Privacy Policy

On our PLANT B GmbH website, we inform you of our offer. In doing so, we attach great importance to the protection of your personal data. We collect and process your personal data exclusively within the constraints imposed by the European Union’s (EU) General Data Protection Regulation (GDPR). In compliance with Art. 13, 14 of the GDPR, we inform you here of the extent to and manner in which your personal data are collected on this website and processed.

The controller processing personal data is

PLANT B GmbH
WeWork Hanse Forum
Axel-Springer-Platz 3
20355 Hamburg
Tel.: +49 160 719 1612
E-mail: kundenservice@plant-b.com

In running our website with its wide range of offers, we cooperate closely with the following external service providers that we have selected with care and obliged in the form of a job processing contract to conform to the GDPR, as stipulated under Art. 28 thereof: The website is hosted by 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you visit our website and use the range of offers, we process your personal data as described in the following:

1. Server log files
2. Cookies and plugins
2.1 Session cookies
2.2 Persistent cookies and plugins
2.3 Google Analytics
3. Social media offers: Facebook, Instagram, LinkedIn, YouTube
3.1 Facebook, Instagram and LinkedIn
3.2 Evaluation of use by Facebook
3.3 YouTube videos
3.4 Possible data transfer beyond the EU / EEA
4. Contacting: contact form and e-mail function
5. Newsletter
6. Amazon Store
7. Data security
8. Rights of those concerned / your rights
9. Updates

1. Server log files

When you visit our site, we create so-called server log files. These constitute access data that we process to maintain system availability (e.g. for detecting technical errors or automated bot access) and to generate statistics on and optimise the technology behind our web presence. On the technical side, we can e.g. track transmission errors back to their source, examine firewall activities and optimise search engine algorithms.

The server log files collect the following information:

– website visited previously (the search engine used, if any, including the entered keywords),
– requested website including number of visited pages and the page opened last before the website was left,
– browser type and browser version,
– operating system and device type used,
– time of access,
– visit duration, and
– anonymised IP address identifying the access location and host name.

These server log files do not contain any personal data; in addition, only the anonymised form of the IP address is collected. If, contrary to our knowledge, a reference to a specific person should be possible, our legitimate interests would justify this for the reliable and optimised presentation of our web contents (legal basis: Art. 6 I 1 f GDPR). The server log files are deleted after eight (8) weeks at the latest.

2. Cookies and plugins

2.1 Session cookies

When you visit our site, we create on your device session cookies that help us to optimise the presentation technology behind our website and that are deleted when your browser is closed (legal basis: Art. 6 I 1 f GDPR).

2.2 Persistent cookies and plugins

In addition, we use persistent cookies, i.e. small text files saved in your browser, and the corresponding persistent plugins helping us to maintain the constant optimisation of our site for even greater user appeal to you. In doing so, we make use only of those cookies and plugins justified by our primary legitimate interest (legal basis: Art. 6 I 1 f GDPR).

When you click “OK” on our cookie banner appearing as soon as you visit our website and informing you of the cookies we use, we note this in the form of a so-called cookie notice. For as long as this cookie remains on your terminal, you will not be greeted again by the cookie banner, so you can start surfing immediately.

If you do not wish the use of cookies, you can configure your browser to block and so object to them (for this right to object, see also 8. Rights of those concerned / your rights). Alternatively, you can consult the US webpage http://aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/uk/your-ad-choices/ on how you can affect the use of cookies on your devices. You can still visit our website, but you will not be able to use it to the same extent.

2.3 Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). Google Analytics employs so-called tracking cookies or text files that are saved to your terminal and help to analyse your use of our website. These are
• _ga (use limited in time to two years),
• _gid (temporary use limited to 24 hours).

In other words, these cookies remain on your device even after you have left the website, allowing us to recognise your browser the next time you visit. By supporting this recognition, these cookies help to optimise the contents of our website.

The information generated by the cookies on how you use our website is generally transmitted to a Google server in the USA, where it is also stored. This website makes use of Google Analytics with the function “_anonymizeIp()”. In other words, your IP address is abbreviated immediately after it has been transmitted, ruling out any possibility of reference to a specific person. Actually, Google abbreviates your IP address before it is transmitted from within EU member states or other signatories to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there.

