Data protection

Mix GmbH Lebensmittelhandel

1. Scope of this Privacy Statement:

This Privacy Statement applies to the processing of personal data carried out by Mix GmbH Lebensmittelhandel on the Mix GmbH Lebensmittelhandel website, available to you at www.mixmarkt.eu and shop.mixmarkt.eu, as well as for other online presences of Mix GmbH Lebensmittelhandel, e.g. in our profiles on social networks and for services that we offer you via our website or our online presences.

2. Definitions:

Personal data:

"Personal data" are, according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), all information relating to an identified or identifiable natural person (hereinafter: data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing:

"Processing" means, in accordance with Article 4(2) of the GDPR, any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller:

"Controller" means, in accordance with Article 4(7) of the GDPR, the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

Cookies:

A cookie is a short piece of text information that can be stored in the browser or by the browser on the user's terminal device (computer, laptop, smartphone, tablet, etc.). Cookies contain anonymous character strings that are assigned to your end device and your browser and enable a unique identification of your device when our website or other online offers are called up again. The information stored in the cookies is sent either to our website directly or to other providers with whom we have contracts for order processing. Some cookies are deleted at the end of the use of our website or another online offer, others remain on your end device for longer.

The cookies that are technically necessary for the display of our website are automatically set each time you visit our website. These cookies are technically necessary because they enable the content of our website to be visible to you via the IP address of your end device.

We require your informed consent in advance for the setting of other, technically unnecessary cookies that enable us to analyse the functionality and use of our website or to better advertise the content of our site and our offers and services (so-called marketing cookies or analytics cookies).

Therefore, we ask you to declare your consent to the use of marketing cookies the first time you access content on our website www.mixmarkt.eu. For this purpose, we use the cookie management system KLARO! of KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin.

When you access our Fanshop subpage https://shop.mixmarkt.eu for the first time, we also ask you to declare your consent to the use of non-essential cookies from Google Analytics, so-called Analytics cookies. We use the so-called Google Opt-Out Cookie ga-disable-UA-49875253-3 on our Fanshop page for the technical implementation of your decision against the use of Analytics Cookies.

If you generally do not want cookies to be stored in the browser of your end device, you can completely prohibit the storage of cookies in the system settings of the browser you are using. You can delete cookies already stored in the system settings of your browser. However, the exclusion of all cookies may affect the functionality of our website.

We explain which services and functions on our website set cookies in the information below on the services we use.

The GDPR:

The full text of the General Data Protection Regulation, including all definitions and definitions regulated therein, is available at the following LINK to the GDPR.

3. Name and contact details of the data controller and data protection officer:

Mix GmbH Lebensmittelhandel
Represented by the managing director Eugen Henning
Schwarzwaldstr. 99
D-71083 Herrenberg
Telefon: +49 (0) 70 32 - 91 77 00
Telefax: +49 (0) 70 32 - 91 77 19
infomixzentrale@monolith-gruppe.com

Data Protection Officer of Mix GmbH Lebensmittelhandel

You can reach the data protection officer of the responsible party under the contact options listed above or directly by e-mail at: datenschutz.mix@monolith-gruppe.com.

4. Processing of personal data when calling up our website:

When our website is called up, so-called access data are collected and these are stored in a log file.

These access data include:

the name (URL) of the website you accessed and the website you visited previously
the date and time of the retrieval
the name and URL of the retrieved file
the amount of data transferred and notification of successful retrieval
the browser type and version and the operating system of your device
the requesting provider and the IP address of your device

The IP address and other access data are processed by and for the following purposes:

Ensuring a smooth connection of the website
Ensuring a comfortable use of our website
Evaluation of system security and stability
Compiling statistics and other administrative purposes

The temporary storage of the IP address and other access data by the system is necessary to enable delivery of the website to the device you are using. For this purpose, it is unavoidable that your IP address remains stored for the duration of the session. The IP address is also used to secure our systems (e.g. in the event of an attack or security incident). From the access data including the IP address, no personal reference can be established for us in the event of a call to our website.

Your IP address is stored as part of the log files for a period of 30 days on the server of our host provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland and then deleted. No data is transmitted to a non-European third country.

