Privacy Policy

Data protection declaration according to GDPR

Scope and subject of the data protection declaration
The subject of this data protection declaration is the information whether and to what extent we collect personal data via our website, available at https://www.levyandfrey.com, and for what purpose it is processed. This data protection declaration applies exclusively to the aforementioned website. Insofar as there are links to other sites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend checking the data protection declarations on the websites in order to determine whether and to what extent personal data is collected, processed, used and / or made available to third parties.

Definitions and Definitions
This data protection declaration is based on the terms used by the European legislator for directives and regulations when the General Data Protection Regulation (GDPR) was adopted. Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use the following terms in this data protection declaration:

Personal data
All information that relates to an identified or identifiable natural person (hereinafter “data subject”); A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of this natural person.

Affected person 
The person concerned is any identified or identifiable natural person whose personal data is processed by the person responsible for processing.

processing 
Processing is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or change, reading, querying, use Disclosure through transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

Responsible person or person responsible for processing 
The person responsible or the person responsible for processing is the natural or legal person, public authority, agency or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his appointment can be provided for in accordance with Union law or the law of the member states.

Name and contact details of the person responsible 
Organic Label GmbH, Friedrichstrasse 123, 10117 Berlin, Germany, represented by the managing director Jo-Maren Witte.

Purpose and legal basis for processing personal data 

Website call 
1a) Personal data
P address, cookie ID

1b) Description
When you visit our website, we collect so-called access data and save them in a log file (so-called log file). This access data also includes the IP address. In addition, the name of the accessed website, the accessed file, the date and time of access, the amount of data transferred and notification of successful access, the browser type and version, the operating system, the so-called referrer URL (the previously visited Page) as well as the requesting provider.

In addition, cookies are set when you visit our website. For details about the cookies used on the website, the specific purpose that the respective cookie fulfills, and a description of how you can delete these cookies, please refer to the data protection opt-out document.

1c) Purpose of data processing
We collect the log file data, including the IP address, in order to be able to file a criminal complaint with the law enforcement authorities in the event of an attack on our website or our IT infrastructure or, in the event of impending damage, to be able to call in the authorities responsible for hazard prevention and thus the functionality the website. With the help of the cookie identifier, we also receive information about user behavior or search queries and can adapt the offer to the interests of the user on future visits.

1d) Legitimate interest
The log file data, including the IP address, are used to optimize the technical and design of the website and to secure our systems (e.g. in the context of an attack or security incident). From the data in the log file, including the IP address, we cannot establish a personal reference when you visit our website.

1e) legal basis
Art. 6 Paragraph 1 f) GDPR

1h) Provision prescribed or required
The provision of personal data is neither required by law nor by contract. However, without the cookie ID, the service and functionality of our website may be restricted.

The processing of personal data, for example the name, address, email address or telephone number of a person concerned, is always carried out in accordance with the General Data Protection Regulation and in accordance with the applicable country-specific data protection regulations. With this privacy policy, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about their rights by means of this data protection declaration.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone.

Hosting category
For our website we use web hosting providers who process data (log files) in connection with the website on our behalf. The data processing takes place on the legal basis according to Art. 6 Para. 1 f) GDPR.   

The underlying system of our website is Shopify, a shop system from Shopify Inc., 150 Elgin St., 8th Fl, Ottawa, ON K2P 1L4, Canada (“Shopify”).

In the course of providing the shop system, Shopify processes a range of data: Name, email address, delivery and billing address, payment details, company name, telephone number, IP address, information about orders, information about shops visited and supported by Shopify and information about devices and browsers used.

Shopify predominantly uses its subsidiary for customers from the European Union, Shopify International Limited, c / o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32 when it comes to data processing. Regardless of this, it is possible that data will also be transmitted to regions outside the European Union. In this context, Shopify guarantees an adequate level of data protection:

• There is one data that is transmitted to Canada Adequacy decision of the EU Commission: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=DE. 
• Data that is transmitted to the USA, Shopify guarantees an appropriate level of data protection in the course of participating in the EU-US Privacy Shield. 
• Data that is transmitted to subsidiaries of Shopify in other countries, Shopify guarantees an appropriate level of data protection in the course of internal group regulations.

Shopify is certified under: https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4&status=Active.

Category registration form 
You have the option of registering to use our services via our website. We process the data exclusively in connection with your registration, correspondence as part of our range of services and for the delivery of the products you have ordered. If and to the extent that we also pass on personal data to third parties (sponsors, partners and exhibitors), we will obtain your express prior consent.

1a) Personal data
E-mail address, first and last name, company, address

1b) Purpose of data processing
We use the data for the registration process for billing purposes and for processing and delivering your ordered products.

