(as to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016)
In the following, you will find information about which data is collected when you visit or use our website www.thegreenbluecompany.com and how it is used, processed or passed on.
Responsible party in the sense of data protection law:
The Green Blue Company
JUICYPLANET LDA (NIF 516713043)
Avenida Barbosa du Bocage, n°87, 2°Andar, 1050-030 LISBOA
Email: [email protected]
Data protection officer of the responsible party is:
For the assertion of the rights named in this data protection declaration or for questions regarding the use, collection or processing of personal data, the customer shall contact the data protection officer named above.
The GREEN BLUE COMPANY, as the entity responsible under the data protection regulations, undertakes to protect the personal data and privacy of its customers and to treat them confidentially. The collection, storage, modification, transmission, blocking, deletion and use of personal data occur on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR); REGULATION (EU) 2016/679.
Customer data is protected at The GREEN BLUE COMPANY by technical and organizational security measures against access by unauthorized persons, accidental or intentional manipulation, destruction or loss.
1. Personal data
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3. Restriction of processing
"Restriction of processing" means the marking of stored personal data with the aim of limiting their future processing.
"Profiling" means any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data cannot be attributed to an identified or identifiable natural person.
6. File system
"File system" means any structured collection of personal data accessible according to specified criteria, whether such collection is maintained on a centralized, decentralized, or functional or geographic basis.
7. Responsible Person
"Responsible person" means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law
"Processor" means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
"Recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules, in line with the purposes of the processing.
10. Third Party
"Third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
"Consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
Lawfulness of processing
The processing of personal data is only lawful if there is a legal basis for the processing. Legal basis for the processing can be according to Article 6 para. 1 S.1 lit. a - f DSGVO in particular:
- The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;
- the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request;
- processing is necessary for compliance with a legal obligation to which the controller is subject;
- the processing is necessary in order to protect the vital interests of the data subject or another natural person;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
II. Information about the collection of personal data
In the following, we inform about the collection of personal data when using our website.
1. Collection of personal data when visiting our website
During the informational use of the website, THE GREEN BLUE COMPANY only collects the personal data that the customer's browser transmits to THE GREEN BLUE COMPANY's server. If the customer wishes to view the website of THE GREEN BLUE COMPANY, THE GREEN BLUE COMPANY collects the following data, which are technically necessary to display the website to the customer and to ensure stability and security:
· Request place
· IP address
· Date and time of the request
· Content of the request (concrete page)
· Access status/HTTP status code
· Data volume transferred in each case
· Web page from which the request comes
· Operating system and its interface
· Language and version of the browser software
After a technical evaluation, this data is deleted immediately. According to Art. 6 para. 1 p. 1 lit. f DSGVO, this data collection serves to protect our legitimate interests in the correct presentation of our website offering, which outweigh our interests in the context of a balancing of interests, as well as compliance with the EU General Data Protection Regulation in terms of security and confidentiality.
In addition to the previously mentioned data, cookies or similar technologies such as pixels (hereinafter generally referred to as "cookies") are used on your computer when you use and visit our website. Cookies are small text files that are stored by your browser on your end device to store certain information, or image files, such as pixels. The next time you visit our website with the same terminal device, the information stored in cookies is subsequently sent back either to our website ("first party cookie") or to another website to which the cookie belongs ("third party cookie").
Through the stored and returned information, the respective website recognizes that you have already called up and visited it with the browser of your end device. We use this information to optimally design and display the website according to your preferences. Only the cookie itself is identified on your end device. Any further storage of personal data only takes place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Cookies that are absolutely necessary (type a)
- Functional and performance cookies (type b)
- Cookies requiring consent (type c)
We will inform you about which cookie types are set and used in each case for the tools we use.
(1) Cookies that are absolutely necessary (type a)
Essential cookies ensure functions without which you cannot use our websites as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies is returned to our website.
Essential cookies are used, for example, to ensure that you, as a logged-in user, always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data each time you call up a new page.
The use of strictly necessary cookies on our website is possible without your consent. For this reason, absolutely necessary cookies cannot be individually disabled or enabled. However, you have the option to generally disable cookies in your browser at any time (see below).
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
(2) Functional and performance cookies (type b)
Functional cookies allow our website to store information you have already provided (such as registered name or language selection) and provide you with improved and more personalized features based on that information. These cookies collect and store only anonymized information, so they cannot track your movements on other websites.
Performance cookies collect information about how our websites are used in order to consequently improve their attractiveness, content and functionality. These cookies help us to determine, for example, whether and which subpages of our website are visited and which content users are particularly interested in. In particular, we record the number of times a page is accessed, the number of subpages accessed, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, region and, if applicable, the city from which access is made, as well as the proportion of mobile devices accessing our websites. Furthermore, we record movements, "clicks" and scrolling with the computer mouse in order to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website more specifically to the needs of our users and optimize our offering. The IP address of your computer transmitted for technical reasons is automatically anonymized and does not allow us to draw any conclusions about the individual user.
