Privacy Policy

Dear customer, Hilo believes in transparency, trust and respect. This belief system should naturally extend to the online and digital world, where our clients personal data and all legal requirements should be respected. With this privacy statement, we intend to inform you on how your personal data is processed.

Who we are:

co.hilo kaffeekollektiv eG

Klarastr. 35
04229 Leipzig

Website address is: www.cohilo.de

Data Protection Officer: Thomas Marufke

You can contact our data protection officer at info@cohilo.de.

Personal Data

Personal data is all information on personal and factual circumstances of a determined or determinable Person. This includes, for example, your name, address and phone number or email address.

Legal Basis

The process of your data is bound to the following legal framework:

Related to information you provided in forms etc, with your consent, Art. 6 (1) a) GDPR;
Related to services you used for the performance of a contract with us, Art. 6 (1) b) GDPR;
Otherwise, especially with statistical data and online identifiers, based on legitimate interests, Art. 6 (1) f) GDPR (see below).

Legitimate Interests

While processing your personal data, we have the following legitimate interests:

Improvement of our offered products;
Statistics.

Data Sources

If not stated otherwise, your data is observed, through device and browser.

Data Transmission to Third Countries

There is a data transmission to third countries outside of the European Union. This is done in line with legally required contractual arrangements which are expected to protect your data and on which you can examine upon your request.

Storage Period

We save your data:

If you agreed to the processing, at most until you revoke your agreement;
If we need the data to perform a contract, any longer than the contractual relationship with you exists or for the length of legal retention periods;
If we process the data based on legitimate interests, up until the point that your interest in a deletion or in an anonymisation outweighs our interests.

Processing purposes

Personal data is only collected by us to the extent and for the purposes you provided us the data for, e.g. during a registration.

We use and save your personal data within our services for the following purposes only if you explicitly granted us your approval:

Newsletter dispatch, mailings, retrieval of purchasable content, subscription of blog comments, other;
E-mail advertising with registration for the newsletter;

If you subscribe to our newsletter, please use the e-mail newsletters that are available to you. § 6 para. 1 sentence 1 lit. GDPR.

Unsubscribing from the newsletter is possible at any time and can be done by sending a message to the contact option below or by clicking on the Unsubscribe button with every newsletter mail you receive. Your data address that you no longer need to use, or how we reserve the right to additional use of data, which is permitted by law.

In individual cases, an additional informed consent is requested from you, e.g. if the following personal information are needed:

Customer service, offering of new products, individual tailored customer information.

Data Protection

We have taken extensive technical and organisational actions to protect your data from possible dangers such as unauthorised access, unauthorised notice, changes or distribution, as well as from loss, destruction or abuse.

To protect your personal data at transfer from unauthorized access of third parties we secure the data transmission by SSL-encryption if necessary. This is a standardized encryption method for online services.

Log Files

During every access on our websites, usage data are transferred by the particular web browser and are saved in server log files. These data sets include the following data:

Domain from which the user accessed the website;
Date and time of the access;
IP address of the accessing computer;
Website(s) the user visits within offerings;
Transferred volume of data, browser type and version;
Used operating system, name of the internet service provider report, if the access was successful.

These log file data sets are anonymised analysed to improve the offering and the usability, to find and to solve errors and to manage the utilization of servers.

Cookies

Cookies are small pieces of data saved by your browser on your device in an intended directory. By using these cookies, one can for example see if you visited a website before. Most browsers accept cookies by default. However, you can set your browser that no cookies will be saved and that before saving a cookie, an explicit agreement is necessary. Furthermore, you can delete set cookies at every time. Please note that disabling cookies can limit the usage of our website.

We need cookies for the following purposes: customer service, offering of new product, individual tailored customer information.

To an extent, however, these cookies also pass along information used to automatically recognize you. Recognition occurs through an IP address saved to the cookies. The information thereby obtained is used to improve our services and to expedite your access to the website.

You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.

