In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. B. Name, address, e-mail addresses, user behavior. We have taken extensive technical and operational safety precautions to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
1. Responsible for data processing
Responsible acc. art. 4 para. 7 EU General Data Protection Regulation (GDPR) is
Elevated Leaf
Bloemstraat 1 A
3581 WB Utrecht
The Netherlands
Email: hello@elevatedleaf.co
KVK number: 82894094
VAT number: NL862644215B01
The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
2. Contact option for the data protection officer
You can reach our data protection officer at privacy@elevatedleaf.co or at our postal address with the addition ‘attn. data protection officer’.
Elevated Leaf
Bloemstraat 1 A
3581 WB Utrecht
The Netherlands
3. Your rights
You have the following rights with regard to your personal data:
3.1 General rights
You have the right to information, correction, deletion, restriction of processing, objection to processing and data transferability. As far as processing is based on your consent, you have the right to revoke this with effect for the future.
3.2 Rights on data processing based on legitimate interest
According to art. 21 para. 1 GDPR, for reasons arising from your particular situation, you have the right at any time to object to the processing of personal data relating to you, which is based on art. 6 para. 1 e GDPR (data processing in the public interest) or on the basis of art. 6 (1) f GDPR (data processing to safeguard a legitimate interest). This also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
3.3 Right on data transferability
You have the right to have the data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. It is made available in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done if it is technically feasible.
3.4 Direct Marketing Rights
If we process your personal data in order to operate direct mail, you have according to. art. 21 (2) GDPR, the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct mail.
If you object to processing for the purpose of direct mail, we will no longer process your personal data for these purposes.
3.5 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about our processing of your personal data.
4. Collection of personal data when you visit our website
If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security. The legal basis for this is art. 6 para. 1 f GDPR:
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status / HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system, and its interface, language and version of the browser software.
5. Contact by email or contact form
When you contact us by e-mail or using a contact form, the data you provide (your e-mail address, possibly your name and your telephone number) will be saved by us in order to answer your questions. Insofar as we use our contact form to request information that is not required to establish contact, we have always marked this as optional. This information helps us to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, art. 6 para. 1 a GDPR. As far as this concerns information on communication channels (e.g. e-mail address, telephone number), you also consent that we may contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time for the future.
We delete the data that arises in this context after the storage is no longer required, or we restrict the processing if there are statutory retention requirements.
6. Use of social plugins
This website uses social plugins from the providers
- Facebook (Operating company: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
- Twitter (Operating company: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
- Instagram (Operating company: Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA)
These plugins usually collect data from you by default and transmit it to the server of the respective provider. In order to protect your privacy, we have taken technical measures to ensure that your data cannot be recorded by the providers of the respective plug-in without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. The plugins are only activated by clicking on the respective symbol and you thereby give your consent to your data being transferred to the respective provider. The legal basis for the use of the plugins is art. 6 para. 1 a and f GDPR.
After activation, the plugins also collect personal data such as your IP address and send this to the server of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website concerned is accessed. This enables the providers to create profiles of your usage behavior. This also happens if you are not a member of the social network of the respective provider. If you are a member of the provider’s social network and you are logged in to the social network during your visit to this website, your data and information about your visit to this website can be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, type and purpose of data processing and about rights and setting options to protect your privacy, please refer to the data protection information of the respective provider of the social network. These are available at the following addresses:
Facebook: https://www.facebook.com/policy.php
Twitter: https://twitter.com/privacy/
Instagram: https://help.instagram.com/155833707900388
7. Use of cookies
When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie. Cookies cannot run programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
This website uses the following types of cookies, the scope and functionality of which are explained below:
7.1 Transient cookies
These cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
7.2 Persistent Cookies
These cookies are automatically deleted after a specified period, which can differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.
7.3 Flash Cookies
The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. These objects save the required data regardless of the browser you are using and have no automatic expiry date. If you do not want the Flash cookies to be processed, you must install a corresponding add-on, e.g. “Clear Flash Cookies” for Mozilla Firefox (https://addons.mozilla.org/en-US/firefox/addon/clear-flash-cookies/) or delete the Flash cookies via the browser settings (https://blog.chromium.org/2011/04/providing-transparency-and-controls-for.html) if you use Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
7.4 Prevention of cookies
You can configure your browser settings according to your wishes and e.g. B. reject the acceptance of third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.
8. Legal basis and storage period
The legal bases for possible processing of personal data and their storage duration vary and are presented in the following sections.
9. Website analysis
For the purpose of analyzing and optimizing our website, we use various services, which are presented below. So we can e.g. analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data on the website from which a person concerned came to a website (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. This helps us to make our offers user-friendly and to improve them. The data collected in this way are not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is art. 6 para. 1 f GDPR.
10. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc, (1600 Amphitheater Parkway Mountain View, CA 94043, USA) The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.
Google Analytics uses cookies, which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Section 15 Paragraph 3 TMG or Art. 6 Paragraph 1 f GDPR. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has expired takes place automatically once a month. You can find more information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ or at https://policies.google.com/?hl=en.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by visiting https://tools.google.com/dlpage/gaoptout?hl=en and download and install the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. In order to prevent the collection by Universal Analytics across different devices, you must perform the opt-out on all systems used.
10.1 IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other data from Google.
10.2 Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.
10.3 Objection to data collection by Google Analytics
You can prevent Google Analytics from collecting your data by installing the Google Analytics opt-out browser add-on: https://support.google.com/analytics/answer/181881?hl=en. An opt-out cookie is set which prevents your data from being recorded on future visits to our website. You can find details on how to handle user data on Google Analytics in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=en.
10.4 Order processing
In order to fully comply with the statutory data protection requirements, we have concluded an order processing contract with Google.
11. Marketing purposes
We use cookies for marketing purposes in order to address our users with interest-based advertising. In addition, we use cookies to limit the likelihood of an advertisement being shown and to measure the effectiveness of our advertising. This information can also be shared with third parties, such as B. ad networks. The legal basis for this is art. 6 para. 1 a and f GDPR. The legitimate interest of direct marketing exists for the purposes pursued with the data processing. You have the right to object at any time to the processing of your data for the purpose of such advertising. For this purpose, we provide you with the following opt-out options for the respective services. Alternatively, you can prevent cookies from being set in your browser settings.
11.1 Remarketing/Retargeting
We work with some advertising partners, including Google & Facebook, to use what is known as re-targeting technology. With this technology, cookies from these partner companies (so-called third-party cookies) are also stored on your hard drive when you visit our site. These cookies are permanent or temporary cookies that are automatically deleted after a specified period of time. The service providers analyze surfing behavior and can then display targeted recommendations as personalized advertising banners on other websites. Under no circumstances can this data be used to personally identify the visitor to this website. The collected data is only used to improve the offer. There will be no other use or disclosure to third parties. The data determined by the offer do not contain any personal data.
You can deactivate the use of cookies by Google by setting your browser software accordingly by calling up the page https://policies.google.com/technologies/ads and pressing the “opt-out” button.
Further options for deactivating cookies by third-party providers can be found at https://optout.networkadvertising.org/?c=1 or Digital Advertising Alliance Opt-Out Platform. We would like to point out that this will only block the advertisements displayed by the individual service provider. You can object to personalized advertising altogether by deactivating cookies in your browser.
The website also uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). This allows users of the website to be shown interest-related advertisements (“Facebook Ads”) when visiting the social network Facebook or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting for you. Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data that is collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you are visiting our website Have accessed our website or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.
The deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#. Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy.
12. DoubleClick
This website continues to use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to show ads that are relevant to users, to improve reports on campaign performance, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or have clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, by suppressing third-party cookies, you will not receive any advertisements from third-party providers; b) by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://adssettings.google.com/authenticated?hl=en, where this setting will be deleted if you delete your cookies; c) by deactivating the interest-related advertisements of the providers who are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer, Edge, or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for processing your data is Art. 6 Para. 1 S. 1 lit. f GDPR. Further information about DoubleClick by Google is available at https://www.google.com/doubleclick and https://support.google.com/ads/answer/2662922?hl=en, as well as general data protection at Google: https://policies.google.com/privacy?hl=en. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
13. Data transfer
A transfer of your data to third parties does not take place, unless we are legally obliged to do so, or the transfer of data is necessary for the implementation of the contractual relationship or you have expressly consented to the transfer of your data beforehand.
External service providers and partner companies such as Online payment providers or the shipping company commissioned with the delivery will only receive your data if this is necessary to process your order. In these cases, however, the amount of data transmitted is limited to the necessary minimum. As far as our service providers come into contact with your personal data, we provide within the scope of the order processing acc. art. 28 GDPR ensures that they comply with the provisions of data protection laws in the same way. Please also note the respective data protection information of the provider. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.
It is important to us to process your data within the EU/EEA. However, it can happen that we use service providers who process data outside the EU/EEA. In these cases, we ensure that an appropriate level of data protection is established for the recipient before your personal data is transmitted. This means that through EU standard contracts or an adequacy decision, such as the EU Privacy Shield, we strive to achieve a level of data protection that is comparable to the standards within the EU.
14. Data security
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https: //” address line of your browser and by the lock symbol in the browser line.
15. Dispute resolution
We are not willing or obliged to take part in dispute settlement proceedings before a consumer arbitration board.
Published: June 2021