Privacy policy

Last updated on Feb 12, 2026

INTRODUCTION

We attach great importance to the protection of personal­ data. In the following we inform you about the type, scope and purpose of the collection, processing and use of personal data. You can access this declaration at any time via our website if you wish. You can access this website at any time without providing any personal information.


The Gourmie Goods website and platform might contain cross-reference links to other websites of third-party providers. Our privacy policy does not apply to websites of third parties. For this reason, you should carefully read the privacy policies of third-party websites collecting your personal data. If you have been referred to our website via links from third party sites, please also read the privacy policy of the third-party site to find out how they handle your data.

 

SCOPE AND DATA CONTROLLER

This privacy policy applies:

  • To the use of the services provided by Gourmie Goods, brand of Vegshelf UG (haftungsbeschränkt), Leopoldstrasse 49, 40211 Düsseldorf, Germany;
  • To the use of the websites www.gourmiegoods.com and www.gourmiegoods.de provided by Gourmie Goods, brand of Vegshelf UG (haftungsbeschränkt), Leopoldstrasse 49, 40211 Düsseldorf, Germany.


The data controller is: Vegshelf UG (haftungsbeschränkt), Leopoldstrasse 49, 40211 Düsseldorf, Germany.


We collect, process and use your personal data exclusively in accordance with the provisions of German and European data protection law, the basis of which can be found in the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the General Data Protection Regulation (GDPR).

 

CATEGORIES OF PERSONAL DATA COLLECTED

When using our website, our platform, services or contacting us, personal data is being collected. The types of personal information we obtain about you depends on how you interact with our Website and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. During general use of the website, your IP address is collected. 


Information that you directly submit to us through our Services may include:

  • Basic contact details including your name, address, phone number, email.
  • Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
  • Account information including your username, password, security questions.
  • Shopping information including the items you view, put in your cart or add to your wishlist.
  • Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.


If you enter other personal data in the input fields of our website or platform, enter it in forms provided by us or make it available to us in any other way, this data is also collected.


The purpose of data collection is to provide the services necessary for the fulfilment of the contract, e.g. if a site visitor purchases a product from us or we perform a service for him. This legal basis also applies to processing that is necessary for pre-contractual measures, such as in the case of inquiries about our products or services. The legal basis is Article 6 (1) (b) GDPR.


The purpose of the data collection is also to improve our online platform and services, e.g. for cookies that are necessary for the technical operation of our website. The legal basis for this is Article 6 (1) (f) GDPR.


Should the data be used for purposes other than contract fulfilment or the improvement of our online platform or services, we will obtain your prior consent to such data processing. The legal basis in this case is Article 6 (1) (a) GDPR.

 

DURATION OF STORAGE, DELETION OF PERSONAL DATA

The data collected and processed by us will only be stored by us until the storage purpose has been achieved but no longer than 3 years after the data has been collected, unless we are obliged to store the data for a longer period of time due to requirements of national or European law.


Once the purpose of the storage has been achieved, the data is deleted. If an earlier deletion should be obligatory due to specifications of the national or European legislator, the deletion will take place at the time specified by the legislator.

 

GENERAL DATA TRANSMISSION­, LOGGING AND PROCESSING FOR INTERNAL SYSTEM AND STATISTICAL PURPOSES WHEN USING THE WEBSITE

When using our website, general data is also collected about each access. That data is not personal and varies depending on the individual page visited. This data collection serves to transmit the online content and to improve the online platform and services.


The data collected includes:

  • Name of the web page or file retrieved
  • Date and time of retrieval
  • Data volume transferred
  • Notification of successful retrieval
  • Browser type and version
  • Operating system of the user
  • Reference URL (the page that referred to our site)
  • Requesting provider.


It is not possible for us to assign this data to a specific person. This data is not merged with other data sources.


In addition, the IP address of the user is also collected. This is sometimes classified as a personal data point. Therefore, regarding the IP address you have the rights set out in this privacy policy.


We reserve the right to subsequently check the log data if there is a justified suspicion of illegal use based on concrete evidence.


If services of third parties are integrated on our platform or otherwise used for the provision of our platform or services, the data mentioned in this section may also be collected from these third parties. We inform about any such data collection in a separate section of this privacy policy.

 

COOKIES

Cookies include text information which a visited website stores on the user's computer via the user's browser. Storage is either temporary in the main memory (so-called session cookies) or permanent on the hard disk (so-called permanent cookies). Cookies send the cookie information back to the server when the same website is visited again, thus enabling the identification of the user. For example, user statistics can be collected, or the web offer can be adapted to the respective user. This information is sometimes used to identify the visitor to this website as a returning visitor. This use of cookies can be prevented at any time by deleting the cookies in the browser and on the visitor's terminal device.


