Privacy Statement

Thank you for your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the processing of your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time you visit the website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and documents the request.
These access data are evaluated exclusively to ensure trouble-free operation of the site and to improve our services. According to Art. 6 para. 1 sentence 1 lit f GDPR, this serves to protect our legitimate interests in the correct presentation of our offer, which are of overriding importance in the process of balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.

Third party hosting services

In the context of processing on our behalf, third parties provide us with hosting and presentation services for our websites. We use the following service providers to host the relevant website:

URL	Hosting provider
https://www.mr-stiff.com/	Yourhosting Great Forth 225 8041 BK Zwolle The Netherlands

If a service provider is based in the USA, it is certified under the EU-US Privacy Shield. You can view a current certificate here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. Furthermore, we have agreed with other service providers based in a country outside the EU or the EEA to apply EU standard data protection clauses in order to provide appropriate guarantees pursuant to Art. 46 para. 2 lit. c GDPR.
All data collected in the context of the use of these web pages or in forms for the purposes described below will be processed on the servers of the respective service provider. Processing on other servers will only take place as described in this privacy statement.

1. Data collection and use

We collect personal data if you voluntarily provide it when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, because in these cases we need the data to process your contact or to open a customer account in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR and you cannot send the contact without this information. You can read which data is collected from the various input forms. We use the data you provide to process your requests.
We have engaged service providers for the technical handling of your inquiries on our behalf. These service providers are located in the USA and are certified under the EU-US Privacy Shield. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
After complete processing of the request, your data will be restricted for further processing and deleted after expiry of the tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data further, which is permitted by law and about which we inform you in this declaration.

1. Data transfer

If you have ordered goods that we will send to you by post, we will pass on the data required for the execution of the contract in accordance with the state of the art, Art. 6 para. 1 sentence 1 lit. b GDPR, to the carrier commissioned with the delivery, if this is necessary for the delivery of ordered goods. Depending on the payment service provider you select in the ordering process, we will pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to the payment service providers commissioned by us or to the selected payment service.
Depending on the payment method, some payment providers also perform a credit check themselves or pass on the payment data collected for payment processing to an external credit institution.

In addition, it is also possible that the selected payment service provider collects this data itself if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this context, the data protection declaration of the respective payment service provider applies.
We use a payment service provider located in a country outside the European Union. The transfer of personal data to this company only takes place in the context of the necessity to fulfill the contract.

1. Email newsletter

Email advertising with newsletter registration
When you register for one of our newsletters or provide your data to download a document free of charge from our website or our Facebook or LinkedIn presence, we use the data required for this or separately provided by you to regularly send you our e-mail newsletter on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The newsletter is sent on our behalf by service providers to whom we pass on your e-mail address for this purpose.

If the newsletter is sent via a service provider based in the USA, this service provider is certified under the EU-US Privacy Shield. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link included for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data further, which is permitted by law and about which we inform you in this declaration.

E-mail advertising without newsletter registration and your right to object
If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products, such as products already purchased, from our range by e-mail in accordance with Art. 11.7 paragraph 3 of the Telecommunications Act. This serves to protect our legitimate interests in an advertising approach to our customers, which are overriding in the process of balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

The newsletter is sent on our behalf by service providers to whom we pass on your e-mail address for this purpose.

If the newsletter is sent via a service provider based in the USA, this service provider is certified under the EU-US Privacy Shield. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail.

1. Cookies

In order to improve the user experience on our website and to enable you to use certain functions of it to display suitable products or to conduct market research, so-called cookies are used on some pages of this website. This serves to protect our legitimate interests in the optimised presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which are overriding in the process of balancing of interests. A cookie is a small text file that is automatically stored on your end device. Some of the cookies we use are deleted after you have ended the browser session, i.e. when you close the browser (these are so-called session cookies). Other cookies are stored on your end user device and enable us to recognise your browser when you visit us again (persistent cookies). To check the storage period of cookies, you can use the Overview function in the cookie settings of your web browser. You can configure your browser so that it informs you when a page uses cookies and decides on a case-by-case basis whether to accept or reject cookies on a particular website or in general. Each browser has a different policy for managing cookie settings. The browser policy is described in the Help menu of each browser and explains how you can change your cookie settings. See the links below for more information on how to change the settings in your browser:
Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/kb/PH21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™ : http://help.opera.com/Windows/10.20/en/cookies.html

Please note that disabling cookies may limit your access to some features of our website.

Web analysis
Use of Google (Universal) Analytics for the analysis of website visits
This website uses Google (Universal) Analytics for website analysis to analyse website visits. The web analysis service is provided by Google Ireland Limited, a company incorporated under Irish law with registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This is intended to safeguard our legitimate interests in an optimised presentation of our offer in accordance with Art. 6 para. 1 lit. f GDPR, which are overriding in the context of a balancing of interests. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymisation on this website prior to transmission within member states of the European Union or in other contracting states of the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the framework of Google Analytics is in principle not associated with other data from Google. At the end of our use of Google Analytics and the purposes pursued, the data collected in this context will be deleted.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here [link to: https://www.privacyshield.gov/list]. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from recording data on this website in the future. An opt-out cookie will be placed on your terminal device. If you delete your cookies, you will have to click on this link again.

1. Sending reminders by email
   If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to send you an evaluation reminder by e-mail.
   
   Consent can be withdrawn at any time by sending a message to the contact option described below with effect for the future.
2. Contact options and your rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us, to the extent described therein;
• pursuant to Art. 16 GDPR, you have the right to demand immediate correction of incorrect or complete personal data stored by us;
• pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored with us, unless further processing is required
  - to exercise freedom of expression and information;
  - to comply with a legal obligation;
  - for reasons of public interest, or
  - is necessary for the assertion, exercise or defense of legal claims;
• pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
  - you deny the accuracy of the data;
  - the processing is unlawful, but you refuse to erase it;
  - we no longer need the data, but you need it to establish, exercise or defend legal claims, or
  - you have objected to the processing pursuant to Art. 21 GDPR;
• In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another controller;
• The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. You can also contact the supervisory authority at your usual place of residence or work or at our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, information, correction, restriction of processing or deletion of data or revocation of a given consent or objection to a specific use of data, you can contact our data protection officer.
Herbal Solutions BV
Maasstraat 149-3

1079BE Amsterdam

The Netherlands
info@mr-stiff.com