Data Protection

This privacy policy explains what personal data we or third parties may collect during your visit to our website, and how this information is used. The same applies if we collect or use further personal data for the use of a telemedia service within the framework of the provision of our media services (websites).

Definitions

The privacy policy of Gigas Nutrition BV is based on the terms used by the European legislator in the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.

We use the following Terms in this Privacy Policy, including but not limited to:

a) Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "affected person”). A natural person is considered to be identifiable if he or she can be directly or indirectly identified, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

b) Affected Person

An affected person is any identified or identifiable natural person whose personal data is processed by the person responsible for processing data.

c) Processing

Processing is any process or series of operations performed with or without the aid of automated processes in connection with personal data such as collection, organization, sorting, storage, adaptation or modification, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or elimination.

d) Limitation of Processing

Restriction of processing is the marking of stored personal data with the aim to limit their future processing.

e) Profiling

Profiling is any type of automated processing of personal data that consists of using this personal information to evaluate certain personal aspects pertaining to a natural person, in particular to analyze or predict aspects of work performance, economic condition, health, personal preferences, interests, reliability, behaviour, location or location of that natural person.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in a manner in which the personal data can no longer be assigned to a specific data subject without the need for additional information, provided that such additional information is kept separate and technical and organizational measures exist that ensure that the personal data are not assigned to an identified or identifiable natural person.

g) Person responsible or Responsible for processing

The Person responsible or responsible for processing is the natural or legal person, public authority, body or other institution acting alone or in concert with others to decide about purposes and means of processing personal data.

Where the purposes and means of this processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

h) Processor

The Processor is a natural or legal person, public authority, body or institution that processes personal data on behalf of the controller.

i) Recipient

The recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, no matter whether or not it is a third party. However, authorities that may receive personal data under a particular mission under Union or Member State law are not considered as recipients.

j) Third Praty

A third party is a natural or legal person, public authority, body or institution other than the data subject, the controller, the processor and the persons under the direct responsibility of the person responsible or the processor, that are authorized to process the personal data.

k) Consent

A consent is any expression of will that the data subject voluntarily provides, in an informed and unambiguous manner, in form of a statement or any other unambiguous confirmatory act, with which the affected person makes clear that he or she agrees with the processing of his or her personal data.

Collection of general Data and Information

The website of Gigas Nutrition BV collects a series of general data and information every time the website is accessed by a affected person or an automated system. This general data and information is stored in the log files of the server. Stored can be the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub page, that was accessed on our website by the accessing system (5), date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that can be used in the event of attacks on our information technology systems. When using this general data and information, Gigas Nutrition BV does not draw any conclusions about the affected person. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimize the content and the advertisements of our website, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information will be statistically evaluated by Gigas Nutrition BV with the aim of increasing data protection and data security in our company in order to ultimately ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a affected person.

1. Collection and use of IP addresses

A computer that connects to the Internet is assigned a unique number by an internet provider. This is the Internet Protocol (IP) address. Depending on the service of the user, the provider may assign a different address each time the user connects to the Internet. Since IP addresses are typically assigned in country-based blocks, an IP address can often be used to identify the country in which this computer is connecting to the Internet. When you visit our websites, our web server temporarily records the following server protocol: the IP address, the name of the retrieved file, the date and time of the retrieval, the amount of data transferred, the message about the successful retrieval, the browser type and version, the operating system of the user, the referrer URL (the previously visited page) and the requesting provider. The collection and use of this log data is done by us for the purpose of system security and the functional design of the website. As far as this is not already the case, IP addresses are shortened by us before further use so that a possible personal reference is no longer possible. If you enter into a contractual relationship with us, the collection and use of the log data takes place for the purpose of contract documentation and the encounter of misuse. Insofar as third party content such as videos, map material, RSS feeds, graphics or social plugins from other service providers (websites) is integrated into our websites, this always requires that these service providers ("third parties Provider ") perceive the IP address of the users. This has to be the case, because without the IP address, they could not send their content to the respective user's browser. The IP address is therefore required for the presentation of this content. We do not have any influence on third party use of the IP address, e.g. use for statistical or other purposes. As far as we know this, we will inform the users about it below.

We point out that internet based data transmission has security gaps and that a complete protection against access by third parties is therefore impossible.

