Data protection

Agrano GmbH & Co. KG (hereinafter “we”) respects your privacy and personal space. We therefore take the protection of your personal data, such as name, date of birth, address, email address, telephone number, etc. very seriously.

This data protection notice provides information about the collection, processing and use (hereinafter referred to collectively as "processing") of your personal data, if and to the extent that it is collected when you use our website. In addition, all data subjects are informed of their rights regarding data processing.
When handling this data, we act in strict compliance with the relevant legal data protection regulations and the following principles. We have implemented numerous technical and organisational measures to ensure extensive protection of the personal data processed via our website.

1. Responsible body
The following company is responsible for the processing of your personal data described in this data protection notice:

Email: info@agrano.de
or
Postal address: Agrano GmbH & Co. KG, Data Protection Officer,
Bahnhofstraße 35, D-79359 Riegel am Kaiserstuhl

2. Definitions
The data protection notice contains the following terms of the EU Basic Data Protection Regulation 2016/679 ("GDPR")

a)     Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter "you"). Identifiable means a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b)     Processing
Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

c)     Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organisational measures that ensure that the personal data is not assigned to an identified or identifiable natural person.

d)     Controller
The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or by the law of the Member States, provision may be made for the controller to be designated in accordance with specific criteria laid down by Union law or by the law of the Member States.

e)     Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

f)     Consent
Consent means any freely given, informed and unequivocal expression of the data subject's will in a specific case, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.

g)     Supervisory authority
The supervisory authority is an independent governmental body established by a member state according to Art. 51 GDPR

3. Data processing and consent
In all data processing cases described below, we observe the principle of data avoidance and data economy. This means that we process as little personal data as possible.

a)    We process your personal data if and insofar as this is necessary for the establishment, execution or termination of a contractual or quasi-contractual relationship.

The legal basis for the processing of personal data in connection with a contractual or quasi-contractual relationship is Art. 6 para. 1 sentence 1 b GDPR. This also applies to processing that is necessary to carry out pre-contractual measures.

The personal data will be deleted after the termination of the contractual or quasi-contractual relationships in compliance with the statutory storage obligations.

Within the scope of the contractual relationship, your personal data may be transferred to third parties who process this data solely in order to fulfil the purpose of the contract. This applies in particular to postal delivery services for the delivery of goods and payment services for the fulfilment of your payment obligations.

b)     Furthermore, we process your personal data if and insofar as you have given us your consent to do so. This data will only be used for the purpose and to the extent stated in your consent, e.g. we will only inform you about our products and services in accordance with your consent.

The legal basis for data processing in accordance with your consent is Art. 6 para. 1 sentence 1 a GDPR, and in this case you have the right of withdrawal for the future. You can send the revocation by letter or by email to the contact data of the controller mentioned in section 1. The legality of the data processing carried out up to the point of the assertion of your rights remains unaffected.

The personal data will be deleted after the completion of the purpose pursued with the consent in compliance with the statutory storage obligations.

Within the scope of the consent, your personal data may be transferred to third parties who process this data solely for the purpose of fulfilling the purpose of the contract.

c)     In addition, we process your personal data in pseudonymised form.

If the processing is necessary to protect a legitimate interest of us or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f GDPR serves as the legal basis, with the fundamental possibility of objecting to this data processing in the future. You can send the revocation by letter or by email to the contact data of the controller mentioned in section 1. The legality of the data processing carried out up to the point of the assertion of your rights remains unaffected.

The personal data will be deleted after completion of the legitimate interests or upon objection in compliance with the legal storage obligations.

Within the scope of legitimate interests, your personal data may be transferred to third parties who process this data exclusively for the purpose of fulfilling your interests.

Use of personal data for the LMIV info portal
We will only collect, process and use your personal data provided this is necessary to allow use of our LMIV info portal. Any further use of data will only take place if you provide us with data voluntarily and/or expressly consent to the corresponding use of data.
Your personal data is collected and/or used for the purpose of providing the service you requested.
Your personal data will not be used beyond this scope.

