Data Protection Statement
This Data Protection Statement regulates and provides information about the handling of personal data and data processing by the:
Controller (within the meaning of the European General Data Protection Regulation (GDPR) as well as other data protection laws and other provisions of a data protection law nature that are applicable in the member states of the European Union):
Court of Registration Amtsgericht Lüneburg, HRB120548 Managing Director: Rosemarie J. Bothe Company's registered office Wrestedt OT Emern Amtsgericht Lüneburg, HRA120341 VAT ID No. DE116679032
LIVOS Pflanzenchemie Forschungs- und Entwicklungs- GmbH
Company's registered office Wrestedt OT Emern
Amtsgericht Lüneburg, HRB120548
Managing Director: Rosemarie J. Bothe
We would like to inform you about the nature, scope and purpose of the personal data we collect, use and process as well as explain to you the rights to which you are entitled.
The data protection guidelines apply both for our online offerings (e.g. websites, apps, social media) as well as our other offline activities (e.g. service provision, communications, documentation).
It is possible in principle to use our website without providing personal data. Personal data is any information that relates to an identified or identifiable natural person.
If you wish to make use of special services of our company via our website, the processing of personal data may become necessary.
Processing means any process effected with or without the aid of automated procedures that involves personal data, such as collection, recording, organisation, ordering, storage, adaptation or modification, reading, querying, use, deletion or any other form of providing data.
If there is no legal basis for the processing, we generally seek the consent of the data subject.
Consent is taken to mean any voluntary expression of intent in the form of a statement or other unambiguous confirmatory act indicating that consent to the processing of personal data is given.
Your personal data, such as your name, address, e-mail address or telephone number, will always be processed in accordance with the European General Data Protection Regulation (GDPR) and the country-specific data protection provisions that apply to our company.
As the controller responsible for the processing, our company has implemented a variety of technical and organisational measures to ensure the most complete protection possible for personal data processed through this website. Nevertheless, due to security gaps, absolute protection cannot be guaranteed.
For this reason, you are also free to submit personal data to us in alternative ways, such as by phone or in writing.
Many cookies contain a so-called cookie ID, i.e. a unique identifier of the cookie. This consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie has been stored. This enables the visited web pages and servers to distinguish the individual browser of the data subject from other Internet browsers containing other cookies. In this way, a particular Internet browser can be recognised and identified via the cookie ID.
For this purpose we use so-called session cookies, which are able to recognise that you have visited individual pages on our website. These are automatically deleted after leaving our site.
To optimise the user-friendliness of the website we also use temporary cookies that are stored on your device for a specific period of time. If you visit the page again, it automatically recognises that you have visited us before and what settings and inputs you applied, so you do not have to enter these again.
The data processed by cookies is necessary for the purposes mentioned to safeguard our legitimate interests as well as those of third parties in accordance with Art. 6 (1) sentence 1 lit f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a message always appears before a new cookie is created.
3. Collection of general and personal data
Our website collects general data and information each time you or an automated system visit the website. This is temporarily stored in what is known as a server log-file.
The following information can be captured and stored until automated deletion:
(1) browser types and versions used,
(2) the operating system used by the accessing system and the name of the access provider,
(3) the website from which an accessing system arrives at our website (known as the referrer URL),
(4) the sub-web pages which are directed via an accessing system to our website,
(5) the date and time of access to the website,
(6) an Internet protocol address (IP address) of the accessing computer,
(7) the Internet service provider of the accessing system and
(8) other similar data and information used in the event of attacks on our information technology systems.
This data and information is in no case used to draw conclusions about personal data or personal identification. This information is required rather
(1) to ensure a smooth connection set-up for the website and the convenient use of the website
(2) to optimise the content of our website as well as the advertising for it,
(3) to evaluate system security and system stability
(4) to provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack
(5) to achieve other administrative purposes.
The legal basis for the data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about you.
The anonymously collected data and information is used statistically and with the aim of increasing data protection and data security in our company. This is intended to ensure an optimal level of protection for the personal data processed by us.
The anonymous data of the server log-files is separated from all data provided by a data subject.
4. Registration on our website
You have the option of registering on our website by providing personal data. The personal data transmitted to us in this process is evident from the respective input screen used for the registration. The personal data entered is collected and stored exclusively for our internal use and for our own purposes. A transfer of this to one or more processors, e.g. to a parcel service provider, may occur if the personal data is used exclusively for an internal use attributable to us.
By registering on our website, the IP address assigned by your Internet service provider (ISP), the date and the time of the registration are stored. Storing this data can prevent the misuse of our services, and the data can, if necessary, be used to investigate offences committed. The storage of this data is therefore necessary for our protection. No disclosure of this data is made to third parties, unless there is a legal obligation to pass this on or the disclosure of this data serves for the purposes of law enforcement.
