Privacy Policy

We take it for granted that we handle your personal data responsibly when you use our websites and communicate with us electronically. We take all necessary measures to protect the personal data you provide and to comply with applicable national and European data protection regulations.

In this Privacy Policy, we inform you about how we process your personal data. Please note that the entity responsible for your personal data in connection with a website is the company named in the legal notice of the respective website.

Contact the Data Protection Officer:
By email: Datenschutz@orodiparma.de
By mail:
Data Protection Officer
, Hengstenberg GmbH & Co. KG
, Mettinger Straße 109
, 73728 Esslingen

We collect only the personal data that you choose to provide to us or that is necessary for us to provide our service to you. When you visit our website, our web servers automatically store, among other things, information about the browser and operating system you are using, the website from which you are visiting us, the pages you view on our site, the date of your visit, and—for security reasons— e.g., to detect attacks on our websites—and, for a period of seven days, the Internet Protocol (IP) address assigned to you by your Internet service provider. Other personal data is stored only if you voluntarily provide it to us. For example, you provide us with your email address, name, mailing address, phone number, and, if applicable, other information to receive information about our products, participate in contests or surveys, purchase products, or simply stay up to date on products that interest you.

When you visit our website and enter text into free-text fields—for example, to leave a comment—our systems store your Internet Protocol (IP) address. We require this information for security reasons to prevent misuse and for other security purposes.

We use your personal data for the technical administration of the website, for customer management, to answer your questions as part of our customer service, for product surveys and questionnaires, and for marketing purposes only to the extent necessary in each case. We use your personal data only for the purposes for which you have provided it to us. If you have given us your consent to process your personal data, this data will also be used for the purposes specified in the corresponding consent, such as sending newsletters and products. You may revoke your consent to this at any time with future effect.

As part of our personalized service, we aim to make our promotional materials—such as our newsletter—and your experience on our websites as user-friendly and personalized as possible. Automatically generated information and data you provide help us deliver personalized and tailored information to you. This information includes, among other things, “technical data” (e.g., IP address, operating system, browser), the date and time of your visit to our website, and “data regarding your (purchasing) behavior” (service history, order history, recipes and products you’ve viewed).

If you have subscribed to our newsletter, “technical information” is automatically provided to us, which allows us, for example, to analyze how often the newsletter was opened and which content was clicked on and how frequently (e.g., open rate and click-through rate). Analyzing this information also enables us to optimize our digital offerings—such as our newsletter—and to communicate with you in the most personalized way possible. Our goal is to ensure that you receive only content that truly interests you.

The processing of personal data is based on various legal provisions. Below, we explain the different legal bases:

• Consent: When we obtain your consent to process personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
• Performance of a Contract: If the processing of personal data is necessary for the performance of a contract to which you are a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
• Legitimate Interests: If the processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override those interests, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

We store the personal data you provide to us through our websites in our databases. This data is stored for as long as is necessary to fulfill the purpose for which you provided it to us or to comply with legal requirements (e.g., statutory retention obligations). For example, this means that your data will be stored until we have answered your question or until a sweepstakes has ended. If you have given us your consent to store your personal data for marketing purposes, this means that your data will be stored for the duration of our marketing activities or until you revoke your consent. You may revoke any consent you may have given to receive advertising at any time, effective for the future.

We implement technical and organizational security measures to protect the data we manage from tampering, loss, destruction, and unauthorized access. Our security measures are continuously improved in line with technological developments.

Only authorized employees have access to your personal data. In some cases, this may also include authorized employees of our service providers who process the data on our behalf or have access to it. In such cases, we have entered into a “Data Processing Agreement” with the service provider.

We do not share your personal data with other companies that wish to use it for direct marketing purposes, unless you have given us permission to do so. Furthermore, we share your personal data with the following other parties on a very limited basis:

• We work with various service providers who assist us with various tasks, such as shipping packages or managing our website and newsletter. These service providers are contractually obligated to implement the same security measures as we do to protect your personal data. Your data will be treated confidentially and may only be processed in accordance with our express instructions.

In some cases, our service providers are based abroad, which may result in the transfer of your personal data to other countries. To ensure that the same standard of data protection and data security as in Germany is maintained, we enter into a “Data Processing Agreement” with the service provider in such cases. This agreement ensures that the service provider is obligated to act exclusively in accordance with our instructions and to continuously implement all necessary technical measures to protect your personal data to the same extent as we do here. In this way, we ensure that your data is adequately protected.

• To other business units within our corporate group, provided that you have consented to this or that they act as our service providers on our behalf and we have contractually bound them in the same manner as our external service providers.
• Transfers of personal data to government agencies and authorities take place only within the framework of mandatory applicable laws.

Please note that when you use our website, personal data may be transferred to third countries, in particular to the United States. Due to the termination of the Privacy Shield Agreement as a mechanism for data transfers between the European Union and the United States, we must rely on other mechanisms in accordance with the provisions of the GDPR.

Data transfers to third countries outside the European Union may pose risks to your personal data, as these countries may not have a level of protection for personal data equivalent to that of the European Union. We therefore recommend that you read the privacy policies of third-party providers, especially social media platforms, to obtain information about their data processing practices and the safeguards they implement to ensure compliance with data protection standards.