4. Registration, login and contact
Our website may provide for the possibility of registration or subscription (e.g. to the newsletter) by providing personal data. The respective registration screen indicates which personal data is transmitted to the controller. The data you enter will be processed exclusively for the purposes specified in connection with the registration.

If you contact us by email, via a contact form or in comparable form (e.g. enquiries about our products or services), the personal data transmitted by you will also be processed. However, this data processing is limited to the purpose of processing enquiries or contacting you.

As part of the registration and login process, the IP address assigned to you at the time of registration, login or contact as well as the date and time are processed. This data processing is necessary to prevent the misuse of our services, as crimes committed with this data could be solved. This gives rise to legitimate interests in data processing.

If consent is given, the legal basis for this processing is Art. 6 para. 1 sentence 1 a GDPR, and in this case you have the right of withdrawal for the future. You can send the revocation by letter or by email to the contact data of the controller mentioned in section 1.
The legality of the data processing carried out up to the assertion of your rights remains unaffected.

In the context of contractual or quasi-contractual relationships, the legal basis arises from Art. 6 para. 1 sentence 1 b GDPR. This applies, for example, to a contact aimed at the conclusion of a contract.

Otherwise, the legal basis is pursuant to Art. 6 para. 1 sentence 1 f GDPR. The legitimate interests are pursuant to the reasons described above. It is possible to object to this data processing for the future. You can send the revocation by letter or by email to the contact data of the controller mentioned in section 1. The legality of the data processing carried out up to the point of the assertion of your rights remains unaffected.

The personal data will be deleted after revocation or completion of the legitimate interests or upon objection in compliance with the legal storage obligations. In case of contact, your data will be deleted as soon as the respective enquiry is completed or you object to the data processing, in the latter case the correspondence will be stopped.

5. Automatically generated data
Whenever you access our website, data is automatically processed in log files, which originate from your terminal device and may also include personal data. This applies for the following data:

- The operating system of your terminal device
- The browser type you are using
- The name of your provider
- Your IP address
- Date and time of access
- The websites you visited and any search words
- The websites from which you came to our website

We do not process this data together with other personal data about you, i.e. we do not associate the aforementioned data with your person.

The legal basis for the processing of automatically generated data is Art. 6 para. 1 sentence 1 f GDPR. The processing is necessary to ensure the functionality of the website as well as to optimise and correctly deliver the contents of our website and to provide law enforcement agencies with the necessary information for prosecution in case of a cyber attack. This is also the legitimate interest for data processing.

The automatically generated data will be deleted as soon as they are no longer required to achieve the above-mentioned purposes, i.e. when the respective website visit is finished. If your IP address is processed, it will be deleted after 7 days at the latest.

The processing of the aforementioned data for the provision of the website and possible storage in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection.

6. Cookies
The different types of cookies and similar technologies used on our website are described below.

a)    Description and scope of the data processing

Our websites use cookies. Cookies are text files that are created and stored in your Internet browser when you first visit our website. The next time the website is accessed with the same terminal device, the usage data stored in it is either sent back to the website that generated it (first party cookie) or sent to another website to which it belongs (third party cookie).

In this way, the website recognises on subsequent visits by the user whether or not it has already been accessed with this browser. This allows the website to be adapted to the needs of the user when it is called up again, in particular, and the use of the website can be statistically evaluated and the presentation of the displayed contents can be varied.

The term "cookies" is used below for all technologies with which user data is stored locally and possibly transferred to us or third parties in the course of your visit.

b)    Cookie categories

The cookies have a different storage period. On our website, both permanent cookies and session cookies are used:

aa)    The session cookies are only stored during your current visit to our website and are used to enable you to use our services without any restrictions and to make the most convenient use of our website for your current visit. If you deactivate session cookies, it cannot be guaranteed that you will be able to use all our services without restriction.

bb)    The permanent cookies remain temporarily stored after your visit to our website (temporary cookies) and serve to enable you to use our website as conveniently as possible even after your current visit and are only used by us for this purpose. Generally speaking, deactivation of these cookies has no influence on the useability of our website.