Your registration helps us to offer you content or services that can only be offered to registered users. You are free to change your personal data provided during registration at any time or to delete it completely from our database.
We will provide you with information on request at any time as to what personal data you have stored with us. At your wish or request, we will correct or delete your personal data, provided your request does not conflict with any statutory retention requirements. The person responsible for the data processing or another employee shall be available to you in this context as a contact person.
5. Registration and subscription to our newsletter
We offer you the option of registering for to and subscribing to our company's newsletter. What personal data is transmitted to us when ordering the newsletter is evident from the input screen used in the order.
We use the newsletter to inform our customers and business partners at regular intervals about offers from our company as well as other interesting innovations. In principle, you can only receive our company's newsletter if you have a valid e-mail address and if you register to be sent the newsletter and according to Art. 6 (1) sentence 1 lit. a GDPR have thereby expressly consented to the sending of the newsletter to the specified e-mail address.
Registration for our newsletter is effected using the double opt-in procedure, i.e. after registration, you will receive an e-mail asking you to confirm your registration. This confirmation serves to verify that you are the owner of the e-mail address and that you are authorised to receive the newsletter.
Registration for the newsletter will be logged in order to verify the registration process in accordance with the legal requirements. For this, the IP address assigned by your Internet service provider (ISP) as well as the date and time of login and confirmation are stored. The collection of this data is necessary to be able to trace a possible misuse of your e-mail address later.
The personal data collected when registering for the newsletter will be used exclusively to send our newsletter. There is no transfer to third parties of personal data collected as part of the newsletter service. You may cancel the subscription to our newsletter at any time and revoke your consent to the storage of your personal data that you provided for the newsletter mailing at any time. There is a corresponding link for this in each newsletter. You may also unsubscribe from the newsletter service at any time directly on our website or inform us of your request to cancel or revoke the newsletter service in another way.
6. Use of the mailing service provider "MailChimp"
The newsletters of LIVOS Pflanzenchemie Forschungs- und Entwicklungs GmbH & Co. KG are distributed via MailChimp, a newsletters mailing platform offered by the US Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA.
The e-mail addresses of our Newsletter recipients, as well as the other data of theirs described in this statement, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, MailChimp may, according to its own statements, use this data to optimise or improve its own services, e.g. for the technical optimisation of the mailing and the presentation of the newsletter or for economic purposes, to determine from which countries the recipients come. MailChimp does not, however, use the data of our newsletter recipients to contact our customers itself, nor does it pass the data on to third parties.
We trust in the reliability, and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection framework "Privacy Shield" and is committed to complying with EU data protection requirements. Furthermore, we have concluded a Data Processing Agreement with MailChimp. This is a contract in which MailChimp pledges to protect the data of our users, to process it on our behalf in accordance with the contractual data protection provisions and, in particular, not to pass it on to third parties. The data protection policy of MailChimp can be viewed viewed here.
The newsletters contain what is known as a "web-beacon", i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. This retrieval initially collects technical information, such as information about the browser and your system, as well as your IP address and time of retrieval. This information is used for the technical improvement of services using the technical data or the target groups and their reading behaviour based on where the retrievals are made (which can be determined using the IP address) or when they are made.
Statistical surveys also include determining whether the newsletters will be opened, when they will be opened and which links will be clicked. For technical reasons, this information can indeed be assigned to the individual newsletter recipients. However, neither we nor MailChimp strive to monitor individual users. The evaluations help us to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
7. Use of our contact form on the website
If you have any queries, we offer you the option to contact us via a form provided on our website. This enables quick electronic contact with our company and a direct communication with us; for this a valid e-mail address must be specified. If we are contacted via the contact form, the transmitted personal data will be automatically stored.
The data processing for the purpose of contact with us is performed in accordance with Art. 6 (1) sentence 1 lit. a GDPR based on your voluntarily granted consent. The personal data transmitted to us on a voluntary basis will be stored for the purpose of the processing or for contacting you. There is no disclosure of this personal data to third parties.
The personal data collected by us in the use of the contact form will be automatically deleted after completion of the request made by you.
8. Routine deletion and blocking of personal data
We process and store collected personal data only for the period necessary to achieve the purpose of the storage or as provided for by the European directive and regulatory body or any other legislator in laws or regulations to which we are subject. If the storage purpose ceases to apply or a storage period prescribed by the European directive and regulatory body or any other relevant legislator expires, the personal data is routinely blocked and deleted in accordance with the statutory provisions.
