OHNE E-NUMMER
KAUF AUF RECHNUNG
GRATIS VERSAND AB 60€*

Privacy Policy


I. Name and address of the responsible company

The responsible company according to the General Data Protection Regulation and other national data protection regulations of the EU member states and other data protection regulations is:

BETTEC B.V.
Nieuwe Hertogenweg 20
6291BP Vaals
Netherlands
Phone: +49 8105 73609-12
E-mail: info@colourfood.de

II. Contact data protection

Should you have questions or concerns regarding data protection on our website, please contact us:

Phone: +49 (0)8105 73609-12
ruth.steinhoff@vuv-consult.de

In addition, Bettec B.V. is adivsed by the following partner concerning privacy issues for this site:
VUV Beratungs- und Service GmbH
Theaterstraße 55
52062 Aachen

ruth.steinhoff@vuv-consult.de

 

III. General information on data processing

1. Scope of processing personal data

In general, we are collecting and processing our user’s personal data only to the extent necessary for providing a working website and our content and services. We are regularly collecting and processing our user’s personal data only after having received their consent. Exceptions apply in cases where previously obtaining consent has not been possible for factual reasons and the processing of the data is allowed by legal provisions.

2. Legal basis for processing personal data

Should we require the respective person’s consent for data-processing operations, article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR) serves as legal basis for processing personal data.

When processing personal data required for fulfilling a contract within our online shop of which the affected person is contractual party, article 6 paragraph 1 lit. 6 GDPR serves as legal basis. This also applies for processing operations necessary for conducting pre-contractual steps.

Should processing personal data be necessary for fulfilling a legal obligation our company is subject to, article 6 paragraph 1 lit. c GDPR serves as legal basis.

Should the processing be necessary for preserving our company’s or a third party’s legitimate interests and should the interests, fundamental rights and freedoms of the affected person not outweigh the interest mentioned first, article 6 paragraph 1 lit. f GDPR serves as legal basis for the processing.

3. Data security

Suitable technical and organisational tools will protect the data provided by you in order to safeguard your data from incidental or intentional manipulations, losses, damage and access of non-authorised persons or non-authorised disclosure to third parties. Our security measures are constantly controlled and improved according to technological developments and organisational possibilities. Unfortunately, transferring information via the Internet is not entirely secure, which is why we cannot guarantee the security of data transferred via to Internet to our website.

IV. Provision of this website and creation of log files

1. Description and scope of data processing

Our system automatically collects data and information of the accessing computer’s system at each access of our website.

The following data will be collected:

  • Information regarding the user’s type of browser
  • The user's Internet provider
  • The user’s IP address
  • Time and date of the access
  • Referrer URL (previously accessed website)
  • Status and error message

The data will also be stored in our system’s log files. This data will not be stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is article 6 paragraph 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary for delivering the website to the user’s computer. The user’s IP address needs to be stored for the duration of the session.

We therefore have legitimate interest in data processing according to article 6 paragraph 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to reach the purpose of collecting.

In case of data storage in log files, a deletion will done after 7 days. Storage beyond this period of time is possible. In this case, the users’ IP addresses will be deleted or alienated, so an allocation to the accessing client is no longer possible.

5. Possibility to object and eliminate

The collection of data for providing the website and the storage of date in log files is essential for operating the website. Therefore, the user has no possibility to object.

V. Use of cookies

1. Description and scope of data processing

Our website uses so-called cookies. Cookies are text files saved in or by the user’s Internet browser. Does a user access a website, the cookie can be stored on the user’s operating system. The cookie contains a characteristic string, enabling a clear identification of the browser when accessing the website again. We use cookies to make our website technically functional and more user-friendly. Some of our website’s elements require an identification of the accessing browser after page changes.

The following data will be stored and transmitted in cookies:

  • Products in the cart
  • Log in information


Furthermore, we are using cookies on our website enabling an analysis of the users’ browsing habits.