The processing of your IP address and other access data when calling up our website is neither legally nor contractually required.

The legal basis for the processing of your IP address and the access data is Art. 6 para. 1 lit. f GDPR, as the processing of the data described is necessary for the services we offer, and only in this way can we provide the services offered on our website and ensure the functionality of our website.

5. Processing of personal data for the use of KLARO! to manage cookie settings

To obtain and manage your consent or revocations to the setting of cookies in the browser of your end device, for which your consent is required, we use the cookie management system Klaro! by KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin. Cookies on our fanshop page are excluded from this. On our fanshop page, we use the so-called Google Opt-Out technique (see information on this under point 7 on Google Analytics and point 11 on fanshop).

If you make a decision in the Klaro! window on our site, a Klaro! cookie ("klaro") is first stored in your browser, in which the consents you have given or the revocation of these consents are stored. If you have given consent, you can revoke your consent at any time

This data will not be passed on to Klaro! The data collected will be stored until you revoke all consents or delete the Klaro! cookie.

The use of Klaro! cookie management technology and processing of your personal data is based on Art. 6 para. 1 p. 1 lit. c and f GDPR, as we are legally obliged to obtain the legally required consents for the use of cookies and to enable you to withdraw your consent at any time according to Art. 7 para. 3 GDPR. The implementation of these legal obligations is in our legitimate interest.

6. Function of the Google Tag Manager

The function of the so-called Google Tag Manager is integrated on our website. The Google Tag Manager does not collect and send personal data to third parties. However, the Google Tag Manager enables us to technically implement the administration of our website and the services provided by our cookie management system Klaro!, i.e. the administration of your consent to the use of cookies.

7. Processing of personal data when using Google Analytics

We use the Google Analytics service on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and have concluded an order processing agreement with Google Ireland Limited for this purpose.

Google uses cookies for this service, which generally transmit information about the use of our website to a Google server in the USA and store it there.

Google uses this information on our behalf to evaluate the use of our website and to compile statistics about the activities within the website. In doing so, pseudonymous user profiles can be created from the processed data. However, the data collected from you will not be used to identify you personally or to merge this data with other personal data about you.

When you first visit our website, you will be asked via our Klaro! Cookie Management System asks you whether you consent to the use of Google Analytics cookies. You can revoke this consent for the future at any time by activating the "CHANGE COOKIE SETTINGS" button on our website. All cookies will then be deactivated for the future.

On our fanshop page, you will be asked via the cookie button whether you allow the use of analytics cookies. As long as you do not press this button, no Analytics cookies will be set. Only when you press the ALLOW ALL Cookie button will Google Analytics cookies be set when you use the Fanshop site. If you declare that only essential cookies are allowed or that Analytics cookies should be deactivated again, the so-called Google opt-out cookie ga-disable-UA-49875253-3 will be set on your end device. This Google opt-out cookie permanently prevents data exchange with Google Analytics, i.e. it deactivates Google Analytics cookies and blocks data exchange with Google Analytics.

If you agree to the use of Analytics cookies, we only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within the EU or a state of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other Google data. However, if you have your own Google user account, it cannot be ruled out that Google will assign the collected user data to your Google account, thus making it possible to identify you personally. For more information on Google's terms of use and data protection, please visit www.google.com/analytics/terms/de.html or www.google.de/intl/de/policies/.

The personal data of the users of our website will be deleted or anonymised after fourteen (14) months.

Find more information on setting and objection options that you can apply on your own in Google's Privacy Statement: https://policies.google.com/technologies/ads.

The legal basis for the use of your personal data when using Google Analytics by us is, if you have consented, Art. 6 (1) lit. a GDPR. Your consent can be revoked at any time pursuant to Art. 7 (3) GDPR. You can object to the collection of the data generated by the Google cookies and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google at any time for the future by objecting to the setting of marketing cookies in your browser via the button "Change cookie settings".

For details on the purpose and scope of data processing, collection and use by Google, please refer to Google's terms of use and privacy policy at: https://www.google.de/intl/de/policies/ and in particular for Google Analytics at:

http://www.google.com/analytics/terms/de.html
https://policies.google.com/privacy/update?hl=de

8. Processing of personal data when using Google Maps

On our website, we use the online map service of Google Maps, an online map service Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google) to display and use an interactive map.

