General Information
This Privacy Policy provides detailed information about what happens to your personal data when you visit our website, Bucci.life. Personal data includes any information that can be used to identify you personally. When processing your data, we strictly comply with applicable legal requirements, in particular the General Data Protection Regulation (“GDPR”), and place great importance on ensuring that your visit to our website is secure.
Data Controler
The data controller responsible for the collection and processing of personal data on this website is:
Bucci Smart Food System GmbH & Co. KG
Rheinstraße 4
53604 Bad Honnef
Deutschland
E-Mail: info@bucci.life
Phone.: 0049(0)1791155598
Access Data (Server Log Files)
When you visit our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us. This includes:
Browser type and browser version of your PC
Operating system used by your PC
Date and time of the server request
IP address currently used by your PC (where applicable, in anonymized form)
As a rule, it is neither possible nor intended for us to identify you personally from this data. Such data is processed in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.
Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot execute programs or transmit viruses to your computer system.
Cookies that are necessary for electronic communication or for providing certain functions requested by you are stored on the basis of Art. 6 (1) lit. f GDPR. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services. Where other cookies are stored (e.g. cookies used to analyze your browsing behavior), these are addressed separately in this Privacy Policy.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.
You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to reject cookies in certain cases or altogether, and to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Web Analytics Tools and Advertising
1 Google Analytics
Our website uses the web analytics service Google Analytics. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics uses so-called “cookies.” These are text files stored on your computer that enable an analysis of how you use our website. The information generated by the cookies about your use of our website is generally transmitted to and stored on a Google server in the USA. The IP address transmitted by your browser is not combined with other data held by Google.
The legal basis for processing your data is the consent you have given via the cookie consent tool in accordance with Art. 6 (1) sentence 1 lit. a) GDPR.
1.1 Demographic Features in Google Analytics
Our website uses the “demographic features” function of Google Analytics. This allows reports to be generated containing information about the age, gender and interests of website visitors. This data comes from Google’s interest-based advertising as well as visitor data from third-party providers. This data cannot be attributed to a specific individual. You can disable this function at any time via the ad settings in your Google Account or generally prevent the collection of your data by Google Analytics as described under “Objection to Data Collection.”
1.2 Data Processing
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
1.3 Storage Period
Data stored by Google at the user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Further details can be found here: Google Analytics – Data Retention
1.4 Objection to Data Collection
You can prevent cookies from being stored by selecting the appropriate settings in your browser software. However, please note that if you do so, you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookies relating to your use of the website (including your IP address) and from processing this data by downloading and installing the Google Analytics opt-out browser add-on available at the following link: Google Analytics Opt-out Browser Add-on.
If you delete the cookies on your computer, you will need to set the opt-out cookie again.
For more information on how Google Analytics handles user data, please refer to Google’s privacy information: https://support.google.com/analytics/answer/6004245?hl=en.
For further information on data protection, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.
Newsletter
• If you have expressly consented, we will regularly send our newsletter to your email address. To receive our newsletter, you must provide us with your email address and subsequently verify it. No additional data is collected unless provided voluntarily. The data is used exclusively for sending the newsletter.
• The data provided when subscribing to the newsletter is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time. To withdraw your consent, simply send us an informal notification by email or unsubscribe using the “Unsubscribe” link in the newsletter. The withdrawal of consent does not affect the lawfulness of any data processing carried out prior to the withdrawal.
• Data provided for the purpose of setting up the subscription will be deleted upon unsubscribing. If this data has also been provided to us for other purposes or through other channels, it will continue to be stored by us.
Contact form
If you contact us by email or via a contact form, the data you provide, including your contact details, will be stored in order to process your inquiry and to respond to any follow-up questions. This data will not be shared with third parties without your consent.
The data entered into the contact form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To withdraw your consent, simply send us an informal notification by email. The withdrawal of consent does not affect the lawfulness of any data processing carried out prior to the withdrawal.
Data submitted via the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or there is no longer any need to retain the data. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Use and Disclosure of Data
The personal data you provide to us, for example by email (such as your name, address or email address), will neither be sold to third parties nor otherwise used for marketing purposes. Your personal data will only be processed for correspondence with you and solely for the purpose for which you provided it to us. To process payments, we will disclose your payment details to the financial institution responsible for processing the payment.
Data that is automatically collected when you visit our website will only be used for the purposes stated above. The data will not be used for any other purposes.
