Privacy Policy

Privacy Policy We take the protection of personal data very seriously. With this privacy policy we want to transparently inform you about the purpose of collection of your personal data (e.g. name, address, e-mail address, telephone number, bank details), how we handle them and to whom we may make them available. I. Responsible body This data protection information applies to data processing by: Regenerate Europe e.V. Lietzenseeufer 10 14057 Berlin E-mail: contact@regenerate-europe.eu Website: www.regenerate-europe.eu II. Collection and storage of personal data 1. When you visit our website When you visit our website www.spinplant.de, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and is stored until it is automatically deleted after three months: • IP address of the requesting computer, • date and time of access, • name and URL of the retrieved file, • the website from which access was made (referrer URL), • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The mentioned data will be processed by us for the following purposes: • Ensure an interference-free connection to the website, • Ensure comfortable use of our website, • Evaluation of the security and stability of the system as well as • for further administrative purposes. The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. 2. Cookies The use of our website should be pleasant and meaningful for the visitor. Therefore, we record user behavior in order to continually improve our website. This data is collected via cookies, i.e. small text files that are transmitted to your computer via your browser and are stored there. Cookies do not retrieve any information stored on your hard disk and do not affect your PC or your files. Most of the cookies we use are so-called „session cookies“. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit our website. When sending newsletters, we use web beacons (small graphic files) to collect information for statistical evaluation. The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) (f) GDPR. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to minimized functionality of our website. 3. YouTube We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service provided by YouTube LLC („YouTube“), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC („Google“), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. YouTube is integrated by embedding the service on our website using an „iFrame“. When loading this iFrame, YouTube or Google may collect and process information (including personal data). It cannot be ruled out that YouTube or Google may also transfer the information to a server in a third country. If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The integration of YouTube enables us to present you various videos on our website so that you can watch them directly on our website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on data protection in connection with YouTube, please refer to: https://www.google.de/intl/de/policies/privacy. III. Data collection and use for contract execution We collect and store your personal data, which we need for the purpose of initiating and processing contracts and which we have received from you for this purpose (Art. 6 (1) (b) GDPR), within the framework of legal requirements. The data processed by us includes names and addresses, contact data (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g., services used, contract contents, contractual communication, names of contact persons) and payment data (bank details, payment history). We will delete this data if it is no longer necessary to fulfil contractual or legal obligations (in particular warranty obligations); in all other respects, the legal storage obligations apply (see more details under item IX. IV. Data Security We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons, in accordance with Art. 32 GDPR. Such measures shall in particular include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures to ensure the exercise of rights of data subjects, erasure of data and response to compromise of data. Furthermore, we consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection by technology design and data protection-friendly presettings (Art. 25 GDPR)Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if: • you have given your express consent pursuant to Art. 6 (1) (a) GDPR, • the disclosure pursuant to Art. 6 (1) (f) GDPR is necessary to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding interest in not disclosing your data, • in the event that a legal obligation exists for the transfer pursuant to Art. 6 (1) (c) GDPR, and • this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR. VI. Rights of the data subject If you would like to make use of the following rights, please direct your enquiries in writing to the responsible body named under point I. 1. Information and correction of your data You have the right to receive information from us free of charge regarding whether and which personal data about you is stored by us. If, despite our efforts to ensure that your data is correct and up-to-date, incorrect information is stored, we will correct this immediately upon your request. 2. Right of deletion of your data Furthermore, you can request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims. 3. Right to restrict the processing of your data You can demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful, but you deny its erasure and we no longer need the data, while you still require it for establishing, exercising or defending legal claims or if you have filed an objection against the processing in accordance with Art.21 GDPR. 4. Right to data transferability You also have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to obtain the transmission to another data controller. 5. Right of lodging a complaint You can complain to a supervisory authority. For this you may contact the supervisory authority at your usual place of residence or workplace or at our company headquarters. VII. Right of objection If your personal data are processed on the basis of legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR on grounds relating to your particular situation. VIII. Right of revocation of consent under data protection law You have the right to withdraw consents granted pursuant to Art. 7 (3) GDPR at any time with effect for the future. IX. Deletion of data The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 GDPR. If no specific deletion date is specified in this data protection declaration, the data stored by us will be erased as soon as it is no longer required for its intended purpose and the erasure is not prevented by any statutory storage obligations. If the data are not deleted because they are necessary for other legally permissible purposes, their processing is restricted. This applies in particular to data which must be kept for commercial or tax reasons, professional or regulatory reasons (§ 147 Abgabenordnung, § 257 Handelsgesetzbuch, § 7 Medizinprodukteverordnung, Annex VII Abs. 2 Directive 93/42/EEC). X. Timeliness and amendment of this data protection declaration This data protection declaration as amended in May 2018 is currently applicable. It may be necessary to change this data protection declaration, due to the further development of our website and offers above or due to amended legal or official requirements.