Depending on their function and purpose, cookies can be divided into the following categories:

aa)    Necessary cookies (type 1)
These cookies are absolutely necessary for our website and its functions to work properly. They make it possible to improve the comfort and performance of websites and provide various functions. This allows you to save information you have already entered (e.g. user name, language selection or your current location) to save you from having to enter it again.

bb)    Functional cookies (type 2)
These cookies allow information about your use of our website to be retained. They make it possible, for example, to identify particularly popular areas of our Internet offering so that we can tailor the content of our website more specifically to your needs.
You can find more detailed information about these cookies and their individual deletion in section e).

cc)    Marketing and third-party cookies (type 3)
These cookies are used to deliver ads that are more relevant to the user and tailored to their interests. This information can be shared with third parties, e.g. advertisers. Cookies to improve targeting and advertising are often linked to third-party site functionalities.
You can find more detailed information about these cookies and their individual deletion in section e).
Our website can also contain content from third-party providers, such as Facebook services or YouTube videos. These third parties may set cookies while you are using our website and obtain information about your use of the website. The cookies are primarily used to integrate social media content such as social media plugins on our site.
You will find more information on this in section 8 and on the website of the third-party provider.

c)    Legal basis and further information

The cookies only process anonymous and pseudonymous data (data processing). The provision of this data is not required by law or contract, nor is it necessary for the conclusion of a contract.

Insofar as personal data are also processed in the form of pseudonymised data, the legal basis for this is the consent given by you when loading up our website (Art. 6 para. 1 sentence 1 a GDPR) or the legitimate interests of us or the third party providers in direct marketing (Art. 6 para. 1 sentence 1 f GDPR).

d)    Deletion of the cookies

You can also visit our website without cookies. The storage of new cookies and the deletion of already set cookies can be achieved using the following measures:

In the event of consent to data processing (Art. 6 para. 1 sentence 1 a GDPR) we will delete your data for the future after revocation or discontinuation of the purpose of consent. You can revoke your consent in the following way by contacting the controller named in section 1.

In case of data processing based on legitimate interests (Art. 6 para. 1 sentence 1 GDPR) (Art. 6 para. 1 sentence 1 GDPR), you can object to all cookies or only certain types of cookies by selecting *do not accept cookies* in your browser settings or object to the data processing at any time for the future here. You can remove already stored cookies by deleting temporary websites. Please note that your objection may also be stored in a cookie. If you delete this cookie, you must again declare your objection.

It may no longer be possible to use all functions of the website to their full extent if all or individual cookies for our website are deactivated.

Please refer to the instructions of your browser or end device manufacturer for information on the independent deletion of cookies.

Additional information on functional cookies and marketing cookies (Type 2 & Type 3) and their individual deletion vis-à-vis specifically named third parties can be found in the following text.

e)    Special cookies

Our website uses various performance and marketing cookies, which are described in detail below.

a)    Google: To improve the convenience and quality of our service, the following web services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") have been activated. Google receives and processes the data through the use of the corresponding cookies on our website.

(i)    Google Analytics: Google Analytics uses temporary cookies that enable an analysis of your use of the website. The stored data on the use of our website, including your IP address ("usage data") is usually transferred to a Google server in the USA and stored there. We would like to point out that the code "gat._anonymizeIp();;" has been added to Google Analytics on our web pages to ensure anonymous recording of IP addresses (so-called IP masking). By activating IP anonymisation on our website, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area in advance. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
Google will use the aforementioned information on our behalf to evaluate your use of our website, to compile reports on website activities for us and to provide us with further services associated with the use of the website and the internet. Transfer of this data by Google to third parties only takes place due to legal regulations or within the scope of order processing.

You may prevent the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the collection of data generated by the cookie and related to your use of this website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link.

You will find more information about Google Analytics at this link: http://tools.google.com/dlpage/gaoptout?hl=de.

(ii) Google Adwords: This website uses Google AdWords, an analysis service of Google Inc. and the conversion tracking within Google AdWords. Google AdWords uses a temporary cookie for conversion tracking on your device (so-called "conversion cookie") when you click on an ad placed by Google. After 30 days, these cookies are no longer valid and no longer serve to identify you personally. When you visit certain pages on our website, we and Google can recognise that you clicked on the ad and were redirected to that page. The information obtained through conversion cookies is used to generate statistics for AdWords customers who use conversion tracking. These statistics tell us the total number of users who clicked on the Google ad and were redirected to a website with a conversion tracking tag.