The following data will be transmitted this way:

  • Frequency of site visits
  • Use of website functions
  • Referrer URL (previously accessed website)

The user’s data collected in this course will be pseudonymised by technical prerequisites. Therefore, an allocation of the data to the accessing user is not possible any longer. The data will not be stored together with the user’s other personal data.

The user will be informed on the use of cookies when accessing our website and is offered the option between accpeting solely technically required cookies or the option to also accept addtional marketing cookies.

2. Legal basis

The legal basis for processing personal data using technically required cookies is article 6 paragraph 1 lit. f GDPR. In addition, for using non-required cookies, the legal basis is the users consent article 6 paragraph 1 lit. fGDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to enable and to simplify the use of websites for the users. Some functions of our website cannot be provided without the use of cookies. For those functions, it is necessary that the browser will be recognized after a site change. Our legitimate interest in data processing according to article 6 paragraph 1 lit. f GDPR arises from this purpose.

The user data collected by technically necessary cookies will not be used for creating user profiles. The use of cookies for analyses serves the purpose of improving our website and its content. Those cookies show us how our website is used for constantly optimising our offer. Hence we do ask for our consent according to article 6 paragraph 1 lit. f GDPR.

4. Duration of storage, possibility to object and eliminate

Cookies will be stored on the user’s computer and transferred to our site. Therefore, you as a user have full control over the use of cookies. By changing the settings of your browser, you can limit or deactivate the transfer of cookies. Cookies that have already been stored can be deleted at any time, also automatically. Shall cookies be deactivated for our website, it might be the case that not all functions can be used entirely.

VI. Registration via client account

1. Description and scope of data processing

On our website, clients can register via a client account by inserting personal data. The data will be inserted in an input mask, transferred to us and stored. The following data will be collected in the course of registering:

  • E-mail address
  • Title
  • Name and surname
  • Company
  • Industry
  • Address
  • Value-added tax ID

Further optional details:

  • Phone number
  • Date of birth
  • Department

Furthermore, the following data will be stored for the purpose of an easier purchase process in connection with contract execution:

  • Products in the cart
  • IP address
  • Log in information

The data provided by you is necessary for executing the contract or to conduct pre-contractual steps. We cannot conclude a contract with you without this data.

A transfer of data to third parties will only take place exceptionally, for example when transferring data to our contracted delivery company UPS to deliver the products and our tax consultant for fulfilling our tax obligations.

Due to the fact that we offer payment via PayPal or credit card, a connection to this payment provider will be made by our website. No further data such as bank details, except which payment method you have chosen, will be stored in the shop system of colourfood.de. Moreover, no further data will be collected by payment via invoice. We are not responsible for data protection of the payment providers. Please consult the privacy policy of the respective payment providers’ websites linked here.

1.1. Payment via Paypal

You can pay your purchase from our website via Paypal. For payment via Paypal, you need to insert your name, address, phone number and e-mail address on Paypal’s website. In order to make payments via Paypal, you need to insert your credit card or bank account details. Paypal will receive this data from you via a particular input mask on Paypal’s website. We are not responsible for data protection at Paypal.

Paypal transfers your data to credit agencies in order to obtain a credit check to estimate the liability risk. Further information to that and to Paypal’s terms and conditions as well as their privacy policy can be accessed by following this link: https://www.paypal.com/de/webapps/mpp/ua/legalhub-full

1.2. Payment via credit card

For the use of credit card payments at colourfood.de we use GiroSolution GmbH as payment service provider. By means of an interface to their "GiroCheckout" system, GiroSolution GmbH ensures the system-side connection of our website to the following payment methods for us: Credit card.
The following data is passed on to GiroSolution GmbH via GiroCheckout and then to the respective payment system and its service provider for processing the payments:

  • Name
  • IBAN/ Card number
  • Credit institute

Further information can be found in the GTC of GiroSolution GmbH (www.girosolution.de).