You can object to the use of functional and performance cookies at any time by adjusting your cookie settings accordingly.
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DSGVO.
(3) Cookies requiring consent (type c)
Cookies that are neither essential (type a) nor functional or performance cookies (type b) are used only after your consent.
We reserve the right to also use information obtained by means of cookies from an anonymized analysis of the usage behavior of visitors to our websites in order to display specific advertising for certain of our products to you on our own websites. We believe that you, as a user, benefit from this because we display advertising or content that we assume, based on your surfing behavior, matches your interests and you are thus shown less randomly scattered advertising or certain content that may be of less interest to you.
Marketing cookies originate from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user in order to create targeted advertisements for the user.
Opt-out for marketing cookies
You may also manage cookies used for online advertising through tools developed in many countries as part of self-regulatory programs, such as the U.S.-based https://www.aboutads.info/choices/ or the EU-based http://www.youronlinechoices.com/uk/your-ad-choices.
You can revoke this consent to cookies at any time with effect for the future here.
The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a DSGVO.
(4) Management and deletion of all cookies
In addition, you can set your Internet browser to generally prevent cookies from being saved on your end device or to ask you each time whether you agree to cookies being set. Once cookies have been set, you can also delete them at any time. You can find out how all this works in detail in the help function of your browser.
Please note that a general deactivation of cookies may lead to functional limitations of our website.
3. Server log files
You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
This processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO due to a legitimate interest in ensuring the trouble-free operation of our website as well as for the improvement of our offer.
4. Collection and use of personal data for contact requests
When contacting THE GREEN BLUE COMPANY by e-mail or via the contact form, the data provided (your e-mail address, your first and last name, if applicable) will be stored by THE GREEN BLUE COMPANY in order to answer your request. GREEN BLUE COMPANY deletes the data accruing in this context after the storage is no longer necessary, e.g. when your request has been dealt with. Otherwise, processing will be restricted if there are legal obligations to retain data.
This data processing is carried out on the basis of Art. 6 para. 1 p.1 lit. a DSGVO in connection with the consent given by the customers.
5. Collection of personal data upon conclusion of the contract and payment
In the context of an order for products, the following personal data is stored in the course of the registration required for an order:
4. phone number,
5. email address,
6. possibly a different delivery address,
7. credit card, bank and wire transfer information.
THE GREEN BLUE COMPANY uses these data exclusively for the purpose of the execution of the contract and the insofar necessary communication with the customers. This includes the initiation, conclusion, processing, warranty and, if necessary, the reversal of the contract. The data will be stored until the contract has been fully executed. Insofar as commercial and tax retention periods exist, the duration of storage may be up to 10 years.
This data processing is based on Art. 6 para. 1 p. 1 lit. b DSGVO for the execution of the contract. The legal basis for the further storage for tax and commercial law reasons is the necessity according to the law pursuant to Art. 6 para. 1 p. 1 lit. c DSGVO.
THE GREEN BLUE COMPANY only discloses personal data of customers to the extent necessary for the performance of the contract or to protect the legitimate interests of THE GREEN BLUE COMPANY. THE GREEN BLUE COMPANY uses external service providers (order processors) for the execution of the contract. Separate order data processing contracts have been concluded with the service providers to ensure the protection of the personal data of the customers.
For the execution of the delivery, the customer's first name, last name, address, e-mail address and telephone number are forwarded to the shipping company. This data transmission takes place for the fulfillment of the contractual relationship with you as a customer. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
For payment processing, the customer's payment data, namely first name, last name, address, e-mail address, telephone number, will be forwarded to the respective payment provider. This data processing is carried out for the implementation of the contractual relationship with you as a customer or based on the consent given by you. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a or lit. b DSGVO.
THE GREEN BLUE COMPANY uses personal customer data to send customers a newsletter, if applicable, only if customers have consented to this use in advance.
The only mandatory data for sending the newsletter is the e-mail address. The provision of further, separately marked data is voluntary and is used to address the customer personally. After confirmation THE GREEN BLUE COMPANY stores the e-mail address of the customer for the purpose of sending the newsletter.
The customer can revoke the consent to the sending of the newsletter at any time and unsubscribe from the newsletter. The customer can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending an e-mail to [email protected]
THE GREEN BLUE COMPANY evaluates the user behavior of the user when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on the THE GREEN BLUE COMPANY website. For the evaluations, the data provided by the users and the web beacons are linked with the e-mail address and an individual ID of the user. The data is collected exclusively pseudonymously, i.e. the IDs are not linked to the user's other personal data, and direct personal reference is excluded. The user can object to this tracking at any time by clicking on the separate link provided in each email or by informing THE GREEN BLUE COMPANY via another contact channel. The information will be stored as long as the user subscribes to the newsletter. After unsubscribing, THE GREEN BLUE COMPANY stores the data purely statistically and anonymously.
This data processing is based on the consent given by the customer, legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.
