkontor GmbH
Flughafenallee 17
28199 Bremen
Germany

Telephone: 0800/55 00 13 80
E-mail: datenschutz@dmk.de

Any website visitor and other interested parties can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

1.3 Sharing data

Your personal data is not shared with third parties for purposes other than those listed below.

We only share your personal data with third parties if

you have given your explicit consent to this under Article 6 (1) (a) of the GDPR, for example sharing with shipping providers by ordering goods to be sent by post, or consent on separate conditions of participation as part of competitions, if sharing is required under Article 6 (1) (f) of the GDPR and there is no reason to believe that you have an overriding legitimate interest in your data not being shared, where there is a legal obligation to share data under Article 6 (1) (c) of the GDPR, and this is legally permissible, and where this is required to perform a contract to which you are party under Article 6 (1) (b) of the GDPR.

2 Notes regarding data collection

2.1 Cookies

Sunval Baby Food GmbH’s website uses cookies. Cookies are text files that are placed on a computer system via a web browser and saved.

A number of websites and servers use cookies. Many cookies contain a ‘cookie ID’. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific web browser in which the cookie has been saved. This allows websites and servers that have been visited to distinguish the website visitor’s browser from other web browsers that contain other cookies. A specific web browser can be recognised and identified by the unique cookie ID.

The use of cookies allows Sunval Baby Food GmbH to provide users of this website with more user-friendly services that would not be possible without cookies.

Website users can prevent cookies from being saved by our website at any time by changing the settings for the web browser they use, thus permanently objecting to cookies being saved. Furthermore, cookies that have already been saved can be deleted at any time using a web browser or other software programs. This is possible in all commonly used web browsers. If the website visitor disables cookies from being saved via the web browser used, they may be unable to fully use all of our website features. Cookies do not allow a server to read private data from your computer or data stored by another server. Cookies are not harmful to your computer and do not contain viruses. We base the use of cookies on Article 6 (1) (f) of the GDPR—processing takes place in order to improve the functionality of our website. They are therefore required in order to protect our legitimate interests.

2.2 Collecting general data and information

a) When visiting the website

When accessing our website, information is automatically sent to our website’s server by the browser used on your end device. This information is temporarily stored in a ‘log file’. The following information is collected without any action on your part and is stored until it is automatically deleted:

· Name of file accessed · Date and time of access · Amount of data transferred · Meldung, ob der Abruf erfolgreich war · Message confirming whether or not access was successful · Type of web browser used · Site previously visited · Name of your Internet provider · Your IP address The specified data is processed by us for the following purposes:

· to ensure that the website is able to establish a smooth connection; · to ensure comfortable use of our website; · to evaluate system security and stability; and · for other administrative purposes. The legal basis for data processing is Article 6 (1) (f) of the GDPR. Our legitimate interests are based on the above-mentioned purposes for collecting data. We never use the data collected to draw conclusions about you personally.

We also save cookies when you visit our website. You can find more information about this in Section 2.1 of this privacy policy.

b) When using our contact form

If you have any questions, you have the option of contacting us via the form on the website. If a website visitor contacts us, the personal data that they voluntarily transmit to us is automatically saved for the purpose of processing or getting in touch. Data processing for the purposes of you contacting us takes place on the basis of Article 6 (1) (a) of the GDPR, if your voluntary consent has been given.

3 Data subject rights

You have the following data subject rights:

a) Right of access

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed.

b) Rectification/erasure/restriction of processing

You also have the right to obtain from us

the immediate rectification of inaccurate personal data concerning you (right to rectification);
the immediate erasure of inaccurate personal data concerning you (right to erasure); and
restriction of the processing of your personal data (right to restriction of processing).

c) Right to data portability

You have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller.

d) Right of withdrawal

You have the right to withdraw your consent at any time. By withdrawing your consent, the lawfulness of processing previously carried out on the basis of consent will not be affected by this.

e) Right to object

If the processing of personal data concerning you is required to carry out a task in the public interest (Article 6 [1] [e] of the GDPR) or to protect our legitimate interest (Article 6 [1] [f] of the GDPR), you have a right to object.

f) Right to lodge a complaint

Without prejudice to any other legal remedy, if you are of the opinion that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority; you can find information about your competent supervisory authority at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm