Política de privacidad

  1. Data Protection Information

We are pleased that you are visiting our website and thank you for your interest in our company and our products. At this point, we would like to inform you about which data we collect, use, and process, and how we handle your personal data.

  1. Data Collection and Use

Personal data are information that can be used to identify a person. This includes, for example, your name, address, e-mail address, or telephone number.

(1) Collection of personal data when using the website

When you use the website for purely informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security:

  • IP address

  • Date and time of the request

  • Time zone difference to Coordinated Universal Time (UTC)

  • Content of the request (specific page)

  • Access status/HTTP status code

  • Amount of data transferred

  • Website from which the request originates

  • Browser type and version

  • Operating system and its interface

  • Language and version of the browser software

(2) Collection of personal data during registration

We offer you the possibility to register on our website by providing personal data.

Depending on the type of concluded contract, we store the following data:

  • First and last name

  • Address

  • E-mail address

  • Telephone number

  • Payment information (if applicable)

These data are entered into a form, transmitted to us, and stored. We do not share these data with third parties. Users can access their user account to order goods via the app.

During the registration process, the user’s consent to process these data was obtained (Art. 6 (1)(a) GDPR). Registration is also necessary for the performance of a contract for the purchase of goods in our online shop or for pre-contractual measures (Art. 6 (1)(b) GDPR). The data collected serve to process your purchase in our online shop, in particular to enable correct shipment of the goods you order.

The data will be deleted once they are no longer necessary to achieve the purpose for which they were collected. This is the case when the registration on our website is cancelled or modified, or when the data are no longer required to perform the contract. Even after a contract has been concluded, it may be necessary to retain personal data of the contracting party to comply with contractual or legal obligations (e.g., for tax reasons).

Users may cancel their registration at any time. You can have the data stored about you amended at any time as follows:

If the data are necessary for the performance of a contract or for pre-contractual measures, early deletion is only possible if no contractual or legal obligations prevent deletion.

The legal basis for processing the data is, in case of your consent, Art. 6 (1)(a) GDPR and, if registration serves to fulfill a contract or pre-contractual measures with you, additionally Art. 6 (1)(b) GDPR.

  1. Name and Contact Details of the Controller

Controller for the processing of personal data is:

clean water project UG
Gartenstr. 18
63589 Linsengericht
Managing Director: Raphael Beer
E-mail: team@frischblatt.com

You can reach our data protection officer at:
E-mail: team@frischblatt.com

  1. Purposes of Processing Personal Data

We store your data only for the following purposes:

  • To process orders (including payment processing and, if applicable, credit checks)

  • To send advertising by us

  • For customer service

We store and process your personal data at our central company headquarters.

We only transmit your personal data to third parties if this is necessary for contract execution or for billing or debt-collection purposes (e.g., shipping companies or payment service providers), or if you have given your explicit consent.

The legal basis for transmitting data to third parties for contract execution or billing purposes is Art. 6 (1)(b) GDPR; for transmission in legally required cases, Art. 6 (1)(c) GDPR.

  1. Retention Period for Data Storage

We store your data as long as necessary for the respective purpose, taking into account your legitimate interests. If specific data processed for the execution of purchase agreements are subject to a tax-law retention period, the data will be stored for 6 or 10 years. During this time, processing of the data is restricted after 2 years, i.e., the data are only used to comply with legal obligations. The retention period begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

  1. Disclosure of Personal Data to Third Parties

In accordance with legal provisions, we may disclose your personal data to the following categories of companies/persons:

  • Tax, auditing, and other authorities

  • External service providers and professional advisors such as lawyers, auditors, accountants, credit agencies (for credit checks), debt-collection agencies

  • Postal/shipping service providers, freight forwarders (e.g., UPS, DHL, Deutsche Post)

  • Payment providers such as PayPal (Europe) S.à r.l. et Cie, S.C.A.; Klarna AB; Amazon Payments Europe s.c.a.; Apple Pay; Shopify Payments; Google Pay (Europe)

