Privacy Policy

Data controller

The data controller responsible for the processing of data on this website is:

Sustainable Manufacturing GmbH

Industrial park 7

27777 Ganderkesee

Germany

info@recozy.de

We appreciate your interest in our online shop. The protection of your privacy is critical to us. Below, we provide detailed information on how we handle your data.

1. Operation and hosting of our website

You can visit our websites without providing any personal information. When accessing a webpage, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

These access data are evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offering. This is done in accordance with Art. 6(1)(f) of the GDPR to safeguard our legitimate interests in presenting our offering correctly as part of a balancing of interests. All access data is deleted no later than seven days after the end of your visit to the webpage.

2. Data Collection and Usage for Contract Processing, Contact, and Customer Account Opening

We collect personal data when you voluntarily provide it to us during the ordering process or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases, we require the data for contract processing or to handle your inquiry, and you cannot complete the order or send the inquiry without providing the necessary information. The specific data collected can be found in the respective input forms. We use the data you provide to us in accordance with Art. 6(1)(b) of the GDPR for contract processing and to handle your inquiries.

If you have given your consent to open a customer account in accordance with Art. 6(1)(a) of the GDPR, we use your data for the purpose of account opening. After the complete fulfilment of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiration of the statutory retention periods for tax and commercial purposes unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is legally permitted, and about which we inform you in this statement. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or by using the designated function in your customer account.

3. Data Disclosure

For the purpose of contract fulfilment in accordance with Art. 6(1)(b) of the GDPR, we will disclose your data to the shipping company entrusted with the delivery, to the extent necessary for the delivery of the ordered goods. Depending on the payment service provider you select during the ordering process, we will disclose the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider during the ordering process using your access data. In this respect, the privacy policy of the respective payment service provider applies.

4. Email Newsletter and Postal Advertising

Email Advertising with Newsletter Subscription

When you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6(1)(a) of the GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or by using the unsubscribe link provided in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

Email Advertising without Newsletter Subscription and Your Right to Object

If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products from our range by email. You can object to this use of your email address at any time by sending a message to the contact option described below or by using the unsubscribe link provided in the promotional email, without incurring any costs other than the transmission costs according to the basic rates.

Postal Advertising and Your Right to Object

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, such as sending interesting offers and information about our products by postal mail. This serves to safeguard our legitimate interests in addressing our customers in a promotional manner, which outweigh other interests, in accordance with Art. 6(1)(f) of the GDPR.

5. Usage of Chatwerk

Responsible provider of the ChatWerk platform/service:

Inbox Solutions GmbH, Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany. The Privacy Policy is available at https://chatwerk.de/datenschutzerklaerung/

WhatsApp 

Insofar as you have consented, we process the personal data that you have provided or that we have personal data (e.g. name, telephone number, e-mail address, messenger ID, profile picture, messages) for communication regarding the preparation and execution of any orders as well as for sending promotional information (e.g. offers, newsletters) using the instant messaging service "WhatsApp" of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. 

An existing messaging account is required to use this service. 

We want to point out that WhatsApp Ireland Limited may also pass on personal data (in particular metadata of the communication) to WhatsApp Inc., which 

are also processed on servers in states outside the EU (e.g. the USA) where there is no adequate data protection. WhatsApp may share this data with other companies within and outside the Facebook group of companies. For more information, please see the privacy policy of WhatsApp Business (https://www.whatsapp.com/legal/business-policy/) and WhatsApp (https://www.whatsapp.com/legal/#privacy-policy). We have neither precise knowledge nor influence on WhatsApp Ireland Limited or WhatsApp Inc.'s data processing, which is responsible under data protection law in this respect.

In addition to the recipients already explicitly named above, we use the help of further service providers (order processors) to fulfil our obligations. 

We want to point out that you can revoke your consent for the future at any time without giving reasons by informing us of your revocation via WhatsApp with a message with the note WIDERRUF or by e-mail to the e-mail address stated in this data protection declaration or our imprint of the corresponding processing of your personal data. 

The data mentioned above will be deleted in accordance with the legal requirements as soon as their consent to processing is revoked, or if the purpose of processing this data no longer applies or if it is not required for the purpose. 

If the data is not deleted because it is required for other and legally permissible purposes, its processing is limited to these purposes. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defence of legal claims or the protection of the rights of another natural or legal person.

Responsible provider of the WhatsApp Messenger service:

WhatsApp Messenger the WhatsApp, Inc, 1601 Willow Road, Menlo Park, California 94025,

USA; the privacy policy is available at whatsapp.com/legal/business-policy/

Webchat 

Sustainable Manufacturing GmbH uses a webchat on the https://recozy.de/ website. The webchat serves as an additional means of communication on our website and enables online conversations with Sustainable Manufacturing GmbH. The conversation is conducted using a chatbot (virtual assistant, software), which answers users' questions, assists with your enquiry or provides you with information. 

What personal data is processed?

