Data protection

With this data protection declaration we would like to inform you about the type, scope and purpose of processing personal data on our website. Personal data are all data that have a personal reference to you, e.g. name, address, e-mail address or user behaviour.

Who is responsible for data processing in our company
is responsible for data processing:

uncutbread
Anna-Maria Fink
Schellingstr. 109a
80798 München
Deutschland
hello@uncutbread.com
https://www.uncutbread.com/impressum

Processing of your data within the scope of the core activity of our company
We process your personal data transferred to us within the scope of the contractual and pre-contractual relations existing between us. The scope, type, purpose and necessity of the processing shall depend on the underlying contractual relationship. For this purpose we store and process your data in the computer systems used by us. The data processed by us includes all those data which have been provided by you for the purpose of using the contractual or pre-contractual services and which are required to process your inquiry or the contract concluded between us.

This may include in particular the following data:

Name and Adress
Email Address anf telephon number
Contract data
Payment details
The processing is limited to those data which are necessary and expedient to answer inquiries and/or to fulfill a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or within the framework of the organisation of our company for handling financial accounting and compliance with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of financial accounting and the compliance with legal obligations. Processing by us shall be carried out in accordance with your instructions or the statutory provisions. Legal basis: Your personal data will be processed and transferred to third parties in accordance with Article 6(6). 1 lit. b) DSGVO and serves to fulfil the contract between you and us. Otherwise, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO or if there is a legitimate interest in this, Art. 6 para. 1 lit f. DSGVO. This is the case, for example, if this is necessary to pursue our claims. Deletion: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or legal obligations of care as well as for dealing with possible warranty and comparable obligations. This shall not affect the statutory storage obligations.

Webhosting
To maintain our online presence, we make use of an internet service provider on whose server the website is stored (hosting) and who makes our site available on the internet. Here the Internet service provider processes contact data, content data, contract data, usage data, inventory data and meta and communication data on our behalf. Name and address of the Internet service provider: UD Media Kölner Str. 28, 41812 Erkelenz Deutschland You can view its data protection provisions here: https://www.udmedia.de/service/datenschutz/ Legal basis: The Internet service provider processes the above-mentioned data on our behalf, Art. 28 DSGVO The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO.

If you only use our website for information purposes, our internet service provider only collects the personal data that the browser you use transmits to its server. These are the following data:

IP-Address
the date and time of access to our website
Time zone difference to Greenwich Mean Time (GMT)
Access status (HTTP status)
the amount of data transferred
the Internet service provider of the accessing system
the type of browser you use and its version
the operating system you use
the website from which you may have accessed our website
the pages or sub-pages that you visit on our website.
The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary in order to display the website on the device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the aforementioned purposes. Legal basis: The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO. Duration: The above data for the provision of our website is stored for a period of 7 days and then deleted.

Cookies
Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the terminal device you use. Cookies neither transmit viruses nor can they execute programs. Rather, they primarily serve to exchange information between the terminal you use and our website in order to make our Internet offer more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. The transient cookies include in particular the session cookies. These store a so-called Session-ID, with which different requests of your browser can be assigned to the common session. This way our website will recognize your computer when you return to our website. The session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a preset period of time, which may vary depending on the cookie. You have the possibility to delete these cookies in the security settings of your browser at any time.

The cookies serve to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. These cookies may contain information on language settings or log-in information in particular.

In addition, we also use cookies on our website, which enable an analysis of your visit to our website. In particular, these cookies may contain information on search terms entered, frequency of page visits or the use of website functions. These cookies enable us to track how often and in what way the website and its functions are used. They thus serve to improve the quality and user-friendliness of our website, in particular the contents and functions. This enables us to continuously optimize our offer. The data collected in this way is pseudonymised by technical precautions. It is therefore not possible to assign the data to your person. The data is not stored together with other personal data concerning you.

Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for this is Article 6(6). 1 S. 1 lit. f DSGVO.

