Data protection
You can generally use our website without providing personal data. However, in individual cases, the collection and processing of your personal data may be necessary to use certain functions of our website. In addition, we collect and process personal data to optimise our website and services, which we process in accordance with data protection regulations.
We take the protection of your personal data very seriously and therefore wish to inform you below about your rights and the nature and extent of data collection.
1. Person responsible and contact person for data protection inquiries
The data controller within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
Koch Tiefkühlkost International GmbH & CO. KG.
Kurfürstendamm 177, 10707 Berlin
Mr Andreas Spieß
Telephone: 0304962082
E-Mail: info@koch-berlin.com
2. Definitions
Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the „data subject“). A natural person is considered identifiable who can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.
Affected person
A data subject is one whose personal data is processed by the controller.
Processing
Processing is any operation or set of operations performed using automated procedures or otherwise on personal data, such as collecting, recording, organising, structuring, storing, adapting or altering, retrieving, querying, using, disclosing by transmission, dissemination or otherwise making available, matching or linking, restricting, deleting or destroying.
Profiling
Profiling is any form of automated processing of personal data that consists of using that personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Responsible person
The controller is the person who decides on the purposes and means of processing personal data and carries them out accordingly.
Data processor
The processor is another natural or legal person, authority, institution or other body that processes personal data on behalf of the controller.
Recipient
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed.
Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Data protection breach
A personal data breach is a breach of security that leads to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of, or unauthorised access to, personal data that are transmitted, stored or otherwise processed.
Biometric data
Biometric data are personal data concerning the physical, physiological or behavioural characteristics of a natural person, obtained by special technical means, which make it possible to uniquely identify or authenticate that natural person, such as facial images or fingerprint data.
Health data
Health data is personal data relating to the physical or mental health of a natural person, including the provision of health services, from which information about their health status can be deduced.
Regulatory authority
The supervisory authority is an independent public authority established by a Member State in accordance with Article 51 GDPR, which is responsible for monitoring compliance with data protection laws and regulations.
3. Information on the processing of personal data
We process your personal data using various technical means and, where applicable, with the involvement of external service providers. We wish to inform you about the specific details of this processing in the following points.
Visit our website
When you visit our website, i.e. if you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, § 15 German Telemedia Act (TMG)):
- IP address and service provider
- Date and time of the request
- Content of the requirement (specific page)
- Access Status/HTTP Status Code
- respective amount of data transferred
- Website from which the request originates
- Browser including language and software version
- Operating system and its user interface
(2) The data listed in Section 1 is also automatically stored in the log files of our server. The log data is kept separate from other data and can only be viewed by the host. The log data is stored for 7 days. The legal basis for the processing of your data when visiting our website is Article 6(1) sentence 1(f) of the GDPR and Section 15 of the German Telemedia Act (TMG).
Use of cookies
- In addition to the data mentioned above, cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, associated with the browser you use, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.
- This website uses the following types of cookies, the scope and functionality of which are explained below: Transient cookies
Persistent Cookies - Transient cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to a common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
- Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
- You can configure your browser settings as you wish and also refuse the acceptance of third-party cookies or all cookies. Please note, however, that you may then not be able to use all functions of this website. The legal basis for the use of cookies is Art. 6(1) sentence 1 lit. f GDPR.
Using the contact form
- When you contact us using the contact form on our website, the data you enter (your email address and, typically, your name, telephone number, and any other details you provide) will be stored by us at the time of sending in order to process your enquiry.
- Alternatively, you can also contact us via the email address provided on our website, which can be found in the legal notice.
- You can object to the processing of your personal data at any time by sending an email to info@koch-berlin.com object to or state your objection to the processing of your personal data to the person(s) listed in Section 1. If you contact us directly by email, you can object to the processing of your personal data at any time using the same methods.
- We shall delete the data processed in this context once it is no longer required, or restrict its processing if statutory retention periods apply. The legal basis is Article 6(1) sentence 1(f) of the GDPR.
- If your contact is aimed at concluding a contract, the legal basis for processing your personal data is Article 6(1)(b) of the GDPR.
Matomo (formerly Piwik)
- This website uses the web analytics service Matomo to analyse website usage and to improve it regularly. We can use the statistics obtained to improve our services and make them more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 (1) sentence 1 lit. f GDPR.
- For this analysis, cookies (see Section 2 above, „Use of Cookies“) will be stored on your computer. The information collected in this way is stored by the controller exclusively on his server in Germany. You can stop the analysis by deleting existing cookies and preventing cookies from being stored. If you prevent cookies from being stored, we would like to point out that you may not be able to use this website to its full extent. It is possible to prevent cookies from being stored by adjusting your browser settings. You can prevent the use of Matomo by unchecking the following box, thereby activating the opt-out plug-in:
You are currently viewing placeholder content from Standard. To access the actual content, click the button below. Please note that this will involve sharing data with third-party providers.
