Privacy policy
Data protection
Privacy statement
1) Information on the collection of personal data and contact data of the responsible entity
1.1 Thank you for visiting our web pages and for your interest in our products and services! In the following, we'd like to inform you about our procedure regarding your personal data accrued during use of our web pages. Personal data are defined as any and all data that allow to identify you personally in the following. Please note: The English translation exclusively serves informational purposes; solely the original German version is legally binding.
1.2 The entity responsible for processing data on this website in accordance with General Data Protection Regulation (GDPR) is NatureHolic GmbH, Fürstenwalderweg 7, 68309 Mannheim, Germany, phone: +49 612 4371 4786, email: info@garnelio.de. The entity responsible for processing personal data is a natural or legal person, who solely or together with others decides responsibly upon the purposes and means of processing personal data.
1.3 For safety reasons and for the protection of your personal data and other confidential content during data transfer (e.g. orders or enquiries with the person responsible), our website uses SSL or, respectively, TLS encryption. You can identify an encrypted connection by the character string "https://“ and the lock symbol in your browser line.
2) Data collection during your visit on our web pages
If you solely use our web pages to gather information, i. e. without personally registering or sending us personal data otherwise, we only collect the data your browser transmits to our server (so-called "server log files"). When you access our web pages, we collect only the data that are technically necessary for us to enable you to see our website:
· Our web page(s) visited by you
· Date and time of access
· Amount of transmitted data, in bytes
· Source/reference from which you were linked to our website
· The browser you use
· The operating system you use
· Your IP address (possibly anonymized)
Data are processed in accordance with section 6, subsection 1 f) GDPR, based on our legitimate interest in improving the stability and function of our website. Your data will not be transferred to a third party or used otherwise. However, we reserve the right to access the server log files subsequently should concrete indications arise that our services were used in an unlawful way.
3) Cookies
In order to make your visit on our web site attractive and to enable you to use certain functions, we use so-called cookies on some of our pages. Cookies are small text files that are stored on the hard drive of the computer you are using to access our web pages. Some of the cookies we use are deleted after you end your browser session, i. e. close your browser window (so-called session cookies). Others are stored on your terminal device and enable the website to recognize your browser when you visit us the next time (so-called persistent cookies). Cookies placed on your hard drive collect and process certain user-relevant data at an individual scale, like browser or location data and IP address values. Persistent cookies are deleted automatically after a pre-set period of time. Its duration may depend on the sort of cookie. You can see the duration of a cookie being saved on your hard drive in your overview of the cookie settings of your web browser.
Some cookies make the order process easier and more comfortable as they save some of your settings (e.g. remembering the content of your virtual chart for a visit you pay our website later on). Insofar as individual cookies we use process personal data, they do so in accordance with section 6, subsection 1b) of the GDPR, either for carrying out the contract, in accordance with section 6, subsection 1a) of the GDPR in the case of your given approval or according to section 6, subsection 1f) of the GDPR for safeguarding our legitimate interests in the best possible functionality of our website as well as an efficient and customer-friendly experience during your visit to our pages.
Please note that you can set up your browser to inform you when cookies are placed so you can individually decide which ones you accept and which you don't, or if you exclude accepting cookies in general or in certain cases. Every browser manages cookie settings differently. You can find an exact explanation of how to change the cookie settings in the help menu of the browser(s) you use. Here are the menu links for the most commonly used browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that not accepting cookies can severely diminish the function of our web pages.
4) Contacting us
When you contact us (e. g. through our contact form or via email), personal data are collected. Which data are stored when you use our contact form can be seen in the contact form itself. These data are exclusively stored and used for the purpose of answering your request or for contacting you, including the technical administration necessary to do so. The legal basis for processing said data is our legitimate interest in answering your request according to section 6, subsection 1 f GDPR. If your contacting us aims for the conclusion of a contract, the additional legal basis for processing said data is found in section 6, subsection 1 b GDPR. Your data will be deleted once your request has been fully dealt with. This is the case when the circumstances allow the conclusion that the issue has been fully resolved, with the exception of legal retention periods that need to be observed.