 

2. Legal basis

The legal basis for processing data in the course of your registration is article 6 paragraph 1 lit. f GDPR. Shall the registration serve the purpose of fulfilling a contract or executing pre-contractual steps, the legal basis for processing is article 6 paragraph 1 lit. b GDPR. The data processing of voluntarily given data is based on article 6 paragraph 1 lit. f GDPR.

3. Purpose of data processing

Registration of a user is necessary for providing particular content and services on our website. Our legitimate interest in data processing according to article 6 paragraph 1 lit. f GDPR arises from this purpose. Furthermore, the registration is necessary for fulfilling a contract with the user or for executing pre-contractual steps.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to reach the purpose of collecting.

Shall the data be necessary for fulfilment of a contract or executing pre-contractual steps, this will then be the case, if the data are no longer necessary for executing the contract. The necessity of storing the contractual partner’s personal data can exist even after conclusion of the contract in order to fulfil contractual or legal obligation such as tax obligation. The exact storage periods cannot be determined generally but need to be examined individually.

5. Possibility to object and eliminate

As a user, you can delete your registration or amend the stored data via your account at any time. In this case, the communication cannot be continued. All personal data saved in the course of your registration will be deleted in this case unless it is necessary to further save your data for concluding, executing a contract or an other legitimate interest.  

Please send an e-mail to ruth.steinhoff@vuv-consult.de for a deletion of your registration or for amending your data.

VII. Contact via e-mail

1. Description and scope of data processing

Alternatively, you can contact us via the e-mail address mentioned on our contact page. In this case, your personal data transferred via this e-mail will be stored.
Your data will not be forwarded to third parties in this context. The data will only be stored for processing the communication.

2. Legal basis for data processing

The legal basis for processing data transferred in the course of sending an e-mail is article 6 paragraph 1 lit. f GDPR. Shall the e-mail contact aim for the conclusion of a contract, the additional legal basis is article 6 paragraph 1 lit. b GDPR.

3. Purpose of data processing

In case of establishing contact via e-mail, the necessary legitimate interest in processing data is the processing of the contact.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to reach the purpose of collecting.  This is the case for personal data sent via e-mail when the respective communication with the user is finished. The communication is finished if it seems the particular issue has been settled.

Shall the data be necessary for fulfilment of a contract or executing pre-contractual steps, this will then be the case, if the data is no longer necessary for executing the contract. The necessity of storing the contractual partner’s personal data can exist even after conclusion of the contract in order to fulfil contractual or legal obligation such as tax obligation. The exact storage periods cannot be determined generally but need to be examined individually.

5. Possibility to object and eliminate

Does the user contact us via e-mail, he/she can refuse the storage of his/her personal data at any time. In this case, the communication cannot be continued.

Please send an e-mail to ruth.steinhoff@vuv-consult.de for a deletion of your registration or for amending your data.

VIII. Contact form

1. Description and scope of data processing

Alternatively, you can contact us via the contact form. In this case, your personal data transferred together with this form will be stored. Your data will not be forwarded to third parties in this context. The data will only be stored for processing the communication. The data will be inserted in an input mask, transferred to us and processed by us. The following data will be collected by the contact form:

  • Title
  • Name and Surname
  • E-mail address
  • Subject
  • Comment/message

Further optional details:

  • Phone number
  • Adress

2. Legal basis for data processing

The legal basis for processing data transferred in the course using the contact form is article 6 paragraph 1 lit. f GDPR. Shall the establishment of this contact aim for the conclusion of a contract, the additional legal basis is article 6 paragraph 1 lit. b GDPR.

3. Purpose of data processing

In case of establishing contact via the contact form, the necessary legitimate interest in processing data is the processing of the contact establishment.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to reach the purpose of collecting.  This is the case for personal data sent via the contact form when the respective communication with the user is finished. The communication is finished if it seems the particular issue has been settled.

