PRIVACY POLICY ACCORDING TO THE GDPR

Name and address of the data controller

Deli Department GmbH
Hafeninsel 60
63067 Offenbach am Main
Deutschland
Tel.: +49 (0) 69 - 98 193 - 400
l.luedemann@deli-department.com
Website: www.deli-department-nordics.com
is the data controller as defined by the EU General Data Protection Regulation (GDPR) and the national data privacy laws.

Name and address of the data protection officer

The data protection officer of the data controller is:
AGOR AG
Niddastraße 74
60329 Frankfurt am Main
Deutschland
Te.: +49 (0) 69 - 9494 32 410
E-Mail: info@agor-ag.com
Website: www.agor-ag.com

General information about data processing

Extent of personal data processing

We collect and use personal data from users of our homepage only to the extent that is necessary for keeping our website, our content and our services functioning properly.

In general, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing data is permitted by statutory provisions or when obtaining prior con-sent is not possible.

Legal basis for processing personal data

The legal basis for processing personal data is generally based on:
Art. 6 para. 1 s. 1 lit. a GDPR upon obtaining the consent of the data subject.
Art. 6 para. 1 s. 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary to carry out pre-contractual measures.
Art. 6 para. 1 s. 1 lit. c GDPR for processing required to fulfill a legal obligation.
Art. 6 para. 1 s. 1 lit. d GDPR, if vital interests of the data subject or another natural person require processing of personal data.
Art. 6 para. 1 s. 1 lit. f GDPR, if processing is necessary for purposes of the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest.

To be able to base the processing of personal data on a legitimate interest, an assessment is carried out in each case in consultation with the data protection officer for each relevant process, whereby the following three conditions must be met:

  1. The controller or a third party has a legitimate interest in the processing of personal data.
  2. The processing is necessary to safeguard the legitimate interest.
  3. Interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail.

Data erasure and data storage duration

Personal data of users will be deleted or restricted as soon as the purpose for storing the data is no longer applicable. Personal data may be stored for longer than for the original purpose, if there is applicable European or national legislation through EU regulations, laws, or other regulations, to which the data controller is subject to. Personal data is also deleted or restricted, when a mandatory storage period expires, unless the personal data is needed for concluding or fulfilling a contract.

Use of our website, general information

Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the user's computer system. The following information can be collected:

Information about the browser type and version used, the user’s operating system, the user’s Internet service provider, the user’s IP address, Date and time of access, Websites the user’s system accesses to get to our website, Websites that the user's system invokes by accessing our website.

The described data is stored in log files for our system and is not stored together with any other personal user data.

Purpose and legal basis for data processing

To provide our website to users, our system must store user IP addresses temporarily. Therefore, IP addresses must be stored for the duration of a users’ session.

Storage in log files is done to ensure the functionality of our website. In addition, the data is used to optimize our website and to ensure the security of our systems. Personal data that is processed in this context, is not processed for marketing purposes.

The legal basis for the temporary storage of data and log files is our legitimate interest according to Art. 6 para. 1 s. 1 lit. f GDPR.

Collecting this personal data and storing it in log files is essential to secure, provide and operate our website. Therefore, an option to object to processing in this context does not exist.

Duration of storage

Your data will be deleted as soon as it is no longer necessary for achieving the purpose it was processed for. Personal data that is processed to provide our website will be deleted after your session ends.

If your data is stored in log files, it will be deleted after seven days at the latest. It may be stored for longer, whereby the IP addresses of users are deleted or alienated. This means, that it will no longer be possible, to assign them to individual clients.

Your rights/rights of the data subject

According to the EU General Data Protection Regulation, as data subject you have the following rights:

Right of access by the data subject

You have the right to receive from us as data controller the information whether and which personal data concerning you are processed by us as well as further information in accordance with the legal requirements pursuant to Art. 13, 14 GDPR.

You can claim your right to information under:
l.luedemann@deli-department.com .

The right to rectification

If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed. The correction will be made immediately.

Right to restriction

You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 GDPR).

The right to delete

If the conditions set out in Article 17 of the GDPR apply, you may request that the personal data relating to you be deleted without delay.

We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 para. 3.

Right to information

If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients.

Right to data portability

According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format or to request its transfer to another controller.

Right to revoke the declaration of consent to data protection

You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the processing carried out based on the consent until the revocation goes into effect.

Right to objection

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 s. 1 lit. e or f GDPR.

Automated decision on an individual basis, including profiling

Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing - including profiling - which would have legal effect or would affect you in a similar manner.

Right to complain to a supervisory authority

Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to complain to a supervisory authority, in the Member State of its place of residence, employment or the location of the alleged infringement.

Data transfers to third countries (outside of the EU):

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is being processed. Within some exceptions we may process personal data outside the EU through third-party services. This may only be the case where the special requirements in accordance with Art. 44 et. seq. GDPR are fully met. This means that the processing of your data may then only take place when the third country has been declared to ensure an adequate level of protection by the European Commission or if the European Standard Contractual Clauses have been signed.

EU-US Trans-Atlantic Data Privacy Framework

Within the framework of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the level of data protection for certain companies from the U.S. as safe within the framework of the adequacy decision of 10.07.2023. The list of certified companies as well as further information on the DPF can be found on the website of the U.S.Department of Commerce at https://www.dataprivacyframework.gov/s/participant-search.

Minors under 16 years of age

Minors under 16 years of age are expressly not addressees of our website and our offers on this website. We point out that legal guardians must accompany the online activities of their children. Minors under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We explicitly do not request personal data from minors under the age of 16, do not knowingly collect such data and do not pass it on to third parties.

Electronic contact

It is possible to contact us via the provided email address. In this case, your personal data is transmitted via e-mail will then be processed by us.

A transfer of your data to third parties will not take place in this context; your data will be processed exclusively for communication purposes.

The legal basis for the processing of the contact request and its handling is regularly Art. 6 para. 1 s.1 lit. b GDPR.

Your data will be deleted as soon as it is no longer necessary for achieving the purpose it was processed for. Regarding the contact form and e-mail communication, this is the case when the respective conversation with the user has ended. The conversation has ended when the circumstances re-veal, that all relevant facts have been clarified.

Social Media

Social media platforms

We currently use the following social media platforms:
Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy policy /Opt-Out: http://instagram.com/about/legal/privacy/.

Social media presence

We maintain fan pages within social networks to communicate with customers, prospects and users who are active there and to inform them about our services.

We would like to point out that your personal data may be processed out-side the European Union, which may pose risks to you (e.g., in enforcing your rights under European/German law).

These users’ data is usually processed for market research and advertising purposes. Thus, for example, user profiles that are created based on the user’s behavior and interests. These profiles can be used to place advertisements that allegedly is within the users' interests. For these purposes, technologies such as cookies are used to observe the user’s behavior and to evaluate each user’s interests. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

Processing personal user data is based on our legitimate interests in an effective communication with users in accordance with. Art. 6 para. s.1 lit. f. GDPR. If user’s giver their consent over processing of their personal information by a social network (which is the case, if they declare their agreement, for example, by ticking a check box or clicking on a button to consent)., the legal basis for processing user info is Art. 6 para. s.1 lit. a GDPR.

You can obtain further information on the processing of your personal data as well as your objection options under the listed links of the respective provider. The assertion of information and other rights of the data subjects can also be made against the providers, then only those who have direct access to the data of the users and have the corresponding information. Of course, we are available to answer questions and provide support if you need assistance.

HUNGRY FOR MORE?


Get in touch with us:
l.luedemann@deli-department.com