We use both session cookies and permanent cookies on our website and thus collect, process and use your usage data. We use cookies to make our website more user-friendly, more effective and safer, and to offer our users optimum user guidance and varied content. The data you enter on our website is stored in a cookie, which is exclusively stored on your terminal device. With each individual page request, data is transmitted to the servers of our website and, if necessary, stored in cookies. If advertisements are placed on one of our pages, the advertising partners behind the advertisement also use cookies to optimize the placement of advertisements.


Our website can also be used without cookies. Users must deactivate or restrict the storage of cookies in their browser. The browser can also be set to notify users when a cookie is sent. Cookies can also be deleted from the hard disk of a computer at any time. This can be done manually by deleting the "Cookies" folder, or in many browsers by using the corresponding delete function.


The use of the website or parts of our website may be restricted, less user-friendly or not possible at all if the storage of cookies is deactivated, as certain functions of our website are only available if the storage of cookies has been agreed to.


For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. 

 

CONTACT FORM

When contacting us via the contact option provided on our website (contact form) or via email, the data provided, which is necessary for processing the contact and the request behind it, is stored and processed. In particular, insofar as you enter this in the input masks, your first name and email address will be processed and stored for the purpose of processing the enquiry. The legal basis for this is Article 6 (1) (f) GDPR.

 

NEWSLETTER

You can subscribe to our newsletter on our website. Personal data is processed automatically when registering for the newsletter. Thus, the email address and the IP address of the user are saved. The data entered and collected during registration is used exclusively for the purpose of sending the newsletter and within the scope of the consent given by the user. The user can revoke this consent to the storage and processing of data at any time, even after registering for the newsletter, via a link in the newsletter or by sending a message using our contact details. We have to log the registrations for the newsletter to be able to prove a proper registration. For this purpose, we store the registration and confirmation time and the IP address of the user during the registration process.


The legal basis for the collection and processing of personal data when registering for the newsletter is Article 6 (1) (a) GDPR.

 

USER GENERATED CONTENT

The website may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the website, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

 

USE OF THIRD-PARTY SERVICES

Individual contents, functions and offers on our platform or website are integrated third-party contents. The functionality of these contents, functions and offers requires that the IP address of the user is collected and possibly stored by these third parties.


Shopify

We utilize Shopify as a third-party e-commerce platform to manage our online store, collecting customer data like names, addresses, and payment details to facilitate order processing and customer support. This data is shared with us, the administrators, and may be shared with third-party service providers engaged by Shopify for payment and shipping. Shopify employs security measures to protect customer data and uses cookies for an improved online experience. Customers have rights to access, correct, or delete their data, and by using our store, they consent to data collection as outlined. You can read more about Shopify’s privacy policy here: https://www.shopify.com/legal/privacy.


Google Analytics

We use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google“) on our website. Google Analytics required the use of cookies, text files that are stored to your computer in order to facilitate an analysis of your use of the site. The cookies gather information about your visit to our site and send that information to and stored on a Google server in the United States. Having enabled IP-anonymization on our website, your IP-address will be shortened and anonymized using servers in the European Union or in signatory states to the Agreement on the European Economic Area before it is being transferred to the server in the United States. However, there are special scenarios in which your IP-address will be sent to a US-Server and shortened and anonymized there. Google uses the transferred information to analyse your use of our site, to compile report about your web activity and to provide us with other functions and services relating to your use of web and internet services. Google does not amalgamate the IP-address data transferred to its servers by your browser with other data. You can prevent the storage of cookies by adjusting the settings of your internet browser to deactivate or restrict the usage of cookies. When deactivating the use of cookies, our website or parts thereof may not be fully usable and/or certain functions may be deactivated as they require the use of cookies.


You can also prevent the collection and transfer of your personal data by Google by installing the following plugin for your browser: https://tools.google.com/dlpage/gaoptout?hl=en. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If your information technology system is deleted, formatted or reinstalled at a later time, the browser add-on must be reinstalled to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within their control, it is possible to reinstall or reactivate the browser add-on.


Cookies or comparable technologies are used with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6 (1) (a) GDPR. 


You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information on the terms and conditions and the data protection policy of Google can be found here: https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de. Our website uses the IP Anonymization function provided by Google to enable an anonymization of IP-addresses.


