With the following Privacy Policy, we would like to inform you about the types of personal data (hereinafter also referred to as \u201cdata\u201d) we process, the purposes for which we process it, and the scope of such processing. This Privacy Policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and, in particular, on our websites, in mobile applications, and on external online platforms, such as our social media profiles (hereinafter collectively referred to as the \u201cOnline Offer\u201d). <\/p>\n\n
The terms used are not gender-specific.<\/p>\n\n
As of January 13, 2021<\/p>\n\n
Anja Crhak
Email address:<\/strong> anja@bauchgefuehl-rezepte.de<\/p>\n\n Legal Notice:<\/strong> https:\/\/www.bauchgefuehl-rezepte.de\/impressum\/<\/a><\/p>\n\n The following overview summarizes the types of data processed and the purposes of such processing, and identifies the data subjects.<\/p>\n\n Below, we outline the legal bases under the General Data Protection Regulation (GDPR) on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations in your country of residence or our country of incorporation may apply. Furthermore, should more specific legal bases apply in individual cases, we will inform you of these in the Privacy Policy. <\/p>\n\n National Data Protection Regulations in Germany<\/strong>: In addition to the data protection provisions of the General Data Protection Regulation, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection Against the Misuse of Personal Data in Data Processing (Federal Data Protection Act\u2014BDSG). The BDSG contains, in particular, special provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, data transfers, and automated decision-making in individual cases, including profiling. Furthermore, it governs data processing for the purposes of the employment relationship (Section 26 BDSG), particularly with regard to the establishment, performance, or termination of employment relationships, as well as the consent of employees. In addition, state data protection laws of the individual federal states may apply. <\/p>\n\n We implement technical and organizational measures in accordance with legal requirements, taking into account the state of the art, the costs of implementation, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihoods and severity of threats to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.<\/p>\n\n These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects\u2019 rights, the deletion of data, and responses to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development and selection of hardware, software, and procedures, in accordance with the principle of data protection through technical design and privacy-friendly default settings. <\/p>\n\n SSL Encryption (https)<\/strong>: To protect the data you submit through our online services, we use SSL encryption. You can recognize such encrypted connections by the prefix https:\/\/ in your browser’s address bar. <\/p>\n\n As part of our processing of personal data, the data may be transferred to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, payment institutions in connection with payment transactions, service providers contracted to perform IT tasks, or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data. <\/p>\n\n If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing occurs in connection with the use of third-party services or the disclosure or transfer of data to other parties, entities, or companies, this is done only in accordance with legal requirements.<\/p>\n\n Subject to express consent or where data transfer is required by contract or law, we process or allow the processing of data only in third countries with a recognized level of data protection, contractual obligations through the European Commission\u2019s so-called standard data protection clauses, or where certifications or binding internal data protection policies are in place (Articles 44\u201349 of the GDPR; European Commission information page: https:\/\/ec.europa.eu\/info\/law\/law-topic\/data-protection\/international-dimension-data-protection_de<\/a> ). <\/p>\n\n Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user\u2019s computer. A cookie is primarily used to store information about a user during or after their visit to an online service. The stored information may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was viewed. We also include in the term \u201ccookies\u201d other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as \u201cuser IDs\u201d). <\/p>\n\n We distinguish between the following types and functions of cookies:<\/strong><\/p>\n\n Information on Legal Bases:<\/strong> The legal basis on which we process your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your explicit consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online service and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations. <\/p>\n\n Retention Period: Unless <\/strong>we provide you with explicit information regarding the retention period of persistent cookies (e.g., as part of a so-called cookie opt-in), please assume that the retention period may be up to two years.