Privacy policy

We are pleased that you are visiting our website. Protecting and safeguarding your personal information while using our website is very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used.

This Privacy Policy applies to the online services of the “Controller” named below. This Privacy Policy covers the domain https://www.uplegger.de/ as well as its subdomains.

This website contains links to external third-party websites over whose content we have no influence. If you click on such a link (marked in red text), you will leave our website and be redirected to the respective provider’s website.

Please note that personal data may be collected by the respective operator when visiting external websites. The operators of those websites are solely responsible for the processing of your data on those sites. Permanent monitoring of the content of linked pages is not reasonable without concrete indications of a legal violation. At the time the links were created, the external websites were checked for possible legal infringements.

Who is responsible and how can you contact us?

Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Uplegger Food Company GmbH
Hans-Böckler-Str. 17
30851 Langenhagen
Germany

Phone: +49 [0] 511 97898 0
Fax: +49 [0] 511 97898 18
Email: Zentrale[at]Uplegger[dot]de

Data Protection Officer

AuReTo UG (limited liability)
c/o Frank Weiß
Email: dsb[at]uplegger[dot]de

What is this about?

This Privacy Policy fulfills the legal requirements regarding transparency in the processing of personal data. Personal data refers to all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website.

Information for which we cannot establish a connection to your person (or only with disproportionate effort), for example through anonymization, is not considered personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or disclosure) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of processing has been fulfilled and there are no legitimate reasons for further retention. We provide information on the specific retention periods or criteria for storage within the individual processing activities. Regardless of this, we may store your personal data in individual cases for the establishment, exercise, or defense of legal claims and where statutory retention obligations apply.

Who receives my data?

We only transfer personal data processed on our website to third parties if this is necessary for fulfilling the respective purposes and covered by the applicable legal basis (e.g., consent or legitimate interests) in the individual case.

In addition, we may disclose personal data to third parties if this serves the assertion, exercise, or defense of legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors, courts, etc.

Where we use service providers for the operation of our website who process personal data on our behalf in accordance with Art. 28 GDPR, these service providers may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing activities.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your device during your visit to our website and stored there. Alternatively, information may also be stored in your browser’s local storage instead of using cookies. We aim to use as few cookies as possible.

You can review the cookies and services used at any time via the consent banner and withdraw your consent for non-essential cookies.

What rights do I have?

Under the conditions of the applicable provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Right of access pursuant to Art. 15 GDPR regarding the personal data stored about you, including meaningful information about the details of the processing and a copy of your data;
  • Right to rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
  • Right to erasure pursuant to Art. 17 GDPR of data stored by us, provided the processing is not required for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or the establishment, exercise, or defense of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR where the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose its deletion because you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR where you have provided us with personal data based on consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and this data has been processed by automated means. You will receive your data in a structured, commonly used, and machine-readable format or, where technically feasible, we will transfer the data directly to another controller;
  • Right to object pursuant to Art. 21 GDPR to the processing of your personal data where processing is based on Art. 6 para. 1 lit. e or f GDPR and there are reasons arising from your particular situation or where the objection is directed against direct marketing. The right to object does not exist if compelling legitimate grounds for processing are demonstrated or where processing serves the establishment, exercise, or defense of legal claims. Where the right to object does not apply to individual processing activities, this is indicated there;
  • Right to withdraw consent pursuant to Art. 7 para. 3 GDPR with effect for the future;
  • Right to lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you may contact the supervisory authority at your habitual residence, place of work, or our company headquarters.

How is my data processed in detail?

Below we provide information about the individual processing activities, the scope and purpose of data processing, the legal basis, whether you are obliged to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the Website

Nature and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in so-called log files:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access originates (referrer URL)
  • Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

Our website is not hosted by ourselves but by a service provider who processes the above-mentioned data on our behalf in accordance with Art. 28 GDPR. The server location is in Germany.

Purpose and legal basis

Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring its security and stability based on Art. 6 para. 1 lit. f GDPR.

The collection of data and storage in log files is absolutely necessary for the operation of the website. Consequently, there is no right to object to this processing pursuant to the exception under Art. 21 para. 1 GDPR.

Where further storage of log files is required by law, processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR.

There is no legal or contractual obligation to provide the data; however, access to our website is technically impossible without providing this data.

Storage period

The above-mentioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 14 days thereafter.

WP Statistics

Nature and Scope of Processing

We use the service “WP Statistics” on our website to analyze visitor traffic and website usage. WP Statistics is hosted on our own servers, meaning that no data is transferred to third parties.

The data processed by WP Statistics includes your IP address, location, date and time of the visit, device and browser information, referrer data, and information regarding interactions with the website. The service does not use cookies.

The purpose of data processing is to analyze website traffic and usage patterns by collecting anonymized visitor statistics.

Purpose and Legal Basis

The legal basis for the use of WP Statistics is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR and your consent pursuant to Art. 6 para. 1 lit. a GDPR in order to analyze visitor behavior and thereby improve the functionality and content of our website.

Storage Period

The retention period for the data is 365 days.

Communication

Contact Form

Nature and scope of processing

On our website, we offer you the opportunity to contact us via a provided form. The information collected through mandatory fields is required in order to process your inquiry. In addition, you may voluntarily provide further information that you believe is necessary for handling your request.

When using the contact form, an email is sent directly to us. Like any regular email, this email transmission is unencrypted. Please bear this in mind when using the form.

Purpose and legal basis

The processing of your data through the use of our contact form is carried out for the purpose of communication and handling your request based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Where your inquiry relates to an existing contractual relationship with us, processing is carried out for the purpose of contract fulfillment based on Art. 6 para. 1 lit. b GDPR.

There is no legal or contractual obligation to provide your data; however, processing your request is not possible without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form based on your consent, we store the collected data for each inquiry for a period of 2 years, beginning with the completion of your request or until you withdraw your consent.

The data submitted via the contact form is sent to us as an email and therefore falls under the category of business correspondence and is subject to the corresponding regulatory requirements.