Server Data

For technical reasons, data such as the following, which your internet browser transmits to us or to our web space provider (so called server log files), is collected: – type and version of the browser you use – operating system – websites that linked you to our site (referrer URL) – websites that you visit – date and time of your visit – your Internet Protocol (IP) address. This anonymous data is stored separately from any personal information you may have provided, thereby making it impossible to connect it to any particular person. The data is used for statistical purposes in order to improve our website and services.

Google Fonts

On our website we use Google Fonts. These are the “Google fonts” of the company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
To use Google fonts, you do not need to log in or set a password. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google Account, you do not need to worry about your Google Account information being submitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this information securely. Google stores requests for CSS assets for one day on its servers, most of which are located outside the EU. This allows us to use the fonts with the help of a Google style sheet. A stylesheet is a style template that allows you to easily and quickly change, for example, the design or font of a web page. The font files are stored at Google for one year. Google’s goal is to improve the loading time of web pages. If millions of web pages link to the same fonts, they are cached after the first visit and reappear immediately on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage and improve design. The data that Google stores for a day or a year cannot be easily deleted. The data is automatically transferred to Google when the page is viewed. To delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=331600673968. In this case you only prevent data storage if you do not visit our site. You can also read at https://www.google.com/intl/de/policies/privacy/ which data is basically collected by Google and for what purpose this data is used. (Source: Created with the privacy generator of AdSimple in cooperation with bauenwir.de)

Web Analysis

As basically every website operator, we use analyzing tools in form of tracking software to detect the user frequency and the number of users on our website.

To optimize this website and our offerings, we use Google Analytics, a web analyzing service of Google Inc. (“Google”). Google Analytics uses cookies, text files, which are saved on your computer and which allow an analysis of your usage of our website. The information on your usage of this website created by the cookie (including your IP address) are transferred to and saved on one of Google’s servers in the United States. In case of the activation of the IP anonymisation on this website, your IP address is shortened before transmission by Google in a member state of the European Union or in another contract state of the European Economic Area Agreement. Only in exceptional cases, your full IP address is transferred to a server of Google in the United States and shortened there. On behalf of the operator of this website, Google will use this information to analyse your usage of the website, to compose reports of the website activities for the website operator and to deliver website usage related and internet usage related services for the website operator. The IP address transferred as part of Google Analytics is not matched with other data from Google. You can prevent the saving of cookies within the settings of your browser; we advise you though that in that case you may not be able to use all functions of the website.

Furthermore, you can prevent the cookie-based collecting of your website usage data (including your IP address) as well as further processing by Google by installing the browser plugin which you can get through this link tools.google.com/dlpage/gaoptout?hl=de. Alternatively to this browser add-on or in browsers on mobile devices, please click on this link to prevent the collecting by Google Analytics on this website for the future (the opt out does only work on that browser and only for that domain). Thereby, an opt-out-cookie will be filed on your device. If you delete the cookies in that browser, you will have to click on this link again. Further information on this, you can find at tools.google.com/dlpage/gaoptout?hl=de and at www.google.com/intl/de/analytics/privacyoverview.html(general information on Google Analytics and data security).

Social Networks

Facebook

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and is accessible here www.facebook.de. These separate social plugins are marked through one of the Facebook logos or through the ‘Facebook Social Plugin’. A list with the appearances and functions of the individual plugins is accessible here: developers.facebook.com/docs/plugins. If you visit a site of our website which contains such a social plugin, your browser builds a direct connection to the servers of Facebook. The content of the social plugins will be transmitted from Facebook directly to your browser which integrates it into the website. Therefore, we have no influence on the scope of the data Facebook collects with the social plugins and inform you accordingly to our level of knowledge: Due to the integration of the social plugins, Facebook is informed that you visited the relevant site of our website. This also happens, when you are not registered as a user of Facebook or when you are currently not logged in into your Facebook account. This information combined with your IP address is sent from your browser to a server of Facebook in the United States and saved. According to information by Facebook only the anonymised IP address is saved from not-registered users in Germany. If you are logged in into your Facebook account, Facebook can match the visit of our website directly to your account. Facebook obtains the information of your visit on our website independently from you interacting with the social plugin or not. When you interact with the social plugins, for example by clicking the Like-Button or by commenting, the corresponding information will be transmitted by your browser directly to Facebook and then saved. In addition, the information will be published and shown to your Facebook friends. Purpose and extent of the data collecting and further processing and usage of the data by Facebook as well as your corresponding rights and setting options for privacy security can be found in the privacy policies of Facebook at www.facebook.com/about/privacy. If you are a registered user of Facebook and you do not want Facebook to collect your data on our website and to connect it to your Facebook member information, you must log out your Facebook account before visiting our website. Additionally, it is possible to block the social plugins with add-ons for your browser such as Facebook Blocker webgraph.com/resources/facebookblocker

