Google Fonts are blocked on our website by the “Disable & Remove Google Fonts” plugin.
Privacy policy Thank you for your interest in our company. Data protection is of particular importance to the management of Furtureforganic GmbH. Our website can generally be used without providing personal data. Using special company services through the website may, however, require processing personal data. Where processing is necessary and has no statutory basis, we generally obtain the data subject's consent.
Personal data, such as a person's name, address, email address or telephone number, are always processed in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection rules applicable to Furtureforganic GmbH. This policy informs the public about the nature, scope and purpose of the personal data we collect, use and process, and informs data subjects of their rights.
As controller, Furtureforganic GmbH has implemented numerous technical and organisational measures to protect personal data processed through this website as comprehensively as possible. Internet-based transmission may nevertheless have security vulnerabilities, so absolute protection cannot be guaranteed. Data subjects may therefore send us personal data by other means, for example by telephone.
Definitions This policy uses the terminology employed by the European legislature in the GDPR. To make it understandable for the public, customers and business partners, the terms used include: a) Personal data: any information relating to an identified or identifiable natural person (“data subject”). A person is identifiable directly or indirectly, particularly by a name, identification number, location data, online identifier or factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity. b) Data subject: an identified or identifiable natural person whose personal data are processed by the controller. c) Processing: any operation or set of operations on personal data, whether automated or not, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction. d) Restriction of processing: marking stored personal data to limit their future processing. e) Profiling: automated processing using personal data to evaluate personal aspects of a natural person, particularly to analyse or predict work performance, economic situation, health, preferences, interests, reliability, behaviour, location or movements. f) Pseudonymisation: processing so that data cannot be attributed to a specific person without additional information, provided that information is kept separately and protected by technical and organisational measures preventing attribution to an identified or identifiable person. g) Controller: the natural or legal person, public authority, agency or other body that, alone or jointly, determines the purposes and means of processing. Where Union or Member State law determines them, that law may provide for the controller or the criteria for its nomination. h) Processor: a natural or legal person, public authority, agency or other body processing personal data on behalf of the controller. i) Recipient: a natural or legal person, public authority, agency or other body to which data are disclosed, whether a third party or not. Public authorities receiving data in a particular inquiry under Union or Member State law are not regarded as recipients. j) Third party: a person, authority, agency or body other than the data subject, controller, processor and persons authorised to process data under the direct authority of the controller or processor. k) Consent: any freely given, specific, informed and unambiguous indication of the data subject's wishes, expressed by a statement or clear affirmative action, agreeing to processing of their personal data.
Controller's name and address The controller within the meaning of the GDPR, other data protection laws applicable in EU Member States and other provisions concerning data protection is: Furtureforganic GmbH Lindenweg 2 67122 Altrip Germany Telephone: 062366941707 Email: info (at) ffo.bio Website: futureforganic.com
Collection of general data and information Every visit by a person or automated system generates general data stored in server log files. These may include (1) browser types and versions, (2) operating system, (3) referring website, (4) subpages accessed, (5) access date and time, (6) IP address, (7) internet service provider and (8) similar information needed to avert attacks on our IT systems.
Furtureforganic GmbH does not use these general data to draw conclusions about the data subject. They are needed to deliver website content correctly, optimise content and advertising, maintain the functioning of our IT systems and website technology, and provide law enforcement with information necessary to prosecute a cyberattack. We evaluate these anonymously collected data statistically and to improve data protection and security, ensuring an optimal level of protection for processed personal data. Anonymous server log data are stored separately from all personal data provided by a data subject.
Routine erasure and blocking The controller processes and stores personal data only for as long as required for the storage purpose or as prescribed by European or other applicable legislation. When that purpose no longer applies or a statutory retention period expires, data are routinely blocked or erased in accordance with the law.