- This website uses Matomo with the „AnonymizeIP“ extension. This process truncates IP addresses, making it impossible to directly identify individuals. The IP address sent by your browser via Matomo will not be combined with any other data we collect.
- The Matomo programme is an open-source project. You can find third-party data protection information at https://matomo.org/docs/privacy/.
Google Analytics
- This website uses Google Analytics, a web analysis service provided by Google Inc. („Google“). Google Analytics uses so-called „cookies“, which are text files that are stored on your computer and allow an analysis of your use of the website (see section 3 above, „Use of cookies“). The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, your IP address will be abbreviated by Google within a member state of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator.
- The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.
- You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in such cases, you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de;
- This website uses Google Analytics with the extension „_anonymizeIp()“. This means IP addresses will be processed in a shortened form, excluding the possibility of personal identification. Therefore, any personal connection to the data collected about you will be immediately excluded, and the personal data will be promptly deleted.
- We use Google Analytics to analyse website usage and to improve it on a regular basis. The statistics we obtain allow us to enhance our offering and make it more interesting for you as a user. For exceptional cases where personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 lit. f GDPR.
- Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms: http://www.google.com/analytics/terms/de.html, Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
Integration of Google reCAPTCHA
- We use Google's reCAPTCHA service to protect the contact form on our website. This involves a query to determine whether the input in the contact form was made by a person or is abusive machine processing. The legal basis for using Google reCAPTCHA is Art. 6(1) sentence 1 lit. f GDPR.
- By visiting the website, the reCAPTCHA described above is loaded from a Google server. In addition, the data mentioned in Section 3, „Use of Cookies“ and „Visiting our Website,“ of this declaration will be transmitted. This happens regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to associate your data with your Google profile, you must log out of your Google account before visiting our website. Google stores your data as usage profiles and uses them for advertising, market research, and/or demand-driven design of its website. Such an evaluation is carried out in particular (even for unregistered users) to provide demand-driven advertising. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
- Provider information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Integration of Google Maps
- This website uses the Google Maps service. This allows us to display interactive maps directly on the website and enable you to conveniently use the map function. The legal basis for the use of Google Maps is Art. 6 (1) sentence 1 lit. f GDPR.
- By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in Section 3, „Use of Cookies“ and „Visit to our Website,“ of this declaration will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research, and/or the needs-based design of its website. Such an analysis is carried out in particular (even for logged-out users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
- Provider information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Integration of Google Web Fonts
- We use Google Web Fonts on this website to enhance the visual presentation. These are fonts that are retrieved from a Google server when you visit our website and are stored in your browser’s cache for the purpose of displaying our website. Further information can be found at https://fonts.google.com/about#. The legal basis for the use of Google Web Fonts is Article 6(1)(f) of the GDPR.
- By visiting the website, Google receives information that you have accessed it. In addition, the data mentioned in Section 3. „Use of Cookies“ and „Visiting our Website“ of this declaration will be transmitted. This applies regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google account before visiting our website. Google stores your data as usage profiles and uses it for advertising, market research, and/or to design its website according to needs. Such an evaluation is carried out, in particular, (even for non-logged-in users) to provide advertising tailored to needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.
- Provider information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Integrating Font Awesome
- This website uses so-called web fonts provided by Fonticons for uniform and improved display. These are fonts that are retrieved from an external server when our website is accessed and stored in your browser's cache for the display of our website. The legal basis for the use of Font Awesome web fonts is Art. 6 (1) sentence 1 lit. f GDPR.
- When a page is visited, your browser downloads the required web fonts to your computer to display text and fonts correctly. Additionally, the data mentioned in Section 3, „Use of Cookies“ and „Visiting our Website,“ of this declaration is transmitted. To this end, the browser you are using must establish a connection to Fonticons' servers. This will inform Fonticons that our website has been accessed via your IP address. If your browser does not support web fonts, a default font from your computer will be used.
- Provider Information: Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, United States. For more information on Font Awesome, please visit https://fontawesome.com/help.
Embedding YouTube videos
- We have embedded YouTube videos into our online offering, which are based on https://www.YouTube.com are stored and can be played directly from our website. These are all integrated in the „enhanced data protection mode“, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transfer. The legal basis for the integration of YouTube videos is Art. 6 para. 1 sentence 1 lit. f GDPR.
- By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in Section 3, „Use of Cookies“ and „Visit to our Website“, of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation takes place in particular (even for logged-out users) for the purpose of providing needs-based advertising. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
- Provider Information: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for data processing. You can find further information on the purpose and scope of data collection and its processing by YouTube in the privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
Embedding jQuery
- We have integrated jQuery on this website to make the page as appealing as possible for you. This is a fast, small, and feature-rich JavaScript library. When you access our website, animations or other files are retrieved from the jQuery server and stored in your browser's cache for the display of our website. By integrating jQuery, we can present our website in a more engaging way for you as a user. You can find further information on this at http://jquery.com/. The legal basis for the use of jQuery is Article 6(1)(f) of the GDPR.