2. Own Cookies

a) Description and Scope of Data Processing

On our site we use so-called cookies to recognize multiple uses of our offer, by the same user / internet access holder. Cookies are small text files that your Internet browser stores and saves on your computer. They serve to optimize our website and our offers. These are mostly so-called "session cookies", which are deleted after the end of your visit.

b) Legal Basis for the Data Processing

The legal basis for processing personal data by using technically necessary cookies is article 6 paragraph 1 lit. f GDPR.

In case of processing personal data using cookies for analysis purposes, this is according to the legal basis of article 6 paragraph 1 lit. a of the GDPR a consent by the user.

c) Purpose of Data Processing

The purpose of technically necessary cookies is to facilitate the use of our website for users. Some features of our website can not be offered without the use of cookies. Therefore, it is necessary that the browser is recognized even after changing pages.

For example, we need cookies for the following applications:

  1. shopping cart
  2. remembering language settings
  3. Remembering search terms

The user data collected by technically necessary cookies will not be used by us to create user profiles. Sometimes, cookies give information to automatically recognize you. This recognition is based on the IP address stored in the cookies. The information obtained in this way serves to optimize our offers and to give you easier access to our site. Through analysis of cookies we learn how the website is used and based on this information we can constantly optimize our offer.

For these purposes, there is a legitimate interest in processing personal data according to article 6 paragraph 1 lit. F GDPR,

d) Duration of Storage, Objection- and Disposal Options

Cookies are stored on your computer and transmitted to our site. Thus, you have full control over all cookies.

You can prevent the installation of cookies by changing your browser settings accordingly. These settings can be found for the respective browser under the following links:

  • Internet Explorer: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
  • Safari: https://support.apple.com/kb/ph21411?locale=en_US
  • Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
  • Firefox https://support.mozilla.org/de/kb/cookies-allow-and-dispose
  • Opera: http://help.opera.com/Windows/10.20/en/cookies.html

We point out, however, that you may not be able to use all the features of our website if you do not allow cookies.

3. Newsletter Marketing

3.1 Subscription to our Newsletter

a) Description and Scope of Data Processing

On the website of Gigas Nutrition BV, users are given the opportunity to subscribe to the newsletter of our company. Which personal data are transmitted to the person responsible for processing when ordering the newsletter is obvious from the input mask used for this purpose.

Gigas Nutrition BV informs its customers and business partners at regular intervals about company offers by way of a newsletter. The newsletter of our company can only be received by the affected person if (1) the affected person has a valid email address and (2) the affected person has registered for newsletter shipping. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by an affected person when registering for newsletter mailing for using the double-opt-in procedure.

This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the reception of the newsletter as affected person.

b) Legal Basis for Data Processing

The legal basis for processing personal data of the user is article 6 paragraph 1 lit. a GDPR.

c) Purpose Data Processing

When subscribing to the newsletter, we also store the IP address assigned by the internet service provider (ISP) to the computer system used by the person concerned at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to reconstruct a (possible) misuse of the e-mail address of a data subject at a later time and therefore serves the legal protection of the person responsible for the data processing. The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. In addition, newsletter subscribers may be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as it may be the case in the event of changes to the newsletter offer or technical changes. There will be no transfer of the personal data collected as part of the newsletter service to third parties.

d) Duration of Storage

The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, the data will not be deleted automatically because we have a legitimate interest in data processing according to article 6 paragraph 1 lit. F GDPR and historical user data needed for the creation of target groups (e.g. for remarketing) can be used for any length of time. In addition, this data can be used for things like long-term analysis and sound optimizations.

e) Opposition and Removal Option

Subscription to our newsletter may be terminated at any time by the affected person. The consent in the storage of personal data, which the affected person has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking the consent you will find a link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the person responsible for processing or to inform the person responsible for processing otherwise.

