Privacy Policy

1.General

With the following information we would like to give you an overview of the processing of your personal data by us and of your data protection rights. In principle, it is possible to use our Internet pages without entering personal data. However, if you wish to use special services via our website or other options, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

As the party responsible, we always try to ensure the most complete protection of personal data processed via this website by means of up-to-date technical and organizational measures, just as we attach great importance to security and data protection friendliness in our other processing activities. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection against unauthorized access by third parties, for example, cannot be guaranteed. For this reason, you are free to contact us by telephone or mail, for example, and to transmit personal data to us in this way as well.

2. Responsible party

Prolupin GmbH
Tribseeser Chaussee 1
18507 Grimmen
Fax: +49 (0) 38326 5383 11
E-Mail: info@prolupin.de
Web: www.madewithluve.de

For further information please refer to our imprint.

3. Data protection officer

If you have any questions about data processing or data protection at Prolupin GmbH, you can contact our data protection officer at any time.

You can reach him by mail to the above address (please note ‘Attn. Data Protection Officer’ on the envelope), by e-mail at dsb@prolupin.de or confidentially via our data protection portal.

4. Transmission of data to third parties

A transfer of your personal data to third parties for purposes other than those listed below does not take place when you visit our website. We only pass on your personal data to third parties if:

you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR,
the disclosure is permissible for the protection of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) c GDPR, as well as
this is legally permissible and necessary according to Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you.

In order to protect your data and to allow us to transfer data to third countries (outside the EU/EEA) if necessary, we have concluded commissioned processing agreements based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) a) GDPR may serve as the legal basis for the transfer to third countries. This sometimes does not apply in the case of a data transfer to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.

5. Technology

a) SL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line. We use this technology to protect your transmitted data.

b) Data collection when visiting the website

During the merely informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server (in so-called “server log files”). Our website collects a series of general data and information with each call of a page by you or an automated system. This general data and information is stored in the server log files. The following can be recorded:

the browser types and versions used
the operating system used by the accessing system
the website from which an accessing system arrives at our website (so-called referrer)
the sub-websites that are accessed via an accessing system on our website
the date and time of an access to the Internet site
an abbreviated Internet protocol address (anonymized IP address)
the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your person. This information is rather required in order

to deliver the contents of our website correctly
to optimize the content of our website and the advertising for it
to ensure the long-term functionality of our IT systems and the technology of our website
to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

Therefore, the data and information collected is, on the one hand, evaluated statistically and, on the other hand, with the aim of increasing the data protection and data security of our enterprise so as to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

6. Contents and contact options

Here we provide information about LUVE, our products, lupines and our young company and inform about recipes and sources of supply – all MADE WITH LUVE. Our website and other offered services also offer various ways to contact us.

a) Contact via contact form

If you want to contact us, you can use our contact form. In particular, the data and information that you yourself provide in the form will be processed. These are visible in the contact form and are stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

For reasons of data minimization, only a valid e-mail address, your first and last name and your request/message are required fields (*) so that we can safely assign the request and limit misuse. You are welcome to provide your telephone number for queries voluntarily, but this is not required.

The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at the conclusion or execution of a contract with us, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and the deletion does not conflict with any statutory retention obligations.

b) Contact by e-mail

If you contact us via an e-mail address provided by us, the personal data you provide will be processed exclusively for correspondence with you, for the purpose of processing your respective inquiry, as well as for the possible initiation or execution of a contract with you pursuant to Art. 6 (1) p. 1 lit. b GDPR. The personal data collected will be automatically deleted after completion of your request; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal storage obligations to the contrary.

c) Contact for application purposes

We currently refer to our company website at Prolupin via an external link. There you will find more information about our job offers and data processing during application procedures. If you apply to us, we process personal data about you for the purpose of your application for employment, insofar as this is necessary for the decision on the establishment of an employment relationship with us.

7. Our activities in social networks

a) Links to media appearances

On our website, no plugins or other interfaces of social media are integrated, also no analytics of the services. We only link to our appearances on the services of YouTube, Facebook and Instagram, which are marked with an icon. After clicking on the links, you will be redirected to the page of the respective provider, i.e. only then will user information be transferred to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers.

b) Presence on social networks

We use YouTube, Facebook and Instagram as social networks to inform users about our products and information offers there as well, to discuss with interested parties and to publicize our start-up and LUVE recipes and news.

You can contact us directly via the respective platform at your own request and instigation. The aforementioned social media channels complement our web presence and offer a further, supplementary information and communication option.

As soon as you access the respective social media profile of LUVE in the corresponding network, the terms and conditions and data protection notices of the respective operators apply there. We ourselves only process visitor data on the social media presences if you contact and communicate with us, for example, through comments or direct messages.

The responsible parties of the respective platforms carry out the data processing for their own purposes in accordance with their own privacy policy, over which we have no influence. Furthermore, we do not know the full scope of the data processing, its purposes or storage periods. In certain cases, we process your data with the social network provider on the basis of joint responsibility within the meaning of Art. 26 GDPR.

A processing of your personal data is necessary for the purpose of the use of the social media platform by yourself.

