Südzucker AG attaches great importance to the protection of your privacy and your personal data as well as the necessary data security and therefore collect, process and use your personal data exclusively in accordance with the principles described below and with national and European legal regulations, in particular the German Telemedia Act and the German Federal Data Protection Act.
The controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the member states as well as other data protection regulations is:
Telefon: (0621) 421-0
Telefax: (0621) 421-234
Chairman of the Supervisory Board: Dr. Hans-Jörg Gebhard
Executive Board: Dr. Wolfgang Heer (Chairman), Dr. Thomas Kirchberg, Thomas Kölbl, Johann Marihart, Ingrid-Helen Arnold
Local Court Mannheim, HRB 0042 r. Hans-Jörg Gebhard
(hereinafter referred to as: „Südzucker“)
If you wish to object to the collection, processing or use of your data by us in accordance with this data privacy statement generally or for individual measures, you may send your objection by e-mail, fax or letter to the aforementioned contact data or to our data protection officer. You will also receive information on your personal data at any time and free of charge under the contact data stated above.
The data protection officer of the controller is:
Data protection officer
(hereinafter referred to as: “DPO”)
We only process personal data of our users to the extent this is necessary to provide a functional website as well as our contents and services. As a general rule, the processing of personal data of our users takes place only after consent has been obtained from the user. An exception applies in those cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual steps.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR constitutes the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first interest, Art. 6 para. 1 lit. f GDPR is the legal basis for processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned provisions expires, unless there is a need for continued storage of the data for the conclusion or fulfilment of a contract.
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data are collected in this process:
- Information about the browser type and version used
- The user’s operating system
- The user’s IP address
- Date and time of access
- Websites from which the user’s system reaches our website
- Websites accessed by the user’s system through our website
The data are also stored in the log files of our system. This data together with other personal data of the user will be stored for up to 30 days.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this the IP address of the user must remain stored for the duration of the session.
The data are stored in log files to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The data will be erased as soon as they are no longer necessary to achieve the purpose for which it was collected. Where the data are collected for the purpose of providing the website, this is the case when the respective session has ended.
If the data are stored in log files, this is the case after 30 days at the latest. Further storage beyond this period is possible. In this case, the IP addresses of the users are erased or alienated, so that an identification of the calling client is no longer possible.
The collection of the data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
1. Nature and scope of data processing
The following data are stored and transmitted in the cookies:
- Language settings
- Session information
- Entered search terms
- Input in contact forms and text boxes
- Frequency of page views
- Use of website functions
However, you can deactivate the storage of cookies by making the appropriate settings or set your browser so that it informs you as soon as cookies are set. To do this, you need to change the appropriate settings in the Preferences or Options browser menus. We would like to point out that some areas of the website may then not or no longer function properly, i.e. only with certain limitations.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f DSGVO.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR, if the user’s consent has been obtained in this respect.
3. Purpose of the processing
- Adopting language settings
- Storage of search terms
The user data collected by technically necessary cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimise our offer. Reference is made to VII.
These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
4. Storage periods, possibility of objection and elimination
On our website, we may be contacted via the e-mail address provided there. In this case, the user’s personal data transmitted by e-mail will be stored.
In this context, the data will not be passed on to third parties. The data are used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the processing
The processing of personal data by e-mail solely serves the purpose of our handling the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data.
4. Storage period
The data will be erased as soon as they are no longer necessary to achieve the purpose for which it was collected. With regard to the personal data sent by e-mail, this is the case when the relevant conversation with the user is completed. The conversation is completed when it can be inferred from the circumstances that the facts in question have been finally clarified.
5. Possibility of objection and elimination
The user has the possibility to revoke his/her consent to the processing of personal data at any time. If the user contacts us by e-mail, he/she can object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer or the end device used (tablet, smartphone, etc.) and which enable an analysis of your use of the website.
This information is used in particular to better understand how our website is used and to improve its content, functionality and searchability. The processing purposes mentioned are in our legitimate interest (Art. 6 para. 1 lit. f DSGVO).
3. Possibility of objection and elimination
You may opt out of the collection, storage and use of information by Google at any time in the future by installing the opt-out add-on provided by Google.
1. Nature and scope of data processing
Our website uses the Social Plug-In (“Plug-In”) from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”).