The IP address transmitted by your browser to Google Analytics and then abbreviated is not collated with any other Google data. On our authority, Google uses this information to evaluate how you use our website, to compile reports on website activities and to provide us with services related to this internet use.

We use Google Analytics to analyse how our website is used and to improve this on a regular basis. Assisted by these statistics, we can make our web presence more attractive, more appealing, and hence more interesting to you as a user.

For the exceptional cases when personal data are transmitted to the USA, Google has committed itself to the EU-US Privacy Shield for an appropriate data protection level (list can be viewed at https://www.privacyshield.gov/list).

Our use of Google Analytics is justified by our legitimate interest in the user-friendly development of our presence (Art. 6 I 1 f DSGVO). You can also use our website without Google Analytics. You can block the use of Google Analytics by downloading and installing the browser plugin at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. We will then create an opt out cookie on your terminal that permanently blocks the use of tracking cookies on your terminal when you visit our website.

Third party information: Google Dublin, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
Privacy policy: https://policies.google.com/privacy?hl=de,
Overview of data protection:
https://support.google.com/analytics/answer/6004245?hl=de

3. Social media offers: Facebook, Instagram, LinkedIn, YouTube
We make use of the social media offers provided by Facebook, Instagram, LinkedIn and YouTube. These offer our visitors a range of options for social interaction. We provide links to these offers and links from our presentations there to this website. You can recognise these links by their respective icons.

3.1 Facebook, Instagram and LinkedIn
The links we provide to our offers on this website and from our presentations on the social media platforms Facebook, Instagram and LinkedIn let you share our offers with others, contact us and exchange your ideas about our offers with us. By clicking one of the offers on our website or visiting them directly on the social media platforms, you can interact with this offer after logging in directly to your account on this platform.

All of the information we provide on our website for social media offers, e.g. in the form of icons, involve the so-called two-click solution. In other words: The information you provide is not transmitted until you click one of the links or icons. Links and icons therefore are depicted as “disabled”.

After clicking a link or icon, you will then be forwarded by our website to our presence in a third party environment, and your data transmitted to this third party, including and in particular the page you have come from. This is also the case when you do not have an account with this provider or are not logged in. If you own an account, the provider links regularly to your account the information concerning the page you have come from. This is also possible when you are not logged in at the time.

We have no control over the personal information these third party providers collect from you nor how this information is processed when you use the social media platforms. This too is unknown to us. You will learn this from the social media providers themselves. The addresses you can find here:

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, privacy policy: https://de-de.facebook.com/about/privacy/, cookie information: https://de-de.facebook.com/policies/cookies, advertising notices: https://www.facebook.com/help/568137493302217, conditions of use: https://de-de.facebook.com/legal/terms/update
At Instagram, in addition: https://help.instagram.com/519522125107875?helpref=page_content
LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy, user agreement: https://www.linkedin.com/legal/user-agreement?trk=homepage-basic_footer-user-agreement, cookie policy: https://www.linkedin.com/legal/cookie-policy?trk=hb_ft_cookie

Our social media offers as well as our links to these let you expand your networking capabilities and so present you with a more appealing, more flexible range of offers. These offers you can also share with others conveniently over a number of channels. Our website then evolves into an experience of greater interest to you. The use and embedding of social media offers are therefore justified by our legitimate interest (Art. 6 I 1 f GDPR). Your active clicking is based on your decision to have your personal data transmitted to third party providers.

3.2 Evaluation of use by Facebook

We also employ the usage evaluations, or so-called page insights, provided to us by Facebook, which help us to improve our Facebook page on a continuous basis. Facebook collects these data and transmits them to us only when you have a Facebook account and visit our page there. Here too, we have no control over the extent and manner of Facebook’s data collection and analysis. The evaluation of the analyses provided to us is justified by our legitimate interest (Art 6 I 1 f GDPR). The usage data are provided in anonymised form via Facebook.