Google Ads with Conversion Tracking

We use Google Ads, an online advertising programme, and as part of this, conversion tracking (visit analysis) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google“) on our website. When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. Data is transferred on the basis of standard contractual clauses, among others, as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. The use of cookies or comparable technologies takes place with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/. 



Google AdSense

We use Google AdSense, a service for the integration of advertisements by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google“) on our website. Google AdSense functions as an online platform facilitating the placement of advertisements on external websites. Operating on an algorithmic system, Google AdSense selects and displays ads on third-party sites based on the content of each specific site. This service enables targeted advertising to Internet users by creating individual user profiles. 


The purpose of Google AdSense is to integrate advertisements on our website. Google AdSense sets a cookie on your IT system, which enables to analyze the use of our website. 

Each time you visit a specific page on our site where the Google AdSense component is integrated, your internet browser is automatically prompted to transmit data to Google server in the USA and stored there. This data transmission serves the purposes of online advertising and commission billing. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks. 


During this technical process, Google gains access to personal data, such as your IP address, which is utilized to trace visitor origins and clicks, facilitating commission invoicing. If you wish to prevent the setting of cookies on our website, you can adjust the settings in your internet browser, thereby objecting to the permanent placement of cookies. This adjustment would also prevent Google from setting a cookie on your IT system. Additionally, previously set cookies by Google can be deleted at any time through your internet browser or other software programs.

Google AdSense utilizes tracking pixels, which are small graphics embedded in internet pages for log file recording and analysis, enabling statistical evaluation. The pixel-code allows Google to recognize when an internet page was opened by your IT system and which links were clicked, contributing to the assessment of visitor traffic to a website.


Under certain circumstances, Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. 


The use of cookies or comparable technologies takes place with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (f) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6 (1) (f) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Further information and Google's privacy policy can be found at:https://www.google.com/policies/technologies/ads/  and https://www.google.de/policies/privacy/ 


Cloudflare

We use the Cloudflare CDN content delivery network by Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA ("Cloudflare") on our website. This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content on our website is delivered. The purpose of data processing is to optimise the loading times of our website and thus make our offer more user-friendly. The following information may be collected in the process: IP address, system configuration information, information about traffic from and to customer websites (so-called server log files). 


Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. Data is transferred on the basis of standard contractual clauses, among others, as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

The use of cookies or comparable technologies takes place with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (f) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6 (1) (f) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on data protection when using Cloudflare at https://www.cloudflare.com/de-de/privacypolicy/.


Mailchimp

We utilize Mailchimp newsletter service by by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (“Mailchimp”). Mailchimp is a third-party email marketing service, which we use for the purpose of enhancing our communication with customers and sending newsletters and analyzing performance of newsletters. This involves collecting email addresses and certain contact details to provide information about our products, promotions, and updates. If you provide data (e.g. your email address) to subscribe to our newsletter, it will be stored on MailChimp servers in the USA. The information submitted during newsletter registration will be utilized for newsletter distribution until you opt to unsubscribe. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website. Upon cancellation, the data will be removed from both our servers and Mailchimp's. 


Upon opening an email dispatched by Mailchimp, a file, referred to as a web beacon, establishes a connection with Mailchimp's servers located in the USA. This connection facilitates the identification of whether a newsletter message has been accessed and which links have been clicked. Furthermore, technical details such as the time of retrieval, IP address, browser type, and operating system are gathered. It's important to note that this information cannot be linked to any specific recipient and is solely employed for the statistical analysis of our newsletter campaigns. The insights gained from these analyses contribute to enhancing the customization of future newsletters based on your interests. Data processing is based on Article 6 (1) (a) GDPR. 


MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States. For more information on the collection and use of data by Mailchimp, your rights in this regard and ways to protect your privacy, please refer to Mailchimp's privacy policy at https://mailchimp.com/legal/terms/. 


Facebook

We use the remarketing function Facebook Custom Audiences by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") on our website. Facebook Ireland and we are jointly responsible for the processing that takes place when the service is integrated. Collection of your data and transmission of this data to Facebook. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are regulated. The agreement is available at https://www.facebook.com/legal/controller_addendumabrufbar. According to this, we are responsible in particular for the fulfilment of the information obligations pursuant to Articles 13, 14 GDPR, for the fulfilment of the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service and for compliance with the obligations pursuant to Article 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Facebook Ireland is responsible for exercising the rights of data subjects in accordance with Articles 15 - 20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service and the obligations under Articles 33, 34 GDPR, insofar as a violation of the Protection of Personal Data affects Facebook Ireland's obligations under the Joint Processing Agreement. The purpose of the application is to target visitors to the website with interest-based advertising on the Facebook social network. The Facebook remarketing tag has been implemented on the website for this purpose. This tag is used to establish a direct connection to the Facebook servers when the website is visited. This tells the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-based Facebook ads. Your data may be transferred to the USA. There is no adequacy decision by the EU Commission for the USA. Data is transferred on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum. Cookies or comparable technologies are used with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's privacy policy at https://www.facebook.com/about/privacy/.