<\/p>\n\n General Information on Withdrawal of Consent and Objection (Opt-Out):<\/strong> Depending on whether the processing is based on consent or legal authorization, you have the option at any time to withdraw your consent or object to the processing of your data through cookie technologies (collectively referred to as \u201copt-out\u201d). You can initially exercise your right to object through your browser settings, for example, by disabling cookies (although this may also limit the functionality of our online services). You can also object to the use of cookies for online marketing purposes through a variety of services\u2014particularly in the case of tracking\u2014via the websites https:\/\/optout.aboutads.info<\/a> and https:\/\/www.youronlinechoices.com\/<\/a>. In addition, you can find further information on how to object in the details provided about the service providers and cookies used. <\/p>\n\n Processing of Cookie Data Based on Consent<\/strong>: We use a cookie consent management process through which users\u2019 consent to the use of cookies\u2014as well as to the processing activities and providers specified within the cookie consent management process\u2014is obtained, and through which users can manage and revoke their consent. In this process, the declaration of consent is stored so that users do not have to be asked for consent repeatedly and so that we can provide proof of consent in accordance with legal requirements. Storage may occur on the server and\/or in a cookie (a so-called opt-in cookie, or using comparable technologies) to associate the consent with a user or their device. Subject to specific information provided by the providers of cookie management services, the following applies: Consent may be stored for up to two years. In this process, a pseudonymous user identifier is generated and stored along with the time of consent, details regarding the scope of consent (e.g., which categories of cookies and\/or service providers), as well as the browser, operating system, and device used. <\/p>\n\n Cookie Settings\/Opt-Out Option:<\/strong><\/p>\n [borlabs-cookie type=”btn-cookie-preference” title=”Pers\u00f6nliche Einstellungen anpassen”\/]<\/p>\n\n <\/p>\n\n Services Used and Service Providers:<\/strong><\/p>\n\n In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers, from whose servers (or servers managed by them) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services. <\/p>\n\n The data processed in connection with the provision of the hosting service may include any information relating to users of our online service that is generated during their use of the service and their communications. This typically includes the IP address, which is necessary to deliver the content of online services to browsers, and all data entered within our online service or on websites. <\/p>\n\n Email Sending and Hosting<\/strong>: The web hosting services we use also include the sending, receiving, and storage of emails. For these purposes, the addresses of the recipients and senders, as well as other information regarding email transmission (e.g., the providers involved) and the contents of the respective emails, are processed. The aforementioned data may also be processed for the purpose of detecting spam. Please note that emails are generally not sent in encrypted form over the Internet. Although emails are typically encrypted during transmission, they are not encrypted on the servers from which they are sent and received (unless a so-called end-to-end encryption method is used). We therefore cannot assume any responsibility for the transmission of emails between the sender and our server. <\/p>\n\n Collection of Access Data and Log Files<\/strong>: We (or our web hosting provider) collect data on every access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, the date and time of the request, the amount of data transferred, a notification of a successful request, the browser type and version, the user\u2019s operating system, the referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider. <\/p>\n\n Server log files can be used, on the one hand, for security purposes\u2014for example, to prevent server overload (particularly in the case of malicious attacks, known as DDoS attacks)\u2014and, on the other hand, to ensure server performance and stability.<\/p>\n\n When you contact us (e.g., via the contact form, email, phone, or social media), we process the information provided by the person making the inquiry to the extent necessary to respond to the inquiry and take any requested actions.<\/p>\n\n Responses to contact requests made in the context of contractual or precontractual relationships are provided to fulfill our contractual obligations or to respond to (pre)contractual inquiries, and otherwise based on our legitimate interests in responding to such inquiries.<\/p>\n\n We process personal data for online marketing purposes, which may include, in particular, the marketing of advertising space or the display of advertising and other content (collectively referred to as \u201ccontent\u201d) based on users\u2019 potential interests, as well as the measurement of their effectiveness.