If your personal data is processed, you are a data subject under the General Data Protection Regulation (GDPR), and you have the following rights with respect to the controller:

1. Under Article 15 of the GDPR, you have the right to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data (if not collected by us); and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
2. Pursuant to Article 16 of the GDPR, you have the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us.
3. Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defense of legal claims.
4. Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and we no longer need the data but you require it to assert, exercise, or defend legal claims, or if you have objected to the processing pursuant to Article 21 of the GDPR.
5. Pursuant to Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.
6. Pursuant to Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue processing the data based on that consent in the future.
7. Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority.

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds for doing so arising from your particular situation.

Cookies are small text files that are stored on your device. We use cookies to collect information such as browser type, operating system, the page you’re visiting, your path to the website, and so on, and to understand how this website is used. Cookies help us tailor our website to the needs of our users and offer certain services and features, such as personalized information.

Personal data may be stored in cookies if you have given your consent or if it is technically necessary, for example, to enable a secure login.

Technical cookies are scripts, cookies, and other elements that are necessary for the smooth operation of our website or in which the operator has a legitimate interest pursuant to Article 6(1)(f) of the GDPR. These cookies are used to provide basic functions and services that are essential for the proper display of the website and the use of its interactive elements.

1.1 ​​​​​​​Cookie Consent Manager (CCM19):
CCM19 offers features for implementing a cookie banner or cookie consent bar on the website, through which visitors can select their cookie settings. This may include, for example, consent to various cookie categories or the individual selection of specific cookies. More information at: https://www.ccm19.de/datenschutzerklaerung.html

Cookies used for analytics or statistical purposes are designed to collect information about user behavior on a website. They enable website operators to track data such as the number of visitors, the pages visited, the length of time spent on the website, and other statistical information.

The data collected by analytics cookies is anonymized or pseudonymized to gain insights into user behavior. This enables us to continuously improve your experience on our website by better understanding how you use our site and what content is relevant to you. In addition, the information from analytics cookies is used to technically optimize our website and tailor our marketing strategies to provide you with personalized content and offers.

The collected data is often combined and statistically analyzed to identify general trends and patterns. This allows us to analyze user behavior at a higher level without disclosing personal information.

2.1 Google Tag Manager

Google Tag Manager is a solution that allows providers to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been set at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager. For more information: https://www.google.de/analytics/tag-manager/use-policy/

2.2 Web Analytics via Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies to collect and analyze information about the use of the website. The information generated by the cookies regarding your use of the website (including your IP address) is transmitted to a Google server in the United States and stored there.

Google Analytics collects various data, including page views, time spent on the website, device information, browser type, geographic location information, and demographic information (if available). This data is used to generate reports on website activity, analyze user behavior, and improve the website.

For more information on how Google uses your data, please visit: http://www.google.com/analytics/terms/de.html and http://www.google.com/intl/de/analytics/privacyoverview.html.

2.3 Google Data Studio
This website uses Google Data Studio, a web-based service from Google for data visualization and reporting. Google Data Studio may use cookies to collect information about website usage and to generate reports on it. The information generated by cookies regarding your use of this website is typically transmitted to and stored on a Google server.

We use Google Data Studio to analyze our website visitor statistics and create custom reports. Cookies from Google Data Studio are also used for this purpose. The information generated by these cookies may be transmitted to Google and processed by Google in accordance with its Privacy Policy. For more information on how Google uses your data, please visit: support.google.com/looker-studio/answer/7657915

2.4 Web Analytics: Hotjar
This website uses Hotjar, a web analytics service provided by Hotjar Ltd. Hotjar uses cookies and other technologies to collect and analyze information about user behavior on the website. This information includes mouse and keyboard inputs (anonymized), pages visited, scrolling activity, and interactions with specific elements of the website. Hotjar also collects device information such as browser type, operating system, and screen resolution.

The data collected is used to understand user behavior, improve website usability, and customize the user experience. The data helps analyze the website’s effectiveness, identify errors, and optimize website performance. For more information on how Hotjar uses your data, please visit: help.hotjar.com/hc/de/articles/360046544833-FAQs-zur-Einhaltung-der-Vorschriften

Social media cookies enable platforms to track user behavior and collect information about users’ interactions with social media features. This allows for the display of personalized content and advertising tailored to users’ interests.

We maintain fan pages on various social networks and platforms with the goal of communicating with customers, prospective customers, and users active on those platforms and informing them about our services. User data is generally processed for market research and advertising purposes. For example, usage profiles can be created based on users’ behavior and the resulting interests. These usage profiles can in turn be used, for example, to display advertisements both within and outside the platforms that are presumed to match users’ interests.

Please note that we have no control over the data collected.

1. Facebook
   Our website uses cookies and plugins from Facebook, a social network operated by Meta Platforms Ireland Limited, 6 Serpentine Ave, Dublin, D04 H0C9, Ireland. These cookies are used to collect information about the use of our website and to display personalized advertisements. 
   