By integrating the online map service Google Maps, it is possible to plan a route to our company or to individual Mix Markt branches on our website and to find the location of our company or an individual Mix Markt using the online map.

When you call up one of our sub-pages on which the Google Maps map is displayed, cookies from Google Maps are placed in the browser of your device if you have consented to the placement of cookies. Your browser then automatically establishes a direct connection with Google's servers.

The map content is transmitted directly to your browser by Google and integrated into the website by your browser. However, you can deactivate or restrict the storage of cookies by changing your browser settings. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies from Google are deactivated for our website, you may not be able to use the Google Maps map service on our website to its full extent.

Without the integration of the Google Maps service, it would not be possible for us to offer you locations and route planning in the same optimal way. Our legitimate interest in processing personal data lies in the purpose of providing the interactive Google Maps online map service for the optimal locating of our company and the mix markets.

The legal basis for the use of Google Maps and the associated processing of your personal data is your consent pursuant to Art. 6 Para. 1 lit. a. GDPR. Your consent can be revoked at any time in accordance with Art. 7 Para. 3 GDPR by using our "CHANGE COOKIE SETTINGS" button to revoke your consent or if you generally object to the setting of cookies in your browser or change your browser settings accordingly.

For further information on the purpose and scope of data collection and processing by the provider of the Google Maps service from Google, please refer to the privacy policy of the provider Google https://policies.google.com/privacy?hl=de. There you will also find further information on your right to privacy. There you will also receive further information on your rights in this regard and setting options for protecting your privacy. The terms of use for Google Maps can be found at:
https://www.google.com/intl/de_ALL/help/terms_maps/
https://policies.google.com/privacy?hl=de.

9. Processing of personal data when using the Facebook Custom Audience Pixel method

If you have consented to the use of Facebook marketing cookies via the Klaro! cookie consent tool, we use the Facebook Custom Audience Pixel procedure. A cookie, known as a Facebook pixel, is then set when you use our website, which enables this Facebook service to recognise that you have used our website and offers on our website. If you have your own Facebook account, Facebook can assign this information to you personally and we can show you targeted advertising for us on Facebook.

In this way, users of our website can receive interest-based advertisements when using Facebook or other websites that also use the Facebook pixel.

This Facebook pixel is only set and activated if you have given your consent. The legal basis for the described data processing of your personal data is Art. 6 para. 1 lit.a GDPR. Your consent can be revoked at any time in accordance with Art. 7 (3) GDPR by clicking on our "CHANGE COOKIE SETTINGS" button (bottom left of our website) or if you generally object to the setting of cookies in your browser or change your browser settings accordingly.

10. Processing of personal data when using YouTube videos

On our website, we present videos that we make available to you via our account on the YouTube Internet platform (www.youtube.de). YouTube LLC is a subsidiary of the US-American Google Group with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA and is represented by Google LLC. with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

You can recognise YouTube videos by the red YouTube play button with a white arrow in the video preview.

When the play button is activated, the YouTube provider uses cookies that are stored on your device. With the help of the cookies, information about the visitors and users of our website can be collected and, if necessary, evaluated. YouTube could use this information, among other things, to collect video statistics, to prevent fraud and to improve user-friendliness. However, YouTube could also connect with the Google DoubleClick network.

We have integrated the YouTube videos presented on our site in the so-called "privacy enhanced mode" on our website. Therefore, no personal data is stored by YouTube as long as you do not play a video on our website. Only when you play a YouTube video by clicking the play button on our website does YouTube collect, transmit and analyse personal data in a way that we cannot influence. However, by changing the settings of your browser, you can deactivate or restrict the transmission and placement of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically if you adjust the settings of your browser accordingly. If YouTube cookies are deactivated for our website, you may not be able to play YouTube videos on our website.

A direct connection to the YouTube platform and transmission of your IP address and cookie ID to a YouTube server in the USA only takes place when you activate the YouTube play button to play a YouTube video. By activating the YouTube play button, a direct connection to the YouTube platform is established and cookies are automatically placed in the browser of your end device, with which YouTube receives information from you and about your usage behaviour and can evaluate this information.

