Last Update : April 2020
Kaffee La Finca operates the www.kaffeelafinca.de website.
This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to reach www.kaffeelafinca.de (named as Service, Kaffee La Finca, we or us after that).
Data processing by Kaffee La Finca can essentially be divided into two categories:
Data related to Cookies and Tracking : When you access our websites, various information is exchanged between your device and our server or the server of the services we use. This may also involve personal data. The information collected in this way is used, inter alia, to further optimise our websites.
Personal Data : For the purpose of executing or preparing the contract, all data necessary for the execution of a sales contract with Kaffee La Finca will be processed. If external service providers are also involved in the execution of the contract, e.g. payment service providers, shipping service providers, optimisation services, hosters, etc., your data will be passed on to them to the extent necessary in each case.
1. Cookies and Tracking
By using Kaffee La Finca, you consent to us using cookies and similar tracking technologies in the ways described on this page.
1.1 Types of tracking technologies
There are a few common types of tracking technologies used on Kaffee La Finca:
Cookies: This is a small data file sent from a server to your web browser or mobile device that is stored in your browser cache or mobile device. Advertising which corresponds better to the interests indicated by the information stored by that cookie can then be displayed to. You can configure your browser's settings to reflect your preference to accept or reject cookies.
Clear gifs, web beacons, web bugs: These are tiny graphics with a unique identifier similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user's computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. We do not tie the information gathered by clear gifs to your personally identifiable information.
While Kaffee La Finca does not currently employ Flash cookies, also known as local shared objects (LSOs), some third parties you interact with when using the Services may use these cookies, which are used to collect and store information, but differ from browser cookies in the amount, type, and manner in which data is stored.
Tracking technologies have two different lifespans:
Persistent means it remembers certain information about your preferences for viewing the site, and allows Kaffee La Finca to recognize you each time you return. Persistent cookies are stored on your browser cache or mobile device until you choose to delete them.
Session , on the other hand, is specific to a particular visit to the site, to carry information as you view different pages on Kaffee La Finca so you don’t have to re-enter information. Session cookies expire and delete themselves automatically when you leave the Site or close your web browser.
Kaffee La Finca uses tracking technologies for a few general purposes:
Strictly necessary : Vital to ensuring that Kaffee La Finca works properly for visitors and members (such as maintaining the security and integrity of the Site).
Performance : Help us understand how the Site or the Apps are functioning so that we can improve our services.
Functionality : Retain your personal preferences as you use the Site or the Apps to enhance your experience.
Marketing and Advertising : Gather data to help deliver advertising content relevant to your interests.
the type of internet browser you are using
the operating system of your PC or device
the time and date you landed on or searched our site
time spent on our webpage
the address of the site which referred you to our site (e.g., google.com)
1.3 Google Analytics
You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: https://tools.google.com/dlpage/gaoptout
Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).
1.4 Opting-Out and Managing Cookies
When you use Kaffee La Finca via a browser, you can change your web browser's settings to reflect your cookie preferences. Each browser is a little different, but usually these settings are under the "options" or "preferences" menu. The links below provide information about cookie settings for the browsers supported by Kaffee La Finca:
You can learn more about managing your preferences for ads online, particularly for many third-party advertising networks, through resources made available by the Digital Advertising Alliance at https://www.aboutads.info/ or via the Network Advertising Initiative at http://optout.networkadvertising.org/.
If you have questions or concerns, please contact us at firstname.lastname@example.org
2. Personal Data related to online STORE and newsletter
We offer interested customers the opportunity to subscribe to our newsletter or coffee expert mailing via our website. This enables us to keep our customers up to date with the latest developments, such as special promotions, exciting information about the world of coffee, recipes, etc. To ensure that the email address provided corresponds to the customer in question, we use the double opt-in procedure: After entering your email address in the registration field, we will send you a confirmation link. Only when you click on this link will your email address be added to our mailing list. We store the data collected during this process solely for documentation and verification purposes. In particular, this includes:
the email address provided
the IP address of the device used
the date and time of registration
the manner of address
the date, content and time of the confirmation email
the IP address of the device used for the confirmation
the date and time of your confirmation
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR. This processing is necessary in order to meet your request. We store this data until the end of the statutory limitation periods, in order to document the legality of the newsletter dispatch. After the respective limitation period has expired, we retain the personal data required by law for the periods specified by law. You can object to this processing at any time with effect for the future. All you need to do is click on the unsubscribe button in the respective email or send us a brief message via email. To do this, please use the contact options provided for our company data protection officer.
2.2 Data Protection
We have taken extensive technical and organisational actions to protect your data from possible dangers such as unauthorised access, unauthorised notice, changes or distribution, as well as from loss, destruction or abuse.
Data are stored via Ecwid Server a online store provider, Ecwid acts as a Data processor while Kaffee La Finca act as Data controllers.