Besides conversion tracking, the remarketing or "similar target groups" function is also used. The remarketing function uses a temporary cookie to reach users who have already visited our website. This enables us to present our advertising to users of this website who are already interested in our products or services on other websites of the Display Network (see below). AdWords also uses Google's advertising network ("Display Network") for the last 30 days to determine common interests and characteristics of users of our site based on user behaviour on websites in Google's advertising network ("Display Network") and contextual search engine. AdWords then uses this information to find new potential customers for marketing purposes whose interests and characteristics are similar to those of our website users. The target group-specific remarketing takes place through the combined use of cookies, such as Google Analytics cookies, in the browsers of the website users.

If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies through an appropriate setting in your browser software (deactivation option). Alternatively you can follow this link and install the plug-in already provided there: https://www.google.com/settings/ads/plugin. You can also deactivate the use of cookies through third party providers by visiting the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/ and implementing the opt-out option there.

Otherwise, the references to the previous section “Google Analytics” also applies for Google Adwords.

You will find more information on Google AdWords by clicking on the following links: http://www.google.com/privacy/ads/ and http://www.google.de/policies/technologies/ads/

Unless otherwise specified, the validity of special cookies is a maximum of 90 days.

Use of Google Tag Manager
This website uses the Google Tag Manager, which allows website tags to be managed by applications such as Google Analytics via an interface. The tool Google Tag Manager itself (which implements and activates the tags on this website) is a cookie-free domain and does not gather any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager.

7. Social Plugins
Our website has links to external social networks such as Facebook (“Social Plugins”). The functions assigned to the links, especially the transmission of information and user data, are not already activated by visiting our website, but only by clicking on the links. After clicking on these links, the plugins of the corresponding networks are activated and your browser establishes a direct connection to their servers.

If you click on the links while visiting our website, your user data may be transmitted to the corresponding network and processed by the network. If you click on the links while visiting our website and are logged on to the network via your personal user account, the information that you have visited our website can be forwarded to the network and stored there in connection with your account. To prevent assignment to your account on the corresponding network, you must log out of your account before clicking on the link.

For the purpose and scope of data collection by social networks and the further processing and use of your data there, as well as your rights and possible settings to protect your privacy, please refer to the data protection information of the respective network. The respective social network is solely responsible for the data processing that starts when the link is clicked.

8. Right to revocation and objection
a)     Right to revocation of a data protection consent
You have the right to revoke your consent to the processing of personal data at any time.
The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

b)     Right to objection
You have the right to oppose the processing of personal data concerning you that is carried out in accordance with Art. 6 para. 1 sentence 1 e or f GDPR at any time (Art. 21 para. 1 GDPR). The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.
In the event of an objection, we will no longer process the personal data unless we can provide evidence of compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is used for direct marketing purposes, you have the right to object at any time (Art. 21 para. 2 GDPR).
In the event of an objection, we will no longer process the personal data. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

You can send the revocation by letter or by e-mail to the contact data of the controller mentioned in section 1.

9. Other rights
a)    Right to confirmation
You have the right to request confirmation from us concerning whether we
are processing your personal data.

b)    Right to information
You have the right to receive free of charge information
from us at any time and to receive a copy of this
information.
Furthermore, you have the right to information concerning whether personal data
has been transmitted to a third country or to an international organisation.
If this is the case, you also have the right to request information about the
appropriate guarantees in the context of this transmission.

c)    Right to correction
You have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right to request the integration of incomplete personal data, also by means of a supplementary declaration, taking into account the purposes of the processing.

d)     Right to deletion (Right to be forgotten)
The GDPR provides for a right of deletion. You can then demand that the personal data concerning you be deleted immediately if one of the following reasons applies and if the processing is not necessary:

The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
You revoke the consent on which processing pursuant to Art. 6 para. 1 a GDPR or Art. 9 para. 2 a GDPR is based, and there is no other legal basis for processing.
You lodge an objection against processing within the meaning of Art. 21 para. 1 GDPR is based, and there is no other legal basis for processing.
You lodge an objection against processing within the meaning of Art. 21 para. 2 GDPR.
The personal data were processed unlawfully.
The deletion of personal data is necessary to comply with a legal obligation under Union or national law of the Member States.
The personal data has been collected in relation to the information company’s services offered in accordance with Art. 8 para. 1 GDPR.

e) Right to restrict processing
You have the right to demand that we restrict processing if one of the following conditions is met:

The accuracy of the personal data is disputed by you, for a period that allows the person responsible to verify the accuracy of the personal data.
The processing is unlawful, you refuse to delete the personal data and instead demand the restriction of the use of the personal data.
We no longer need the personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims.
You have lodged an objection to the processing in accordance with. Art. 21 para. 1 GDPR and it is has not yet been determined whether the permitted reasons outweigh your objections

f) Right to data portability
You have the right to receive the personal data you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible person without hindrance by us, provided that the processing is based on the consent pursuant to Art. 6 para. 1 sentence 1 a GDPR or to a contract in accordance with Art. 6 para. 1 sentence 1 b GDPR and the processing takes place with the help of an automated process, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising your right to data transferability, you have the right to arrange that personal data be transferred directly from one controller to another, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

g) Right to appeal to a supervisory authority
In addition to these rights, you have a right of appeal to the supervisory authority responsible for data protection ("The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Stuttgart").

10. Access for third parties to your personal data
Data processing is carried out by ourselves and, insofar as we have not expressly excluded this, by service providers commissioned by us as well as, with your corresponding consent or within the scope of contractual relationships, by other third parties and, in the case of pseudonymised data, also by companies of the Oetker Group with which we are affiliated within the Group.

In doing so, we ensure that the service providers and other third parties and Group companies comply with all relevant statutory data protection regulations and the principles resulting from this data protection notice. Service providers may be commissioned, for example, in connection with the dispatch of goods or advertising material (postal delivery services) or in the case of competitions (advertising agencies).

Otherwise, no third party has access to your personal data. Specifically, we will not sell your personal data or use it in any other way. We will only process the data, in particular transmit it to government agencies, if required by the authorities or by law, or if we are legally obliged to provide information.

11. Information on third country transfers
In the event that your personal data is transferred to entities in third countries outside the EU/EEA, this will only take place if the EU Commission has decided that the third country, territory or several specific sectors in that third country offer an adequate level of protection or provide adequate or appropriate data protection safeguards within the meaning of Art. 46 or Art. 47 or Art. 49 GDPR.

12. Children 
We do not process the personal data of persons who have not yet completed their 16th year of life. If we become aware that such data has been transmitted to us without the consent of parents or other legal guardians, we will delete it immediately. We are dependent on corresponding information concerning this from you as parents or legal guardians.

13. Storage duration as well as deletion and restriction/blocking
We process your personal data only for the period of time required to achieve the purpose of storage or if this is provided for by relevant legal data protection regulations. If the storage purpose no longer applies or if a storage period prescribed by the relevant statutory data protection regulations expires, the personal data is routinely deleted or limited/blocked in accordance with the statutory provisions.

14. Obligation to provide data
The provision of your personal data is partly required by law (e.g. tax regulations) or results from contractual regulations (e.g. information on the contractual partner).
It may also be necessary for the conclusion of a contract for you to provide personal data, which must subsequently be processed by us. Failure to provide personal data would mean that the contract with you could not be concluded. If you do not wish to provide personal data in these cases, you can contact the controller by post or e-mail in line with section 1. We will inform you on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

15. Amendments to this data protection notice
We always keep this data protection notice up to date. It may therefore be necessary to adapt the data protection notice to changed framework conditions of an actual or legal nature. By using our website, you accept these adaptations.

16. Data protection officer
If you have any questions on the processing of your personal data, please contact our data protection officer:

Email: info@agrano.de
or
Postal address: Agrano GmbH & Co. KG, Data Protection Officer,
Bahnhofstraße 35, D-79359 Riegel am Kaiserstuhl