Privacy Policy
I. General Information
1. Responsible Body
Below we explain to you which personal data is collected and processed by us when using our services and offers.
Tribal Nutrition Limited,
South Bank House, Barrow Street, 6th Floor Dublin 4,
Dublin
Ireland
Email: privacy@eu.kachava.com
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
2. Legal Basis
As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.
We collect and process personal data based on the following statutory regulations:
- Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
- Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
- Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
- Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
3. Rights of affected
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
- Information Right pursuant to Article 15 GDPR, i.e. the right to be informed about how your personal data is processed and which personal data is processed by us,
- Right of rectification pursuant to Article 16 GDPR - i.e. the right to request the rectification of inaccurate personal data relating to you without undue delay, including the completion of incomplete data,
- Right to erasure ("to be forgotten") pursuant to Article 17 GDPR - i.e. the right to request the erasure of your personal data, provided that certain conditions are met,
- Right to restriction of processing pursuant to Article 18 GDPR - i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met,
- Right to data portability pursuant to Article 20 GDPR - i.e. the right to demand that you receive your personal data that you have provided in a structured, common and machine-readable format and the right to transfer it to a third party, provided that certain conditions are met,
- Right to object in accordance with Article 21 GDPR - i.e. the right to object to the processing of your personal data where the processing is based on our legitimate interests, provided that certain conditions are met. Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
4. Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II. Actual data processing
1. Customer registration
1.1. Scope of data processing
In order to use our services, you must first register as a customer. To carry out the
registration, we will collect and process the following personal data: first name, last name, password, email address, payment details. We will use the customer's email address and phone number to contact you regarding our
services and to verify your account email address. In addition, your first name, last name, address will be used for the shipment of your orders and will be therefore forwarded to the respective parcel delivery service . We use an external service provider to store your data. This service provider is based outside the European Union in the United States of America.
1.2. Legal basis
The legal basis for the processing of the aforementioned data is Art. 6 para. 1 sentence 1 (b) and (c) DSGVO. The registration process serves to perform a pre-contractual act, namely the conclusion of the contract with us. The permanent registration as a user enables the fulfilment of the contract, i.e. the fulfilment of the contractual obligations. The use of the e-mail address to contact you and to verify the e-mail address as well as the storage and transfer to other users of the data provided by you also takes place within the scope of our contractual performance. The legal basis for the transfer of data to external service providers is Art. 28 para. 3, 6, u. 7,
Art. 46 para. 2 (c) DSGVO. The standard clauses of the EU Commission are used in the contractual relationship with the service provider.
1.3. Purpose of data processing
The data processing is carried out for the purpose of carrying out pre-contractual measures as well as the fulfilment of the contract. Without the provision of this data, it is not possible for us to contact you as a customer to conclude a contract and to identify you as a customer when you log in. Furthermore, without the disclosure of to the respective parcel delivery service, we cannot deliver your orders. The e-mail address is used for security checks and to contact you in contractual matters.
1.4. Duration of storage
Customer data is stored for as long as you are registered and contracts concluded between you and us exist. After termination of the contractual relationship, the data will be archived
and used exclusively for the processing of warranty cases, within the framework of retention periods under tax or commercial law and to prove that we were entitled to contact you by e-mail or telephone. Deletion takes place after expiry of the retention period under tax or commercial law or after expiry of the warranty obligations, whichever occurs last.
1.5. Possibility of objection and removal
There is no right to object to the processing of data.
2. Google Analytics
2.1. Scope of data processing
Our website uses Google Analytics, a web analytics service provided by:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Tel: +353 1 543 1000
Fax: +353 1 436 1001
Email: support-de@google.com
- hereinafter referred to as "Google".
This software collects information about how you use the website and compiles various statistics from it. The usage data collected includes, in particular, the specific selection of links, the length of time spent on individual pages and the order in which the website is used, and the frequency with which pages are viewed. This data is collected together with your IP address. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated so-called IP anonymization on our website, i.e. the IP address is shortened
beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transferred to the USA.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google itself describes its data processing activities here https://www.google.com/policies/privacy/.
2.2. Legal basis
The legal basis for the processing of data when using the website is Art. 6 para. 1 lit. (a) DSGVO . You give your consent when entering the website in the form of confirmation in our tracking/cookie bar. The legal basis for the transfer of data to Google is Art. 28 para. 6, Art. 46 para. 2 (c) DSGVO. The standard clauses of the EU Commission are used in the contractual relationship with the service provider.
2.3. Purpose of the data processing
The processing serves the purpose of analyzing this website and the usage behavior of its visitors.
2.4. Duration of storage
The data is anonymized immediately after collection. Personal data is therefore only collected in the course of transmission and is not stored permanently.