Youtube

We use the function for embedding YouTube videos by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube") on our website. The function displays videos stored on YouTube in an iFrame on the website. The "Extended data protection mode" option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. Cookies or comparable technologies are used with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of processing based on consent before its withdrawal. For more information on the collection and use of data by YouTube and Google, your rights in this regard and ways to protect your privacy, please refer to YouTube's privacy policy at https://www.youtube.com/t/privacy.


Pinterest

We use the Pinterest Pixel, also known as Pinterest Tag, by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). This pixel transmits information about usage such as information about viewed articles to Pinterest. The further processing of the data transmitted to Pinterest is the sole responsibility of Pinterest under data protection law. The information collected via the pixel can be used to display interest-based adverts in your Pinterest account (retargeting). The information collected via the pixel can also be aggregated by Pinterest and the aggregated information can be used by Pinterest for its own advertising purposes as well as for advertising purposes of third parties. For example, Pinterest may infer certain interests from your surfing behaviour on this website and also use this information to advertise third-party offers. Pinterest may also combine the information collected via the pixel with other information that Pinterest has collected about you via other websites and/or in connection with the use of the social network "Pinterest", so that a profile about you can be stored at Pinterest. Cookies or comparable technologies are used with your consent on the basis of Article 15 (3) (1) TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of processing based on consent before its withdrawal. For more information on the collection and use of data by Pinterest, your rights in this regard and ways to protect your privacy, please refer to Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy. 


Instagram

We engage with Instagram by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). Instagram is a third-party social media platform, to connect and engage with our audience. When you interact with our official Instagram account (@gourmiegoods), Instagram may collect and process certain personal information in accordance with its privacy policy. This could include information such as your profile name, images, comments, and interactions with our posts. We encourage you to review Instagram's privacy policy to understand how your data is handled by the platform. By interacting with our content on Instagram, you acknowledge that your data is subject to both our privacy policy and Instagram's terms and policies. For more information on the collection and use of data by Facebook and Instagram, your rights in this regard and ways to protect your privacy, please refer to Instagram’s privacy policy here: https://privacycenter.instagram.com/policy.


TikTok

We engage with TikTok by musical.ly Inc., 10351 Santa Monica Blvd #310, Los Angeles, CA 90025 USA ("TikTok"). TikTok is a third-party social media platform, through which we connect and engage with our audience. When you interact with our official TikTok account (@gourmiegoods), TikTok may collect and process certain personal information in accordance with its privacy policy. This could include information such as your profile name, images, comments, and interactions with our posts. We encourage you to review TikTok's privacy policy to understand how your data is handled by the platform. By interacting with our content on TikTok, you acknowledge that your data is subject to both our privacy policy and TikTok's terms and policies. For more information on the collection and use of data by TikTok, your rights in this regard and ways to protect your privacy, please refer to TikTok’s privacy policy here: https://www.tiktok.com/de/privacy-policy. 


X (formerly Twitter)

We engage with X (formerly Twitter) by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("X"). X is a third-party social media platform, through which we connect and engage with our audience. When you interact with our official X account (@gourmiegoods), X may collect and process certain personal information in accordance with its privacy policy. This could include information such as your profile name, images, comments, and interactions with our posts. We encourage you to review X's privacy policy to understand how your data is handled by the platform. By interacting with our content on X, you acknowledge that your data is subject to both our privacy policy and X's terms and policies. For more information on the collection and use of data by X, your rights in this regard and ways to protect your privacy, please refer to X’s privacy policy here: https://twitter.com/de/privacy. 


LinkedIn

We engage with LinkedIn by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland ("LinkedIn"). LinkedIn is a third-party social media platform, through which we connect and engage with our audience. When you interact with our official LinkedIn account (@gourmiegoods / Gourmie Goods), LinkedIn may collect and process certain personal information in accordance with its privacy policy. This could include information such as your profile name, images, comments, and interactions with our posts. We encourage you to review LinkedIn's privacy policy to understand how your data is handled by the platform. By interacting with our content on LinkedIn, you acknowledge that your data is subject to both our privacy policy and LinkedIn's terms and policies. For more information on the collection and use of data by LinkedIn, your rights in this regard and ways to protect your privacy, please refer to LinkedIn’s privacy policy here: https://https://www.linkedin.com/legal/privacy-policy?_l=de_DE.  