If you are logged in to YouTube as a member when playing our YouTube videos, YouTube also assigns all the information you acquire to your personal user account.

YouTube also uses the determined user data of users of its offers for the placement and analysis of advertising. For more information on the purpose and scope of the data collection and its processing by please refer to the privacy policy of YouTube / Google LLC at:
https://www.google.de/intl/de/policies/privacy/

The provision of personal data to YouTube is neither legally nor contractually required.

The legal basis for the processing of your personal data when playing YouTube videos is Art. 6 para. 1 lit. a GDPR. Your consent can be revoked at any time in accordance with Art. 7 (3) GDPR by clicking on our "CHANGE COOKIE SETTINGS" button (bottom left of our website) or if you generally object to the setting of cookies in your browser or change your browser settings accordingly.

11. Processing of personal data on our fanshop subpage https://shop.mixmarkt.de

11.1 Cookies on our fanshop page:

On our fanshop page, the following essential cookies are used to operate our fanshop page.

shop.mixmarkt.eu cookieconsent_status Storage period: 1 year
shop.mixmarkt.eu statpush Storage time: session

When using the shopping cart function on our fanshop page, the following own essential cookies are set for our fanshop:

woocommerce_cart_hash storage time: session
woocommerce_items_in_cart storage time: session
wp_woocommerce_session_ storage time: 2 days
woocommerce_recently_viewed storage time: session
store_notice[notice id] storage time: session
yith_wcwl_session_ storage time: 29 days

The following essential cookies are also set by the payment service provider Stripe:

__stripe_mid storage time: 1 year
__stripe_sid storage time: 30 minutes

You can agree to the use of non-essential cookies from Google Analytics on our fanshop page by clicking on our cookie button and declaring ALLE ERLAUBEN. Doing so, the following Analytics cookies will also be set by Google on your end device:

gat storage time: 1 minute
ga storage time: 2 years
gid storage time: 24 hours
ads/ga-audiences storage time: session

If you do not wish to allow the use of Analytics cookies on our Fanshop site or wish to deactivate Google Analytics cookies at a later date, a Google opt-out cookie will be set on your terminal device.

The Google opt-out cookie is called: ga-disable-UA-49875253-3.

Its purpose is to prevent any exchange of data with Google Analytics. The storage period of the Google opt-out cookie is not limited in time. The opt-out cookie will be deleted from your terminal device if you allow the use of non-essential cookies or if you also delete this cookie in your browser settings. The Google opt-out cookie does not collect or send any personal data to third parties. However, the Google opt-out cookie enables us to technically implement the management of your consents to the use of non-essential analytics cookies on our fanshop page.

11.2 Opening and using a customer account in the fanshop

On our fanshop page you have the option of opening a password-protected customer account in which you can permanently store your personal data. To open a customer account, all you have to do is enter your e-mail address. For the activation of the customer account you will then receive an e-mail from us with an automatically generated password for the access to your customer account.

If you wish to place orders via your customer account, we require your surname and first name, delivery and billing address (street, house number, postcode, town) and your payment method details.

The processing of the personal data collected for the creation and use of the customer account is based on Art. 6 para. 1 lit. b GDPR. You can view and change the personal data in the customer account at any time. You can delete your customer account and the personal data stored in it at any time as long as you have not placed any orders via your customer account.

If you have made orders via your customer account, we must continue to store your data on orders and your personal data to fulfil our obligations arising from the order and legal requirements. This also applies if you delete your customer account with us. The deletion of your personal data that we process for your order will then take place after the expiry of the retention obligations applicable to us under commercial and tax law. The legal basis for further data processing is Art. 6 para. 1 lit. b, lit. c and lit. f GDPR.

12. Processing of personal data for payment processing in the fanshop

For the purpose of processing payment for orders you have placed with us, we process the payment information you provide when placing an order. Depending on the payment method, we forward the payment information to third parties if the payment is to be made via third parties. e.g. in the case of a credit card payment, we forward your payment information to your credit card provider. If you pay us directly via prepayment, we process the payment information you send us ourselves with the help of our banking institution.

The legal basis for the processing of your personal data in the context of payment with the offered means of payment is Art 6 (1) lit. b GDPR.