Rights of the data subject a) Confirmation: you may obtain confirmation from the controller whether personal data concerning you are being processed. b) Access: you may at any time obtain free information about your stored personal data and a copy. This includes processing purposes; data categories; recipients or categories of recipients, especially in third countries or international organisations; the envisaged storage period or criteria for determining it; rights to rectification, erasure, restriction and objection; the right to complain to a supervisory authority; all available information on the source when data were not collected from you; and the existence of automated decision-making, including profiling under Article 22(1) and (4) GDPR, together with meaningful information about the logic involved and the significance and envisaged consequences. You may also ask whether data were transferred to a third country or international organisation and obtain information on appropriate safeguards. c) Rectification: you may require inaccurate personal data to be corrected without delay and, taking account of processing purposes, incomplete data to be completed, including by a supplementary statement. d) Erasure (“right to be forgotten”): where processing is not necessary, you may require erasure without delay if data are no longer needed for their original purposes; consent under Article 6(1)(a) or 9(2)(a) is withdrawn and no other legal basis exists; you object under Article 21(1) and no overriding legitimate grounds exist, or object under Article 21(2); data were processed unlawfully; erasure is required by Union or Member State law applicable to the controller; or data were collected in connection with information society services under Article 8(1). If Furtureforganic GmbH has made data public and must erase them under Article 17(1), it takes reasonable steps, including technical measures, considering available technology and implementation costs, to inform other controllers processing those data of your request to erase links, copies or replications insofar as processing is not necessary. An employee will arrange prompt erasure and take the necessary action in each case. e) Restriction: you may require restricted processing if you contest accuracy, for the time necessary to verify it; processing is unlawful and you oppose erasure and request restricted use instead; the controller no longer needs the data but you need them to establish, exercise or defend legal claims; or you have objected under Article 21(1) pending verification of overriding legitimate grounds. An employee will arrange restriction when these conditions apply. f) Portability: you may receive personal data you supplied in a structured, commonly used, machine-readable format and transmit them to another controller without hindrance where processing is automated and based on consent under Article 6(1)(a) or 9(2)(a), or a contract under Article 6(1)(b), and is not necessary for a task in the public interest or exercise of official authority. Under Article 20(1), you may also require direct transmission between controllers where technically feasible and without adversely affecting others' rights and freedoms. g) Objection: on grounds relating to your particular situation, you may at any time object to processing under Article 6(1)(e) or (f), including profiling based on those provisions. We then cease processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves legal claims. You may at any time object to processing for direct marketing, including related profiling; we then cease processing for those purposes. You may also object, on grounds relating to your particular situation, to processing for scientific or historical research or statistical purposes under Article 89(1), unless necessary for a task in the public interest. You may contact any employee directly. For information society services, notwithstanding Directive 2002/58/EC, you may exercise objection through automated means using technical specifications. h) Automated individual decisions, including profiling: you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, unless necessary for a contract between you and the controller, authorised by applicable Union or Member State law providing suitable safeguards, or based on your explicit consent. Where necessary for a contract or based on explicit consent, Furtureforganic GmbH implements safeguards including at least human intervention, the opportunity to express your view and to contest the decision. i) Withdrawal: you may withdraw consent to processing at any time. To exercise confirmation, access, rectification, erasure, restriction, portability, automated-decision or withdrawal rights, you may contact an employee of the controller at any time; portability may be requested from an employee of Furtureforganic GmbH.
Legal basis Article 6(1)(a) GDPR applies where we obtain consent for a specific purpose. Article 6(1)(b) applies to processing needed for a contract with the data subject, for example supplying goods or other services or consideration, and to pre-contractual measures such as product or service enquiries. Article 6(1)(c) applies to legal obligations, for example tax requirements. Exceptionally, Article 6(1)(d) applies to vital interests of the data subject or another person, such as passing an injured visitor's name, age, health insurance details or other vital information to a doctor, hospital or other third party. Article 6(1)(f) applies to otherwise unlisted processing necessary for our or a third party's legitimate interests unless overridden by the data subject's interests and fundamental rights and freedoms. The European legislature specifically recognised this possibility, particularly where the data subject is the controller's customer (recital 47, second sentence).
Legitimate interests Where Article 6(1)(f) applies, our legitimate interest is conducting our business for the welfare of all employees and shareholders.
Storage duration The criterion is the applicable statutory retention period. After expiry, data are routinely erased unless still needed to perform or initiate a contract.
Provision of personal data Provision may be legally required, for example by tax law, or contractually required, for example information about a contracting party. Concluding a contract may require you to supply personal data that we must then process. Failure to provide them would mean the contract cannot be concluded. Before providing data, contact an employee, who will explain in your individual case whether provision is legally or contractually required or necessary for concluding the contract, whether you are obliged to provide data and the consequences of not doing so.
Automated decision-making As a responsible company, we do not use automated decision-making or profiling.
This privacy policy was created using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, acting as external data protection officer in Augsburg, in cooperation with Cologne IT and data protection lawyer Christian Solmecke.