Data protection

Introduction and general information

Gourmet Global Boutique Import Export SL appreciates your interest in our website.

The protection of your personal data is very important to us. Below you will find information on how we handle your data collected through your use of our website.

Your data will be processed in accordance with the legal regulations on data protection.

Responsible body within the meaning of data protection law

GOURMET GLOBAL BOUTIQUE IMPORT EXPORT SL

Jaime III Galleries, No. 2, Entresuelo 1, Office E

07012 Palma de Mallorca

Balearic Islands

España

dpo@ggb-group.world

Contact details of the data protection officer

If you would like to contact our Data Protection Officer, please send an e-mail to: dpo@ggb.group.world

Definitions

Our privacy policy is intended to be simple and understandable for everyone. This privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Data processing by visiting our website

When you access our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of the request,
Name of the requested file
Page from which the file was requested Access status
Web browser and operating system used (Complete)
IP address of the requesting computer
Amount of data transferred

We collect the listed data in order to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 (1) (f) GDPR.

For reasons of technical security, in particular to defend against attacks on our web server, we store this data for a short period of time. On the basis of this data, it is not possible for us to draw conclusions about individual persons. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user.

Contact form and contact by e-mail

If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your e-mail, including the first and last name, salutation you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The provision of an e-mail address is required for contact information, the provision of your name and telephone number is voluntary.

Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR and, if applicable, in the processing of your data.

Art. 6 (1) (b) GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no statutory retention obligations to the contrary. In the case of Art. 6 (1) (f) GDPR, you can object to the processing of your personal data at any time.

Google Analytics

Our website uses Google Analytics, an internet analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies".

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to compile reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the Internet. The IP address sent by your browser as part of Google Analytics will not be combined with any other data held by Google. The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

We only use Google Analytics with IP anonymization enabled. This means that your IP address will only be processed by Google in an abbreviated form. We have concluded a data processing agreement with the service provider, in which we oblige them to protect our customers' data and not to pass it on to third parties. Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we will endeavour to obtain additional regulations and commitments from the recipient in the USA. The Google Analytics Terms of Service and privacy information can be accessed via the following links: http://www.google.com/analytics/terms/de.html https://www.google.de/intl/de/policies/

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. User and event-level data associated with cookies, user IDs (e.g., user IDs) and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA [Apple identifier for advertisers]) will be deleted no later than 14 months after it was collected.

You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de .

Use of Matomo

On this website, data is collected and stored using the web analysis service software Matomo (www.matomo.org), a service provided by the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Mataomo") on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 (1) (f) GDPR. This data can be used to create and evaluate pseudonymised user profiles for the same purpose. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. Among other things, the cookies make it possible to recognise the Internet browser. The data collected with Matomo technology (including your pseudonymised IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym. If you do not agree to the storage and evaluation of this data from your visit, you can object to the storage and use of this data at any time with a click of the mouse. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you. Objection: As a result, enter the HTML code that enables the person concerned to object. Details on how this works and the code can be found at this link (https://matomo.org/docs/privacy/#step-3-include-a-web- analytics-opt-out-feature-on-your-site-using-an-iframe).

Google Maps

Our homepage uses the online map service provider Google Maps via an interface. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functionalities of Google Maps, it is necessary to store your IP address. The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The use of the service involves the transfer of personal data to the United States. The legal basis for the transfer of your personal data to the USA is your consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. Please note that there is a risk to you for such transfers of personal data without an adequacy decision and without appropriate safeguards. The risk is that, due to the legislation in the USA, the personal data will be accessed by American authorities (in particular the intelligence services). Legal protection options or information on the handling of your data by the US authorities are only possible to a very limited extent or not at all. Accordingly, a level of data protection in accordance with the requirements of the GDPR cannot be guaranteed. For more information on the handling of user data, please refer to Google's privacy policy: google.de/intl/de/policies/privacy/ https://www.

Opt-out: https://www.google.com/settings/ads/

Our website uses cookies, which are stored on your device by the browser and contain certain settings for the use of the website (e.g. the current session). Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when the browser is closed. Other cookies remain stored on your device until you delete them or the storage period expires. These cookies allow us to recognise your browser the next time you visit.

In some cases, cookies are used to simplify website processes by storing settings (e.g. providing options that have already been selected). Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit. You can set your browser so that you can use cookies to

and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed under the following links for the respective browsers.

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Artwork: https://help.opera.com/en/latest/web-preferences/#cookies

You can also individually manage the cookies of many companies and features that are used for advertising. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices Most browsers also offer a so-called "Do Not Track" function, which allows you to indicate that you do not want to be "tracked" by websites. When this feature is enabled, the browser will tell ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like. Information and instructions on how to edit this function can be found at the following links, depending on the provider of your browser:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not- track

Opera: http://help.opera.com/Windows/12.10/de/notrack.html Safari: https://support.apple.com/kb/PH21416?locale=de_DE

In addition, you can prevent the loading of so-called scripts by default. NoScript allows you to run JavaScripts, Java, and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this feature can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/). Please note that if cookies are disabled, the functionality of this website may be limited.

Disclosure of data and recipients

Your personal data will not be transferred to third parties, unless we have explicitly pointed this out in the description of the respective data processing. if you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure is necessary for the assertion, exercise or defence of legal claims in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and insofar as this is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

In addition, we use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly checked by us. With which, if necessary, we have concluded order processing agreements in accordance with Art. 28 GDPR. These are service providers for web hosting, sending e-mails as well as maintenance and care of our IT systems, etc. The service providers will not pass on this data to third parties.

Data integrity

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). At the end of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract or if there is a legitimate interest on our part in further storage, the data will be deleted if it is no longer required for these purposes or if you make use of your right of revocation or objection.

Your rights

Below you will find information on the rights of data subjects that the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR.

In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, where appropriate, meaningful information on its details.

In accordance with Art. 16 GDPR, you have the right to request the correction of incorrect or complete personal data stored by us without undue delay.

The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful but you oppose its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.

In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office specified above or, if applicable, that of your usual place of residence or place of work.

Right to revoke consent given pursuant to Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

Right to object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is done on grounds arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to provide a

particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail compliance@ggb-global.world .

External links

Social networks (Facebook, Twitter, Xing, etc.) are only integrated into our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the website of the respective provider. Only after forwarding is user information transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

Subject to change

We reserve the right to adapt or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt them to current legal requirements and take into account changes to our services, e.g. when introducing new services. The most up-to-date version applies to your visit.

This Privacy Policy has been prepared by www.datenschutzexperte.de

Last update: 24.2.2023