<\/p>\n\n For these purposes, so-called user profiles are created and stored in a file (known as a \u201ccookie\u201d), or similar methods are used to store user information relevant to the display of the aforementioned content. This information may include, for example, content viewed, websites visited, online networks used, as well as communication partners and technical details such as the browser and computer system used, and information regarding usage times. If users have consented to the collection of their location data, this data may also be processed. <\/p>\n\n Users\u2019 IP addresses are also stored. However, we use available IP masking methods (i.e., pseudonymization by truncating the IP address) to protect users. In general, no personally identifiable information about users (such as email addresses or names) is stored as part of online marketing procedures; instead, pseudonyms are used. This means that neither we nor the providers of the online marketing services know the users\u2019 actual identities, but only the information stored in their profiles. <\/p>\n\n The information in the profiles is typically stored in cookies or using similar methods. These cookies can generally be read later on other websites that use the same online marketing method; they can be analyzed for the purpose of displaying content, supplemented with additional data, and stored on the server of the online marketing provider. <\/p>\n\n In exceptional cases, clear data may be associated with profiles. This occurs, for example, when users are members of a social network whose online marketing methods we use, and the network links the users\u2019 profiles to the aforementioned information. Please note that users may enter into additional agreements with the providers, such as by giving consent during registration. <\/p>\n\n As a general rule, we only have access to aggregated information regarding the performance of our advertisements. However, through what is known as conversion tracking, we can determine which of our online marketing methods have led to a so-called conversion\u2014that is, for example, the signing of a contract with us. Conversion tracking is used solely to analyze the success of our marketing efforts. <\/p>\n\n Unless otherwise specified, please assume that the cookies used will be stored for a period of two years.<\/p>\n\n Notes on Legal Bases:<\/strong> If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed based on our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy. <\/p>\n\n Services Used and Service Providers:<\/strong><\/p>\n\n We incorporate functional and content elements into our online offering that are sourced from the servers of their respective providers (hereinafter referred to as \u201cthird-party providers\u201d). These may include, for example, graphics, videos, social media buttons, and posts (hereinafter collectively referred to as \u201ccontent\u201d). <\/p>\n\n This integration always requires that the third-party providers of this content process users\u2019 IP addresses, since they would not be able to send the content to users\u2019 browsers without the IP address. The IP address is therefore necessary for displaying this content or these features. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as \u201cweb beacons\u201d) for statistical or marketing purposes. These \u201cpixel tags\u201d allow information\u2014such as visitor traffic on the pages of this website\u2014to be analyzed. This pseudonymous information may also be stored in cookies on the user\u2019s device and may include, among other things, technical information about the browser and operating system, referring websites, the time of the visit, and other details regarding the use of our online service; it may also be linked to such information from other sources. <\/p>\n\n Notes on Legal Bases:<\/strong> If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed based on our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy. <\/p>\n\n Facebook Plugins and Content<\/strong>: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt\u2014as part of a transfer (but not the subsequent processing)\u2014of \u201cevent data,\u201d which Facebook collects via the Facebook social plugins (and content embedding features) running on our website or receives as part of a transfer for the following purposes: a) Displaying content and advertising information that corresponds to users\u2019 presumed interests; b) Delivery of commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the ability to identify which content or advertising information is likely to match users\u2019 interests). We have entered into a special agreement with Facebook (\u201cAddendum for Controllers,\u201d https:\/\/www.facebook.com\/legal\/controller_addendum<\/a>), which specifically sets forth the security measures Facebook must follow (https:\/\/www.facebook.com\/legal\/terms\/data_security_terms<\/a>) and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: If Facebook provides us