Since the cookies are stored on your computer, you as a user also have full control over the use of cookies. You have the option of using the security settings of your browser to determine whether cookies are stored at all. For example, you can choose not to accept cookies from the outset, or only accept cookies upon request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

Storage duration/deletion
We delete or block your personal data as soon as the purpose of storage has been achieved or is no longer applicable. Any further storage will only take place if we are required to do so by national or European regulations In this case, the data will be blocked or deleted when the storage period stipulated in the respective regulations has expired, unless we need your data to fulfil a contract concluded between us or if this is necessary to assert, exercise or defend legal claims.

Information on the contact options we have available
If you contact us via e-mail, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, telephone number or e-mail address or provide further information about your person or your request, this data will be stored and processed by our company to process your request. Legal basis: If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. If you make your request within the framework of contractual or pre-contractual relations with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. DSGVO. If your request does not fall into one of the aforementioned categories, our legitimate interest in processing your data is to answer your request properly and in your interest, Art. 6 paragraph. 1 lit. f DSGVO. Deletion: The personal data collected by us will be deleted if they are no longer required. We check the necessity every 2 years. You can also revoke the data processing at any time.

Blog
You have the opportunity to comment on the posts we have posted on our blog. As we ourselves can be held liable for infringing contents (insult, abusive criticism, incitement of the people, forbidden depiction of violence etc.) of your comment under certain circumstances, we save your IP address for a period of 7 days in order to be able to determine your identity if necessary. Legal basis: The legal basis for the storage of your data is Article 6(1) 1 lit. f DSGVO. Deletion: The data collected and transferred by us in this way are automatically deleted after 14 days. Prevention: You can prevent the IP address from being saved by not making any comments.

Online-Shop
If you use our online shop to place orders, we need certain data to be able to process your order. This includes in particular your name as well as your address and electronic contact data, information on the payment process and the services used. These data are stored by us. The information you provide in the mandatory fields of the order form is absolutely necessary for the establishment and fulfilment of the contract. In detail, we use the data transmitted by you to us in particular to

to identify you as our customer,
to process, fulfill and settle your order,
to get in touch with you,
to bill you,
to handle possible liability claims,
to assert contractual claims against you.
Legal basis: The legal basis for the processing of your data is, as far as the processing of your order is concerned, art. 6 paragraph 1 lit. b DSGVO. This also applies to the processing operations necessary to carry out pre-contractual measures.

We only pass on your personal data to third parties if:

the transfer pursuant to Article 6(6) 1 S. 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
for this purpose according to Art. 6 para. 1 S. 1 lit. c DSGVO a legal obligation exists,
this according to Art. 6 para. 1 S. 1 lit. b DSGVO is necessary for the processing of the contract concluded with you (e.g. transfer of the data to the logistics company commissioned with the delivery or for the purpose of payment processing).
Furthermore, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we limit the scope of the transmitted data to the necessary minimum.

When you place an order, register for a user account or log in again, we store your IP address and the time of the respective user action. The purpose of the storage is our but also your legitimate interests in protection against misuse and other unauthorized use. Legal basis: The legal basis is Article 6(1) 1 lit. f DSGVO. This data will not be passed on to third parties, unless the transfer is necessary to pursue our claims or there is a legal obligation to do so in accordance with the law. Art. 6 Abs. 1 lit. c DSGVO.

Deletion: Due to commercial and tax law requirements we are obliged to store your address, payment and order data for a period of 10 years. After expiry of the statutory warranty rights (2 years), however, we will restrict processing in such a way that your data will only be used to comply with the statutory obligations.

Your rights under the DSGVO
According to the DSGVO, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in section 1 of this data protection declaration:

