This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and content associated with it as well as external online presences. (hereinafter jointly referred to as “online offer”). With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Responsible:
Name/Company: Plantenköök a restaurant of LiWeSi GmbH
Street no.: Am Wall 201
Zip code, city, country: 28195 Bremen, Germany
Commercial Register: Bremen District Court HRB 37563 HB
Authorized Directors: Sean Moxie
Telephone number: will follow soon
E-mail address: contact@plantenkoek.de

If you have any questions about our privacy policy, please contact:
Name: Sean Moxie
E-mail address: contact@plantenkoek.de

1. Types of data processed:

Contact information (e.g., email, telephone numbers).
Usage data (e.g. websites visited, interest in content, access times).

2. Processing of special categories of data (Article 9 (1) GDPR):

No special categories of data are processed.

3. Categories of persons affected by the processing:

customers / prospects / suppliers.
Visitors and users of the online offer.
In the following, we also refer to the data subjects as “users”.

4. Purpose of processing:

Provision of the online offer, its content and functions.
Provision of contractual services, service and customer care.
Answering contact requests and communicating with users.
Marketing, advertising and market research.

5. Relevant Legal Bases
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art Answering inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(c) GDPR 6 Paragraph 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR serves as the legal basis.

6. Changes and Updates to the Privacy Policy
We ask you to inform yourself regularly about the content of our data protection declaration. As soon as the changes in the data processing we carry out make this necessary, we will adapt the data protection declaration. We will inform you as soon as the changes require your participation (e.g. consent) or other individual notification.

7. Security Measures
In accordance with Art. 32 GDPR, we take appropriate technical measures, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transfer, securing availability and their separation. Furthermore, we have set up procedures that ensure that the rights of data subjects are exercised, that data is deleted and that data is reacted to if the data is at risk. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 GDPR).
The security measures include, in particular, the encrypted transmission of data between your browser and our server.

8. Cooperation with Processors and Third Parties
8.1. If, as part of our processing, we disclose data to other people and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as to payment service providers, in accordance with Article 6 (1) lit