9. Rights of data subjects
Due to the fact that personal data can be collected when using our website, you as the person affected by the processing of your personal data have the following rights:
a) Right to confirmation
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to require us to confirm whether your personal data is being processed. If you wish to make use of this right of confirmation, you can contact an employee responsible for data processing at any time.
b) Right to information in accordance with Art. 15 GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to request free information about the personal data stored or processed about you at any time and to obtain a copy of this information. In particular, you can request information about:
- the processing purposes
- the category of personal data
- the recipients or the categories of recipients to whom your personal data has been or will be disclosed, in particular also in the case of recipients in third countries or to international organisations
- the planned retention period or, if this is not possible, the criteria for determining the duration of this
- the existence of a right to correct or delete the personal data concerning you, or to restrict the processing thereof, or a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- the source of your data or, if the personal data is not collected from you, all available information about the origin of the data
- the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and — at least in these cases — meaningful information on the details of this
If your personal data has been transmitted to a third country or an international organisation, you have the right to receive information about the appropriate safeguards associated with the transmission.
If you wish to make use of this right to information, you can contact an employee who is responsible for data processing at any time.
c) Right to rectification of personal data in accordance with Art. 16 GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to demand the immediate correction of incorrect personal data concerning you. You also have the right, under consideration of the purpose of the processing, to demand the completion of incomplete personal data.
If you wish to make use of this right of rectification, you can contact an employee who is responsible for data processing at any time.
c) Right to erasure of personal data in accordance with Art. 17 GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to require that the personal data concerning you is erased immediately in any of the following cases, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims:
- the personal data has been collected or otherwise processed for such purposes for which it is no longer necessary
- the data subject revokes their consent, on which the processing was based in accordance with Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR, and there is no other legal basis for the processing.
- the data subject submits an objection to the processing in accordance with Art. 21 (1) GDPR, and there are no legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.
- the personal data was processed unlawfully.
- the erasure of personal data is necessary to fulfil a legal obligation under the European Union or national law to which we are subject
- the personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.
If any of the above reasons apply and you wish to erase personal data stored with us, you may contact an employee responsible for data processing at any time. This employee will then take care of the erasure without delay.
If the personal data has been made public by us and if we, as the controller within the meaning of Art. 17 (1) GDPR, are obliged to erase the personal data, we shall after exhausting technical means and provided this is technically possible for us, take appropriate measures to inform other controllers responsible for data processing who process the published personal data, and bring about the erasure of the personal data, insofar as the processing is not necessary. The employee responsible for the processing of personal data will arrange the necessary steps in individual cases.
e) Right to restriction of the processing of personal data in accordance with Art. 18 GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to demand that we restrict the processing if one of the following conditions applies:
- you contest the accuracy of your personal data; the restriction in this case shall be for a period of time that enables us to verify the accuracy of your personal data.
- the processing is unlawful, but you decline to delete your personal data, instead requesting that the use of your personal data be restricted, and we no longer require your data
- we no longer require your personal data for processing purposes, but you need it to enforce, exercise or defend your rights.
- You have raised an objection to the processing in accordance with Art. 21 (1) GDPR and it is not yet established that legitimate reasons exist on our part that override your reasons
If one of the above conditions applies and you require the restriction of personal data stored by us, you can always contact an employee responsible for the processing, who will then arrange for the processing to be restricted.
f) Right to data portability
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to obtain your personal provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person controller provided that the processing is based on the consent pursuant to Art. 6 (1) a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 para 1 b) GDPR and the processing is performed by automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or for the exercise of official authority which has been assigned to us.
In addition, when exercising your right to transfer the data in accordance with Art. 20 (1) GDPR, you have the right to demand that your personal data be transmitted directly by us to another controller, provided that the technical requirements for this are available and this does not affect the rights and freedoms of other persons.
To assert the right to data portability, you may contact any person responsible for processing the data at any time.
b) Right to object in accordance with Art. 21 GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to object at any time to the processing of personal data concerning you, provided that the processing of your personal data is based on legitimate interests in accordance with Art. 6 (1) e) , f) GDPR.
The right to object presupposes that there are reasons that arise from your particular situation or that the objection is directed against direct mail.
In the event of an objection, your personal data will no longer be processed unless we can prove compelling legitimate grounds for the processing that override your interests, rights and freedoms. The same applies if the processing serves the assertion, exercise or defence of legal claims.
If we process personal data in order to operate direct mail, you have the right, at any time, to object to the processing of your personal data for the purpose of such advertising without the existence or statement of a particular situation. This also applies to any profiling, provided it is connected with such direct mail.
If you raise an objection with us to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.
You also have the right to object, for reasons arising from your particular situation, to the processing of your personal data for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) of the GDPR, unless such processing is necessary to fulfil a public interest task.
To assert the right to object, you may contact any employee responsible for processing the data at any time. An objection by e-mail to the e-mail address indicated on our website is sufficient.