5) Data processing when a customer account is created and for contact processing
According to section 6, subsection 1 b GDPR, personal data are also collected and processed when you disclose them to us for processing a contract or when you open a customer account. Which data are collected exactly can be seen on the respective input forms. Your customer account can be deleted at any time. If you wish to have it deleted, please send us a message to the address of the person responsible you can find above. We store and use the data you provide us with for processing your contract. As soon as contract procession is fully concluded, or if you delete your customer account, access to all relevant data will be blocked with regard to fiscal and commercial legal retention periods. When these periods have expired, your data will be fully deleted, given that you haven't explicitly allowed us to make further use of them or that any legal use of said data was reserved by us beforehand.
6) Comments function
Within the framework of the comments function on this website, besides your commentary, the time and date when the comment was written and the commenting user name you have given yourself will be stored and published on the website. Your IP address will be logged and stored. This is done for safety reasons and in case the person concerned infringes the rights of any third party with their comment or posts illegal content. We need your email address in order to contact you in case any third party considers your comment illegal and files a complaint. The legal basis for saving your data is laid by section 6, subsection 1 b and f GDPR. We reserve the right to delete comments about which any third parties complain as they consider them illegal.
7) Usage of customer data for direct advertisement
7.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will send you informative emails about our special offers on a regular basis. You only need to disclose your email address to subscribe. Entering any other data we can use to address you personally is facultative. For sending out our newsletter we use the so-called double opt-in method, which means we will only send you an email newsletter if you have explicitly expressed your consent with receiving said newsletter via email. After that, we will email you a confirmation message where we'll ask you to confirm your wish to receive our newsletter in the future by clicking on a link.
When activating the confirmation link you give us your consent to utilize your personal data, in accordance with section 6, subsection 1 a GDPR. When you subscribe to our newsletter, we store the IP address configured by your Internet service provider (ISP), as well as date and time of your subscription so we can retrace a possible misuse of your email address, should the need arise to do so later on. The data we collect within the framework of your subscription to our newsletter will only be used for addressing you in our advertising emails containing the newsletter. In each newsletter you will find a link to unsubscribe, or you can send a message to the person responsible that has been defined above to cancel your subscription. When you unsubscribe, your email address will immediately be deleted from our newsletter mailing list, if you haven't explicitly given us your consent to further use your data or if we haven't reserved the right to use your data beyond these purposes, given that such reservation is legal and we have provided you with the respective information in this declaration.
7.2 Email newsletter for existing customers
If you disclose your email address when buying goods or services to us, we reserve the right to send you offers regarding goods or services from our range of products that are comparable to the ones you purchased on a regular basis via email. According to section 7, subsection 3 UWG (German Fair Trade Practices Act), we do not need your explicit consent for that. Insofar, these data are only processed based on our legitimate interest in personalized direct advertisement according to section 6, subsection 1 f GDPR. If you initially objected to the use of your email address for this purpose, we will not send out these mails to you. You have the right to contradict the usage of your email address for the aforementioned advertising purposes at any time with effect for the future. Please send this contradiction to the person responsible mentioned above. The only cost you will have to incur are transmission costs at a basic rate. As soon as we have received your contradiction, we will refrain from using your email for advertising purposes immediately.
8) Data processing for the ordering process
8.1 For processing your order, we work with the service provider(s) mentioned below, which support us fully or in part with the fulfillment of the purchasing contracts we conclude. These service providers receive certain personal data within the framework of this support and according to the following information.
The personal data we collect are transmitted to the carrier we assign delivery of your parcel to within the framework of fulfilling the contract concluded with you, insofar as these data are necessary to deliver the goods you've ordered. Your payment information is disclosed to the bank in charge of payment processing, insofar as these data are relevant to said payment processing. As far as the services of payment service providers are used, we will inform you explicitly hereafter. The legal basis of transmission of your personal data is section 6, subsection 1 b GDPR.
8.2 Employment of specialized service providers for processing orders
- Plentymarkets
Orders are processed through the service provider "plentymarkets" (plentysystems AG, Bürgermeister-Brunner-Str. 15, 34117 Kassel, Germany). Name, address and other necessary personal data are exclusively transmitted to plentymarkets for processing online orders, in accordance with section 6, subsection 1 b GDPR. Personal data are only transmitted insofar as they are absolutely necessary for processing your order. For details regarding the data protection policy of plentymarkets and the data protection declaration by plentymarkets GmbH, please go to the internet pages of plentymarkets under the name "plentymarkets.eu".