12.1 Stripe as a payment method

We have commissioned the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to handle our payment process. If you choose to use the payment service provider Stripe, we will, as you have requested, pass on to Stripe for this purpose the information and personal data about you provided to us during the ordering process, together with information about your order (i.e. surname, first name, address, account number, bank sort code, any credit card number, invoice amount, currency and transaction number). The legal basis is Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.

12.2 PayPal and PayPal-PLUS as payment method

If you decide to pay with the payment service provider PayPal during the ordering process, your contact data will be transmitted to PayPal at your request during the order process. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.

The personal data transmitted to PayPal are mostly first name, last name, address, telephone number, IP address, e-mail address, or other data required for order processing, as well as data related to the order, such as number of items, item number, invoice amount and taxes in per cent, invoice information, etc..

This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship. Please note, however, that PayPal may also transfer personal data to service providers, subcontractors or other affiliated companies to the extent necessary to fulfil the contractual obligations arising from your order or to process the personal data on your behalf.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transferred by PayPal to credit agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out what information data is involved here and what data is generally collected, processed, stored and passed on by PayPal in PayPal's Privacy Statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

The legal basis for the processing of your personal data for the handling of your payment via PayPal is Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of processing payment with your credit card provider and only to the extent necessary for this purpose.

12.3 Payment by credit card VISA / MASTERCARD

If you decide to pay by credit card during the ordering process, we need your payment information (i.e. order details, surname, first name, credit card number and verification number), which we then forward to your credit card provider for processing the payment.

The legal basis for the processing of your personal data for credit card payment is Art. 6 para. 1 lit. b GDPR. Your data will only be forwarded for the purpose of processing payment with your credit card provider and only to the extent necessary for this purpose.

13. Processing of personal data for sending of brochures by postal delivery

If you would like us to send you brochures of your nearest Mix store with our offers by post, you can register to receive brochures by post via our website. To register for the brochures, we need your surname and first name, postal address, i.e. street, house number, postcode and town. Your e-mail address and details of your nearest Mix Markt branch.

We need your name and address details to send the brochures to you.

We need your e-mail address for the electronic ordering of brochures via our website in order to give you the opportunity to confirm the information you have provided for ordering the brochures in a so-called double opt-in procedure. In this way, we want to ensure that no unauthorised orders are placed with your e-mail address. The ordering process is logged so that we can verify your order. The logged data includes your e-mail address and the storage of the registration and confirmation time as well as the IP address from which the order and confirmation took place.

We need the details of the nearest Mix store in order to send your contact details to this Mix store for the purpose of sending you the brochures for this store. You can unsubscribe from receiving the brochures by post at any time in the future. You can unsubscribe from receiving brochures on our website here. To unsubscribe, we need your surname, first name, postal address, i.e. street, house number, postcode and town. You can also unsubscribe from receiving brochures by post with a message to Mix GmbH Lebensmittelhandel, Schwarzwaldstr. 99, D-71083 Herrenberg or by telephone on +49 (0) 70 32 - 91 77 00.

The legal basis for the processing of your personal data for the sending of advertising by post is Art. 6 para. 1 lit. b GDPR.

14. Processing of personal data for newsletters

If you would like to be informed by us by e-mail about trends, bargains, vouchers, promotions and offers of Mix GmbH Lebensmittelhandel via our newsletter, you can register to receive our newsletter with information of your Mix-Markt shop on our website.

To subscribe to our newsletter electronically, we need your e-mail address, which you can enter on our website, your first and last name and the name of the Mix-Markt store nearest to you. In a so-called double opt-in procedure, we then give you the opportunity to confirm your order for the newsletter. In this way, we want to ensure that no unauthorised order for the newsletter is placed with your e-mail address. The ordering process is logged so that we can prove that you have ordered the newsletter. The logged data includes your e-mail address and the storage of the registration and confirmation time as well as the IP address from which the order and confirmation took place.

We need the details of the nearest Mix store to be able to send you a newsletter with information about the store you have selected. We need your first name and surname to be able to address you personally in our newsletter.

You have the right to revoke your consent to the processing of your personal data for the future at any time, i.e. you can unsubscribe from receiving the newsletter at any time for the future by activating the unsubscribe link in the footer of each newsletter or by sending us a message via our website.