1c) recipient of the data
Your personal data will only be passed on from us to third parties to the service partners and payment service providers involved in the processing of the contract.

1d) Duration of data storage
Until you request the deletion of your personal data. Otherwise, the duration of the data storage is based on the statutory retention periods (as far as billing and invoice data are concerned: 10 years)

1e) legal basis
Art. 6 para. 1 b) GDPR

1f) Special right of withdrawal
You have the right to withdraw your consent to the processing of the personal data at any time. The legality of the processing on the basis of the consent up to your revocation remains unaffected.

1g) Provision prescribed or required
The provision of personal data is neither required by law nor by contract. However, without this information, it is not possible to use our paid services.

Tracking category
1a) Personal data
IP address, cookie identifier

1b) Description
Tracking tools are used on the website. use cookies and collect the IP address. Tracking tools typically examine where visitors come from, which areas of a website are visited and how often and for how long which sub-pages and categories are viewed.

1c) Purpose of data processing
The IP address is part of cookies that are stored on the visitor's computer in order to receive information about user behavior or search queries. In this way, the offer can be adapted to the interests of the user on future visits or targeted advertising.

1d) Legitimate interest
With the help of advertising and tracking tools, we can tailor our offer more specifically to our customers and interested parties and increase traffic by placing target group-oriented ads.

Google Analytics
Company: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

Tool / Description: Google Analytics is a web analysis service. Web analysis is the gathering, collection and evaluation of data on the behavior of visitors to websites.

Third country transfer: Yes

Information on data protection: http://www.google.com/policies/ https://support.google.com/analytics/answer/6004245?hl=de

Opt-out: yes

Google Conversion Tracking
Company: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

Tool / Description: Google is among other things. a provider of advertising and web analytics services. more details

Third country transfer: Yes

Information on data protection: http://www.google.com/policies/
http://www.google.com/policies/technologies/ads/
http://www.google.com/policies/technologies/

Privacy Shield certification

Opt-out: yes

Google Tag Manager
Company: Alphabet Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA

Tool / Description: Google Tag Manager is a tag management system developed by Google to manage JavaScript and HTML tags for tracking and analysis on websites (variants of e-marketing tags, sometimes called tracking pixels or web Beacons) was developed.

Third country transfer: Yes

Information on data protection: http://www.google.com/policies/
http://www.google.com/policies/technologies/ads/
http://www.google.com/policies/technologies/

Privacy Shield certification

Opt-Out: -

Google Adwords 

Company: Alphabet Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USATool / Description: Google AdWords is an advertising system of the US company Google Inc. With this, advertisers can place advertisements that are primarily based on the search results when they are used the company's own services.

Third country transfer: Yes

Information on data protection: http://www.google.com/policies/
http://www.google.com/policies/technologies/ads/
http://www.google.com/policies/technologies/

Privacy Shield certification

Opt-out: yes

Google remarketing / retargeting
So-called tracking cookies from Google are used on the website. The cookies store information about which products you have viewed, how you were made aware of the website (advertisements & affiliate redirection). During subsequent visits to our affiliate partner sites, we can use the cookie information to display targeted, personalized advertising with e.g. products.

We process the data obtained in this way on the basis of your consent Article 6 Paragraph 1 a) GDPR. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.

Facebook - Website Custom Audiences (Facebook Pixel)
Company: Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA

Tool / Description:
Facebook Custom Audience establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited this website with your IP address. This enables Facebook to assign your visit to our website to your user account.

Third country transfer: Yes
Information on data protection: https://www.facebook.com/about/privacyPrivacy Shield certification

Opt-out: yes

Hotjar
Company: Hotjar Limited, Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta

Tool / Description: We use Hotjar to better understand the needs of our users and to optimize the offer on this website. With the help of Hotjar's technology, we get a better understanding of the experiences of our users (e.g. how much time users spend on which pages, which links they click, what they like and what not, etc.) and this helps us to offer our users feedback align. Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their devices (in particular the IP address of the device (is only recorded and stored in anonymised form), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar saves this information in a pseudonymised user profile. The information is neither used by Hotjar nor by us to identify individual users, nor is it combined with other data about individual users.

Third country transfer: Yes

Information on data protection: https://www.hotjar.com/legal/policies/privacy

Opt-out: yes

1f) Duration of data storage
Details on cookies, their storage duration and how you can delete this data (your right to object) can be found under Data Protection Opt-Out.

1g) legal basis
Art. 6 Paragraph 1 f) GDPR

1h) Provision prescribed or required
The provision of personal data is neither required by law nor by contract. However, without the cookie identifier, the service and functionality of our website may be restricted.