8.3 Transfer of personal data to carriers
- DHL
If the goods are transported by the carrier service DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will disclose your email address to them, in accordance with section 6, subsection 1 a GDPR before the goods are handed over so DHL can announce the delivery to you, or agree upon a delivery time with you, respectively, if you have given your explicit consent for us to do so during the order process. Apart from that, we only disclose the name of the recipient and the delivery address to DHL for the purpose of delivery, in accordance with section 6, subsection 1 b GDPR. These data are only transmitted insofar as they are necessary for successful delivery of the goods. In this case, you will not receive a delivery note by DHL and cannot agree upon a delivery time with them.
You can withdraw your consent with regard to the future at any time by informing the person responsible mentioned above or the carrier service DHL.
- GLS
If the goods are transported by the carrier service GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany), we will disclose your email address to them, in accordance with section 6, subsection 1 a GDPR before the goods are handed over so DHL can announce the delivery to you, or agree upon a delivery time with you, respectively, if you have given your explicit consent for us to do so during the order process. Apart from that, we only disclose the name of the recipient and the delivery address to DHL for the purpose of delivery, in accordance with section 6, subsection 1 b GDPR. These data are only transmitted insofar as they are necessary for successful delivery of the goods. In this case, you will not receive a delivery note by DHL and cannot agree upon a delivery time with them.
You can withdraw your consent with regard to the future at any time by informing the person responsible mentioned above or the carrier service GLS.
8.4 Payment service providers (payment providers)
- PayPal
If you choose payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "payment by installments“ via PayPal, we will disclose your payment data necessary within the framework of the payment process to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (called "PayPal" in the following). Data are transferred in accordance with section 6, subsection 1 b GDPR and only insofar as they are necessary for processing your payment.
PayPal reserves the right to a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered - "purchase on account" or "payment by installments“ via PayPal. For this purpose, your payment data are transferred to credit agencies based on the legitimate interest of PayPal in your solvency, in accordance with section 6, subsection 1 f GDPR. PayPal will use the result of the credit check in relation to the statistical probability of default on payment as a basis for the decision which payment method they offer you. The credit check may contain probabilities (so-called scores). Insofar as scores are used as a part of the credit check, they are based on a scientifically renowned mathematical-statistical method. Scores are calculated, amongst others, but not exclusively, on the basis of address data. For more information on data protection, amongst others, on the credit agencies involved, please turn to PayPal's data protection statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
If you want to withdraw your consent to the usage of said personal data, you can do so at any time via messaging PayPal. However, PayPal may still have the right to process some of your personal data, insofar as they are necessary for processing your payment in fulfillment of the contract.
- SOFORT
If you choose the payment method "SOFORT“, your payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (called "SOFORT“ in the following), to whom we will transfer those of your personal data relevant within the framework of the ordering process, together with information on your purchase order, in accordance with section 6, subsection 1 b GDPR. Sofort GmbH forms part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your personal data will only be transferred to SOFORT within the framework of processing your payment and only insofar as they are necessary for said payment process. For more information on the data protection policy of SOFORT, please follow the link: https://www.klarna.com/sofort/datenschutz
9) Contacting you to remind you to rate us
We remind you to review our goods and performances on our own and do not make use of a commercial customer reviewing system.
We will use your email address to remind you once to please review your purchase order, using our customer review center on our website, but only if you have given us your explicit consent to do so during or after your order process, in accordance with section 6, subsection 1 a GDPR.
You can withdraw said consent at any time by sending a message to the person responsible for data processing.
10) Social media use: videos
Use of Youtube-Videos
This website uses the embedding function offered by YouTube for showing and playing videos published on the platform of the service provider "Youtube“ belonging to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google“).
For doing so, we use the extended data protection mode, during which user information is only stored once the video(s) are started, according to the service provider. If you start an embedded video, the service provider "Youtube“ will use cookies in order to collect information on user behavior. According to information provided by "Youtube“, these cookies will, amongst other things, record video statistics, improve user-friendliness and prevent misuse. If you are logged onto Google, your data will directly be connected to your account if you click on a video. If you do not want this information to be allocated to your YouTube profile, please make sure to log off Google before you activate the "Play" button. Google stores your data (even for users that are not logged on) as user profiles and analyses them. Such analyses are especially made in accordance with section 6, subsection 1 f GDPR, based on Google's legitimate interest in displaying personalized advertisements, market research and/or enhancing the needs-based design of their web pages. You have the right to object against the creation of these user profiles. Please turn to YouTube to do so. Within the framework of using Youtube, personal data may be transferred to the servers of Google LLC. in the USA.
