General Information About Data Processing
We take the protection of your personal data seriously. We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data means any information relating to an identified or identifiable individual, such as your name, address, email address, telephone number, payment information or IP address.
We process personal data only where this is necessary to provide our website and online shop, process orders, communicate with customers, fulfil legal obligations, or where you have given your consent.
Visiting Our Website
When you visit our website, certain information is automatically transmitted by your browser to our server.
This may include:
- IP address
- date and time of access
- browser type and version
- operating system
- referring website
- pages accessed
- amount of data transferred
- information about the device used
This information is processed to ensure the secure and reliable operation of our website, to detect and prevent technical problems and attacks, and to improve the stability of our services.
The legal basis for this processing is our legitimate interest in providing a secure and functional website, pursuant to Art. 6(1)(f) GDPR.
Cookies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device that allow certain functions of our website to operate and, where applicable, help us analyse website usage.
Necessary cookies
Some cookies are technically necessary for the operation of our website and online shop. These may include cookies required for:
- shopping cart functionality
- checkout
- login/account functionality
- security
- session management
- remembering certain settings
These cookies do not generally require consent where they are strictly necessary to provide a service explicitly requested by you or to operate the website.
Optional cookies
We may also use cookies for analytics, marketing or other purposes.
These cookies will only be used where required consent has been obtained.
You can manage or withdraw your cookie preferences at any time through our cookie-consent settings.
Orders and Customer Accounts
When you place an order through our online shop, we process the personal data necessary to fulfil your order.
This may include:
- first and last name
- billing and delivery address
- email address
- telephone number, where provided
- order information
- payment-related information
- communication relating to your order
We use this information to process and deliver your order, communicate with you regarding your purchase, handle returns and refunds, and provide customer service.
The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary for the performance of the contract with you.
If you create a customer account, we process the information necessary to create and maintain that account.
You may request deletion of your account, subject to statutory retention obligations.
Newsletter
If you subscribe to our newsletter, we use your email address to send you information about Ecoliva, our products, offers and news.
Newsletter registration is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can withdraw your consent at any time by clicking the unsubscribe link contained in each newsletter. You may also contact us directly to withdraw your consent.
After unsubscribing, your email address will no longer be used for newsletter purposes, unless we are legally entitled or required to retain it for another purpose.
How long we retain your data
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
Personal data relating to purchases and contracts may be retained for statutory commercial and tax retention periods.
Data relating to customer enquiries will generally be retained only for as long as necessary to process and respond to the enquiry, unless longer retention is required by law.
If you have subscribed to our newsletter, your email address will be retained for newsletter purposes until you withdraw your consent or unsubscribe.
Once the applicable retention period has expired, personal data will be deleted unless further processing is legally permitted or required.
What rights you have over your data
Subject to the applicable legal requirements, you have the following rights regarding your personal data:
- Right of access – You may request information about the personal data we process about you.
- Right to rectification – You may request correction of inaccurate or incomplete personal data.
- Right to erasure – You may request deletion of your personal data where the legal requirements are met.
- Right to restriction of processing – You may request restriction of processing in certain circumstances.
- Right to data portability – Where applicable, you may request your personal data in a structured, commonly used and machine-readable format.
- Right to object – You may object to certain processing of your personal data where the legal requirements are met.
- Right to withdraw consent – Where processing is based on your consent, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.