1i) Profiling
With the help of the tracking tools, the behavior of the visitors can be evaluated and the interests analyzed; Details and further details can be found under data protection opt-out.

Category recommendation buttons social networks.

Under certain circumstances, our website and our apps make social plug-ins from various social networks available to you. If you want to interact with a social network such as Facebook, Instagram or Pinterest (e.g. by registering an account), your activity on our website or via our apps will also be reported to the corresponding social network. If you are logged into one of these social networks during your visit to one of our websites or interact with one of the social plug-ins, the social network can add this information to your respective profile on this network, depending on your data protection settings.

1a) Personal data
IP address, assignment of the visit data on our website to your user account, you should be logged on to a social medium

1b) Purpose of data processing
The purpose of integrating this component is to enable our users to redistribute the content of this website, to make this website known in the digital world and to increase our visitor numbers.

1c) recipient of the data

Facebook
Company: Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA Tool / Description: With the Facebook button "Share", people can add a personalized message to links before they appear in their Facebook timeline, in groups or with share to their friends via a Facebook message.

Third country transfer: Yes

Information on data protection: https://www.facebook.com/about/privacyPrivacy Shield certification

Opt-Out: -

Pinterest
Company: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USATool / Description:

Pinterest enables users of the social network, among other things, to publish image collections and individual images as well as descriptions on virtual pin boards.

Third country transfer: Yes

Information on data protection: https://about.pinterest.com/privacy-policy

Opt-Out: -

Instagram
Company: Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USATool / Description: Instagram is a free online photo and video sharing service owned by Facebook Inc.

Third country transfer: Yes
Information on data protection: https://help.instagram.com/155833707900388https://www.instagram.com/about/legal/privacy/ Privacy Shield certification

Opt-Out: -

1d) Duration of data storage 

Duration of the processing and handling of the request or until we are requested to delete it.

1e) legal basis
Art. 6 Paragraph 1 f) GDPR

1f) Provision prescribed or required

The provision of personal data is neither required by law nor by contract.

Video, login and software tools category
1a) Personal data
IP address, cookie identifier

1b) Description
Video, login and other software tools are used on our website. use cookies and collect the IP address. With login tools, visitors can securely register on our site via the authentication of a social network. We receive the email address and the user name of the social network that we process on our servers.

1c) Purpose of data processing
The login function of the social network is done with the stipulation that you can use services on our site that require registration.

1d) Legitimate interest
With the help of the login tools we can provide users with simple and uncomplicated access to our services. The video function is used to display content on our website. The personal data used to interact with our content is used to improve our media offering

1e) recipient of the data

YouTube
Company: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

Tool / Description: YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge.

Third country transfer: Yes
Information on data protection: https://www.youtube.com/yt/about/de/
https://www.google.de/intl/de/policies/privacy/

Opt-out: yes

1f) Duration of data storage
Details on cookies, their storage duration and how you can delete this data (your right to object) can be found under Data Protection Opt-Out.

1g) legal basis
Art. 6 Paragraph 1 f) GDPR

1h) Provision prescribed or required

The provision of personal data is neither required by law nor by contract. However, without the cookie identifier, the service and functionality of our website may be restricted.

Communicate with us via Facebook Messenger

For our messaging services we use the messenger service Facebook Messenger from Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA. We can use this messaging platform to contact you for order processing, service inquiries and advertising purposes, and you can place orders for our goods with us. The information provided during the chat process is stored on a Facebook server in the United States. The transmission takes place as a permissible third country transmission on the basis of the so-called Privacy Shield between the EU and the USA (see the entry for Facebbook, Inc.).

For more information, see the Facebook privacy policy (https://www.facebook.com/legal/terms).

Payment method category
You have the option of using our cooperation partners' payment services via our website to pay for our services or products. If you use an internet payment service, your data will be forwarded to this payment service provider. If and to the extent that we also pass on personal data to third parties (sponsors, partners and exhibitors), we will obtain your express prior consent.

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options. Payment is made to Klarna:

Invoice (Pay Later): The payment period is [14] days from dispatch of the goods / tickets / or, in the case of other services, the provision of the service. The complete billing conditions for the countries in which this payment method is available can be found here: Germany, Finland, Great Britain, Netherlands, Norway, Austria, Sweden, Switzerland

Sofortüberweisung (SOFORT): Available in Germany, Austria, Belgium, Italy, Spain, Poland and the Netherlands. Your account will be debited immediately after you have placed your order.

The use of the payment methods invoice, hire purchase and direct debit requires a positive credit check. In this respect, we will forward your data to Klarna for the purpose of address and credit checks as part of the purchase initiation and processing of the purchase contract. Please understand that we can only offer you those payment methods that are permitted based on the results of the credit check. Further information and Klarna's terms of use can be found here. General information about Klarna is available here. Your personal details will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations.