We and Facebook are the joint controllers responsible for the processing of usage data from visitors to our Facebook page. To this end, we have concluded an agreement that regulates the assignment of obligations (Art. 26 GDPR). According to the essence of this agreement, Facebook primarily is responsible for processing visitor data and fulfilling all of the relevant obligations under the GDPR with respect thereto, including, but not restricted to, the fulfilment of the data subject’s rights. The agreement can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum.

3.3 YouTube videos

Our website also provides videos you can watch. These are integrated in our online content so that you can watch them directly on our site. These videos are integrated directly in our site with the advanced data protection settings enabled on the YouTube side. In other words, your data, specifically your IP address and the page where you have come and where you watched the video, are not transmitted to YouTube until you actually play back the integrated video. While the video is being played back, these data are also transmitted to YouTube when you do not have an account there or are not logged in. If you have an account, YouTube can link this information to your account, also when you are not logged in.

You can also watch our videos at youtube.com itself. This too involves data transmission to YouTube. We have no control over the personal information these third party providers collect from you nor how this information is handled. This too is unknown to us. Learn more here:

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, privacy policy: https://policies.google.com/privacy, data protection notices: https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines, conditions of use: https://www.youtube.com/t/terms and https://www.youtube.com/t/terms_paidservice

By integrating and presenting videos, we provide a different view of our products. Our website and offers then evolve into an experience of greater interest to you. The use and embedding of YouTube content for presenting our videos is therefore justified by our legitimate interest (Art. 6 I 1 f GDPR). Your active clicking is based on your decision to have your personal data transmitted to YouTube.

3.4 Possible data transfer beyond the EU / EEA

Please bear in mind that the parent companies of Facebook, Instagram, LinkedIn and YouTube are based in the USA. When you make use of our offers on these platforms, your data may therefore be transmitted to third party nations that do not safeguard an appropriate level of data protection. When personal data are transmitted to the USA, an appropriate level of data protection is safeguarded in the form of the EU-US Privacy Shield, to which Facebook, Instagram, LinkedIn and YouTube have committed themselves (list can be viewed at https://www.privacyshield.gov/list).

4. Contacting: contact form and e-mail function

To contact us, you can use the contact form we provide directly on our website. Or you can simply e-mail us directly to one of the e-mail addresses listed on our website. Then you must always specify your e-mail address so that we can reply to your request. All other information is voluntary. If you tell us your name, we can also address you personally.

The information you transmit to us (via e-mail or contact form) is processed exclusively for the handling of your request. There is no transmission to third parties, unless the nature of your request makes this absolutely necessary. After processing your request, we delete these data unless statutory obligations or rights prescribe their archiving over a longer period.

All of the processes involved in handling the information you provide are justified by our legitimate interest (Art. 6 I 1 f GDPR). Depending on the nature of the request, the data may also be processed for the initiation of a contract (Art. 6 I 1 b GDPR).

5. Newsletter

You may also choose to subscribe to our e-mail newsletter, which provides you regularly with up-to-date information. To do so, you are prompted to enter your e-mail address and your name. We need your e-mail address to send you the newsletter in the first place. We would also like to know you by name so that we can address you personally.

The data you provide us to subscribe to our newsletter we use exclusively to send you this.

Before we can send you the first newsletter, we need your consent (Art. 6 I 1 a GDPR). To grant your consent, enter your name on our mailing list, and we’ll send you a confirmation e-mail (so-called double opt-in). Only when you click the link in this confirmation mail will you receive this newsletter in future. We then store your IP address and the date and time you sent your confirmation so that we can retrace and verify the route taken by your consent (justified by our legitimate interest under Art. 6 I 1 a GDPR). When you click this link, we delete your data after four (4) weeks.

You have at any time and in any newsletter the option to revoke your consent with future effect. Simply use the unsubscribe function provided in the newsletter, or contact us directly using the above contact details.

