DEFINITION OF TERMS
"Administration of the website of the online store (hereinafter referred to as the Administration of the site)" - employees authorized to manage the site, acting on behalf of the coffeeindustry.com, who organize and process personal data, and also determine the purposes of processing personal data, the composition of personal data to be processed , actions or operations performed with personal data.
"Personal data" - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data).
"Processing of personal data" - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.1.4. "Confidentiality of personal data" is a mandatory requirement for the Administrator or other person who has gained access to personal data to prevent their dissemination without the consent of the subject of personal data or other legal grounds.
1.1.5. "User of the coffeeindustry.com" - a person who has access to the Site via the Internet and uses the Online Store Site.
1.1.6. "Cookies" are a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open the page of the corresponding site.
1.1.7. "IP-address" is a unique network address of a node in a computer network built using the IP protocol.
2. GENERAL PROVISIONS
2.4. The site administration does not verify the accuracy of the personal data provided by the User of the site of the online store.
3.2.1. Full name of the User;
3.2.2. User's contact phone number;
3.2.3. e-mail address (e-mail);
3.2.4. delivery address of the Goods;
3.2.5. place of residence of the User.
3.3. The online store protects Data that is automatically transmitted when viewing ad units and when visiting pages on which a statistical system script ("pixel") is installed:
information from cookies;
information about the browser (or other program that provides access to the display of advertising);
the address of the page on which the ad unit is located;
referrer (address of the previous page).
3.3.1. Disabling cookies may result in the inability to access parts of the website of the online store that require authorization.
3.3.2. The online store collects statistics on the IP addresses of its visitors. This information is used to identify and solve technical problems, to control the legality of financial payments.
3.4. Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and non-proliferation, except as provided in clauses.
4. PURPOSES OF COLLECTING PERSONAL USER INFORMATION
4.1. The User's personal data may be used by the Administration of the website of the online store for the following purposes:
We, coffeeindustry.com, collect and process personal data and company data to fulfil a number of purposes.
The categories of personal data processed primarily include your contact details (company name, address, first name and surname of a contact partner, (mobile) phone number, email address of the responsible contact partner) and, depending on the purpose of the processing, your bank details and potentially VAT identification number as well.
We process your data taking into consideration the provisions of the EU General Data Protection Regulation (GDPR), any local data protection laws that apply and all other relevant legislation.
a) Conducting contractual relationships
Coffeeindustry.com concludes a range of contracts (e.g. contracts with suppliers, systems partners and service providers, processing repairs, etc.) in order to serve their commercial purposes. The collection and processing of data is used for the establishment, fulfilment and termination of the contractual relationship. The primary legal basis for this is Article 6(1b) GDPR. Where necessary, we also process your data on the basis of Article 6(1f) GDPR, in order to protect our legitimate interests or those of third parties (such as the authorities). This applies in particular to the investigation of criminal offences, or within the group for the purposes of group management, internal communication and other administrative purposes. In addition, the processing of personal data can be based on your consent.
b) Provision of our various online services
We collect personal data and company data for the purposes of registration and in order to fulfil this service commitment. We obtain this data from you directly but also from third parties (i.e. retailers) in individual cases. You will be informed if the latter is the case. The primary legal bases for this are Article 6(1a) and Article 6(1b) GDPR.
Within our company, only those individuals and offices (e.g. specialist departments) who require your personal data for the fulfilment of our contractual and legal obligations actually receive said data. Your data is transferred to certain companies within our corporate group when these companies centrally administer data processing tasks for their affiliated companies within the group.
In addition, we sometimes employ different service providers in order to fulfil our contractual and legal obligations (such as sending products or mailings). You can obtain a list of the contractors and service providers we use ‒ including those with whom we have short-term and long-term business relationships ‒ on request from the respective controller.
We may also transfer your personal data to additional recipients outside the company where this is necessary to fulfil our contractual and legal obligations as an employer. Examples include:
- Public authorities (e.g. financial authorities, courts)
- Banks (SEPA payment transfer media)
- Insolvency administrators in the event of private bankruptcy.
What privacy rights can you exercise as a data subject?
You can obtain information on the data stored about you personally from the respective controller. Furthermore, you can have your data rectified or erased if certain criteria are met. You may also have the right to restrict the processing of your personal data, as well as the right to obtain the data you have provided in a structured, commonly used and machine-readable format.
Right to object
You have the right to object to the processing of your personal data for direct marketing purposes, without giving any reason.
Where we process your data for the purpose of safeguarding legitimate interests, you can object to the processing on grounds relating to your particular situation. We will then stop processing your personal data, unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or where the processing is used for the establishment, exercise or defence of legal claims.
Where can you complain?
You can lodge a complaint with the aforementioned Data Protection Officer or the competent supervisory data protection authority.