- The data listed above under „Visit our Website“ will be transmitted to jQuery for connection purposes. In addition, cookies (see above „Use of Cookies“) will be stored on your computer to enable recognition when you revisit our website. jQuery collects and stores usage data in pseudonymous profiles, according to their own statements, which are stored on jQuery's servers and protected from access and alteration by unauthorised third parties.
- You can prevent processing by deleting existing cookies and preventing cookies from being stored. You can prevent cookies from being stored by adjusting your browser settings. If you disable cookie storage, please note that you may not be able to use this website to its full extent.
- Provider Information: jQuery is a project of volunteers and part of JS Foundation, Inc., Attn: Privacy Office, 1 Letterman Drive, San Francisco, CA 94129. More information can be found at https://js.foundation/. Further information from the provider on data protection can be found at https://js.foundation/about/governance/privacy-policy.
4. Social Media Presence
- We also maintain an online presence (fan pages) within social networks and platforms. Through these, we present ourselves as a company, can communicate with you as our customer, partner or interested party, and publish information and offers. An analysis of activity on our fan page may also be carried out with statistical data provided to us by the providers of the social networks and platforms (so-called insights data). However, data processing only takes place once you interact with our fan page. The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR, as the data processing is carried out in our legitimate interest in more effective information and communication with you. For contract-related communication with us, Art. 6 (1) sentence 1 lit. b GDPR represents the legal basis.
- When you access and use our fan page, your personal data is processed by the providers of the social networks and platforms themselves for analysis and advertising purposes. As operators of the fan page, we have no influence over this, and we do not receive information from the respective providers about the exact scope of data processing. The providers can thus create user profiles to, for example, place interest-based advertising. Cookies are typically stored on your devices for this purpose. Data processing may also take place outside the European Union. The US providers of social networks and platforms are certified under the Privacy Shield, which obliges them to comply with EU data protection standards.https://www.privacyshield.gov/listFor data processing via the fan page, the respective provider of the social networks and platforms is primarily responsible. You also have the option to assert your data subject rights (see „Your Rights“ below) directly with the providers of the social networks and platforms.
- For further information on data processing and your rights, please refer to the providers' privacy policies:
- Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Privacy Policy: https://www.facebook.com/about/privacy/; Joint Responsibility Agreement: https://www.facebook.com/legal/terms/page_controller_addendum; Opt-Out: http://www.youronlinechoices.com And regarding the settings in your personal Facebook profile, there is also the option to object to certain data processing. Facebook Ireland Ltd. is also responsible for data processing via Instagram Inc.
- Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Privacy Policy and Opt-Out: http://instagram.com/about/legal/privacy/.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.
- Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Data Protection Statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization,
- Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA; Privacy Policy and Opt-Out: https://about.pinterest.com/de/privacy-policy.
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Data protection declaration and opt-out: https://privacy.xing.com/de/datenschutzerklaerung
5. Transfer to third countries
Your data will be transmitted to servers outside the EU by external service providers in individual cases (so-called third countries). This may particularly include service providers in the areas of hosting, fulfilment of regulatory obligations, debt collection, and marketing. We select these service providers carefully and contractually obligate them to comply with data protection regulations in accordance with legal requirements. Where service providers are located in the USA, it is ensured that the providers have submitted to the EU-US Privacy Shield agreement, thus guaranteeing an appropriate level of data protection. The following companies receive data in third countries outside the European Union:
- Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; https://www.google.de/intl/de/policies/privacy
- YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; https://www.google.de/intl/de/policies/privacy
- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php;
- Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388
6. Your Rights
You have the following rights concerning the processing of your personal data, which you can exercise at any time without formality by contacting the person named in section 1 above.
Right to information
Upon request, we will provide you with information about which personal data we have stored about you, for what purpose, for how long, from what source, and on what legal basis, and whether we have disclosed it to third parties.
Right to rectification
Should it emerge that the personal data you have provided us with is incorrect or incomplete, we will rectify or complete it immediately upon request.
Right to erasure (right to be forgotten)
You have the right to the immediate erasure of your personal data, provided there is no statutory retention obligation.
Right to restriction of processing
You can request that we restrict the processing of your personal data.
Right to object to processing
You may object to the processing of your personal data at any time. This applies particularly if the legal basis for the processing is Article 6(1)(f) of the GDPR.
Right to data portability
You have the right to receive the personal data we hold about you in a universally readable format.
Right of complaint to a supervisory authority
You also have the right to complain to the competent data protection supervisory authority about the processing of your personal data by us. The competent authority is the data protection authority of the federal state in which we are based. You can find more details on this at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We respectfully wish to point out that the exercise of your rights may, in certain cases, be subject to specific conditions.
Ensuring data security and data protection
To ensure the protection and security of your personal data, we implement a range of technical and organisational security measures, the effectiveness of which we regularly review.