WhatsApp Business

We use WhatsApp Business by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). WhatsApp Business is a third-party messaging platform, to facilitate direct communication with our customers. When you engage with us through WhatsApp Business, certain personal information such as your phone number and messages exchanged may be collected and processed in accordance with WhatsApp's privacy policy. We utilize this information to provide customer support, answer queries, and share updates about our products and services. By communicating with us on WhatsApp Business, you acknowledge that your data is subject to both our privacy policy and WhatsApp's terms and policies. Your personal data is processed with your consent on the basis of Article 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of processing based on consent before its withdrawal. For more information on the collection and use of data by Facebook and WhatsApp Business, your rights in this regard and ways to protect your privacy, please refer to Whatsapp Business’s privacy policy here: https://www.whatsapp.com/legal/privacy-policy-eea 

 

DATA PROCESSING OUTSIDE THE EEA

Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on decisions and recognized transfer mechanisms like the European Commission's Standard Contractual Clauses (Article 45 (3) GDPR), or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.


If no adequate decision exists (e.g. for the USA), the legal basis for the data transfer is usually, i.e. unless we indicate otherwise, standard contractual clauses. These are a set of rules adopted by the EU Commission and are part of the contract with the respective third party. According to Article 46 (2) (b) GDPR, the security of the data transfer is ensured. Many of the providers have given contractual guarantees that protect the data beyond the standard contractual clauses.

 

YOUR RIGHTS

You have the following rights regarding your personal information:


Right to be informed (Article 15 GDPR)

At any time you have the right to be informed about the data stored about you, the data categories, origin and recipients as well as the purpose of collecting, processing and storing that data including the duration of storing that data. You also have a right to be informed about your right to rectify, erase or restrict the processing of your personal data as well as about your right to have your personal data transferred to you. You can obtain that information as well as all other information we are obliged to provide by sending a request to the address in the imprint.


Right to correct or complete incorrect/incomplete data; deletion of data (Articles 16 and 17 GDPR)

You also have the right to correct incorrect data and to have us block or delete your personal data, insofar as this does not conflict with statutory retention requirements. You can also limit the scope of the processing of data.


Right to object to processing

You have the right to object to the processing of your personal data. We will thereafter no longer process the personal data unless there are compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or unless the processing is for the purpose of enforcing, pursuing or defending legal claims.


Right to data transfer

You have the right to receive the personal information you provide to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person provided that the processing is based on a consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or to a contract pursuant to Article 6 (2) (1) (b) GDPR and that the processing is carried out using automated procedures. However, we do not use automated processing procedures.


Right to cancellation ("right to be forgotten")

You have the right to request that the personal data relating to you be deleted without delay, if one of the following reasons applies and if processing is not obligatory:

  • The personal data has been collected or otherwise processed for a purpose for which it is no longer necessary.
  • You revoke the consent on which the processing was based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for processing.
  • You object to the processing in accordance with Article 21 (1) GDPR, and there are no legitimate reasons for the processing or you object to the processing in accordance with Article 21 (2) GDPR.
  • The personal data was processed unlawfully.
  • The deletion of personal data is required to fulfil a legal obligation under EU or German law.
  • The personal data was collected due a consent to the processing of children’s information pursuant to Article 8 (1) GDPR.


Right of appeal to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint at the competent authority (such as the State Data Protection Officer of the individual German states), in particular in the member state of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data is in breach of the provisions of the General Data Protection Regulation.


Addressee for exercising your rights

If you would like to exercise the aforementioned rights, please address your request by stating your current address and your email address (if available):

  • By letter to: Vegshelf UG (haftungsbeschränkt), Leopoldstr.49, 40211 Düsseldorf, Germany
  • By email to: hi@gourmiegoods.com



AMENDMENTS OF PRIVACY POLICY

We keep the rights to amend this privacy policy at any time. If there will be any changes made to this privacy policy, we will post the updated privacy policy here with an effective date.


If we make significant changes to the privacy policy, we may also notify you by other means such as sending an email or posting a pop-up notice on our home page.



APPLICABLE LAW

German law shall be applicable.


CONTACT

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call +49 (0) 176 2195 4363 or email us at hi@gourmiegoods.com or contact us at Leopoldstrasse 49, 40211 Düsseldorf, Germany.


For the purpose of applicable data protection laws, we are the data controller of your personal information. Our representative in the EEA and the UK is Baiba Soika, hi@gourmiegoods.com.