Website Privacy Policy

Introduction

With the following information, we want to give you an overview of the processing of your personal data on our website www.sustainablenatives.com (hereinafter referred to as “website“). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter referred to as “GDPR“) and all applicable country-specific data protection regulations.

1 Responsibility

Responsible in the sense of the GDPR is:

sustainable native eG
Ritterstrasse 3
10969 Berlin
Germany
Telephone number: +49 30 12086998

E-mail: hello@sustainablenatives.com

2 Data Protection Officer

You can reach our data protection officer as follows:

Niklas Hanitsch
secjur GmbH
Steinhöft 9
20459 Hamburg
Germany
Telephone number: +49 40 228 599 520

Email: dsb@secjur.com

You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection and the exercise of your rights.

3 Use of Third Party Services

We use third-party services for certain functions and services on our website. The specific services can be found in the respective chapters.

In some cases, we use service providers that are based in a third country, i.e. outside the EU. We only transfer data to a third country in which there is an adequate level of data protection or appropriate guarantees as defined in Art. 44-49 GDPR. You have the right to request a copy of the appropriate safeguards we have put in place. To do so, please feel free to send us an email to the email address mentioned in this privacy notice.

4 Provision of the Website

4.1 General information

When you visit our website, data is automatically processed that your browser transmits to our server. This general data and information is stored in the server’s log files (in so-called “server log files”). The following data may be collected

• browser type and browser version
• operating system used
• Referrer URL (previously visited website)
• Host name of the accessing computer
• Date and time of server request
• IP address

4.2 Purpose of processing

When using this general data and information, we do not draw any conclusions about your person. The purposes we pursue include in particular:

• the guarantee of a smooth connection set-up of the website,
• the clarification of acts of abuse or fraud,
• problem analysis in the network, and
• the evaluation of system security and stability.

4.3 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.

4.4 Duration of storage

The log files are stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes will be retained until the matter has been finally clarified.

5 cookies

5.1 General information

We use cookies on our website. These are text files that are automatically created by your browser and stored on your terminal device when you visit our site. In the cookie, information is stored that arises in each case in connection with the specific end device used.

5.2 Technically necessary cookies

We use technically necessary cookies. These are cookies that are technically necessary to provide all the functions of our website.

5.2.1 Purpose of processing

We use technically necessary cookies for the following purposes:

• Provide services,
• to enable the use of our website functions,
• as well as to offer different languages.

5.2.2 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner.

5.2.3 storage period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.

5.3 Analytics and marketing cookies

We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer.

5.3.1 Purpose of processing

We use technically unnecessary cookies for the following purposes:

• Reach measurement and tracking, 
• evaluation of visitor behavior,
• optimization of our offer,
• as well as targeted advertising.

5.3.2 Legal Basis

The legal basis for the data processing is your consent according to Art. 6 (1) (a) GDPR. The cookies are only set after you have given your consent via our cookie banner.

5.3.3 Storage period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.

5.4 Recipients of personal data

We use the following service providers on the basis of our legitimate interest:

service	address	third country	Appropriate Guarantee	Further information
Cookie Banner	Borlabs – Benjamin A. Bornschein Rubenkamp 32 22305 Hamburg	no	/	Privacy Policy

6 contact options

6.1 General Information

Via our website you have the possibility to contact us by e-mail or by using our form.

In the course of contacting you and responding to your inquiry, we process the following personal data from you:

• Name
• E-Mail
• Date and time of the inquiry
• IP-address
• Other personal data that you provide to us in the course of contacting us.

6.2 Purpose of Processing

We process your data to respond to your inquiry and other matters arising from it. 

6.3 Legal Basis

If your request is based in connection with pre-contractual measures or with an existing contract with us, the legal basis is the performance of the contract and the implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

If your request is made independently of contractual or pre-contractual measures, our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR constitutes the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.

6.4 Storage period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is generally the case when the circumstances indicate that the specific matter has been conclusively processed.

6.5 Recipients of Personal Data

We use the following service providers:

service	Offerer	third country	Appropriate Guarantee	Further information
Contact form 7	Rock Lobster LLC	no	/	Privacy Policy

7 newsletters

7.1 General Information

We offer you the possibility to receive the newsletter of our company. With our newsletter, we inform customers and business partners about our offers at regular intervals.

Within the scope of sending the newsletter, we process the following personal data:

• E-mail address
• First and last name
• Organization
• Preferred language
• Metadata (e.g. device information, IP address, date and time of registration)

7.1.1 Newsletter sign up

If you register for the newsletter via our website, we will send a confirmation email to the email address you entered for the first time for newsletter distribution using the double opt-in method. This confirmation e-mail serves to verify whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter. The registration for the newsletter is logged.

7.1.2 Newsletter dispatch to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by e-mail. In accordance with § 7 (3) UWG, we do not need to obtain separate consent from you for this.