Shall the data be necessary for fulfilment of a contract or executing pre-contractual steps, this will then be the case, if the data are no longer necessary for executing the contract. The necessity of storing the contractual partner’s personal data can exist even after conclusion of the contract in order to fulfil contractual or legal obligation such as tax obligation. The exact storage periods cannot be determined generally but need to be examined individually.

5. Possibility to object and eliminate

Does the user contact us via the contact form, he/she can refuse the storage of his/her personal data at any time. In this case, the communication cannot be continued.

Please send an e-mail to ruth.steinhoff@vuv-consult.de for a deletion of your registration or for amending your data.


IX. Newsletter

1. Description and scope of data processing

You can subscribe to our free newsletter on our website. We require your consent for sending you the newsletter. You need to fill out a registration form online for receiving the newsletter of BETTEC B.V.. The following data will be collected in this course:

  • E-mail address
  • Name
  • Surname

Further optional data:

  • Address

Furthermore, data will be collected regarding your behaviour, such as opening the newsletter and click rate to set up an anonymised statistical evaluation process.

In the course of data processing for sending newsletters, your data will be transferred to the newsletter provider Newsletter2Go  (since 14.04.2020 Newsletter2Go is named Sendinblue). Your data will be processed solely in our order and for sending newsletters and will not be transferred to third parties by Sendinblue. The necessary contract for the order processing according to artikel 28 GDPR is signed.

You can find further information regarding the security of your data with Sendinblue by click on the link below:
Privacy policy of Sendinblue: https://de.sendinblue.com/legal/privacypolicy/?rtype=n2go
Data protection information regarding the use of this tool:https://de.sendinblue.com/datenschutz-uebersicht/?rtype=n2go

2. Legal basis for data processing

The legal basis for processing data transferred after signing up for our newsletter is article 6 paragraph 1 lit. a GDPR, in case of an existing consent by the user. For the anonymised statistic evaluation process in the course of the newsletter subscription, the legal basis is article 6 paragraph 1 lit. f GDPR as well as your constent.

3. Purpose of data processing

The collection of the user’s e-mail address serves the purpose of sending the newsletter. The collection of other personal data in the course of the registration process serves the purpose of avoiding a misuse of services or the registered e-mail.

4. Duration of storage

Your e-mail address will be locked as soon as they are no longer necessary to reach the purpose of collecting.  This is the case when you unsubscribed from the newsletter. Your e-mail address will be deleted immediately after unsubscribing from the newsletter.

5. Possibility to object and eliminate

You can unsubscribe from the newsletter at any time. Each newsletter contains a link for unsubscribing. In this case, your consent receiving newsletters sent by BETTEC B.V. is terminated. An objection to your consent regarding the storage of personal data collected during the registration process is also possible.

X. Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”.

 If you have your habitual residence in the European Economic Area or in Switzerland, the services of Google Ireland Ltf. will be provided to you, unless otherwise stipuilated in addtional terms. Google is a company incorporated under Irish law (register number: 368047) and located at Gordon House, Barrow Street, Dublin 4, Ireland.

https://policies.google.com/privacy
https://policies.google.com/terms

Since Google operates servers around the world, it cannot be ruled out that personal data will be transmitted to Google LLC based in the United States. Google is certifed under the EU-US Privacy Shield. A current certificate can be viewed at https://www.privacyshield.gov/list. The EU-US Privacy Shield is an informal agreement in the field of data procetion law,which was negotiated between 2015 and 2016 between the Euopean Union and the United States of America. It consists a series of accurances from the US Federal Government concerning data procetion. The EU Commission decided on 12th July 2016 that the Privacy Shield requirements are in line with the dara procetion level of the European Union. Since then, the convention can be applied.

These are text files that are stored on your computer and that allow an analysis of the use of the website by you. Google Analytics will also be used to collect demographic information (and information regarding preferences (e.g. age, sex, interest), including Google Analytics Demographics (and interest reporting).

The following information will be collected in this course:

  • Type/version of browser
  • Operating system
  • Referrer URL (previously accessed website)
  • Hostname of the accessing computer (IP address),
  • Time of server request

Google will use this information on behalf of this website’s provider to evaluate your use of this website in order to compile reporting regarding the website activities and to provide further services regarding the website and Internet use to the website’s provider.