Independently from a replay of the embedded videos, contact to the Google network is established every time this website is called up, which may trigger data processing we have no influence on.
For further information on data protection by "Youtube“, please turn to the Youtube terms of use at https://www.youtube.com/static?template=terms and the data protection declaration by Google at https://www.google.de/intl/de/policies/privacy
As far as legally required, we have obtained your consent in accordance with section 6, subsection 1 a GDPR, to the way your data are processed, which has been described above. You can withdraw said consent at any time with effect for the future. In order to execute your right to withdrawal, deactivate this service in the "cookie consent tool" provided on our web pages.
11) Rights of the person concerned
11.1 Currently valid data protection laws grant you the rights of the person concerned explained in the following (rights of access and intervention) toward the person responsible for processing your personal data, whereby the respective legal basis is listed for every prerequisite to exercise:
· right of access in accordance with section 15 GDPR;
· right of correction in accordance with section 16 GDPR;
· right of deletion in accordance with section 17 GDPR;
· right of limitation of data processing in accordance with section 18 GDPR;
· right of information in accordance with section 19 GDPR;
· right of data portability in accordance with section 20 GDPR;
· right of withdrawal of given consent in accordance with section 7, subsection 3 GDPR;
· right of complaint in accordance with section 77 GDPR.
11.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, THIS HAPPENS WITHIN THE FRAMEWORK OF A BALANCE OF DIFFERENT INTERESTS. YOU HAVE THE RIGHT TO OBJECT TO THIS WITH REGARD TO THE FUTURE AT ANY GIVEN TIME ON REASONS THAT RESULT FROM YOUR SPECIAL SITUATION.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE IMMEDIATELY END PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO MAKE FURTHER USE OF THEM IF WE CAN PROVE WE HAVE COMPELLING REASONS WORTHY OF PROTECTION TO DO SO AND WHICH OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS, OR IF SAID PROCESSING SERVES THE ENFORCEMENT, EXERCISE OR DEFENSE OF LEGAL RIGHTS.
IF WE PROCESS YOUR PERSONAL DATA TO ADVERTISE DIRECTLY, YOU HAVE THE RIGHT TO OBJECT TO THE USE OF SAID PERSONAL DATA FOR ADVERTISING PURPOSES IN THIS RESPECT AT ANY GIVEN TIME. PLEASE FILE YOUR OBJECTION AS DESCRIBED FURTHER ABOVE.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE CEASE PROCESSING SAID DATA FOR DIRECT ADVERTISING PURPOSES.
12) Duration of storage of personal data
Personal data are stored for certain periods of time that are defined by legislation, the purpose of processing said data and – if pertinent – in addition by the currently valid legal retention periods (e. g. retention periods prescribed by commercial and tax laws).
If personal data are processed based on the user's express consent in accordance with section 6, subsection 1 a GDPR, these data are stored as long as the person concerned withdraws their consent.
If there are legal retention periods for data processed within the framework of legal obligations or obligations similar to legal transactions on the basis of section 6, subsection 1 b GDPR, these data are routinely deleted after the retention periods run out, given that they are no longer needed to execute or initiate the contract and/or we do not have any legitimate interest to further storage of said data.
When personal data are processed on the basis laid by section 6, subsection 1 f GDPR, said data are stored as long as the person concerned exercises their right of objection according to section 21, subsection 1 GDPR, unless we can prove compelling reasons worthy of protection for processing said data, which outweigh the interests, rights and freedoms of the person concerned, or if processing said data serves to enforce, exercise or defend legal claims.
If personal data are processed for the purpose of direct advertising on the basis of section 6, subsection 1 f GDPR, said data are stored as long as the person concerned does not exercise their right to object in accordance with section 21, subsection 2 GDPR.
Insofar as the additional information given in this declaration about specific processing situations does not specify otherwise, personal data stored by us are deleted if they are no longer necessary to fulfill the purposes for whose execution they were collected or processed otherwise.
DOCID: ##ITK-51f2136947f8626c8b32a9c1ef0d8b5d##
Version: 202111021834