E-Commerce Platform Shopify
We use Shopify, a service provided by Shopify Inc., for our online shop. Data transmitted during your order are stored on Shopify’s servers. Shopify and other providers (e.g., Klaviyo) process your data under standard contractual clauses in accordance with Art. 46 (2)(c) GDPR to ensure an EU-equivalent level of data protection. Please note that data transfers to third countries (e.g., the USA) may, in theory, allow access by local authorities. More information on Shopify’s privacy policy can be found at https://www.shopify.com/legal/privacy.

Data may also be transferred within a corporate group under Binding Corporate Rules (Art. 47 GDPR). Data transferred from Shopify Canada to the USA are encrypted during transfer and storage, preventing unauthorized decryption.

The legal basis for data transfer to third parties is Art. 6 (1)(b) GDPR for contract execution or billing purposes, and Art. 6 (1)(c) GDPR for legally mandated disclosure.

  1. Your Rights

To exercise your rights, you can use the contact form (https://frischblatt.com/pages/support), contact the data protection officer or the controller directly, or e-mail us at team@frischblatt.com. You have the following rights:

7.1 Withdrawal of Consent
You may withdraw your consent to the processing of personal data at any time with effect for the future. Please use the contact options above (https://frischblatt.com/pages/support).

7.2 Additional Rights
You have the following rights regarding your personal data, which you can exercise at any time:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

To exercise these rights, please contact us at team@frischblatt.com. You also have the right to lodge a complaint with a supervisory authority. The competent authority for Baden-Württemberg is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
E-mail: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de

  1. Contact Form

If you send inquiries via the contact form, we use your data exclusively to process your request. These data are not used for advertising purposes nor disclosed to third parties.

The legal basis for processing data via the contact form or e-mail is Art. 6 (1)(f) GDPR. If contact aims at concluding a contract, additional basis is Art. 6 (1)(b) GDPR. Your data will be stored until you request deletion, withdraw consent, or the purpose ceases to apply.

  1. Cookies

To make our website attractive and to enable the use of certain functions, we use cookies—small text files that your browser stores on your device. Some cookies are deleted when you close your browser (session cookies); others remain until a specified expiration and allow us to recognize you on your next visit.

a) Transient cookies are automatically deleted when you close your browser (e.g., session cookies, which store a session ID to assign your browser’s requests to a common session).
b) Persistent cookies are deleted automatically after a predetermined period. You can delete cookies at any time via your browser settings.

You can influence the use of cookies by changing your browser settings. Most browsers allow you to restrict or prevent cookie storage. Instructions are available in your browser’s help menu. Links for major browsers:

Please note that disabling cookies may limit website functionality.

For non-essential cookies (e.g., analytics and marketing), we obtain your explicit consent (Art. 6 (1)(a) GDPR) via our consent manager (cookie banner). Technically necessary cookies are processed on the basis of Art. 6 (1)(f) GDPR. You can change or withdraw your consent at any time via the consent manager.

  1. Analytics Tools

10.1 Use of Google Analytics
Our website uses Google Analytics, a web analytics service from Google Inc. Google Analytics uses cookies to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. If IP anonymization is activated on this site, your IP address will be truncated within the EU or EEA before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to evaluate your website usage, compile reports on website activity, and provide other services related to website and internet usage. Your IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookie storage by adjusting your browser settings; however, this may affect full use of the website. You may also prevent data collection by Google by installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=de.

This site uses Google Analytics with the “_anonymizeIp()” extension, which further processes IP addresses in truncated form, excluding personal identification. Whenever personal data are transferred to the USA, this is based on standard contractual clauses under Art. 46 (2)(c) GDPR. Please note that U.S. authorities may theoretically access the data without notification or legal remedy. Further information on Google’s data processing can be found at https://www.google.com/intl/de/policies/privacy/.