3.2 Newsletter Tracking

a) Description and Scope of Data Processing

The newsletters of Gigas Nutrition BV contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By using the embedded pixel, Gigas Nutrition BV can detect if and when an e-mail was opened by an affected person and which links in the e-mail were accessed by the person concerned.

b) Legal basis for Data Processing

The legal basis for processing personal data of the users is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

Personal data collected via the counting pixels contained in the newsletters are stored and evaluated by the person responsible for processing in order to optimize the newsletter delivery and to adapt the content of future newsletters newsletter even better to the interests of the affected person. For these purposes we have a legitimate interest in processing data according to article 6 paragraph 1 lit. f GDPR.

d) Duration of Storage

The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, the data will not be deleted automatically because we have a legitimate interest in data processing according to article 6 paragraph 1 lit. F GDPR and historical user data needed for the creation of target groups (e.g. for remarketing) can be used for any length of time. In addition, this data can be used for things like long-term analysis and sound optimizations.

e) Opposition and Removal Option

This personal data will not be disclosed to third parties. Affected person (s) are at all times entitled to revoke the separate consent form issued via the double-opt-in procedure. After a revocation this personal data will be deleted by the person responsible for processing. Unsubscribing the newsletter is interpreted by Gigas Nutrition BV as a revocation.

4. Foreign Cookies & Tracking Technologies

Insofar as our websites includes content of third parties, these third party providers may also set cookies, what you can also prevent by default in your browser by making certain settings. Our website also uses so-called tracking technologies. We use these technologies to make our website more interesting for you. This technique makes it possible to address internet users, who are already interested in our website, on our partners' websites (e.g., Facebook, Google) with advertisements.

4.1 Google Analytics with Anonymisation Function

a) Description and Scope of Data Processing

On our website we use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter called "Google". Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of the use of the website by you.

The information generated by these cookies, such as the time, place and frequency of your website visit, including your IP address, is transmitted to Google in the United States and stored there. We use Google Analytics on our website with an IP anonymization feature. In this case, your IP address will already be shortened and thus anonymised by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Google will use this information to evaluate your use of our site, to compile reports on our website activities, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

As stated by Google, Google will not link your IP address to any other data provided by Google.

The following data may be stored:

  1. The website called
  2. The website from which the user came to the called website (referrer)
  3. The length of stay on the website

b) Legal Basis for Data Processing

The legal basis for processing personal data of the users is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

The processing of the users' personal data enables us to analyze the internet surfing behaviour of our users. By analyzing the data obtained, we are able to compile information about the use of the individual components of our website. This will help us to constantly improve our website and its user-friendliness. This represents a legitimate interest for processing data according to article 6 paragraph 1 lit. f GDPR. The anonymisation of the IP address sufficiently takes into account the interest of users in protection of their personal data.

d) Duration of Storage

The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, the data will not be deleted automatically because we have a legitimate interest in data processing according to article 6 paragraph 1 lit. F GDPR and historical user data needed for the creation of target groups (e.g. for remarketing) can be used for any length of time. In addition, this data can be used for things like long-term analysis and sound optimizations.

e) Opposition and Removal Option

You can prevent the installation of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to fully use all functions of our website. In addition, Google offers a deactivation option for the most popular browsers, giving you more control over what data Google collects and processes. If you enable this option, website visit information will not be sent to Google Analytics. An activation of this will not prevent information from being transmitted to us or any other web analytics services we may use. For more information about Google's opt-out option and how to enable this option, please visit the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

4.2 Google AdWords Remarketing

a) Description and Scope of Data Processing

We use the Google Remarketing service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter called "Google", on our website. Google Remarketing can show ads to people who have visited our site in the past. Within the Google Network, ads tailored to your interests can be displayed on our site by using this service. Google Remarketing uses cookies for this evaluation. Cookies are small text files that are stored on your computer and that allow an analysis of the use of the website. This will allow to recognize our visitors as soon as they visit websites within Google's advertising network. In this way advertisements may be presented within the Google ad network that relate to content the visitor previously visited on Google Network sites that also use Google's remarketing feature. Google does not collect any personal data. After the expiration and end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted.

b) Legal Basis for Data Processing

The legal basis for processing personal data by means of the remarketing cookies is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

If you are logged in to Google during the site visit, Google uses your information to create and define target group lists for cross-device remarketing. By using these target groups ads can be displayed based on previously viewed products. This form of advertising is completely anonymous. No user profiles are merged with your personal data. By using our site, you consent to the use of so-called cookies and thus to the collection, storage and usage of your usage data.

d) Duration of Storage

The personal data will be deleted as soon as the maximum storage period of 540 days has expired.

e) Opposition and Removal Option

You can deactivate personalized ad features by changing the settings at http://www.google.com/settings/ads.

