1. information about the collection of personal data
In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

2. name and address of the data controller
The responsible party pursuant to Article 4 (7) of the EU General Data Protection Regulation (DS-GVO) is ESG Kräuter GmbH, Rudolf-Grenzebach-Straße 20, 86663 Hamlar, Germany, Tel.: +49(0)906 7057830, e-mail: info@esg-kraeuter.de (see our imprint).

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

3. contact details of the data protection officer
You can reach our data protection officer at datenschutz@fuchs.de or our postal address with the addition of “the data protection officer”. Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

4. your rights
a) You have the following rights with respect to us regarding personal data concerning you:
. Right to information (Art. 15 DS-GVO),
. Right to rectification (Art. 16 DS-GVO) or deletion (Art. 17 DS-GVO),
. Right to restriction of processing (Art. 18 DS-GVO),
. Right to object to processing (Art. 21 DS-GVO),
. Right to data portability (Art. 20 DS-GVO).

b) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

5. collection of personal data when visiting our website in general
In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f) DS-GVO):
. IP address
. Date and time of the request
. Time zone difference from Greenwich Mean Time (GMT)
. Content of the request (specific page)
. Access status/HTTP status code
. amount of data transferred in each case
. Website from which the request comes
. Browser
. Operating system and its interface
. Language and version of the browser software.

6. general information on the duration for which the personal data is stored
We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or on the basis of a legal obligation. If the storage purpose ceases to apply or the prescribed storage period ends, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

7. legal or contractual provisions for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision.
We inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data by the data subject, the data subject must contact us using the contact details provided in section 3. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

8. no automated decision making
No automated decision-making or profiling takes place.