10.2 Use of Hotjar
Our website uses Hotjar, an analytics software from Hotjar Ltd., to analyze your use of the site. Hotjar uses cookies and tracking code to collect data such as your IP address, screen size, device type, browser type and version, geographic location, and language settings. If you have provided your name and e-mail address, these are also transmitted. Hotjar records user interactions such as mouse movements, visited pages, and timestamps. Your IP address is automatically anonymized and stored only in that form. A unique user identifier (UUID) is assigned to recognize returning visitors without linking to personal data.

You can prevent data collection by Hotjar at https://www.hotjar.com/opt-out.

Right to Object: You may object to data collection and storage for analysis at any time with future effect by sending us your objection, e.g., by e-mail: team@frischblatt.com.

The legal basis for using analytics tools is Art. 6 (1)(f) GDPR.

  1. Social Media Links

We link to our social media profiles on Facebook, Instagram, and YouTube via icons. These are hyperlinks and do not transmit your data. Clicking them takes you directly to our social media pages. Data are only transmitted to the social media service if you are logged into your user account there. In this case, the platform may learn which content you viewed on our site.

The platforms are operated by:

  • Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

  • Instagram LLC, 1601 Willow Rd., Menlo Park, CA 94025, USA

  • YouTube LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA

For more information on data collection and use by these platforms, please refer to their privacy policies.

  1. Facebook Connect

We offer “Facebook Connect” by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, allowing you to register on our site with your Facebook profile upon explicit consent. You are redirected to Facebook to log in, establishing a direct connection between your browser and Facebook’s servers. Your Facebook profile is linked to our service. When you click a social media button, your browser connects directly to the provider’s servers, transmitting personal data (e.g., IP address and page visited) which may be stored and possibly transferred to third countries. If you do not wish Facebook to link data from our site to your Facebook profile, please log out of Facebook before visiting our site or use browser add-ons to block the plugin.

From your Facebook data (depending on your privacy settings), we automatically receive your name, e-mail address, birthdate, address, Facebook username, user ID, age, gender, profile picture, friends list, and “likes.” We use your name, e-mail address, birthdate, and address (if provided) solely to create a user account. These details are necessary for contract conclusion and identification purposes.

For more information on Facebook Connect and privacy settings, see http://www.facebook.com/policy.php.

You can withdraw your consent to data exchange via Facebook Connect at any time for the future by emailing team@frischblatt.com.

  1. Google Tag Manager

We use Google Tag Manager by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Tag Manager itself does not use cookies or collect personal data but triggers other tags that may collect data. Google does not store these data. If you have disabled cookies, this applies to all tracking tags managed by Google Tag Manager.

Google may ask for permission to share certain product data with other Google products to enable features like simplified conversion tracking. Google developers may periodically review product usage data to optimize the product but will not share it without your consent.

For more information, see Google’s terms of use and privacy notices for this product.

  1. Newsletter

  2. With your consent, you can subscribe to our newsletter to receive information about our current offers. The advertised goods and services are specified in the consent declaration.

  3. We use the double-opt-in procedure for newsletter registration. After you register, we send a confirmation e-mail to the provided address. If you do not confirm within 24 hours, your information is blocked and automatically deleted after one month. We store your IP addresses and timestamps of registration and confirmation to verify your registration and investigate potential abuse.

  4. Only your e-mail address is mandatory for the newsletter; other data are optional and used for personalized address. After confirmation, we store your e-mail address for newsletter delivery. Legal basis: Art. 6 (1)(a) GDPR.

  5. You can withdraw consent at any time by clicking the link in the newsletter or emailing team@frischblatt.com. Upon withdrawal, your e-mail address is deleted unless legal retention obligations prevent this.

  6. We use Klaviyo Inc. for newsletter delivery. Data processing may occur in the USA, where the GDPR standard is not guaranteed. Klaviyo adheres to standard contractual clauses under Art. 46 (2) and (3) GDPR. More at https://www.klaviyo.com/legal/data-processing-agreement and https://www.klaviyo.com/legal/privacy/privacy-notice.