The legal basis for the processing of your personal data for the sending of the newsletter is Art. 6 Para. 1 lit. a in conjunction with Art. 7 GDPR.

15. Contact form

If you have any questions, requests or suggestions, you can contact us at any time, i.e. by post, by telephone, by e-mail but also via the contact form on our website. If you use the contact form on our website, we need your name to be able to address you personally and a valid e-mail address so that we can get back to you. If you would like us to get back to you by phone, we need your phone number.

We process the personal data provided in the contact form exclusively for the purpose of processing your request and store it for as long as it is necessary and legally permissible to process your request.

The legal basis for the processing of the personal data entered by you via the contact form on our website is the fulfilment of a request from you in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR.

16. Special Mix-Markt promotions

If you participate in one of our Mix-Markt promotions, such as the Fans-Content photo promotion, we require the data necessary for you to take part in the promotion. This includes personal data such as your surname, first name and address data, e-mail address and other personal data such as images of people in photos/videos that you provide to us for the promotion.

We will use the personal data provided by you as part of the Mix-Markt promotions exclusively for the processing and implementation of this promotion and you will find details on this in the conditions of participation of the Mix-Markt promotion in which you are participating.

The legal basis for the processing of personal data in connection with our Mix-Markt promotion is Art. 6 (1) lit. b GDPR. We will provide you with further information on the Mix Markt promotions in the conditions of participation of the respective Mix Markt promotion, which you must accept if you wish to participate in the Mix Markt promotion.

17. Processing of personal data on linked websites

Where our website links to other websites, we have neither influence nor control over the linked content and we have no influence over the cookies used by the linked websites and the processing of personal data of other internet offers. We therefore recommend that you inform yourself about the type, scope and purpose of the collection and processing of your personal data on the linked websites in the data protection provisions applicable there.

18. Mix Markt social media accounts on Facebook, Instagram, Odnoklassniki and YouTube

Facebook
We maintain a Facebook account on the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), in order to communicate with customers, interested parties and users active there and to be able to inform them there about our offers, services and activities (hereinafter "Facebook Fanpage"). We would like to get in touch with you and other interested parties and have therefore decided to use the Facebook Fanpage.

With regard to the data processing that takes place on the occasion of a visit to our Facebook Fanpage, Facebook and we are jointly responsible parties within the meaning of Art. 26 (1) GDPR. Our mutual obligations resulting from the joint responsibility are set out in an agreement between Facebook and us, the so-called "Page Insights Supplement Regarding the Controller". The essential points of the agreement for you are summarised here:
https://www.facebook.com/legal/terms/information_about_page_insights_data

As part of the use of our Facebook fan page, we statistically evaluate how you have used our Facebook fan page. For this purpose, we receive extensive statistics from Facebook on visits to and use of our Facebook Fanpage, the so-called "Facebook Insights", which, however, do not contain any personal data, but only data without reference to individual persons. As fan page operators, we ourselves have no access to personal data and cannot view or query such data on Facebook. We cannot establish a relationship to you personally.

Facebook insights are used to adapt our Facebook fan page to the needs of our visitors and thus to continuously optimise it. This can also be done for market research and advertising purposes by evaluating the resulting interests of our users so that we can, for example, place advertisements within and outside of our Facebook fan page that presumably correspond to the interests of the users of our Facebook fan page.

In order to enable a statistical evaluation of the user data, Facebook usually stores cookies on the computers of the users of our Facebook fan page. When you visit our Facebook fan page, a cookie is set that is used to recognise you when you are logged into your Facebook account and to make it easier for you to surf the Facebook fan page. According to Facebook, the cookies and the data collected via them are deleted or anonymised within 90 days. https://www.facebook.com/help/206635839404055?ref=dp

Apart from that, we only process your data, which you may transmit to us via our Facebook fan page, for the purpose of maintaining our Facebook fan page, in particular to inform you about our activities, to answer questions or to respond to your posts, comments and messages via Facebook.

We would like to point out that Facebook also processes the aforementioned data independently for further purposes of its own, without us being involved in this or having any influence on this.