The content of the plug-in is transmitted directly from YouTube to your browser, which integrates it into the website. This means that when you visit our site, no personal data is initially passed on to the provider of the plug-in. You can recognize the provider of the plug-in by the play button of the video integrated on the page. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have called up the corresponding website of our online service.
We therefore have no influence on the extent of the data that YouTube collects with the help of this plug-in and therefore inform you according to your level of knowledge: Through the plug-in receives
YouTube the information that you have visited the corresponding page of our website. By activating the plug-in, personal data will be transferred from you to the plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.
If you are logged in to YouTube, they can assign the information to your respective account. In this case, the corresponding information will be transmitted to your personal account and stored there. We have no influence on the content of the plug-ins or the transmission of information to the providers. Further information on the purpose and scope of data processing, as well as your rights in this regard and setting options to protect your privacy can be found in the data protection provisions of the provider.
The plug-in provider stores the data collected about you as user profiles and uses these for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-meeting advertisement and in order to inform other users of the social network about your activities on our website.
2. Legal basis and purpose of the processing
The processing purposes mentioned are in our legitimate interest (Art. 6 para. 1 lit. f DSGVO). It is important for us to make our website attractive and to increase the interaction with our visitors with the help of the plug-in.
3. Possibility of objection and elimination
You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. It is also possible to block plug-ins with add-ons for your browser.
If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
You may request the controller to confirm whether personal data concerning you are processed by us.
If such processing has taken place, you can request the following information from the controller:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
(6) the existence of a right of complaint to a supervisory authority;
You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
To exercise your right to free of charge information, please contact us directly via the contact details in our imprint section or contact our data protection officer (see sections I and II).
You have a right to rectification and/or completion vis-à-vis the controller, if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without delay.
Subject to the following conditions, you may request that the processing of personal data concerning you be restricted:
(1) if you contest the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data;
(2) if the processing is unlawful and you oppose the erasure of the personal data and request that the use of the personal data be restricted instead;
(3) if the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
(4) if you object to the processing pursuant to Art. 21 para.1 GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
Where processing of the personal data concerning you has been restricted, such data shall – with the exception of storage – only be processed with the your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If a restriction of processing in accordance with the above requirements has been obtained, you will be informed by the controller before the restriction of processing is lifted.
a) Duty to erase
You may require the controller to erase the personal data concerning you without delay and the controller has the obligation to erase such data without undue delay where one of the following grounds applies:
(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to Art. 6 para. 1 lit. a GDPR, and there is no other legal ground for the processing.
(3) You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The personal data have to be erased for compliance with a legal obligation in Union or member state law to which the controller is subject.
(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
b) Information provided to third parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not exist to the extent the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires the processing by Union or member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR in so far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(4) for the establishment, exercise or defence of legal claims.
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter shall be obliged to communicate any such rectification or erasure of the data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.
You are entitled vis-à-vis the controller to be informed about those recipients.
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
The right to data portability does not apply to any processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f .
The controller no longer processes the personal data concerning you, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or that the processing serves the establishment, exercise or defence of legal claims.
You have the right to withdraw your declaration of consent for purposes of data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The data protection authority responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, office address: Königstraße 10a, 70173 Stuttgart, Germany, postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany, further information is available on the Internet at www.baden-wuerttemberg.datenschutz.de.
This data privacy statement applies exclusively to Südzucker’s website. The Internet pages in this website may contain links to the Internet pages of third parties. Our data privacy statement does not extend to these Internet pages. When you leave the Internet presence of the website or e-store, we recommend that you carefully read the data protection provisions of every website that collects personal data.
We take the necessary security measures to protect your personal data from unlawful or unintentional access or any deletion, modification or loss and against unauthorised disclosure. We encrypt your data during transmission via our website and use so-called SSL connections (Secure Socket Layer). We protect our website and our other systems and personal data through appropriate technical and organisational measures, in particular against loss, destruction, unauthorised access, modification or disclosure to third parties.
This data privacy statement is available for inspection at [deeplink website, section data protection] You can also save or print out this data protection declaration by using the corresponding functions of your browser.
We reserve the right to amend this data privacy statement from time to time or to adapt it to legal requirements and therefore ask you to check the current data privacy statement every time you visit our website.
Version: 1.0 May 2018