We analyze reader behavior using web beacons (tracking pixels) embedded in the emails. We link the data collected (see § 3) and the web beacons to your e-mail address and an individual ID to tailor the newsletter to your interests. We record when you read the newsletter and which links you click.

Right to Object: You can object to this tracking at any time by clicking the link provided in each email or contacting us at team@frischblatt.com. After unsubscribing, data are stored only anonymously for statistical purposes. Tracking is not possible if your email client blocks images by default.

  1. Use of Social Media Plugins

We use Instagram plugins (“two-click solution”) from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. Initially, no personal data are transmitted to Instagram. Only when you click “Follow us on Instagram” does your browser connect to Instagram’s servers, transmitting the data listed in § 1. We have no influence over Instagram’s data collection or processing practices, nor information on storage periods or deletion. For details, see Instagram’s privacy policy: https://help.instagram.com/155833707900388/.

If you do not wish Instagram to link data from our site to your account, log out of Instagram before visiting our site or use browser add-ons such as NoScript to block plugins.

Legal basis for plugin use: Art. 6 (1)(f) GDPR.

  1. Remarketing/Retargeting

  2. We use Facebook Custom Audiences (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) for retargeting. This service uses tracking pixels—1×1 pixel images that allow log file analysis.

  3. This enables interest-based ads (“Facebook Ads”) on Facebook and other participating sites. When you visit our site, the pixel connects to Facebook’s servers, allowing Facebook to identify you by browser ID linked to your user account. We have no control over the extent or further use of the data collected by Facebook.

  4. You can deactivate Facebook Custom Audiences at https://www.facebook.com/settings/?tab=ads.

  5. Legal basis: Art. 6 (1)(f) GDPR. More on Facebook data processing: https://www.facebook.com/about/privacy/.

Right to Object: You may object by emailing team@frischblatt.com.

  1. Orders via Our Website

To place orders, users must enter personal data: name, address, and, if applicable, payment details (credit card). These data are stored solely for order processing. Additionally, the following data are automatically stored: IP address, date, and time of registration.

Data are only shared with third parties if required for proper order and contract fulfillment. For shipping in Germany, order-relevant data (contact and delivery details) may be transmitted to:

Atrikom Fulfillment Gesellschaft (Verticas Service GmbH)
An der Kreuzlache 8, 65474 Bischofsheim

Legal basis: Art. 6 (1)(b) GDPR. Data are deleted once they are no longer necessary for the purpose, i.e., after complete contract fulfillment.

PayPal
For PayPal payments, your payment data are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, based on your consent (Art. 6 (1)(a) GDPR) and contract performance (Art. 6 (1)(b) GDPR). Consent can be withdrawn at any time; past processing remains lawful.

Klarna
To enable payment via Klarna, your contact and delivery data may be transmitted to Klarna for creditworthiness checks. Klarna processes personal data according to its privacy policy.

  1. E-Mails

We use Klaviyo Inc., 225 Franklin St, Floor 10, Boston, MA 02110, USA, to send transactional (order confirmations, shipping notifications) and promotional emails. Klaviyo may process data in the USA under standard contractual clauses (Art. 46 (2) and (3) GDPR). More at https://www.klaviyo.com/legal/data-processing-agreement and https://www.klaviyo.com/legal/privacy/privacy-notice.

  1. Data Security

We have implemented various security measures to protect your personal data. Our servers and databases are protected by physical and technical safeguards.

We use SSL encryption for data collection and transmission on our website, indicated by the padlock icon and “https://” in the browser address bar. Encrypted communication prevents third-party interception of your payment data during transmission. However, 100% security cannot be guaranteed for email communication.

  1. Changes to This Privacy Policy

We may amend this privacy policy at any time. All changes will be published on this website and will become effective 30 days after publication. We will inform you of significant changes by email.