This includes, for example, the display of content on third-party Facebook pages, adapted to your general settings for the Facebook network and the personalisation of such content. Facebook may also transfer the aforementioned data to third countries such as the USA, for example to servers of Facebook Inc., which may pose additional risks as no level of data protection in line with the European GDPR can be guaranteed in the USA. For details of the protective measures taken by Facebook, please refer to the information provided by Facebook here: https://www.facebook.com/legal/terms/information_about_page_insights_data und https://www.facebook.com/about/privacy/.

If Facebook transfers data to the USA for our purposes in individual cases, Facebook and we will ensure that this is done on the basis of appropriate protective measures pursuant to Art. 44 et seq. GDPR, for example by agreeing on standard data protection clauses of the EU Commission, which provide for appropriate protection measures such as encryption of the data in individual cases, in accordance with Art. 46 (2) c) GDPR.

The agreement concluded with Facebook stipulates that Facebook assumes primary responsibility for the processing of insights data and fulfils all obligations under the GDPR with regard to the processing of insights data.

This means that Facebook is primarily responsible for the information obligations according to Art. 13, 14 GDPR as well as for safeguarding your rights as a data subject. Especially with regard to information requests and the assertion of other data subject rights, we would like to point out that these can most effectively be asserted directly with Facebook. Only Facebook has access to the users' data and can directly take appropriate measures and provide information. Users of our Facebook fan page can exercise their rights according to Art 12 ff. GDPR, in particular the rights to deletion according to Art. 17 GDPR, to restriction of processing according to Art. 18 GDPR, to objection according to Art. 21 GDPR and to information according to Art. 15 GDPR, at Facebook as described at https://www.facebook.com/legal/terms/information_about_page_insights_data. If you need help with this, please feel free to contact us.

If you use our Facebook Fanpage, you will find further information on the processing and use of data by Facebook at https://www.facebook.com/about/privacy/ und speziell für die Facebook-Insights:
https://www.facebook.com/legal/terms/information_about_page_insights_data.

There you will also find options for settings regarding your privacy as well as objection options, cf. on opting out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.

The processing of your personal data on the occasion of visiting and using our Facebook Fanpage is based on our legitimate interests in effectively informing users and communicating with visitors to our Facebook Fanpage in accordance with Art. 6 (1) lit. f GDPR.

Instagram
We maintain an Instagram account on the social network Instagram, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), in order to be able to inform our customers, interested parties and users there about our offers, services and activities (hereinafter "Instagram"). Instagram allows us to share photos and videos. Users can edit photos and videos and add filters. Other users can in turn share, comment on or "like" the photos and videos. Users can also get in touch with each other by writing private messages to each other on Instagram.

We would like to get in touch with you and other interested parties on Instagram as well and have therefore decided to use Instagram.

When you visit our Instagram account, which you can reach via the Instagram icon on our website, Instagram and the Facebook company process your IP address and other data from you without us having any influence on this. We cannot see to what extent, where and for how long the data is stored, to what extent Instagram and Facebook comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We assume that the data collected from you on Instagram will be processed by Facebook Ireland Ltd. and thereby transferred to third parties, possibly also to countries outside the European Union.

If you would like to avoid Instagram and Facebook processing personal data you provide to us on Instagram, you should not contact us on Instagram. We provide our contact details on Instagram via the link to our website.

Instagram's privacy policy can be found at: https://help.instagram.com/519522125107875?helpref=page_content. In the privacy policy, you will also find information about contact options for Facebook and individual options for settings for advertisements.

The processing of your personal data on the occasion of visiting and using our Instagram account is based on our legitimate interests in communicating with our customers, interested parties and users also on Instagram pursuant to Art. 6 (1) lit. f GDPR.

Odnoklassniki
We maintain an account on the social network Odnoklassniki, which is operated by Mail.Ru Limited Liability Company (official state registration number 1027739850962, Russia, 125167, Moscow, Leningradskiy prospekt 39, building 79).

We have the Odnoklassniki account in order to communicate with the customers, interested parties and users active there and also to be able to inform them there about our offers, services and activities. We would like to get in touch with you and other interested parties and have therefore decided to use Odnoklassniki.