In this context, we are not the original provider of these pages, but merely use them within the scope of the possibilities offered to us by the respective providers. As a precaution, we therefore point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore be associated with data protection risks for you, as safeguarding your rights, e.g. to information, deletion, objection, etc., could be more difficult and processing in the social networks often takes place directly for advertising purposes or for the analysis of user behavior by the providers, without this being able to be influenced by us. If usage profiles are created by the provider, cookies are often used or the usage behavior is assigned to your own member profile of the social networks.

The described processing operations of personal data are carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a timely manner or to inform you about our services.

If you have to give your consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 (1) lit. a GDPR in conjunction with. Art. 7 GDPR.

As we do not have access to the providers’ databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider despite a possible joint responsibility with the social media portal operators.

Further information on the processing of your data in the social networks and the possibility to make use of your right of objection or revocation (so-called opt-out), we have listed below at the respective provider of social networks used by us:

a) YouTube

(Joint) controller for data processing in Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

b) Facebook

(Joint) controller for data processing in Europe: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Opt-out and advertising settings: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

c) Instagram

(Co-)responsible for data processing in Germany:

Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

8. Google Maps for the Storefinder

In order to be able to find our dealers and sales partners in your area, we use a so-called Storefinder to show you these partners in a map area.

For this purpose, we use the map service of Google Maps via an interface.

The operating company of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Maps is a web service for displaying interactive maps to visually display geographical information.

By using this service, you can be shown the location of a dealer in your vicinity and a possible journey can be made easier.

Since information about your use of our website (such as your IP address) is usually already transmitted to Google servers in the USA and stored there when you call up those sub-pages in which the map from Google Maps is integrated, we have previously integrated a page with a static image of a blurred map for reasons of data economy and ask for your express consent before transmitting any data:

On the placeholder image of the map, there is a notice for a so-called opt-in – only with your explicit consent to the activation by your click on “Accept”, the link to the Storefinder via Google Maps is released and personal data is transferred.

As a result, information is transmitted to Google and stored there: After your consent, the browser you use establishes a connection to Google’s servers. Through this, Google obtains knowledge that our website was called up via your IP address. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

No Google cookies are set both before and after the opt-in. No Google web fonts are also reloaded via Google Maps.

If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely disabling the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 para. 1 lit. a GDPR.

Further information for Google Maps: https://www.google.com/intl/de_US/help/terms_maps.html

9. Web analysis with Matomo

We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, for web analysis on this website.

Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data on which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used for optimizing a website and for cost-benefit analysis of internet advertising.

The software is operated on our server and the log files, which are sensitive under data protection law, are stored exclusively on this server.

The purpose of the Matomo component is to analyze the flow of visitors to our website. We use the information to track the behavior on our site, to evaluate the use of our subpages and to make possible improvements as a result.

We are not interested in the identities of our visitors or other data. We have therefore set Matomo in a way that it does not use cookies. We also do not use the so-called “device fingerprinting”.

Each time you call up one of the individual pages of this website, your Internet browser on your device is automatically prompted via the Matomo component to transmit data to our server for the purpose of online analysis.

Through your browser, personal information such as the access time, the location from which the access took place, including the IP address of the Internet access you are using, is transmitted to our server. We store this personal data anonymously on our own server. We do not pass on this personal data to third parties. No data is transferred to third countries.

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize our website and its design.

You have the option to object to and exclude a collection of data relating to the use of this website created by Matomo and the processing of this data by Matomo. To do this, you must set the “Do not track” option in the browser. We have set up Matomo on our end to honor this setting. If you do not want this for any reason, please uncheck the following checkbox. This will set a Matomo opt-out cookie that remembers your setting. If you delete all your cookies, this one will also be deleted.

Further information and the applicable privacy policy of Matomo can be found at https://matomo.org/privacy-policy.

10. Your rights as a data subject

Your rights as a data subject

Right to confirmation – You have the right to request confirmation from us as to whether personal data relating to you is being processed.

Right to information Art. 15 GDPR – You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

Right to rectification Art. 16 GDPR – You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

Erasure Art. 17 GDPR – You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the reasons provided by law applies and to the extent that the processing or storage is not necessary.

Restriction of processing Art. 18 GDPR – You have the right to demand that we restrict processing if one of the legal requirements applies.

Data portability Art. 20 GDPR – You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

Objection Art. 21 GDPR – You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests) GDPR. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or insofar as the processing serves the assertion, exercise or defense of legal claims.

In individual cases, we process personal data to conduct direct marketing. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is related to such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.

Withdrawal of consent under data protection law – You have the right to withdraw consent to the processing of personal data at any time with effect for the future.

Complaint to a supervisory authority – You have the right to lodge a complaint about our processing of personal data with a supervisory authority responsible for data protection. You can find a compilation of the contact details of the data protection officers in the federal states and the supervisory authorities for the non-public sector as well as in other countries on the pages of the Federal Commissioner for Data Protection and Freedom of Information, BfDI under Addresses and Links.

11. Automated decision making including profiling

We do not use profiling within the meaning of Art. 22 GDPR in the context of the use of our websites.

12. Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject.

If the purpose of storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

13. Duration of the storage of personal data

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of the contract.

14. Further data protection questions

If you have further questions, comments or other requests regarding your personal data that are not answered here, simply contact us at: dsb@prolupin.de.