We assure you that we will not otherwise disclose your personal data to third parties unless we are legally required to do so or you have given us your prior consent.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the website operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in your browser’s address bar from “http://” to “https://” and by the padlock icon displayed in your browser.
If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Storage Period
Personal data provided to us via our website will only be stored for as long as necessary to fulfil the purpose for which it was provided. Where retention periods under commercial and tax law must be observed, certain data may be stored for up to 10 years.
Rights of Data Subjects
With regard to your personal data, as a data subject you have the following rights vis-à-vis the controller in accordance with the applicable legal provisions:
1. Right to Withdraw Consent
Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw consent previously given for the processing of your data at any time with effect for the future in accordance with Art. 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal. The storage of data for billing and accounting purposes remains unaffected by the withdrawal of consent.
2. Right of Access
Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If such processing takes place, you have the right to obtain information about the personal data we process concerning you, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria used to determine that period, the existence of a right to rectification, erasure or restriction of processing, the right to object to processing, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected directly from you by us, and the existence of automated decision-making, including profiling.
Where applicable, you also have the right to obtain meaningful information about the logic involved, as well as the significance and intended consequences of such processing for you. Furthermore, you have the right to be informed of the safeguards pursuant to Art. 46 GDPR that apply when your data is transferred to third countries.
3. Right to Rectification
Pursuant to Art. 16 GDPR, you have the right to request the immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data at any time.
4. Right to Erasure
Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data where one of the following grounds applies:
4.1 Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
4.2 You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
4.3 You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;
4.4 The personal data has been unlawfully processed;
4.5 The personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which we are subject;
4.6 The personal data has been collected in connection with the offer of information society services pursuant to Art. 8(1) GDPR.
4.7 However, this right does not apply insofar as the processing is necessary:
• 4.7.1 for exercising the right to freedom of expression and information;
• 4.7.2 for compliance with a legal obligation that requires processing under European Union law or the law of a Member State to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• 4.7.3 for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
• 4.7.4 for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right of the data subject is likely to render impossible or seriously impair the achievement of the objectives of such processing, or for the establishment, exercise or defence of legal claims.
If we have made your personal data public and are obliged to erase it in accordance with the provisions above, we will, taking into account the available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of any links to, or copies or replications of, your personal data.
5. Right to Restriction of Processing
Pursuant to Art. 18 GDPR, you have the right to request the restriction of processing (blocking) of your personal data. You may contact us at any time using the address provided in the Legal Notice. The right to restriction of processing applies in the following cases:
5.1 If you dispute the accuracy of your personal data stored by us, we generally require time to verify its accuracy. For the duration of this verification, you have the right to request the restriction of the processing of your personal data.
5.2 If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.
5.3 If we no longer require your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
5.4 If you have objected to processing pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
6. Right to Be Informed
If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of such rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. Pursuant to Art. 19 GDPR, you have the right, upon request, to be informed about these recipients.
7. Right Not to Be Subject to a Decision Based Solely on Automated Processing – Including Profiling
Pursuant to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
7.a is necessary for entering into or performing a contract between you and us;
7.b is authorised by European Union or Member State law to which the controller is subject and such law provides suitable measures to safeguard your rights and freedoms and legitimate interests; or
7.c is based on your explicit consent.
However, in the cases referred to in (a) to (c), such decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures have been taken to safeguard your rights and freedoms and your legitimate interests.
In the cases referred to in (a) and (c), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
8. Right to Data Portability
Where processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and is carried out by automated means, you have the right, pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, or to request that it be transmitted directly to another controller, where technically feasible.
9. Right to Object
Where we base the processing of your personal data on a balancing of interests pursuant to Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this Privacy Policy.
If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
10. Right to Lodge a Complaint with the Competent Supervisory Authority Pursuant to Art. 77 GDPR
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Germany
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: 0049(0)2 11/384 24-0
E-Mail: poststelle@ldi.nrw.de
Web: https://www.ldi.nrw.de
Validity and Amendments to This Privacy Policy
This Privacy Policy is effective as of November 29, 2022. We reserve the right to amend this Privacy Policy at any time in accordance with applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to reflect changes to our website or new services offered on our website. The version available at the time of your visit shall apply.
If this Privacy Policy is amended, we intend to publish any changes to our Privacy Policy on this page so that you are fully informed about what personal data we collect, how we process it and under what circumstances it may be disclosed.