Instagram

We promote the service Instagram on our website. Instagram is a service of Instagram Inc. By means of the integrated “Insta” button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the “Insta” button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.

YouTube

On this website, plugins from youtube.de/youtube.com are used which are operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. If a user visits a website which contains such a plugin, the browser builds a direct connection to the servers of YouTube. Hereby, it is sent to the YouTube servers which websites the user visited. If you are logged in as a member of YouTube, YouTube will connect the information to the corresponding member accounts. By using these plugins, for example by starting a video or by sending a comment, this information will be matched to your member account which you only can prevent by logging out before using the plugin. Further information can be found in the privacy policies of YouTube www.google.de/intl/de/policies/privacy.

The newsletters contain a so-called “web-beacon”, i. a pixel-sized file that is retrieved from the server when opening the newsletter from our server, or if we use a shipping service provider. This call will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval.

This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. Statistical surveys also include determining if the newsletters will be opened, when they will be opened and which links will be clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our goal nor, if used, that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

A separate revocation of the performance measurement is unfortunately not possible, in this case, the entire newsletter subscription must be terminated.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Third Party Services

For different functions on our website, we use third party services.

PayPal

The service PayPal is operated by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg. By paying with PayPal, you are forwarded to the website of PayPal. To use this service PayPal collects, saves and processes your personal data such as your name, your address, your phone number and your email address as well as your credit card information and bank account information. Solely PayPal is responsible for protecting and processing of the by PayPal collected data. Therefore, the terms of use of PayPal apply which you can find here www.PayPal.com. Further information on the handling of your data can be found here https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Stripe

The Stripe service is operated by Stripe Payments Europe, Ltd, C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin 1. When you pay in our webshop by credit/debit card via Stripe, Stripe collects information about the payment method (e.g. credit/debit card number or bank account information), the purchase amount, the date of purchase and the payment method. Different categories of information are collected depending on the payment method. Stripe is solely responsible for the protection and processing of the data collected by Stripe. The Stripe terms of use, which can be found at www.stripe.com, therefore apply. For more information about how your data is handled, please visit: https://stripe.com/de/privacy

Rights of the Parties Concerned

Rights on providing information, permissions, revocation, deletion and blocking.

You have the right to demand information if and which personal data from you is processed by us. Furthermore, you have the right to demand the correction or the completion of your personal data;
Under certain circumstances, you have the right to demand a deletion of your personal data;
Under certain circumstances, you have the right to demand a restriction of the processing of your personal data.
You can withdraw completely or partially from your agreement on processing and using of your data with effects on the future;
You have the right to receive your personal data in a common, structured and machine-readable format;
You can also address questions, comments and complaints as well as requests for information in connection with our privacy policies and the processing of your personal data in writing to our data protection officer.

You have the right to complain at the responsible supervisory authority if you think the processing of your personal data violates legal requirements.

Contact

You can contact us at:

co.hilo kaffeekollektiv eG data protection officer Thomas Marufke

info@cohilo.de

www.cohilo.de/privacy-policy

Cohilo.de is committed to protecting and safeguarding your personal data. As part of this commitment, we are updating our privacy policy to meet the high standards of the new European data protection law, known as the General Data Protection Regulation (GDPR).

Requirement or Obligation for the Providing of Data

If it is not stated otherwise while collecting the data, the provision of data is not required or binding.

Date of this Privacy Policy

26.03.2023

We may update this privacy policy in the future.