Important note on the transfer of personal data to the USA after 16.07.2020:

Important note on the transfer of personal data to the USA after 16.07.2020: Until now, Google has based the transmission of data in connection with cookies on its certification under the EU-U.S. Privacy Shield Agreement. In its ruling of 16.07.2020, the European Court of Justice ("ECJ") declared the transfer on the basis of this agreement to be inadmissible. According to this ruling, the USA is to be classified as a country with a level of data protection that is insufficient according to EU standards. In particular, the ECJ judged the lack of effective legal protection for data subjects to be insufficient. This means in particular that there is a risk that your data, as a concerned website visitor, may be processed by U.S. authorities for control and monitoring purposes in connection with the use of cookies, without you having any means of redress against this. Google is currently working on alternative bases pursuant to Art. 46 DS-GVO for the transfer of personal data to the USA. Pending the implementation of an equivalent solution, the transfer will be made on an exceptional basis on the basis of consent pursuant to Art. 49 (1) lit. a DS-GVO. This is done by means of an appropriate notice on the transfer to third countries and acceptance of the use of Google services/cookies via the consent banner, as the use of Google services is inseparably linked to the possibility of transfer to the USA. If you wish to prevent any transfer of your data to the USA, you should deactivate the use of cookies for statistical, analysis and marketing purposes in accordance with the settings options in the consent banner and limit yourself to the pure setting of technically necessary cookies. You can revoke or change your consent at any time by adjusting your settings via the "Cookie Policy" on our website.

The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there. Google will not associate the anonymised IP address transferred by your browser within the scope of Google Analytics with other Google data. Furthermore, we added the code “anonymizeIP” to Google Analytics on this website. Only in exceptional cases the full IP address will be transferred to a Google server in the US and truncated there. Google will not associate the anonymised IP address transferred by your browser within the scope of Google Analytics and Google Remarketing with other Google data.

In order to analyse the website with Google (Universal) Analysitcs, wie need you consent (article 6 paragraph 1 lit. f GDPR). That is why we ask you for your consent in the above mentioned Pop-Up-Question to use marketing cookies.

You can stop the storage by cookies through respective settings in your browser software. However, we would like to advise you that it might not be possible to entirely use all functions of this website. Furthermore, you can stop Google’s collection of the data generated by a cookie and relating to your use of our website (including your IP address) as well as Google’s processing of that data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set, preventing the future collection of your data when visiting this website. The opt-out cookie is only valid for this browser and only for our website and will be saved on your device. You need to set this cookie again after having deleted the cookies in your browser.

Further information regarding date protection in connection with Google Analytics can be obtained from the following link: (https://support.google.com/analytics/answer/6004245?hl=de).

XI. Use of social media

Presence in social media
BETTEC B.V. is active in social media in order to get in touch with users of these platforms and to inform about the brand Eat a Rainbow and the associated products. You can find BETTEC B.V. on the following platforms:

•    Facebook - https://www.facebook.com/colourfoodprofessional/
•    Instagram - https://www.instagram.com/colourfoodprofessional/
•    Linkedin - https://de.linkedin.com/showcase/colourfood-professional-by-bettec

When you visit us on one of these scoial media plattforms, you automatically enter the respective plattfrom and enables it to colletc and process your personal data. The purpose and scope of the data colletionc and the further processing and use of the data by the provider as well as your righst in this regard and the offered setting options for your privacy are in the responsibility of the plattform provider. Please refer to the privacy policy statements of the respective provider:

Privacy Policy by Facebook: http://www.facebook.com/policy.php
Privacy Policy by Instagram: https://help.instagram.com/519522125107875
Privacy Policy by Linkedin: https://www.linkedin.com/legal/privacy-policy

We advise you that the users’ data can be processed by the respective provider of the social platform outside the European Union. In this case, risks can arise for the users regarding their personal data.