7.1.3 Newsletter tracking

Our newsletters contain so-called tracking pixels. This is a miniature graphic that is embedded in e-mails. This allows us to track, for example, whether and when an e-mail was opened by you and which links in the e-mail were called up by you. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected by the tracking pixels is stored and analyzed by us in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to your interests.

7.2 Purpose of processing

We process your personal data for the following purposes:

• Newsletter dispatch: Implementation of marketing measures.
• Double opt-in procedure: Fulfillment of our legal obligations to provide proof.
• Newsletter tracking: Insertion of personalized advertising, market research, performance measurement.

7.3 Legal basis

The legal basis for the processing of your personal data in the context of the:

• Newsletter subscription is your consent pursuant to Art. 6 (1) (a) GDPR,
• Double-Opt-In procedure is our legal obligation according to Art. 6 (1) (c) GDPR,
• newsletter dispatch to existing customers is our overriding legitimate interest Art. 6 (1) (f) GDPR,
• as well as newsletter tracking is your consent according to Art. 6 (1) (a) GDPR.

7.4 Storage period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of newsletter dispatch, this is generally the case when you revoke your consent or you object to the processing.

There is therefore a corresponding opt-out link in every newsletter. In addition, you also have the option of unsubscribing from the newsletter mailing at any time on our website or informing us of this in another way. We automatically interpret an unsubscription from the receipt of the newsletter as a revocation or cancellation.

7.5 Recipients of Personal Data

We use the following service providers:

8 Web analytics and marketing

8.1 General information

We perform usage analysis based on the use of our website.

8.2 Purpose of processing

We process your data to optimize our online offer.

8.3 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The legitimate interest corresponds to our purpose of processing.

8.4 Storage period

We delete your personal data as soon as it is no longer required to achieve the purpose for which they were collected.

8.5 Recipients of personal data

We use the following service providers:

Service and provider	Address	Third country	Suitable guarantee	Further  Informationen
Matomo; InnoCraft Ltd	7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand	New Zealand	Adequacy decision of the European Commission for New Zealand	Website Privacy Policy Cloud Privacy Policy

9 Application

9.1 General Information

We offer you the opportunity to apply for job vacancies and send us your application online or by post.

As part of the application process, we process the following personal data:

• Master data (e.g. first and last name, address), 
• Contact data (e.g. e-mail address, telephone number), 
• Application data (e.g. cover letter, resume, certificates and other supporting documents).

9.2 Purpose of processing

The purpose of the processing is to carry out the application procedure.

9.3 Legal basis

The legal basis for the processing of personal data is the performance of the contract and the implementation of pre-contractual measures pursuant to Art. 6 (1) (b), Art. 88 (1) GDPR in conjunction with §  26 (1) Federal Data Protection Act (BDSG).

If we obtain your consent (e.g. for inclusion in our applicant pool), this constitutes the legal basis for data processing.

9.4 Storage period

If an employment relationship is established after completion of the application process, the personal data provided may be processed further. Otherwise, we generally retain the data for six months after the end of the application process. We then delete all personal data. Longer storage is possible if we include the personal data in our applicant pool after obtaining your consent.

10  Social networks

10.1 General information

We maintain presences in social networks in order to be able to communicate with you and inform you about our services.

10.2 Purpose of processing

The purpose of the processing is to maintain presences in social media. 

10.3 Legal basis

The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding legitimate interest corresponds to the above-mentioned purposes.

10.4 Recipients of personal data

We maintain presences in the following social media:

social network	Offerer	third country	Appropriate Guarantee	Further information
LinkedIn	LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland	USA	Standard Data Protection Clauses	Privacy Policy  Opt-out and advertising preferences Shared responsibility agreement
Twitter	Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland	USA	Standard privacy c	Privacy Policy Opt-out settings
Facebook	Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland	USA	Standard privacy clauses Additional protection measures	Privacy Policy Opt-out settings
Instagram	Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland	USA	Standard privacy clauses	Privacy notice Opt-out settings
Xing	Xing AG, Dammtorstrasse 29-32, 20354 Hamburg			Privacy Policy
YouTube	Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland	USA	Standard Data Protection Clauses	Privacy notice

11 Your rights

11.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

11.2 Access (Art. 15 GDPR)

You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

11.3 Rectification (Art. 16 GDPR) 

You have the right to request the correction of incorrect personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

11.4. Erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted without delay if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

11.5 Restriction of processing (Art. 18 GDPR) 

You have the right to demand that we restrict processing if one of the legal requirements applies.

11.6 Data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

11.7 Objection (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) (e) GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In individual cases, we process personal data to conduct direct marketing. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is related to such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes. 

In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

11.8 Revocation of consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time with effect for the future.

11.9 Complaint to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

12 Actuality and changes of the privacy policy

This data protection notice is currently valid and has the following status: June 2022.

If we continue to develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this data protection notice. You can access the current data protection information at any time here.