Category newsletter
Email advertising with registration for the newsletter
When you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter

After unsubscribing, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this that is permitted by law and about which we will inform you in this declaration.

1c) recipient of the data

KLAVIYO
Company: 60 South Street, Suite 910, Boston, Massachusetts 02111, USA
Tool / Description: Klaviyo is an email marketing platform that we use to send out our email marketing campaigns and newsletter registrations.

Third country transfer: Yes

Information on data protection: https://www.klaviyo.com/privacy/policy

Privacy Shield certification

Opt-Out: We automatically create unsubscribe forms for all email distribution lists created via Klaviyo.

1d) Duration of data storage
Until we stop using the newsletter or we are requested to delete it by you (withdrawal of consent).

1e) legal basis
Art. 6 Paragraph 1 f) GDPR

1f) Special right of withdrawal
You have the right to revoke your consent to the processing of personal data at any time (unsubscribing from the newsletter). The legality of the processing on the basis of the consent up to your revocation remains unaffected. You will find the contact details for exercising your objection in the imprint of the website. You can also always use the link provided in the advertising email. For this there are no costs other than the transmission costs according to the basic tariffs. The provider of the newsletter tool is also covered by the revocation, and therefore the irrevocable deletion of your data from this company as well.

1g) Provision prescribed or required
The provision of personal data is neither required by law nor by contract. However, it is not possible to send the newsletter without this information.

Your rights
You also have the right to request information about the personal data concerned at any time. This includes, in particular, the right to information about whether and to what extent we process personal data, where this data comes from and for what purpose it is processed. In addition, you have the right to have your data corrected or deleted, to request restriction of processing or to raise an objection to processing. The right to revoke consent given (e.g. to receive advertising) at any time remains unaffected. You also have the right to complain to a supervisory authority. You can assert all your rights against us using the contact details given in the “Responsible” section.

Overview of cookies used
Here you can find out how you can object to the processing of your personal data with regard to cookies (web tracking, etc.) in detail and / or independently delete the personal data collected (in particular the IP address). For the rest, please note our information on your rights in the [Link to data protection declaration] data protection declaration.

Categorization of cookies 
Depending on their function and purpose, cookies can be divided into four categories: Essential cookies, performance cookies, functional cookies and cookies for marketing purposes. Please note that not all of the cookies listed here may be used if you visit our website with a mobile device.

1a) Absolutely necessary cookies (essential cookies)
These are cookies that are required so that you can navigate our website and use the basic functions of the website, such as the assignment of anonymous session IDs to bundle several related queries to a server.

1b) Performance cookies
Performance cookies are used to improve the user-friendliness of a website and thus the user experience. Performance cookies collect information about how our website is used, e.g. the Internet browser and operating system used; Domain name of the website you came from, number of visits, average time spent there, and pages viewed. These cookies do not store any information that would allow the user to be personally identified. The information collected with the help of cookies is aggregated and therefore anonymous.

1c) Functional cookies
Functional cookies enable a website to save information that has already been provided (such as user name, language selection or the location where you are) and thus offer the user improved, more personal functions.

1d) Cookies for marketing purposes
Marketing cookies are used to provide content that is more relevant to the user and tailored to his interests. They are also used to limit the number of times an ad appears and to measure and control the effectiveness of advertising campaigns. They register whether you have visited a website or not and what content has been used. This information can be shared with third parties, such as advertisers, if necessary. These cookies are often linked to third party website functions.

Management of cookies
You can either delete individual cookies or remove the entire set of cookies via your browser settings. Under “Help” or “Settings” you should find information about managing your cookies in your browser.

In addition, you will find information and instructions on how to delete these cookies or how to block their storage in advance, depending on the provider of your browser, under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the appropriate user tools that have been created as part of self-regulatory programs in many countries, e.g. B. the US website http://optout.aboutads.info/ or the EU website Your Online Choices http://www.youronlinechoices.com/.

Most browsers also offer a so-called “Do-Not-Track” function, with which you can indicate that you do not want to be “tracked” by websites. When this function is activated, the respective browser informs advertising networks, websites and applications that you do not want to be tracked for the purpose of behavior-based advertising and the like. Information and instructions on how to edit this function can be found under the following links, depending on the provider of your browser:

Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de

Opera: http://help.opera.com/Windows/12.10/de/notrack.html

Safari: https://support.apple.com/kb/PH21416?locale=de_DE

For further options on how you can object to the processing of your personal data (in particular the IP address), please refer to the respective “opt-out” instructions below.