4.3 Google AdWords Conversion Tracking

a) Description and Scope of Data Processing

We also use the Google Advertising Tool "Google AdWords" to promote our website. As part of this, we use the "Conversion Tracking" analysis tool from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, "Google", on our website. If you have reached our website via a Google ad, a cookie will be stored on your computer. Cookies are small text files that your Internet browser stores and saves on your computer. These so-called "conversion cookies" lose their validity after a maximum of 540 days and are not used for your personal identification. If you visit certain pages on our website and the cookie has not expired yet, we and Google may recognize that you, as a user, have clicked on one of our Google-placed ads and have been redirected to our site.

b) Legal Basis for Data Processing

The legal basis for processing personal data by means of the remarketing cookie is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

The information obtained through "conversion cookies" helps Google to create visitor statistics for our website. These statistics tell us the total number of users who clicked on our ad, as well as which pages on our site were accessed by the respective users. However, we or other advertisers using "Google AdWords" do not receive any information that personally identifies users.

d) Duration of Storage

The personal data will be deleted as soon as the maximum storage period of 540 days has expired.

e) Opposition and Removal Option

You can prevent the installation of the "conversion cookies" by setting your browser accordingly, for example by using a browser setting that generally deactivates the automatic setting of cookies or by specifically blocking only cookies from the domain "googleadservices.com".

Google's privacy policy can be found at the following link:

https://services.google.com/sitestats/en.html

4.4 Facebook Pixels

a) Description and Scope of Data Processing

This website uses Facebook's visitor action pixel for statistical purposes. With the help of a cookie, it is possible to understand how our marketing measures on Facebook are received and how they can be improved. We would be very pleased about your agreement with this.

The data collected is anonymous, and does not provide us with any possibility to draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, and this means that a connection to the respective user profile is possible and that Facebook can use the data for its own advertising purposes, according to the Facebook Data Usage Guideline

(https://www.facebook.com/about/privacy/).

You can enable Facebook and its affiliates to display ads on and off Facebook. There may also a cookie be stored on your computer for these purposes.

For more information, administration and settings regarding your data, please click here:

https://www.facebook.com/privacy/explanation

b) Legal Basis for Data Processing

The legal basis for processing personal data by means of the remarketing cookie is article 6 paragraph 1 lit. f GDPR.

c) Purpose of the Data Processing

Within our website we use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

This way, the users’ behaviour can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This process is designed to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and may help to optimize future advertising efforts.

d) Duration of Storage

The personal data will be deleted as soon as the maximum storage period of 180 days has expired.

e) Opposition and Removal Option

To disable personalized advertising through Facebook, please click here: https://www.facebook.com/settings/?tab=ads

4.5 Social Media Plugins

a) Description and Scope of Data Processing

We use plugins from Facebook, Twitter, Google+, Pinterest, LinkedIn, Reddit, Tumblr and Xing to integrate web content of the respective platform on our website. The use of these plugins causes the forwarding of personal data of the users to the providers of the corresponding social networks, which also required to access the content. This redirect is independent of whether the user is currently logged in or registered. In order to avoid that personal data are already collected and forwarded by the respective social networks when our website is visited, we use the so-called "Shariff" plugin. By using this plugin tracking and forwarding of data by the third-party provider is activated only when clicking on the plug-in button, as this connects by Shariff with the third-party platform only after confirmation. We ourselves do not store any data.

b) Legal basis for Data Processing

The legal basis for processing personal data of the users is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

In order to enable you to interact directly with the respective social media site, personal data must be transmitted to third parties.

d) Opposition and removal option

Since it is up to the user to use the buttons of the social media plugins, a control of any transfer of personal data is possible by the user.

5. Use of YouTube

a) Description and Scope of Data Processing

The person responsible for processing data has integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to publish video clips and other users to view, rate and comment these videos. YouTube allows the publication of all types of videos, like complete film and television broadcasts, but also music videos, trailers or user-made videos that are then available via the internet portal.

Each time you visit one of the individual pages of this website, which is operated by the person responsible for processing data and on which a YouTube component (YouTube video) has been integrated, the Internet browser of the affected person will be automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube.

More information about YouTube can be found at https://www.youtube.com/yt/about/en/. As part of this technical process, YouTube and Google will be informed, which specific sub page of our website has been visited by the affected person.

YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

b) Legal basis for Data Processing

The legal basis for processing personal data of the users is article 6 paragraph 1 lit. f GDPR.

c) Purpose of Data Processing

If the affected person is simultaneously logged in to YouTube, YouTube will recognize, which specific sub page of our website the affected person has visited, after the affected has called a subpage that contains a YouTube video. This information is collected by YouTube and Google and will be associated with the individual YouTube account.

This helps us to constantly improve our website and its user-friendliness. This purpose represents our legitimate interest in processing data according to article 6 paragraph 1 lit. f GDPR. An anonymisation of the IP address sufficiently takes into account the interest of users in their protection of personal data.

d) Duration of Storage

The personal data will be deleted once the maximum storage period of 365 days has expired.

d) Opposition and Removal Option

YouTube and Google will always receive information via the YouTube component that the affected person has visited our website if the affected person is logged in at YouTube when calling our website. This happens regardless of whether the affected person clicks on a YouTube video or not. If a transmission of this information to YouTube and Google is not wanted by the affected person, it can be prevented by logging off from YouTube before calling our website.

YouTube's privacy policy that can be found at https://www.google.com/intl/en/policies/privacy/, provides information about the collection, processing, and usage of personal data by YouTube and Google.

6. Data Processing outside of the EEA

Your data will usually not be processed in countries outside the scope of Directive 95/46 / EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to processing personal data and free movement of data (OJ EC No. L 281 p. 31), unless the third-party providers listed in this privacy policy are concerned, which are located outside the European Economic Area (EEA). This concerns in particular the social media plugins of Facebook and Google+ as well as the measurement or evaluation methods of Google (Google Analytics). In addition, a transmission of data can take place if this is necessary for the purposes of contract fulfillment and execution (for example, on airlines, hotels, etc.).

7. Inventory Data and Usage Data

We use your data for the following operations:

  • For the execution of your purchases, bookings or other orders.

As well as for the following processes:

  • To offer you an individual service as well as an optimal use of our website based on the information stored in your user profile.
  • In order to provide you with individual offers and information that are of personal interest to you. In the event that personal data are collected and used beyond this, as far as this is necessary for the establishment, content or modification of a contract by using a teleservice (inventory data) or to use a teleservice or to account for the usage of a teleservice (usage data), we explain the nature, scope and purpose in the respective data collection mask.

8. Disclosure to third Parties

We will only disclose data to the competent authorities if required by law.

9. Data Secrecy

Our data processing employees have been obliged to maintain confidentiality with regard to data secrecy.

10. Rights of the Affected Person

The following list includes all rights of the persons concerned according to the GDPR. Rights that have no relevance for your own website do not have to be mentioned. In that regard, the listing can be shortened.

If personal data of you is processed, you are the affected person in regard to the GDPR and you have the following rights:

10.1 Right to Information

You may ask the person responsible for a confirmation as to whether personal data concerning you will be processed by us.

If such a processing takes place, you can request information from the responsible person about the following information:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data being processed;
  3. the recipients or the categories of recipients to which the personal data relating to you have been disclosed or are still being disclosed;
  4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
  5. the right of rectification or deletion of personal data concerning you, a right for a limitation of the processing by the person responsible or a right to object to this processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information about the source of data if the personal data is not collected from the affected person;
  8. the existence of automated decision-making, including profiling under Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information on the logic involved, and the implications and effects of such a processing for the affected person.

You have the right to request information about whether your personal data are transferred to a third country or an international organization. In this context you can request to be informed about the appropriate guarantees regarding this transfer in accordance with. Art. 46 GDPR.

10.2 Right of Rectification

You have a right to rectification and / or completion if your personal data that is processed, is incorrect or incomplete. The responsible person must make the correction without delay.

10.3 Right to Limitation of Processing

Under the following conditions you can request a limitation of processing of the personal data concerning you:

  1. if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
  2. the processing is unlawful and you refuse the deletion of your personal data and instead demand a restriction of use of the personal data;
  3. the person responsible no longer requires the personal data for the purposes of processing, but you need them for asserting, exercising or defending legal claims, or
  4. if you have objected to the processing according to article 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you is restricted, this data may - apart from its storage - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of a other natural or legal person or for reasons of important public interest of the union or of a member state.

If the processing was restricted according to the above mentioned premises, you will be informed by the person in charge before the restriction is lifted.