8. Integration of social media plug-ins
We use social media plug-ins (hereinafter: plug-ins) from these providers:
Facebook, YouTube, Instagram.
We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.
We have neither influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers, which are provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy:
· YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is a subsidiary of Google LLC, which has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
· Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland; Facebook Inc., the U.S. parent company of Facebook Ireland Ltd., is certified under the EU-U.S. Privacy Shield and thus undertakes to comply with European data protection law. More information on Facebook's Privacy Shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. Facebook's complete data policies can be found here: https://de-de.facebook.com/full_data_use_policy
This data processing is based on Art. 6 para. 1 p. 1 lit. a DSGVO based on your given consent and on Art. 6 para. 1 p.1 lit. f DSGVO to protect the legitimate interests of GREEN BLUE COMPANY, namely the optimization of the offer.
9. Use of external tools
On our website, we have integrated various tools from different companies that enable us to evaluate your user behavior or create links to other websites. For this purpose, we have concluded separate data processing contracts with the companies named below in order to ensure the protection of your personal data.
We cooperate with the following service providers:
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Third Party Provider Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms:
This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
The use of Google Analytics is based on the legal basis of Art. 6 para. 1 p. 1 lit. a DSGVO, your consent. Storage period of the cookies set via this website up to 12 months.
10. Facebook fan page
THE GREEN BLUE COMPANY uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ("Facebook") for the information service offered here.
According to the ECJ, there is joint responsibility within the meaning of Art. 26 DSGVO between Facebook and the operator of a Facebook fan page for the personal data processed via the Facebook fan page. For this reason, Facebook and THE GREEN BLUE COMPANY have concluded an agreement on joint responsibility, which you can access here.
THE GREEN BLUE COMPANY provides you with the following information regarding data processing on our Facebook Fan Page:
(1) Responsible persons
The processing of your personal data on the Facebook fan page of THE GREEN BLUE COMPANY is carried out under joint responsibility with:
Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
(2) Data processing
When you access a Facebook fan page, the IP address of your end device is transmitted to Facebook. According to Facebook, this IP address is anonymized and deleted after 90 days, at least if it is a German IP address. In addition, Facebook stores further information about the end devices of its users, e.g. the Internet browser used. If necessary, Facebook is thus able to assign IP addresses to individual users. If you are logged into your Facebook account while visiting our fan page, a cookie with your Facebook ID is stored on your end device. Based on this cookie, Facebook can track that you have visited our fan page and how you have used it. Facebook uses this information to present you with content or advertising tailored to you.
If you do not want this, you should log out of your Facebook account or deactivate the "stay logged in" function. We also recommend that you delete the cookies on your device and exit and restart your browser. This process deletes Facebook information that Facebook can use to link to you.
However, if you want to use the interactive functions of our fan page, you would have to log in to Facebook again with your Facebook login information. This also makes it possible for Facebook to link to you again.
In what way Facebook uses the data from the visit of Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. In this respect, we can only refer you as a user of our fan page to Facebook's statements on data protection.
The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union.
Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link: http://de-de.facebook.com/about/privacy
Facebook's full data policy can be found here:
Objection options (so-called opt-out) can be set here: https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com
Facebook Inc., the U.S. parent company of Facebook Ireland Ltd., is certified under the EU-U.S. Privacy Shield and thus undertakes to comply with the requirements of European data protection law. Further information on Facebook's Privacy Shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
The transmission and further processing of personal data of users to third countries, such as the USA, as well as the associated possible risks for you as a user cannot be assessed by us as the operator of the Facebook Fanpage.
(3) Insight function
Facebook also provides a range of statistical data for SBS-Legal as fan page operator as part of the so-called "Insights" function. These statistics are generated and provided by Facebook. We as the operator of the fan page have no influence on the generation, in particular we cannot prevent this function. Within the scope of the "Insights" function, the following information is presented to us for the categories "Fans", "Subscribers", "Reached Persons" as well as "Interacting Persons", each for a selectable period of time:
Page activity such as page views, page previews, actions on the page; Reach activity such as "likes", people reached and recommendations, Post activity such as post interactions, video views, comments, content shared.
Facebook provides more information on this at the following link:
THE GREEN BLUE COMPANY uses this data, which is available in aggregated form, to make posts and activities on the Fanpage more attractive to users, such as for planning the content and timing of posts. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DSGVO, namely our legitimate interest in optimizing our offer.
(4) Storage period
We store the information transmitted by Facebook at most as long as your interest in deletion or anonymization does not prevail.
If you no longer wish to have the data processing described here in the future, please cancel the connection of your user profile to our fan page by using the functions "I no longer like this page" and/or "Do not subscribe to this page".
(5) Your rights as a data subject
Our offer is basically directed at adults. Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians.
12. Rights of the persons concerned
Individuals affected by data processing have the right to:
-Information or confirmation about the processing of your data
-Correction or deletion of your data
-Restriction of processing
-Objection to the processing
-revocation of your given consent with effect for the future
-Complaint to the data protection supervisory authority