Privacy Policy

Controller responsible for data processing:

Hartkorn Gewürzmühle GmbH
Carl-Benz-Str. 13
56218 Mülheim-Kärlich
Email: info@hartkorn-gewuerze.de
Phone: +49 (0) 2630 9632-0

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is any data with which you can be personally identified. This privacy policy explains what data we collect, what we use it for, and how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Below we provide detailed information on how we handle your data.

1. Access Data and Hosting

Hosting

You can visit our website without providing personal information. Each time a page is accessed, the web server automatically stores a so-called server log file (e.g., IP address, date, time, requested file).

This data is used exclusively to ensure trouble-free operation of the site and to improve our offer (Art. 6 para. 1 lit. f GDPR). The data will be deleted no later than seven days after your visit.

Data Protection Officer:

DEUDAT GmbH
Zehntenhofstraße 5b
65201 Wiesbaden
Germany
Phone: +49 (0) 611 950008-40
Email: datenschutz@hartkorn-gewuerze.de

Hosting services are partly provided by our service providers within the scope of data processing on our behalf.

Hosting provider:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

2. Data Processing for Contract Execution and Contact

2.1 Contract Processing

For the purpose of processing your order, we collect personal data in accordance with Art. 6 para. 1 lit. b GDPR. Mandatory fields are required to fulfill the contract.

2.2 Customer Account

If you create a customer account, we store your data for future orders based on your consent (Art. 6 para. 1 lit. a GDPR). You can delete your account at any time.

2.3 Contact

When contacting us (e.g., via form or email), we process your data to handle your request (Art. 6 para. 1 lit. b GDPR).

3. Shipping Processing

For the purpose of fulfilling the contract, we pass your data to shipping providers (Art. 6 para. 1 lit. b GDPR).

Shipping providers:

DHL Paket GmbH, Germany
DPD Deutschland GmbH, Germany

4. Payment Processing

For payment processing, we cooperate with technical service providers, banks, and payment service providers.

4.1 Transaction Processing

Depending on the selected payment method, the required data is transmitted to the respective provider (Art. 6 para. 1 lit. b GDPR).

Payment providers:

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Mastercard Europe SA, Belgium
Visa Europe Services Inc., United Kingdom

4.2 Fraud Prevention

Data may be used for fraud prevention and optimization of payment processes based on legitimate interests (Art. 6 para. 1 lit. f GDPR).

4.3 Credit Check

If you choose purchase on account, your data may be transmitted to Ratepay and PayPal for identity and credit checks.

5. Advertising

If you subscribe to our newsletter, we process your data based on your consent (Art. 6 para. 1 lit. a GDPR).

Newsletter provider

CleverReach GmbH & Co. KG, Germany

Review Requests

We may send review requests by email based on your consent.

Postal Advertising

We use your address for postal advertising based on legitimate interests (Art. 6 para. 1 lit. f GDPR). You can object at any time.

6. Cookies and Technologies

6.1 General Information

Our website uses cookies to provide functions and improve usability.

6.2 Usercentrics

We use the Usercentrics consent management platform to manage your cookie preferences.

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich, Germany

The following data may be processed:

Consent status
Time of consent
Browser information
Device information
Anonymized IP address

Consent data is stored for 12 months unless legal obligations require longer retention.

6.3 Data Transfers to Third Countries

Some services may transfer data to countries outside the EU/EEA. This is done based on appropriate safeguards such as standard contractual clauses.

7. Third-Party Services

7.1 Adobe

Adobe Fonts for content display.

7.2 Google

Google Fonts for content display.

7.3 Meta (Facebook)

Facebook Pixel and advertising tools.

7.4 Other Services

Matomo
AWIN
YouTube
Wistia
CloudFront
ADCELL

8. Social Media

Our website includes social media links. A connection is only established when you click on them.

9. Your Rights

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to lodge a complaint (Art. 77 GDPR)

You may withdraw your consent at any time or object to data processing based on legitimate interests.

Contact

DEUDAT GmbH – Thomas Habicht
Zehntenhofstraße 5b
65201 Wiesbaden
Germany
Phone: +49 (0) 611 950008-43
Email: datenschutz@hartkorn-gewuerze.de

10. Applications

If you apply to us, we process your data for the purpose of handling the application procedure.

If your application is unsuccessful, your data will be stored for up to six months and then deleted unless legal obligations require otherwise.