10.4 Right to Deletion

a) Obligation to Delete

You may demand the person responsible to delete your personal information without delay and the person responsible is required to delete that information immediately, if any of the following is the case:

  1. Personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent, that was based on article 6 paragraph 1 lit. a or article 9 paragraph 2 lit. GDPR and there is no other legal basis for processing.
  3. You object processing according to article 21 paragraph 1 GDPR and there are no justifiable reasons for processing, or object processing according to article 21 paragraph 2 GDPR.
  4. Your personal data have been processed unlawfully.
  5. The deletion of personal data concerning you is required to fulfill a legal obligation under union law or the law of the member states to which the person responsible is subject.
  6. The personal data concerning you were collected in relation to information society services offered according to Art. 8 (1) GDPR.

b) Information to Third Parties

If the person in charge has made the personal data concerning you public and is obliged to delete this data according to article 17 (1) of the GDPR, he or she has to take appropriate measures with due regard to the available technology and the implementation costs, to ensure that persons responsible of third parties, that process personal data are informed, that you requested a deletion of all links to such personal data or copies or replications of such personal data.

c) Exceptions

The right to delete does not exist if the processing is required

  1. to exercise the right to freedom of expression and information;
  2. to fulfill a legal obligation which requires processing according to the law of the union or of the member states to which the controller is subject or for the performance of a public interest mission or in exercise of public authority, which has been transferred to the person responsible;
  3. for reasons of public interest in the field of public health according to article 9 (2) lit. h and i and Art. 9 (3) GDPR;
  4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to article 89 (1) GDPR, as far as the law referred to in section (a) is likely to render impossible or seriously affect the achievement of the objectives of this processing, or
  5. to assert, exercise or defend legal claims.

10.5 Right of information

If you have asserted the right of rectification, deletion or limitation of processing towards the person responsible, this person is obliged to inform all recipients, to whom the personal data concerning you was disclosed to, about this correction or deletion or limitation of processing, unless this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about this receiver.

10.6 Data Transferability

You have the right to receive the personal information you provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible, you providing with the personal data, if

  1. the processing is based on a consent according to article 6 paragraph 1 lit. a GDPR or article 9 paragraph 2 lit. a GDPR or on a contract according article 6 paragraph 1 lit. b GDPR
  2. the processing is done using automated methods.

In exercising this right, you also have the right to demand that your personal data are transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to processing of personal data necessary for the performance of a task of public interest or in the exercise of official authority delegated to the person responsible.

10.7 Right to object

You have the right to object to the processing of personal data concerning you on basis of article 6 paragraph 1 lit. e or f GDPR for reasons that arise from your particular situation at any time. This also applies to a profiling based on these provisions.

The controller will no longer process the personal data relating to you unless he can substantiate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

If the personal data relating to you are processed in order to operate direct mailing you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, as far as it is associated with such direct mail.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In the context of the usage of information society services you have the option of exercising your right to object through automated procedures that use technical specifications regardless of Directive 2002/58 / EC.

10.8 Right to Revocation of the Data Protection Consent Form

You have the right to revoke your data protection consent form at any time. The revocation of the consent does not affect the legality of the processing based on the consent until revocation.

10.9 Automated decision on a case-by-case basis including profiling

You have the right not to be subject to any decision based solely on automated processing including profiling that will have legal effect or will similarly affect you in a similar manner. This does not apply if the decision

  1. is required for the conclusion or performance of a contract between you and the person responsible,
  2. is permitted by union or member state legislation to which the controller is subject to, and such legislations contain appropriate measures to safeguard your rights and freedoms and legitimate interests, or
  3. is taken with your explicit consent. However, these decisions must not be based on special categories of personal data according article 9
  4. (1) GDPR, unless article 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
  5. With regard to the cases referred to in (1) and (3), the person responsible will take appropriate measures to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the side of the person responsible, to express his / her own position and to challenge of the decision.

10.10 Right to Complain to a Supervisory Authority

Regardless of any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you violates the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to article 78 of the GDPR.

Name and Address of the Person responsible for Processing

The person responsible in accordance with the General Data Protection Regulation, other data protection laws in the member states of the European Union and other provisions with data protection character is:

Gigas Nutrition BV
Postbus 111
5900AC Venlo
Netherlands
Stand 05/2018


Accept

Our website uses cookies to change the content of our site. By using it, you agree with it. Please search our Privacy Policy for deactivation information.