Privacy and Cookie Policy

Responsible for the processing of data is:

Bingenheimer Saatgut AG
Kronstr. 24
61209
Echzell
06035-1899-0
datenschutz [at] bingenheimersaatgut.de

Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.

1. Access data and hosting

You may visit our website without revealing any personal information. With every visit on the website, the web server stores automatically only a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request.

These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to Art. 6 (1) 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data are deleted no later than seven days after the end of your visit on our website.

Third-party hosting services

Data are also processed by a third-party provider that we have engaged to render hosting and website presentation services on our behalf. This provider processes on its servers all data that are collected in the manner specified below when you visit our website or fill in forms made available for this purpose in our online shop. Data are processed on other servers only in the scope described herein.
This service provider is based in an EU or EEA member state.

2. Data collection and use for processing the contract

We collect personal data that you voluntarily submit to us when you place an order or contact us (e.g. via contact form or by email). Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request and you would otherwise not be able to complete your order or send the contact request. It is evident in each input form what data are collected. We use the data that you disclose to us to perform the contract and process your enquiries according to Art. 6 (1) 1 lit b GDPR. As far as you have given your consent according to Art. 6 (1) 1 lit. a) GDPR by creating Your customer account, we use Your data for the purpose of opening the customer account. Upon completion of the contract or deletion of your customer account, any further processing of your data will be restricted, and your data will be deleted upon expiry of the retention period applicable under relevant regulations, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by law, of which we inform you in this notice. Your customer account can be deleted at any time. For this purpose you can either send a message to the contact option specified below or use the relevant function available in the customer account.

3. Transfer of data

For the purpose of contract performance, we disclose your data to the shipping company in the scope required for the delivery of the ordered goods according to Art. 6 (1) 1 lit. b GDPR. Depending on the payment service provider you have selected during the ordering process, we disclose the payment details collected for order processing purposes to the bank commissioned to handle the payment and, as the case may be, to the payment service provider commissioned by us or to the selected payment service. Some of those data are collected by the selected payment service providers themselves if you open an account with them. In such a case, during the ordering process, you must register with your payment service provider using your access data. In this respect, the privacy notice of the relevant payment service provider applies.

4. Email newsletter and postal advertisement

E-mail advertising if you subscribe to the newsletter
If you subscribe to our newsletter, we will regularly send you our e-mail newsletter based on your consent according to Art. 6 (1) 1 lit a GDPR, using the data required or disclosed by you separately for this purpose.

You may unsubscribe from the newsletter service at any time. For this purpose you can either send a message to the contact option specified below or use the opt-out link in the newsletter. Upon unsubscription, we will delete your email address unless you have expressly consented to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.

The newsletter is sent to you by our service provider who processes data on our behalf and to whom we disclose your email address.
This service provider is based in an EU or EEA member state.

Postal advertising and your right to opt out
Unless you have not opted-out or you are a consumer who has his habitual residence in Spain, we reserve the right to use your first and last name and your postal address for our advertising purposes like sending our annual Organic Seeds Catalogue or other interesting offers and information about our products by post. In case you do not place any order we will delete your address from our mailing list after 2 years. So if you have not ordered anything from us or do not order any more you will still receive up to two annual catalogues. This serves the protection of our legitimate interests in promoting and advertising our products to customers according to Art. 6 (1) 1 lit. f GDPR that are overriding in the process of balancing of interests.
The advertisements are sent to you by our service provider who processes data on our behalf and to whom we disclose your data for this purpose.
You can opt out of the storage and use of your data for these purposes at any time by sending a message to the contact option specified below.

5. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops Trustmark and the collected reviews as well as to offer Trusted Shops products to buyers after an order.
This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Article 6 (1) f GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is made available by a CDN provider (Content-Delivery-Network) as part of order processing. The Trusted Shops GmbH uses also service provider from the USA. An adequate level of data protection is guaranteed. Further information to the data security of the Trusted Shops GmbH can be found here.

When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security problems. The log files are automatically deleted 90 days after creation at the latest.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose personal data is automatically collected from the order data. Whether or not you are already registered as a Trusted Shops customer is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted to this hash value, which cannot be decrypted by Trusted Shops before it is transmitted. After checking for a match, the parameter is deleted automatically.

This is necessary for the fulfillment of our and Trusted Shops' legitimate prevailing interests in the provision of the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6 para. 1 s. 1 lit. f GDPR. Further details, including your right to object, can be found in the Trusted Shops Privacy Policy linked above and within the Trustbadge.

6. Cookies and web-analysis

To improve the user experience on our website and enable you to use its certain features in order to show suitable products or conduct market research, some pages of this website use the so-called cookies. This serves the protection of our legitimate interests in the optimised presentation of our offer according to Art. 6 (1) 1 lit a GDPR that are overriding in the process of balancing of interests.Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

Some of the cookies we use are deleted after you close the browser session, i.e. when you close the browser (that’s the so-called session cookies). Other cookies are stored in your end-user device and enable us to recognise your browser when you visit us again (persistent cookies). To check the cookie storage period, you can use the following table and the Overview function in the cookie settings of your web browser. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Please state your consent ID and date when you contact us regarding your consent.