When you use the webchat, the following personal data will be processed and stored:

• Date and time of the call
• IP address
• URL of the previously visited website
• First name, last name
• E-mail address
• Chat ID and user token (stored in the local storage of the browser)

Depending on the conversation with our chatbot, we process further data from you if you provide them during the conversation, depending on your request or the problem you describe. Using the webchat is voluntary, and your data will only be processed in this case. 

For what purposes and on what legal basis is the data processed?

We use the data mentioned above to offer the webchat, to address users personally, answer user enquiries, and provide the user with information and/or content. Legal basis: Our legitimate interest in providing a webchat (Art. 6 para. 1 p.1 lit. f. DSGVO).

How long is personal data stored?

12 months

To whom is data passed on?

Data is only passed on to third parties within the scope of business fulfilment to process and respond to your enquiry. For this purpose, your data will be passed on to Inbox Solutions GmbH (Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany) as the technical operator of the webchat and Sellwerk GmbH & Co. KG (Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany) as the intermediary to the company and to the company you contacted via the webchat. 

We use Google Cloud to store your data and chat histories. The data is transferred to and stored on servers located in Frankfurt. Google does not use this data for its own purposes. 

We use the Google Cloud services based on our legitimate interest, according to Art. 6 para. 1 lit. f DSGVO to be able to provide our services through the technical infrastructure. We have concluded an order processing agreement with Google (https://cloud.google.com/terms/data-processing-terms). In the event that personal data is transferred to the USA, we have concluded EU standard contractual clauses with Google (https://cloud.google.com/terms/data-processing-terms). The EU Standard Contractual Clauses are a generally accepted mechanism for lawful cross-border transfers of personal data to countries outside the European Economic Area (EEA). 

Further information on the use of webchat:

By accessing the website https://recozy.de/, the chat widget is loaded in the form of a JavaScript file. No data is transferred before you open the chat.

You have two options to open the webchat:

1. Manual click on the button in the directory entry.
2. Manually click on the chat icon in the bottom right corner of the web page.

The moment you open the webchat, your chat is created as an object in the background and a chat ID and a token are stored in the browser's local storage. The ID and the token are unique characteristics to recognise your chat (chat ID) and you as a user (token) unambiguously when you revisit the site and to show you communication histories that have already taken place. As soon as you return to our website, the history of the chat is restored with the stored data in the local storage. You must open the chat manually.

In addition, the history of the webchats is saved. Every message you send is saved. This serves the purpose of being able to view your chat history even if you continue the communication you have started, for example, if a company replies to you with a time delay. 

If the company contacts you and is no longer online, you will receive an e-mail with a link that will take you back to the chat so that you can continue communicating with the company there. The chat will open automatically if you call up the link in your e-mail. You have the option to interrupt the chat at any time, but your data will not be automatically deleted in this case. If you no longer wish to receive messages from the company (opt-out), simply send "Stop" as a message in the webchat. After that, you will no longer receive any messages from the company in the chat and will no longer be informed by e-mail. Your chat history and data will be automatically deleted 6 months after the Stop message. 

For immediate deletion of your data, send an e-mail to support@chatwerk.de. Your data and saved chat history will then be deleted immediately.

Responsible provider of the Instagram Direct Messages service:

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, the privacy policy is available at https://help.instagram.com/519522125107875

Responsible provider of the Google Messages service:

Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland, the privacy policy is available at https://policies.google.com/privacy?hl=de

Responsible provider of the Facebook Messenger service:

Facebook Messenger Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA; the privacy policy is available at facebook.com/about/privacy

6. Cookies

To make your visit to our website appealing and to enable the use of certain functions, display suitable products, or conduct market research, we use cookies on various pages. This serves to safeguard our legitimate interests in an optimized presentation of our offerings, which outweigh other interests, in accordance with Art. 6(1)(f) of the GDPR.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session, once you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in your web browser's cookie settings. You can configure your browser to inform you about the placement of cookies and individually decide on their acceptance, or to generally exclude the acceptance of cookies for specific cases or in general. If you do not accept cookies, the functionality of our website may be limited. Each browser handles cookie settings differently. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers using the following links:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

7. Online Marketing

Amazon Partner Program

Our website participates in the Amazon Partner Program, which is offered by Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as "Amazon"). This is an affiliate system designed to provide a means for websites to earn advertising fees through the placement of advertisements and links to Amazon. This serves to safeguard our legitimate interests in optimizing and commercially exploiting our online offering, which outweigh other interests, in accordance with Art. 6(1)(f) of the GDPR.

By using cookies, Amazon can track the progress of each order and, in particular, verify that you have clicked on the respective link and subsequently ordered the product on Amazon. You can prevent the placement of cookies by our contractual partners or our website at any time by adjusting the settings of your internet browser. Furthermore, you can delete already set cookies at any time through your internet browser or other software programs. Further information on data processing at Amazon can be found here.