Important note on the transfer of personal data to the USA after 16.07.2020: To date, Facebook, Instagram, Pinterest and YouTube (company headquarters in the USA) base the transfer of data in connection with cookies on their certification under the EU-U.S. Privacy Shield Agreement. In its ruling of 16.07.2020, the European Court of Justice ("ECJ") declared the transfer on the basis of this agreement to be inadmissible. According to this ruling, the USA is to be classified as a country with a level of data protection that is insufficient according to EU standards. In particular, the ECJ judged the lack of effective legal protection for data subjects to be insufficient. This means in particular that there is a risk that your data, as a concerned website visitor, may be processed by U.S. authorities for control and monitoring purposes in connection with the use of cookies, without you having any means of redress against this. Facebook, Instagram, Pinterest and YouTube are currently working on alternative bases pursuant to Art. 46 DS-GVO for the transfer of personal data to the USA.

Furthermore, the social media platforms evaluate user data in order to set up interest and user profiles used for market research and advertising purposes. In this course, cookies will be saved by the social media platform on the devices of the users. The user data will be used to display advertisements on and/or outside the platform to the respective user. Data can in this case saved via several devices to only linked to the specific devices but also liked to the respective users. This is depends on the log ins of the respective social media. In case that you are logged in to the social media plattform with your own account and enter our site, your personal data may also be combined with other data the plattfrom provider has collected about you. We have no influence on that. Please inform yourself about this in the privacy policy of the respective provider. If you follow a social media link embedded on our website, you are leaving our website and enter the website of the social media provider.

Our offer to visit us on our social media sites is based on our legitimate interest in effective information regarding the users and communication with them according to article 6 paragraph 1 lit. f GDPR. If you follow a link, you give us your consent for the following data colletcion and data processing according to articel 6 paragraph 1 lit. f GDPR. Should the users be asked for their consent regarding data processing (i.e. giving their consent by e.g. ticking a check box or confirming by clicking a button), the legal basis of processing is article 6 paragraph 1 lit. a, article 7 GDPR.

For detailed information regarding the respective processing and possible objections, please consult the respective provider’s platform. Requests for information shall also be directly addressed to the social media, as only the platforms themselves can access the user data and can give information.

XII. Links and references to other Internet offers

The online offer by BETTEC B.V. contains links to other websites. We are not responsible for data protection or content of these other online offers. We recommend users leaving our website to inform themselves regarding the privacy policy of other websites accessed by them.

Privacy Policy of Facebook: http://www.facebook.com/policy.php

Privacy Policy of Instagram: https://help.instagram.com/155833707900388

Privacy Policy of Linkedin: https://www.linkedin.com/legal/privacy-policy

YouTube Video Plugins

On our website, YouTUbe videos are embedded in the so-called 2enhanced privacy mode". This means that ouTube does not store any information about your visit to our website except in the event that you wathc the video. Invoking the page will result in YouTUbe connecting to it and may trigger fruther data processing that we have no control over. For more information, please refer to the privacy policy of YouTube: https://policies.google.com/privacy?hl=en&gl=en

 

IX. Your rights

You have extensive rights regarding the processing of your personal data. First of all, you have an extensive right of information and can demand for the amendment and/or deletion and/or blocking of your personal data, if necessary. You can also demand a limitation of processing and do have a right to object and a right of data portability. Would you like to execute your rights or would like to obtain further information hereto, please contact us via the following e-mail address: ruth.steinhoff@vuv-consult.de

Furthermore, you do have the right to appeal with a supervisory authority. Should you have questions, comments or requests regarding our collection, processing and use of your personal data, please also contact us via the aforementioned details.

IX. Amendment of this privacy policy

We reserve ourselves the right to amend this privacy policy with effect for the future at any time. The current version is available on our website. Please regularly visit the website and inform yourself regarding the privacy policy currently in effect.

Status as of 09.10.2020

Viewed