Data privacy statement

Preface

MILLENIUMTREE SARL (hereinafter referred to as: "we"), as the operator of the website, is responsible for processing the personal data of users who visit the website. Our contact details can be found in the legal notice of the website, and contact persons for questions regarding the processing of personal data are named directly in this data privacy statement.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this data privacy statement and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this data privacy statement, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the website.

Personal data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, email address or postal address. However, information that cannot be associated with your identity (for example, statistical information, such as the number of online users) is not considered personal information.

You can use our website without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. For some of the services offered, however, personal data is collected from you. This data will then only be processed by us for purposes of using this website, in particular for providing the desired information. When entering personal data, only mandatory data must be provided. Further information may also be provided on a voluntary basis. In each case, we point out whether it concerns mandatory fields or voluntary data. We will inform you about the specific details in the relevant section of this data privacy statement.

An automated decision-making process based on your personal data does not take place in connection with the use of our website.

Processing of personal information

We store your data on specially protected servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to your data is only permitted for a limited number of authorised persons. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.

Your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.

Disclosure of personal data to third parties

In principle, we only use your personal information to provide the services you have requested. Insofar as external service providers are used by us within the scope of the provision of services, their access to the data also takes place exclusively for purposes related to the provision of services. Through technical and organisational measures, we ensure compliance with data protection regulations and also oblige our external service providers to comply with these.

Furthermore, we will not pass on your data to third parties without your explicit consent, with a particular focus on the avoidance of advertising and promotional activities. Your personal data will only be disclosed if you have actively consented to the transfer of your data or if we are entitled or obliged to do so by law and/or official court orders. In particular, this may involve providing information for law enforcement, security purposes or the enforcement of intellectual property rights.

Legal basis for data processing

Insofar as we obtain consent for the processing of your personal data, Article 6(1)(a) of the GDPR serves as the legal basis for data processing.

Insofar as your personal data is processed for the purpose of fulfilling a contract or in the context of a contract-like relationship with you, Article 6(1)(b) of the GDPR serves as the legal basis for data processing.

Insofar as we process your personal data in order to fulfil a legal obligation, Article 6 (1)(c) of the GDPR serves as the legal basis for data processing.

Article 6(1)(f) of the GDPR may also be used as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or that of a third party, and, in so doing, your interests, fundamental rights and freedoms do not require the protection of personal data.

Within the scope of this data privacy statement, we always indicate the legal basis on which the processing of your personal data is based.

Data deletion and storage time

We always delete or block your personal data when the reason for storing the data is no longer applicable. However, data may also be stored if this is provided for by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such cases, we will delete or block your personal data at the end of the corresponding provisions.

Use of our website

Information about your computer

Each time you access our website, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded within the scope of this request. We also collect product and version information about the browser and operating system of the computer used. We also identify the website from which the website was accessed. The IP address of your computer is only stored for the duration of the use of the website and is subsequently deleted or made anonymous by truncation. The remaining data is stored for a limited period of time.

We use this data for the operation of the website, in particular to detect and eliminate errors, to determine the utilisation of the website and to make adjustments or improvements. For these purposes, we have a legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

Use of cookies

As on many websites, cookies are used for our website. Cookies are small text files which are stored on your computer and contain certain settings and data for exchange with our website via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognise your computer and to make any pre-settings immediately available. Cookies help us to improve the website and provide you with a better and more personalised service. This is also our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session. Occasionally, cookies with a longer storage period can also be used, so that your pre-settings and preferences can be applied the next time you visit our website.

Most browsers are configured to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved by using the browser settings. Please note that our website may only be of limited- or no use if you decline the storage of cookies or delete necessary cookies.

Google Analytics

We use Google Analytics for statistical analysis. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses so-called “cookies,” or textual data that is saved on your computer, making analysis of your website use possible. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and is stored there. In case IP anonymisation is activated on this website, your IP address will be shortened by Google in the member states of the European Union or other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address first be transmitted to a Google server in the USA before being shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website and generate reports on website activity as well as further services provided to the website operator with regard to website and internet use. The IP address transmitted by Google Analytics is not joined with other Google data. You can prevent storage of cookies by changing your browser software settings, but please note that some functions of the website may not be usable to their full extent if you do so. Furthermore, you can also prevent collection of cookie-generated website usage data (including your IP address) by Google as well as the processing of this data by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=fr.

Further information is available under http://tools.google.com/dlpage/gaoptout?hl=fr or http://www.google.com/intl/de/analytics/privacyoverview.html (General information on Google Analytics and data protection). We would like to point out that on our website, Google Analytics has been extended by the code " anonymizeIp();" in order to make the IP addresses anonymous, whereby the last octet is deleted.

Due to protective measures taken (anonymisation and possibility of objection), we consider data processing for the optimisation of our website to be a legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

Registration

You can register to use our website. To do so, you must provide the data requested during registration, for example, name, address and email address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent for the use of the data. The advantage of this is that you do not have to enter this data again each time you use or place an order.

The legal basis for the processing of data for registration is Article 6 (1) (a) of the GDPR. Insofar as you register for the fulfilment or initiation of a contract with us, the legal basis for the processing of the data is additionally Article 6 (1) (b) of the GDPR.

The information requested as a mandatory field during registration is required for the fulfilment or initiation of a contract with us for certain services.

When you register, a customer account will be created for you. Data in the customer account is stored with us only as long as an active customer relationship exists. If no activity is detected for a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.