You can access our Odnoklassniki account by clicking the OK button on our website. We would like to point out that we have no knowledge of the content of the data processed by Odnoklassniki or transmitted or collected to third parties, or of their use by Odnoklassniki.ru or other providers. Odnoklassniki's privacy policy applies. For more information, please see Odnoklassniki's privacy policy at https://ok.ru/privacy.

The processing of your personal data on the occasion of the visit and use of our Odnoklassniki account is based on our legitimate interests in communicating with our customers, interested parties and users also at Odnoklassniki in accordance with Art. 6 (1) lit. f GDPR.

Youtube
We use our own Mixmarkt YouTube channel on the YouTube platform, which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We would like to point out that you use the Mixmarkt YouTube channel and its functions on your own responsibility. This applies in particular to the use of the options offered there, such as sharing, commenting, forwarding. Information on what data is processed by Google and for what purposes can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de#infocollect.

We have no influence on the type and scope of the data processed by Google via YouTube, the type of processing and use or the transfer of this data to third parties. We have no effective means of control. By using YouTube, your personal data will be collected, transferred, stored, disclosed and used by Google and transferred to, and stored and used in, the United States, Ireland and any other country in which Google does business, regardless of your country of residence.

There is a transfer to Google-affiliated companies as well as to other trusted companies or persons who process them on behalf of Google. Google processes on the one hand your voluntarily entered data such as name and user name, e-mail address. Google also processes the content that you create, upload or receive from others when using the services on YouTube. This includes, for example, photos and videos that you save, that you create, and comments that you write on YouTube videos. Google also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages you send directly to other users, and may use GPS data, wireless network information or your IP address to determine your location in order to serve you advertising or other content. Google may use analytics tools such as Google Analytics to analyse this. We have no influence on the use of such tools by Google and have not been informed about such potential use.

If tools of this kind are used by Google for our YouTube channel, we have neither commissioned this nor supported it in any way. Nor are the data obtained during the analysis made available to us. Only the subscribers' profiles are visible to us via our account.

Finally, Google also receives information when you view content, for example, even if you have not created your own account. This so-called "log data" may be the IP address, browser type, operating system, information about the website you previously visited and the pages you viewed, your location, your mobile provider, the terminal device you use (including device ID and application ID), the search terms you used and cookie information. You have options to limit the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers privacy settings specific to YouTube. You can find out more about this in Google's guide to privacy in Google products: https://policies.google.com/technologies/product-privacy?hl=de&gl=de.

You can find more information on these points in Google's privacy policy under the term "Privacy settings": https://policies.google.com/privacy?hl=de&gl=de#infochoices.

You also have the option of requesting information via the Google privacy form: https://support.google.com/policies/troubleshooter/7575787?visit_id=637054532384299914-2421490167&hl=de&rd=22.

If you communicate with us via YouTube and provide us with data, we process your data on the basis of Art. 6 (1) lit. b GDPR to fulfil your requests. However, the data you enter on YouTube, in particular your username and the content published under your account, are processed by us insofar as we reply to your publications under "Comments", if applicable. The data freely published and disseminated by you on YouTube is thus included by us in our offer and made accessible to our users.

19. Rights of the data subject:

You have the following rights:

In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us;
In accordance with Art. 16 GDPR, to demand without delay the rectification of incorrect or completion of your personal data stored by us;
In accordance with Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
In accordance with Art. 18 GDPR, to request the restriction of processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
In accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
To revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent in the future;
To complain to a supervisory authority in accordance with Art. 77 GDPR. For this purpose, you may contact the supervisory authority of your usual place of residence, the supervisory authority at the location of your place of work or the supervisory authority at the location of our registered office or the location of the alleged infringement.

20. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct advertising. In the event of an objection to the processing of personal data for direct marketing purposes, you have a general right of objection, which will be implemented by us without stating further reasons.

If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to: datenschutz.mix@monolith-gruppe.com

21. Change of the Privacy Statement

Please note that this Privacy Statement can be changed at any time in compliance with data protection regulations. The version available at the time of your visit to our website applies.

If you have any further questions, please do not hesitate to contact us using the above contact details.

Mix GmbH Lebensmittelhandel
Herrenberg, May 2021