2.5. Possibility to object and remove cookies
You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the setting of cookies in your browser software. This can be done via the browser itself or via our tracking/cookie bar. This may result in the deactivation of cookies not related to Google and the inability to use all functions of this
website to their full extent. You can prevent the collection of the data generated by the cookie and related to your use (including your IP address) and its transmission to Google, as well as the processing of this
data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
3. Meta Pixel
3.1. Scope of data processing
We have integrated a meta pixel on our site, a service of the Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland
Website: https://www.facebook.com.
Privacy policy: https://www.facebook.com/about/privacy
On the one hand, the service enables us to determine the visitors to our website as a target group for the display of so-called "Facebook ads". This means that we can use the usage data obtained in this way to display the Facebook ads we have placed in a freely selectable manner to those users on Facebook and within the services and partners cooperating with Facebook (more at https://www.facebook.com/audiencenetwork/) who have visited our website or fulfill certain characteristics (for example, identify certain areas of interest or have (not) carried out certain actions on our website). In turn, we transmit this data to Meta in order to be able to select and address such users (so-called "Custom Audiences"). On the other hand, the Meta pixel allows us to analyze the effectiveness of advertisements for market research purposes but also for product optimization. Facebook provides more information at https://www.facebook.com/privacy/explanation.
3.2. Legal basis
The legal basis for the processing of data when using the website is Art. 6 para. 1 lit. (a) DSGVO. You give your consent when entering the website in the form of confirmation in our tracking/cookie bar. The legal basis for the transfer of data to Meta is Art. 28 para. 6, Art. 46 para. 2 (c) DSGVO. The standard clauses of the EU Commission are used in the contractual relationship with the service provider.
3.3. Purpose of the data processing
The processing serves the purpose of analyzing this website and the usage behavior of its visitors. In addition, the processing serves in particular the tracking and interest/behavior-related profiling for marketing, remarketing, conversion measurement, reach measurement and target group formation purposes.
3.4. Duration of storage
Facebook specifies the duration of data storage here:
https://www.facebook.com/privacy/explanation
3.5. Possibility of objection and removal
You can prevent the storage of cookies, including the generation and transmission of data to Facebook, by restricting or prohibiting the setting of cookies in your browser software. This may result in non-Facebook related cookies being deactivated and not all functions of this website can be used to their full extent. You can prevent the collection of the data generated by the cookie and related to your use (incl. your IP address) and its transmission to Facebook, as well as the processing of this data by Facebook, by using the opt-out option at the following link:
https://www.facebook.com/settings?tab=ads.
4. Newsletter
4.1. Scope of data processing
On our website we offer the possibility to register for a newsletter, where registered persons regularly receive e-mails from us with current information. An input mask is available on the website for the registration. The registration requires the entry of your e-mail address. By clicking on the registration button, the data entered in the input mask is transmitted to us. In addition, the date and time of registration for the newsletter and the IP address used are stored. When confirming the newsletter registration as part of the so-called double opt-in procedure, the date and time at which you click on the confirmation link for the newsletter registration and the IP address used are also stored.
The newsletter is sent by an external service provider. For this purpose, your e-mail address will be passed on to the external service provider, who will send the newsletter on our behalf. No further use is made by the service provider. The service provider is based outside the EU in the United States of America.
4.2. Legal basis
The legal basis for the processing of data when registering directly for the newsletter is Art. 6
para. 1 lit. a DSGVO.
The legal basis for the transfer of data to the shipping service provider is Art. 28 (3), (6) and
(7), Art. 46 (2) c) DSGVO. The standard data protection clauses of the EU Commission are used in the contractual relationship with the provider with additional protective measures in favor of European data subjects.
4.3. Purpose of the data processing
The purpose of storing the e-mail address is to enable electronic contact for information
purposes. The date and IP address of the registration as well as the confirmation of the
registration are recorded in order to document the consent to the newsletter dispatch in an
evidence-proof manner and to exclude misuse. The data is passed on to the service provider
for the purpose of sending the newsletter in bulk.
4.4. Duration of storage
Insofar as you have expressly consented to receive the newsletter, we will only delete or block the e-mail address for sending advertising material if you revoke your consent. The data of the confirmation of the newsletter order will be deleted six months after receipt of the revocation. The e-mails sent, insofar as they are business letters, are stored for the duration of the retention periods of the German Fiscal Code (Abgabenordnung) or the German Commercial Code (Handelsgesetzbuch). Further e-mails will be deleted as soon as the user is no longer expected to be contacted.
4.5. Possibility of objection and removal
You can object to the use of the e-mail address for sending the newsletter at any time or revoke your consent without incurring costs that exceed the charges of your communication tariff. You can object to the use of your e-mail address with future effect in every e-mail that is sent to you as part of the newsletter by clicking on a link provided there. You can also object to the use of your data for sending newsletters in the future by sending an e-mail to support@eu.kachava.com.