with metrics, analyses, and reports (which are aggregated\u2014i.e., do not contain any information about individual users and are anonymous to us), then this processing does not take place within the framework of joint controllership, but rather on the basis of a data processing agreement (\u201cData Processing Terms,\u201d https:\/\/www.facebook.com\/legal\/terms\/dataprocessing<\/a>), the “Data Security Terms” (https:\/\/www.facebook.com\/legal\/terms\/data_security_terms<\/a>) as well as with regard to processing in the United States based on standard contractual clauses (“Facebook-EU Data Transfer Addendum,” https:\/\/www.facebook.com\/legal\/EU_data_transfer_addendum<\/a>). Users’ rights (in particular the right to access, erasure, objection, and filing a complaint with the competent supervisory authority) are not restricted by the agreements with Facebook.<\/p>\n\n Instagram Plugins and Content<\/strong>: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt\u2014as part of a transfer (but not the further processing)\u2014of \u201cevent data,\u201d which Facebook collects using Instagram features (e.g., content embedding features) implemented on our online platform, or receives as part of a transfer, for the following purposes: a) Displaying content and advertising information that corresponds to users\u2019 presumed interests; b) Delivery of commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the ability to identify which content or advertising information is likely to match users\u2019 interests). We have entered into a specific agreement with Facebook (\u201cAddendum for Controllers,\u201d https:\/\/www.facebook.com\/legal\/controller_addendum<\/a>), which specifically sets forth the security measures Facebook must follow (https:\/\/www.facebook.com\/legal\/terms\/data_security_terms<\/a>) and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: If Facebook provides us with metrics, analyses, and reports (which are aggregated\u2014i.e., do not contain any information about individual users and are anonymous to us), then this processing does not take place within the framework of joint controllership, but rather on the basis of a data processing agreement (\u201cData Processing Terms,\u201d https:\/\/www.facebook.com\/legal\/terms\/dataprocessing<\/a>), the “Data Security Terms” (https:\/\/www.facebook.com\/legal\/terms\/data_security_terms<\/a>) as well as with regard to processing in the United States based on standard contractual clauses (“Facebook-EU Data Transfer Addendum,” https:\/\/www.facebook.com\/legal\/EU_data_transfer_addendum<\/a>). Users’ rights (in particular the right to access, erasure, objection, and filing a complaint with the competent supervisory authority) are not restricted by the agreements with Facebook.<\/p>\n\n Services Used and Service Providers:<\/strong><\/p>\n\n The data we process will be deleted in accordance with legal requirements as soon as the consent authorizing its processing is revoked or other authorizations cease to apply (e.g., if the purpose of processing this data no longer applies or if the data is no longer necessary for that purpose).<\/p>\n\n Unless the data is not deleted because it is required for other, legally permissible purposes, its processing is limited to those purposes. This means that the data is blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person. <\/p>\n\n Additional information regarding the deletion of personal data may also be provided in the individual privacy notices included in this Privacy Policy.<\/p>\n\n We ask that you review the content of our Privacy Policy on a regular basis. We will update the Privacy Policy as soon as changes to our data processing practices make it necessary. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification. <\/p>\n\n If we provide addresses and contact information for companies and organizations in this Privacy Policy, please note that these addresses may change over time, and we ask that you verify the information before contacting them.<\/p>\n\n As data subjects, you have various rights under the GDPR, which arise in particular from Articles 15 through 21 of the GDPR:<\/p>\n\n This section provides an overview of the terms used in this Privacy Policy. Many of the terms are taken from the law and are defined primarily in Article 4 of the GDPR. The legal definitions are binding. The explanations below, however, are intended primarily to aid understanding. The terms are listed in alphabetical order. <\/p>\n\nOverview of Processing Methods<\/h2>\n\n
Types of Data Processed<\/h3>\n\n
Categories of Data Subjects<\/h3>\n\n
Purposes of Processing<\/h3>\n\n
Relevant Legal Bases<\/h3>\n\n
Safety Measures<\/h2>\n\n
Transfer and Disclosure of Personal Data<\/h2>\n\n
Data Processing in Third Countries<\/h2>\n\n
Use of Cookies<\/h2>\n\n
Provision of the Online Service and Web Hosting<\/h2>\n\n
Contact Us<\/h2>\n\n
Online Marketing<\/h2>\n\n
Plugins, Embedded Functions, and Content<\/h2>\n\n
Deletion of Data<\/h2>\n\n
Changes and Updates to the Privacy Policy<\/h2>\n\n
Rights of Data Subjects<\/h2>\n\n
Definitions of Terms<\/h2>\n\n