You can also configure your browser for it to inform you whenever a page uses cookies and decide on a case-by-case basis whether to accept or reject the cookies on a given website or generally. Every browser has a different policy for managing the cookie settings. The browser’s policy is described in the Help menu of every browser and explains how you can change your cookie settings. To find out how to change the settings in your browser, see the links below:
Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies

Google reCAPTCHA

Our website is using the Google reCAPTCHA service which is operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

With this service we can verify if humans or automated software (so-called bots) are entering data on our website (eg. in request forms). reCAPTCHA is evaluating your user-behaviour when you access one of our pages. It is transmitting and analysing your IP-address, time spent on our website or cursor-movements around the reCAPTCHA-field to servers owned by Google in Ireland and possibly also in the USA,

If you are logged in to your Google-account when using our website this data may be combined with other of your personal data. According to Google this is not the case if you are not logged in. So if you want to prevent Google from collecting this data you should logout from your Google-profile before visiting our website.

Our legitimate interest for using this service is to protect our website from abusive automated activities and SPAM in accordance with Art. 6 para. 1 sentence 1 f GDPR

For more information about Google's reCAPTCHA please visit: https://www.google.com/recaptcha/intro/ and review Google's privacy policy under https://policies.google.com/privacy?hl=en

Google Fonts

This website uses fonts from Google (Google Fonts) which are an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to embed the fonts there is a direct connection established between your browser and servers owned by Google Ireland and potentially Google USA each time you access one of our pages.

The data that is transmitted to and processed by Google is the date and time of your access, the webpage address you have visited and your IP-address.

Our legitimate interest in using Google fonts in accordance with Art. 6 para. 1 lit. f) GDPR is a uniform presentation of the contents and texts of our website on all devices and the accelerated integration when loading the website.

For more information about Google's terms of use and data privacy please visit: https://policies.google.com/privacy?hl=en&gl=de

Our online presence on Instagram

When visiting our Instagram page, the provider Instagram processes your data as follows:

- According to Instagram your IP-address, if originating in the EU, is anonymized and deleted after 90 days.

- The device you are using and your approximate location.

In case you are logged in to your Instagram account while visiting our profile, Instagram will allocate your visit and your interactions with us (likes, share, comments, messages, etc.) with your profile by using cookies saved on your device with your Instagram ID.

Based on this data, content or advertising can be offered to you in a personalized way. In order to prevent this you may log out of Instagram respectively deactivate the function ‘remain logged in’, delete the existing cookies and restart your browser. With these settings you are able to use our Instagram profile without linking the activity to your account.

Even if not logged in at the time, having an Instagram account will enable/allow Instagram to process data and activity collected while visiting our profile, if necessary by means of cookies saved on your device creating a so-called shadow profile which will be allocated to your Instagram profile with your next log in when using the same device or browser.

This occurs on every Instagram page and while browsing other pages with Instagram plugins. In order to prevent this you should delete existing cookies on your device and restart your browser. Any common browser offers an extension to prevent (Instagram) tracking.

In addition Instagram will use any data collected while visiting our profile to provide us with statistics about the activity on our site.

Instagram is using this data for their own purposes and, if applicable, may share it with third parties, e.g. other Facebook companies and external partners. The data is also processed on servers in third countries. According to their own information data is processed based on a data processing agreement acknowledging the EU standard contractual clauses according to Art. 46 (2) c),d), in which the provider has committed to comply with EU data protection standards.

It is not known to us in which form or to which extent respectively for how long Instagram is saving data. Some general information may be found here https://help.instagram.com/155833707900388/

The same link provides contact information for the assertion of your rights against Instagram, which are listed under paragraph 1.

7. Sending rating reminders by email

Rating reminder by Trusted Shops
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will disclose your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.com), so that they can email you a rating reminder.
You may revoke your consent at any time by sending a message to the contact option specified below or directly to Trusted Shops.

8. Contact possibilities and your rights

Being the data subject, you have the following rights according to:

•    art. 15 GDPR, the right to obtain information about your personal data which we process, within the scope described therein;
•    art. 16 GDPR, the right to immediately demand rectification of incorrect or completion of your personal data stored by us;
•    art. 17 GDPR, the right to request erasure of your personal data stored with us, unless further processing is required
- to exercise the right of freedom of expression and information;
- or compliance with a legal obligation;
- for reasons of public interest or
- for establishing, exercising or defending legal claims;
•    art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
- the accuracy of the data is contested by you;
- the processing is unlawful, but you refuse their erasure;
- we no longer need the data, but you need it to establish, exercise or defend legal claims, or
- you have lodged an objection to the processing in accordance with art. 21 GDPR;
•    art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
•    art. 77 GDPR, the right to complain to a supervisory authority . As a rule, you can contact the supervisory authority at your habitual place of residence or workplace or at our company headquarters.

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, restrict or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact our in-house data protection officer

Responsible:

Bingenheimer Saatgut AG
Kronstr. 24
D-61209 Echzell
Telephone: +49 (0) 6035 18 99-0

Our external data protection officer is:

Feuerhake Anwaltskanzlei
Maja Reuter
Obere-Masch-Str. 22
D-37073 Göttingen
 
Telephone: +49 (0) 551 53 11 924
datenschutz[at]bingenheimersaatgut.de

You may also submit a complaint to the responsible data protection supervisory authority.

********************************************************************

Right to object
If we process personal data as described above to protect our legitimate interests that are overriding in the process of balancing of interests, you may object to such data processing with future effect. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If your data are processed for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes. Your right to object, is governed by Art. 21 GDPR.

7. Sending rating reminders by email

Rating reminder by Trusted Shops
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will disclose your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.com), so that they can email you a rating reminder.
You may revoke your consent at any time by sending a message to the contact option specified below or directly to Trusted Shops.

7. Sending rating reminders by email

Rating reminder by Trusted Shops
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will disclose your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.com), so that they can email you a rating reminder.
You may revoke your consent at any time by sending a message to the contact option specified below or directly to Trusted Shops.