Right to information: In accordance with Art. 15 DSGVO, you can request confirmation as to whether and which of your personal data we process. In addition, you may request from us, free of charge, information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, and the origin of your data if it has not been collected by us. Translated with www.DeepL.com/Translator (free version) Furthermore, you have a right of information as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to be informed about the appropriate guarantees in connection with the transmission.
Right of rectification: In accordance with Art. 16 DSGVO, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.
Right to deletion: In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored with us, as long as we do not require their processing for the following purposes:
to fulfil a legal obligation,
zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen,
to exercise the right to freedom of expression and information, or
on the grounds set out in Article 17(1) 3 lit c and d DSGVO.
Right to limitation: According to art. 18 DSGVO you have the right to request limitation of the processing of your personal data if
the accuracy of the data is contested by you, for a period of time that allows us to verify the accuracy of the personal data
the processing of your data is unlawful, but you refuse to have it deleted and instead demand that the use of the data be restricted,
we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims
you have lodged an objection to the processing of your data in accordance with Art. 21 DSGVO, but it has not yet been established whether the legitimate reasons which, despite your objection, entitle us to further processing outweigh your rights.
Right of information: If you have exercised the right of rectification, erasure or limitation of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification, erasure or limitation of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
Right to data transferability: In accordance with Art. 20 DSGVO, you can request that we receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or request that it be transferred to another responsible party.
Right of appeal: Under Art. 77 DSGVO you have the right to complain to a supervisory authority. For this you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
Right of withdrawal
Pursuant to Article 7(1). 3 DSGVO you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data up to the revocation.

Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of a balancing of interests (Art. 6 para. 1 lit. f DSGVO). This is particularly the case if the data processing is not necessary for the fulfilment of a contract. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.

Irrespective of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the above mentioned contact address of the responsible person.

YouTube
We use components from YouTube, a service of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, on this website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The use of Youtube enables us to embed various videos and clips that are made available on the internet platform www.youtube.de. After a page or subpage of our website is called up on which such an embedding has taken place, the Internet browser used by you is prompted to download video components of the respective embedded video or clip. During your visit to our website and its sub-pages, both YouTube and Google are informed which page or sub-pages you have visited by transmitting your IP address to Google’s external servers in the USA. This information is transmitted regardless of whether the displayed videos or clips are actually viewed or clicked, or whether you are logged in to your YouTube or Google account. Google is a participant in the Privacy-Shield Agreement and is certified for data processing according to European standards. This information is collected and assigned to your Google Account, if you are logged in during your visit. Purpose: The use of the YouTube components on our website is to provide you with videos and clips from www.youtube.de on our website for viewing and interaction purposes. Legal basis: We use Youtube because of our legitimate interest in the optimisation and design of our online offer, Article 6(6) 1 lit. f DSGVO. Prevention: You can prevent data transfer at any time by logging out of your YouTube account or by setting an opt-out cookie under the following link https://adssettings.google.com/authenticated after logging into your Google account by clicking the log-out button.

Information about the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Privacy policy: http://www.google.de/intl/de/policies/privacy
Our online presence with social networks
We operate online presences within the social networks listed below. If you visit one of these sites, your usage data is collected and processed by the respective provider. This is usually done by cookies, which are stored on the terminal device you use. For the concept of cookies, see above under the corresponding heading. Cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. Cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. This is especially the case if you are a member of the respective platform and logged in to it.

The collected data is generally used by the provider for the purpose of advertising and market research by creating user profiles from your usage behaviour. These in turn can be used by the providers to play out interest-related advertising to you. These in turn can be used by the providers to play out interest-related advertising to you. To exercise this, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. To prevent your data from being linked in this way, you can log out of the provider’s service before visiting our site.

For what purpose and to what extent data is collected by the provider, you can see the respective data protection declarations of the providers, which are provided below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request information in detail here or make use of your rights as a data subject, you can do this most effectively with the respective provider, since only the respective providers have access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may become more difficult. Those US providers certified under the Privacy Shield have committed themselves to comply with EU data protection standards. Information on whether the respective provider has such a certificate can be found in the information on the providers listed below.

Legal basis: If you have been asked to give your consent to data processing by one of the providers listed below, the legal basis of the processing is Article 6(6). 1 lit. a DSGVO. Furthermore, the processing of your data is based on our legitimate interests in contacting and communicating with you, Art. 6 para. 1 lit. f. DSGVO. Prevention: For the respective possibilities of objection (Opt-Out) we refer to the following linked information of the providers.