If Kaffee La Finca experiences a data breach of any kind related to kaffeelafinca.de, affected customers will be notified. Under the GDPR, a notification must be sent within 72 hours from the time you become aware of the breach. Data processors are also required to notify users as well as the Data controllers, immediately after becoming aware of a data breach.
Ecwid collects, stores, processes and shares personal data based on GDPR guidelines and complies with GDPR requirements in the following ways:
Ecwid assigned a Data Protection Officer who is in charge of the Ecwid Data Protection Policy;
Ecwid started to deliver GDPR-focused training to our key teams and personnel;
Ecwid implemented a detailed procedure to deal with all data subject access requests, deletion requests, and government access requests;
Ecwid work only with subprocessors who provide an adequate protection of the personal data through robust technical and organizational measures;
Ecwid developed a reliable method to detect, report and investigate a personal data breach;
Ecwid established the necessary records of data processing activities;
Ecwid is certified under the EU - U.S. and Swiss - U.S. Privacy Shield frameworks; this arrangement calls for certified organisations to guarantee a level of security in line with EU data protection law regarding the transfer of personal data from the EEA and Switzerland to the U.S.
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
3. Links to Other Sites
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and is accessible here www.facebook.de. These separate social plugins are marked through one of the Facebook logos or through the ‘Facebook Social Plugin’. A list with the appearances and functions of the individual plugins is accessible here: developers.facebook.com/docs/plugins. If you visit a site of our website which contains such a social plugin, your browser builds a direct connection to the servers of Facebook. The content of the social plugins will be transmitted from Facebook directly to your browser which integrates it into the website. Therefore, we have no influence on the scope of the data Facebook collects with the social plugins and inform you accordingly to our level of knowledge: Due to the integration of the social plugins, Facebook is informed that you visited the relevant site of our website. This also happens, when you are not registered as a user of Facebook or when you are currently not logged in into your Facebook account. This information combined with your IP address is sent from your browser to a server of Facebook in the United States and saved. According to information by Facebook only the anonymised IP address is saved from not-registered users in Germany. If you are logged in into your Facebook account, Facebook can match the visit of our website directly to your account. Facebook obtains the information of your visit on our website independently from you interacting with the social plugin or not. When you interact with the social plugins, for example by clicking the Like-Button or by commenting, the corresponding information will be transmitted by your browser directly to Facebook and then saved. In addition, the information will be published and shown to your Facebook friends. Purpose and extent of the data collecting and further processing and usage of the data by Facebook as well as your corresponding rights and setting options for privacy security can be found in the privacy policies of Facebook at www.facebook.com/about/privacy. If you are a registered user of Facebook and you do not want Facebook to collect your data on our website and to connect it to your Facebook member information, you must log out your Facebook account before visiting our website. Additionally, it is possible to block the social plugins with add-ons for your browser such as Facebook Blocker webgraph.com/resources/facebookblocker
We promote the service Instagram on our website. Instagram is a service of Instagram Inc. By means of the integrated "Insta" button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the "Insta" button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.
To prevent your visit to our site from being accessed by your Instagram account, you must log out of your Instagram account before visiting our site.
On this website, plugins from the social network Pinterest which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-4904, USA are integrated. You can identify these plugins through the “Pin It Button” or the Pinterest logo. If a user visits a website that contains such a button, the browser builds a direct connection to the servers of Pinterest. Thereby, Pinterest obtains the information that you visited our website with your IP address. If you click on the “Pin It Button” or the Pinterest logo while being logged in into your Pinterest account, you can link content from this website directly to your Pinterest profile. Thereby, Pinterest can match the visit on our web directly to your user account. If you are a Pinterest member and you want to avoid that Pinterest collects personal data about you through our website and match those to your member data, you need to log out your Pinterest account before visiting our website as well as avoid clicking on the Pinterest plugins. We want to point out that we do not have any influence on the volume of data Pinterest collects with these plugins and can only inform the users accordingly to our level of knowledge: Your log data e.g. the user’s IP address or the previously visited websites etc are transferred. Further information can be found in the privacy policies of Pinterest here: de.about.pinterest.com/privacy/
3.4 Google AdSense
4. Your rights
Rights on providing information, permissions, revocation, deletion and blocking.
You have the right to demand information if and which personal data from you is processed by us. Furthermore, you have the right to demand the correction or the completion of your personal data.
Under certain circumstances, you have the right to demand a deletion of your personal data.
Under certain circumstances, you have the right to demand a restriction of the processing of your personal data.
You can withdraw completely or partially from your agreement on processing and using of your data with effects on the future.
You have the right to receive your personal data in a common, structured and machine-readable format.
You can also address questions, comments and complaints as well as requests for information in connection with our privacy policies and the processing of your personal data in writing to our data protection officer.
You have the right to complain at the responsible supervisory authority if you think the processing of your personal data violates legal requirements.