Notwithstanding Directive 2002/58/EC, you are also entitled in the context of the use of information society services to exercise your right of objection by means of automated procedures for which technical specifications are used.
h) Automated decisions in individual cases (including profiling)
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, not to be subject to a decision based solely on automated processing (including profiling) which produces a legal effect on you or significantly affects you in a similar way, if the decision
(1) is not required for the conclusion or performance of any contract between us and you, or
(2)is permissible under the European Union or Member State legislation to which we are subject, and this legislation provides adequate measures to safeguard your rights and freedoms and your legitimate interests, or
(3)is made with your express consent.
If the decision is required to enter into a contract or to fulfil a contract with us, or if it is made with your explicit consent, we will take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests.
If you would like to assert your rights in relation to automated decisions, you can contact any employee responsible for data processing at any time.
i) Right of revocation of a data protection consent in accordance with Art. 7 (3) GDPR
As a person affected by the processing of personal data, you have the right, granted by the European directive and regulatory body, to revoke the consent given to us for the processing of personal data at any time; as a result of this we shall no longer be permitted to perform the data processing based on such consent in the future.
If you wish to exercise your right to revoke consent, you can contact an employee responsible for data processing regarding this at any time.
10. Data protection provisions on the application and use of Google Analytics
For the purpose of the needs-oriented design and continuous optimisation of our pages, we use Google Analytics on our website. Google Analytics is a web analytics service offered by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (https://www.google.de/intl/de/about). Web analytics means the collection, compilation and analysis of data about the behaviour of visitors to websites. Among other things, a web analytics service collects data on which website people arrive at a website from (known as referrers), which sub-pages of the website were accessed, or how often and for how long a sub-page was accessed.
In connection with the use of Google Analytics, pseudonymised usage profiles are created and cookies are used. Google Analytics places cookies on the information technology system of the people who visit our website.
The information generated by the cookies on the use of our website and personal data, such as browser type/version, operating system used, referrer URL (previously visited page), host name of the accessing computer (IP address), time of server request, are transmitted to a Google server in the USA and stored there. Google may share this personal data collected through the technical process with third parties.
Through this process, visitor flows on our website can be analysed. Among other things, Google then uses the data and information obtained to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide other services related to the use of our website.
Such an adjustment of the Internet browser used would also prevent Google from setting cookies on the information technology system of the person concerned. In addition, cookies already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
You also have the option of preventing the collection of data generated by Google Analytics and/or the cookies and related to your use of the website, including your IP address and the processing of this data by Google. For this you need to download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the data collection by Google Analytics by clicking on this link. An opt-out cookie is installed which prevents the collection of your data when you visit this website in the future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete cookies in your browser, you must reset the opt-out cookie.
11. Legal basis of the processing
Art. 6 (1) a) GDPR serves our company as the legal basis for those processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfil the contract with you (e.g. for the performance or delivery), the processing is based on Art. 6 (1) b) GDPR. The same applies to processing operations that are necessary for pre-contractual measures, e.g. for inquiries about services. If we are subject to legal obligations requiring the processing of personal data, such as the fulfilment of tax obligations, the basis for the processing is Art. 6 (1) c) GDPR. By way of exception, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This is the case, for example, if you were injured in our company and contact details or other vital information would have to be passed on to a doctor, hospital or other third party. In this case, the processing would be based on Art. 6 (1) d) GDPR.
Lastly, processing operations may also be based on Art. 6 (1) f) GDPR if these are not covered by any of the above legal bases, the processing is necessary to safeguard the legitimate interests of our company or a third party, and our interests do not override your interests, fundamental rights and fundamental freedoms. We are permitted to perform such processing operations essentially because they have been specifically mentioned by the European legislator. The latter has taken the view that a legitimate interest could be assumed, for example, if you are one of our contractual partners (Recital 47, sentence 2 GDPR).
12. Legitimate interests in the processing that are pursued by us or a third party
If the processing of personal data is based on Art. 6 (1) f) of the GDPR, our legitimate interest lies in the performance of our business for the welfare of all our employees.
13. Storage period for personal data
The storage period for personal data is based on the respective statutory retention period. When this deadline expires, the corresponding data will be routinely deleted provided it is no longer required to fulfil the contract or to initiate a contract.
14. Legal or contractual regulations for the provision of personal data; Necessity for the conclusion of the contract; Obligation of data subject to provide personal data; possible consequences of non-provision
We hereby inform you that the provision of personal data is in part provided for or prescribed by law (e.g. tax regulations) or may arise from contractual regulations (e.g. details of the contracting party). It may, for example for the conclusion of a contract, be necessary for you to provide us with personal data that we must subsequently process. For example, you may be required to provide us with personal data when you enter into a contract with our company, as the contract may otherwise not come about. At your request, an employee responsible for data processing will explain to you on a case by case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract. You can also ask this person if there is an obligation to disclose your personal data and what would consequences would arise if you chose not provide the data.