We maintain online presences on the following social networks:
Twitter
Twitter is a service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107 – USA

Headquarters in the EU: Twitter Inc, 26 Fernian St, Dublin – Ireland

Privacy policy available at: https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Instagram
Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA

Privacy policy available at: https://help.instagram.com/155833707900388
Opt-Out: http://instagram.com/about/legal/privacy
LinkedIn
LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

LinkedIn ist ein Dienst der LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

Datenschutzerklärung abrufbar unter: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
Facebook
Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 – USA

Sitz in der EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Irland

Privacy policy available at: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Google Analytics
On our website, we use “Google Analytics”, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate the streams of visitors to our website. Among other things, Google Analytics collects data about which website you came to our website from (so-called referrers), which sub-pages of the website you have accessed or how often and for how long a subpage was viewed and which interactions you have made. In order to collect and store this data, Google Analytics places a cookie on the terminal device you use (see the term above under the heading Cookies). We use the AnonymizeIP function to make your IP address anonymous so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to the anonymous IP address by Google or linked to it. The information thus generated is transferred to Google’s servers in the USA and stored there. Google may pass on this personal data collected via the technical process to third parties. We have concluded a contract with Google. Google is then entitled and obliged to evaluate the information obtained for us and to prepare statistical reports for us on the type and extent of website use. These statistics enable us to constantly improve our offer, to carry out a cost-benefit analysis of our Internet marketing and to make our Internet presence more interesting and user-friendly for you as a user. Legal basis: We obtain your consent to use this service via a so-called opt-in. This means that the cookie, tracking pixel or similar method by which your personal data is processed via this service will not be activated until you have consented to it. The legal basis is Article 6(6). 1 lit. a DSGVO. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to give an effective data protection consent according to the assessment of the respective national legislator. We consider your opt-in as your reasonable expectation regarding the use of cookies. The legal basis in this case is Article 6(6). 1 lit. f DSGVO. In this case, our legitimate interests lie in the user-friendly design of our online offer and our business interest in the collection, storage and evaluation of the data material. Deletion: The data collected and transferred by us in this way are automatically deleted after 14 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may not be able to use all functions of our website to their full extent afterwards. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent data from being collected from you on our website in future. Click the following <Link>. You also have the option of preventing the storage of cookies by setting this in your browser. Cookies already set can be deleted by you at any time.

Information about the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

User conditions: http://www.google.com/analytics/terms/de.html
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Data usage by Google when you use websites or apps of our partners:https://www.google.com/intl/de/policies/privacy/partners
Use of data for advertising purposes: http://www.google.com/policies/technologies/ads
Personalized advertising by Google: http://www.google.de/settings/ads
Google has subjected itself to the Privacy Shield Agreement concluded between the European Union and the USA and certified itself. Google thereby undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
PayPal
We offer on our website the processing of payment via the payment service provider PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal during the order process: First and last name, address, date of birth, email address, telephone number, IP address as well as the data necessary for the processing of the respective order. This information is transmitted so that PayPal can perform an identity check to process your purchase. Among other things, this makes it possible to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can assess your creditworthiness if necessary, or PayPal can pass on the data to credit agencies to assess your creditworthiness in the form of a credit check. The result of the credit assessment in terms of the statistical probability of non-payment is used by PayPal for the purpose of deciding whether to provide the respective payment method. The information collected may also be used by PayPal for analysis purposes, including but not limited to customer analysis, risk analysis, data analysis for purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the use of the data described above is Article 6(6). 1 lit b DSGVO. Deletion: The data collected and transferred by us in this way are automatically deleted after 26 months. Revocation: You can revoke your consent to the use of your personal data at any time vis-à-vis PayPal. Despite revocation, PayPal may still be entitled to process, use and transmit personal data that is absolutely necessary for the contractual payment processing.

Information about the third-party provider:

Terms of use and privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#
Security measures
We also take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of the data protection laws and to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties.

Actuality and change of this privacy policy
This privacy policy is currently valid and has the status July 2019. Due to changes in legal or official regulations, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of SOS Recht. You can find the privacy statement generator here. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.