Use of Google (Universal) Analytics for web analysis

This website uses Google (Universal) Analytics, a web analysis service provided by Google Inc. (www.google.com). Google (Universal) Analytics uses methods that allow an analysis of your use of the website, such as "cookies," which are text files stored on your computer. The information generated about your use of this website is usually transmitted to a Google server in the United States and stored there. By activating IP anonymization on this website, your IP address will be truncated within the member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: 

http://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you can click on this link to prevent future collection of data by Google Analytics on this website. This will place an opt-out cookie on your device. If you delete your cookies, you will need to click the link again.

Google Maps

This website uses Google Maps for the visual display of geographical information. Google Maps is provided by Google Ireland Limited, a company registered and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com). This serves to protect our predominant legitimate interests in an optimized presentation of our offering and easy accessibility to our locations, in accordance with Art. 6(1)(f) of the GDPR.

When using Google Maps, data about the use of the mapping features by website visitors is transmitted to and processed by Google, including IP addresses and location data. We have no control over this data processing. If information is transferred to and stored on servers of Google in the United States, the American company Google LLC is certified under the EU-US Privacy Shield. You can view the current certificate here. Based on this agreement between the United States and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

To deactivate the Google Maps service and prevent data transmission to Google, you must disable the JavaScript function in your browser. In this case, Google Maps cannot be used or only to a limited extent.

Further information about data processing by Google can be found in Google's privacy policy. The terms of use for Google Maps provide detailed information about the mapping service.

Data processing is based on an agreement between joint controllers pursuant to Art. 26 of the GDPR, which you can view here.

8. Social Media

Use of Social Plugins from Facebook, Twitter, Instagram

Our website uses so-called social plugins ("plugins") from social networks.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged into one of the services, the providers can directly associate the visit to our website with your profile in the respective social network. If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed to your contacts. This serves to protect our predominant legitimate interests in an optimal marketing of our offering, in accordance with Art. 6(1)(f) of the GDPR.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your related rights and privacy settings, can be found in the privacy policies of the providers:

https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

https://twitter.com/en/privacy

https://help.instagram.com/155833707900388?cms_id=155833707900388

If you do not want the social networks to directly associate the data collected through our website with your profile on the respective service, you must log out of the corresponding service before visiting our website. You can also completely prevent the loading of plugins using add-ons for your browser, such as the script blocker "NoScript.". 

Our online presence on Facebook, Instagram

Our presence on social networks and platforms serves for better and active communication with our customers and prospects. We provide information about our products and ongoing special promotions there.

When visiting our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. Pseudonymous usage profiles are created from this data. These can be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your device. These cookies store visitor behaviour and user interests. This serves the purpose of safeguarding our legitimate interests in an optimized presentation of our offers and effective communication with customers and prospects, pursuant to Art. 6(1)(f) of the GDPR. If you are asked by the respective social media platform operators to provide consent for data processing, for example, by using a checkbox, the legal basis for data processing is Art. 6(1)(a) of the GDPR.

Regarding social media platforms headquartered in the United States, the following applies: For the United States, there is an adequacy decision by the European Commission. This is based on the EU-US Privacy Shield. An up-to-date certificate for each respective company can be viewed here.

For detailed information on the processing and use of data by the providers on their pages, as well as contact options and your rights and privacy protection settings, including opt-out options, please refer to the privacy policies linked below. If you still need assistance in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

Data processing is based on an agreement between joint controllers in accordance with Art. 26 of the GDPR, which you can view here.

For more information on data processing when visiting a Facebook fan page (Insights data), please refer to this link.

Instagram: https://help.instagram.com/519522125107875

Opt-out options:

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

9. Sending review reminders via email

If you have given us your explicit consent according to Art. 6(1)(a) of the GDPR during or after placing your order, we will use your email address to send you reminders to provide a review of your order using the review system we have in place. This consent can be revoked at any time by sending a message to the contact information described below.

10. Contact options and your rights

As the data subject, you have the following rights:

• According to Art. 15 of the GDPR, the right to request information about the personal data we process concerning you, to the extent specified therein.
• According to Art. 16 of the GDPR, the right to request the immediate correction or completion of your personal data stored with us.
• According to Art. 17 of the GDPR, the right to request the erasure of your personal data stored with us, unless further processing is necessary

  • for exercising the right of freedom of expression and information,

  • for compliance with a legal obligation,

  • for reasons of public interest, or

  • for the establishment, exercise, or defense of legal claims.

• According to Art. 18 of the GDPR, the right to request the restriction of the processing of your personal data, if

  • the accuracy of the data is contested by you,

  • the processing is unlawful, but you oppose its erasure,

  • we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or

  • you have objected to the processing pursuant to Art. 21 of the GDPR.

• According to Art. 20 of the GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.
• According to Art. 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or place of work or our company headquarters.

For questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as the revocation of consent granted or objection to a particular use of data, please contact us directly using the contact details provided in our imprint.