Order processing

We only use your personal information for orders within our company and affiliated companies, and with the company commissioned to process orders.

Storage and data transfer for orders

To process orders, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners comply with data protection regulations. We will pass on your address data (name and address) to the respective transport company that delivers the products ordered to you. The legal basis for this is Article 6 (1) (b) of the GDPR. The processing of your personal data is required to fulfil the contract with you.

The data will be stored by us for as long as it is necessary to fulfil the contract. Furthermore, we store this data for the legally prescribed period for the fulfilment of post-contractual obligations and due to commercial and tax retention periods. In general, this retention period is 10 years from the end of the respective calendar year.

Payment processing for orders

Depending on the chosen payment method, payment processing for orders may be effected through the involvement of a service provider.

When paying by credit card, all necessary data such as name, address and purchase data will be forwarded to the respective credit card company.

If you pay by credit card, you will be redirected to the internet site of Stripe, 510 Townsend Street, San Francisco, CA 94103, United States of America. In the course of this form of payment, your personal data will be processed. This data includes your name, your address, your email address, any telephone number and account or credit card information. Please refer to the general terms and conditions, terms of use and data privacy statement of Stripe, which are listed under https://stripe.com/fr/privacy.

The legal basis for payment processing is Article 6 (1) (b) of the GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you, whereby you are free to choose the method of payment.

Communication with us

You can contact us in various ways, for example via the email addresses provided on our website. You are also welcome to receive our informative newsletter by email on a regular basis.

When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will also receive regular information on current topics and emails for special reasons, for example special promotions. The emails can be personalised and individualised based on our existing information about you.

If you have not given us your written consent to subscribe to our newsletter, we will use the so-called double opt-in procedure, i.e. we will not send you a newsletter by email until you have expressly confirmed to us beforehand that we should activate the newsletter subscription. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in the email.

The legal basis for processing your data is your consent pursuant to Article 6(1)(a) of the GDPR if you have expressly registered for the newsletter. Within the scope of legal provisions, it may also be possible that you receive our newsletter without express consent, because you have ordered goods or services from us, we have received your email address in this connection and you have not objected to receiving information by email. In this case, the legal basis shall be our legitimate interest in the transmission of direct mail pursuant to Article 6(1)(f) of the GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to basic tariffs. Simply use the unsubscribe link included in each newsletter or send a message to us or our data protection officer.

Social media

In our website, you will find links to the social networks Facebook and YouTube. The links are indicated by the respective logo of the provider.

Clicking on the links opens the corresponding social media pages for which this data privacy statement does not apply. Please refer to the data privacy statements of the individual providers for details of the provisions applicable there; you will find these under:

Facebook: http://www.facebook.com/policy.php
Google: https://www.google.com/policies/privacy/?hl=fr
YouTube: https://policies.google.com/privacy?hl=fr&gl=fr

No personal information is transmitted to the respective providers before the corresponding links are opened. Your visit to the linked page is also the basis for data processing by the respective providers.

Use of YouTube

Our website includes videos for which we use a plugin of the Google-operated service YouTube ("YouTube"). The operator of this service is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a website of our website that includes a video, you will be connected to YouTube's servers. At the same time, the server of YouTube will be informed which internet pages of our website you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. For more information on how user data is handled, please refer to the Google Privacy Policy https://www.google.com/intl/en/policies/privacy/, which also applies to YouTube.

We use YouTube so that we can show you videos and thus tell you more about us and our services; This is also the legitimate interest pursuant to Article 6 (1) (f) of the GDPR.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and also to inform you about the rights to which you are entitled. If you require further information or wish to exercise the rights to which you are entitled, you can contact us at any time, so that we can take care of your request.

Rights of persons concerned

You have extensive rights regarding the processing of your personal data. First of all, you have a comprehensive right to information and can, if necessary, request the correction and/or deletion or blocking of your personal data. You may also request a limitation of processing and have a right of objection. You also have a right to data transferability with regard to the personal data you have provided us with.

If you wish to assert any of your rights and/or request further information, please contact our customer service. Alternatively, you can contact our data protection officer.

Revocation of consent and objection

Once consent has been given, it can be freely revoked at any time with effect for the future. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until such time as it is revoked. Contact persons for this purpose are also our customer service and data protection officer.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review, and, if necessary, termination of data processing. You will be informed of the results of the review and - if data processing is nevertheless to be continued - we will provide you with more detailed information as to why the data processing is permissible.

Data protection officer and contact

For questions related to our handling of personal data or further information on data privacy issues, please contact our internal data protection coordinator:

Email: gdpr(at)milleniumtree.com

Complaints

If you believe that we are not processing your personal data in accordance with this data privacy statement or the applicable data protection regulations, you have a right of appeal to a regulatory authority. You can also lodge a complaint with our data protection officer. The data protection officer will then examine the matter and inform you of the result of the examination.

Further information and amendments

Links to other websites

Our website may contain links to other websites. As a rule, these links are marked as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the respective data privacy statements of other websites.

Amendments to this data privacy statement

The current date of this data privacy statement is indicated by the date (below). We reserve the right to amend this data privacy statement at any time with future effect. Amendments are made, in particular, in the event of technical adjustments to the website or changes to data protection regulations. The current version of the data privacy statement can always be accessed directly via the website. We recommend that you regularly inform yourself about amendments to this data privacy statement.

Date of this data privacy statement: May 2020