6. Amazon Store
You can purchase our products from the Amazon Store. There we sell our products as an independent vendor, and Amazon handles our shipping. All of the personal data we receive from you while you are using our section of the Amazon Store are collected and transmitted to us by Amazon.
By ordering one of our products from the Amazon Store, you transmit to us your name, the shipping address, and, if necessary, the billing address as well as details on the product or products you have ordered from us. We do not receive any bank details: Amazon alone handles the entire payment and shipping process. We process these data exclusively for the purpose of handling the order and specifically of generating your invoice.
To this end, we process your data to fulfil our Amazon Store contract (Art. 6 I 1 b GDPR), the conditions of which also involve the transmission of personal data and the shipping of the purchased article(s) via Amazon. We make active use of your data until the contract has been completed, after which they are flagged as unavailable in our archives. This is necessary should you have any questions concerning this order or should you unexpectedly experience problems (before the end of the archiving period), or for reasons stipulated under the tax and trade laws (ten-year retention period for data relevant to taxation).
Please feel free to ask us about our products, even before you submit an order. On our Amazon seller information page, which you can open by clicking our name (PLANT B) on the product page, you can click the button “Ask a question” to enter the details of your request in a contact form. Your message will then be sent to us directly via the Amazon communication management. By choosing this mode to contact us, we receive on the Amazon platform your request in encrypted form – and we cannot access your contact details. The transmitted information we use exclusively to process your request. There is no transmission to third parties, unless the nature of your request makes this absolutely necessary. After processing your request, we delete these data unless statutory obligations or rights prescribe their archiving over a longer period. All of the processes involved in handling the information you provide are justified by our legitimate interest (Art. 6 I 1 f GDPR). Depending on the nature of the request, the data may also be processed for the initiation of a contract (Art. 6 I 1 b GDPR).
Your first contact for questions on shipping and payment after you have submitted your order is the Amazon customer service. How your data are processed when your request is being handled is outside of our control. Furthermore, we have no control over the extent of the data Amazon collects when you use the Amazon Store nor how these data are handled.

Further details on data processing by the platform operator Amazon Services Europe S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855 Luxembourg, you will find in the privacy policy at Amazon itself: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010&ld=SCDESOALogin_dropdown.

7. Data security

In order to provide your personal data with the best possible protection, we employ technical and organisational security measures in the form of SSL/TLS encryption (https standard) that is also adapted to the state of the art in line with the appropriate risk levels.

8. Rights of those concerned / your rights

When personal data affecting you as a natural person are processed, the data protection laws grant you a number of rights that you may exercise.

Pursuant to § 34 of the German data protection laws BDSG and Art. 15 GDPR, you have the right to access your stored personal data and the information on their origin, on the recipients and recipient categories receiving these data, and on the purpose of this storage.

Furthermore, pursuant to § 35 BDSG, Art. 16-20 DSGVO, you may exercise your right to rectify, delete, and/or restrict (the processing of) your personal data and to data portability.

Moreover, you may object to the further processing of your data when we process your data in a manner justified by a legitimate interest (Art. 6 I 1 f GDPR). When, however, we do not process your data for advertising purposes, your objection must be supported by a special reason. On receiving your (justified) objection, we shall thereafter cease processing your personal data during the subsequent examination and, on successful conclusion of this examination, delete them from our active databases and only flag these as unavailable to advertising in accordance with your wish not to be addressed by us (§ 36 BDSG, Art. 21 GDPR).

You may revoke at any time the consent you have granted to us to process your data (Art. 6 I 1 a GDPR). We then cease processing your personal data and delete these, except when their continued processing is permitted by law.

An objection or a revocation does not affect the permissibility of data processing in the past.

The rights conferred on you we fulfil immediately and without charge. To exercise your rights, please contact us. Our contact details can be found at the head of this privacy policy.

If you believe that your personal data are being processed in violation of the GDPR, you may exercise your right to file a complaint before a data protection supervisory authority of your choice (§ 19 BDSG, Art. 77 GDPR). This also extends to the data protection supervisory authority responsible for us, which you can contact using the following details:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg, Germany
Tel.: +49 40 42854-4040
E-fax: +49 40 4279-11811
E-mail: mailbox@datenschutz.hamburg.de
Homepage: datenschutz-hamburg.de

9. Updates

From time to time, our privacy policy will be updated in line with new developments. If we are able to contact you, we shall inform you of the relevant changes.

This privacy policy was last revised: September 2019