   The data collected by Facebook may include various types of information, such as your IP address, browser type, operating system, device type, pages visited, time spent on the site, click behavior, and demographic characteristics. This data is used to analyze user behavior and to serve targeted advertisements. For more
   
   information on how Facebook uses your data, please visit: https://de-de.facebook.com/privacy/policies/cookies/
    

2. YouTube
   Our website uses cookies and embedded videos from YouTube, a video platform operated by Google. These cookies are used to collect information about the use of the embedded YouTube videos on our website.
   The data collected by YouTube may include various pieces of information, such as your IP address, browser type, operating system, device type, pages visited, time spent on the site, click behavior, and demographic characteristics. This data is used to analyze user behavior, improve video quality, provide personalized content, and serve targeted advertisements. For more
   
   information on how YouTube uses your data, please visit: https://policies.google.com/privacy?hl=de

Our website contains links (e.g., Facebook or Instagram) to social media platforms. These services are operated exclusively by third-party providers. If you follow the links or play videos, information may be transmitted to these providers.

Furthermore, we maintain fan pages on various social networks and platforms with the aim of communicating with customers, prospective customers, and users active on those platforms and informing them about our services. User data is generally processed for market research and advertising purposes. For example, usage profiles may be created based on users’ behavior and the resulting interests. These usage profiles may in turn be used, for example, to display advertisements both within and outside the platforms that are presumed to correspond to users’ interests.

Please note that we have no control over the data that is collected.

For more information on how your data is used, please visit the respective link:

• Facebook: https://de-de.facebook.com/privacy/policies/cookies/
• Instagram: http://instagram.com/about/legal/privacy/
• Xing: https://privacy.xing.com/de/datenschutzerklaerung
• Pinterest: https://policy.pinterest.com/de/privacy-policy
• LinkedIn: https://de.linkedin.com/legal/privacy-policy

We use Supermetrics, located at Kaivokatu 10 A, 00100 Helsinki, Finland, a service for the automatic integration and analysis of data from marketing platforms. For more information on how Supermetrics uses your data, please visit: https://supermetrics.com/privacy-policy

We use contact forms on our website to give you the opportunity to get in touch with us and submit inquiries. When you fill out and submit one of our contact forms, the information you enter is transmitted to us and stored. This information may include personal data such as your name, email address, phone number, and other contact details. We use this data exclusively to respond to your inquiry and to communicate with you. The processing of your data is based on your consent pursuant to Article 6(1)(a) of the GDPR when you submit the contact form. Your data will be treated confidentially and will not be shared with third parties unless this is necessary to respond to your inquiry or required by law. We will store your data only for as long as is necessary to process your inquiry or until you object to the continued storage of your data.

You have the option to subscribe to our newsletter to receive regular updates about our products, offers, and news. We use the Rapidmail service, operated by Rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany, to send our newsletter. Rapidmail processes your data on our behalf and in accordance with our instructions as a data processor.

In order to send you the newsletter, we need your email address and, if applicable, any additional personal data that you voluntarily provide. The processing of your data for the purpose of sending the newsletter is based on your consent in accordance with Article 6(1)(a) of the GDPR.

We store and use the data you provide for the purpose of sending the newsletter. Rapidmail, as our service provider, has access to your data in order to send the newsletter on our behalf. Your data will not be disclosed to third parties or used for any other purposes.

The retention period for your data depends on your consent and the duration of your subscription. You can unsubscribe from the newsletter at any time and withdraw your consent. In this case, your data will be deleted immediately and removed from our newsletter distribution list.

If you participate in a sweepstakes, we will process the personal data you provide (first name, last name, email address, mailing address) for the purpose of conducting the sweepstakes, selecting the winners, and notifying and mailing the prizes. The legal basis for this is your consent pursuant to Article 6(1)(a) of the GDPR.

To organize and conduct some of our sweepstakes, we use the external software “Brame,” which is operated by Brame AG, Neuhofstrasse 10, 8834 Schindellegi, Switzerland. Please note that Brame, as a data processor, processes your personal data exclusively in accordance with our instructions and for the purpose of conducting the sweepstakes. We have entered into a data processing agreement with Brame (pursuant to Article 28 of the GDPR) that ensures your data is protected in accordance with data protection regulations that provide a level of protection equivalent to that required by the GDPR. It is important to note that, according to the European Commission’s decision, Switzerland has an adequate level of protection. This means that adequate protection for personal data is guaranteed in Switzerland.

To deliver the prize, the organizer may transfer your data via data processing to a partner cooperating with the organizer. You can find information about this partner in the rules of participation for the respective sweepstakes under the section “Delivery of the Prize.” Your personal data will not be transferred to countries outside the EU/EEA or to an international organization. Your data will only be stored for as long as necessary to process the contest.

If you are under 16 years of age, you must have the consent of your parents or legal guardian. In this case, please contact us directly. You cannot provide legally valid consent on your own in this situation.

Our websites contain links to other websites. We have no control over the content or design of websites operated by third parties. Our Privacy Policy does not apply to those sites.

We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, such as when introducing new services. The new Privacy Policy will then apply to your next visit.