Privacy Policy

Privacy Policy

§ 1 Information on the collection of personal data

(1) Below we inform you about the processing of personal data when you use our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. In this way we wish to inform you about our processing operations and at the same time comply with our legal obligations, in particular under the EU General Data Protection Regulation (GDPR).

(2) The controller pursuant to Art. 4 (7) GDPR is Hive & Harvest GmbH, Honigweg 12, 25479 Ellerau, Germany, info@hive-and-harvest.example.

(3) When you contact us by email or via a contact form, the data you provide (your email address and, where applicable, your name and telephone number) is stored by us in order to answer your questions. We delete the data arising in this context if the enquiry is assigned to a contract, in accordance with the periods applicable to the term of the contract; otherwise we delete it once storage is no longer necessary, or we restrict processing if statutory retention obligations apply.

(4) If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will always select and monitor these service providers carefully and inform you below in detail about the respective processes. In doing so, we also state the defined criteria for the storage period.

§ 2 Your rights

(1) You have the following rights against a controller with regard to the personal data concerning you:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to the processing,
  • Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

§ 3 Processing of personal data when you visit our website

When you use the website for information purposes only, that is, merely viewing it without registering and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security, and must therefore be processed by us. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (page visited)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Previously visited page
  • Browser

§ 4 Further functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested, and we use other common functions for the analysis or marketing of our offers, which are presented in more detail below. For this you generally have to provide further personal data, or we process such further data, which we use to perform the respective services. The principles of data processing stated above apply to all data processing purposes described here.

(2) In some cases we use external service providers to process your data. They are carefully selected by us, are bound by our instructions and are checked regularly.

(3) We may also pass on your personal data to third parties if we offer promotions, prize draws, contracts or similar services together with partners. Depending on the service, your data may also be collected by the partners under their own responsibility. You will receive further information when you provide your data or below in the description of the respective offers.

(4) Where our service providers or partners are located in a state outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.

§ 5 Objection to or withdrawal of consent to the processing of your data

(1) If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have declared it to us. The lawfulness of the processing of your data up to the time of your withdrawal remains unaffected.

(2) Where we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case in particular where processing is not necessary for the performance of a contract with you, which we indicate in each case in the description of the functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we do. In the event of your objection, we will examine the situation and will either stop or adapt the data processing or show you our compelling legitimate grounds on which we continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your objection to advertising using the contact details given above.

§ 6 Processing of data from your end devices ("Cookie Policy")

(1) In addition to the data mentioned above, when you use our website we use technical aids for various functions, in particular cookies, which may be stored on your end device. When you visit our website, and at any time afterwards, you can choose whether to allow the setting of cookies in general or which individual additional functions you wish to select. You can make changes in your browser settings or via our consent manager. Below we first describe cookies from a technical perspective (2) before going into your individual choices in more detail by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).

(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can flow to the party that sets the cookie. Cookies cannot run programs or transmit viruses to your computer, but serve primarily to make the internet offering faster and more user-friendly. This website uses the following types of cookies, whose functioning and legal basis we explain below:

  • Transient cookies: These, in particular session cookies, are deleted automatically when you close your browser or log out. They contain a so-called session ID. This allows different requests from your browser to be assigned to the shared session and your computer to be recognised when you return to our website.
  • Persistent cookies: These are deleted automatically after a specified period, which varies depending on the cookie. You can view the cookies that have been set and their lifetimes in your browser settings at any time and delete the cookies manually.
  • Other technologies: These functions are not based on cookies but on similar technical mechanisms, such as Flash cookies, HTML5 objects or an analysis of your browser settings. The result is likewise that we can use the techniques described below. Here, too, you can of course consent or object.

(3) Mandatory functions technically necessary to display the website: The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely correctly) or the support functions could not be provided. These are generally transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the consent manager. The legal basis for this processing is Art. 6 (1) sentence 1 lit. f GDPR.

(4) Optional cookies with your consent: We set various cookies only with your consent, which you can select on your first visit to our website via the so-called cookie consent tool. The functions are activated only if you agree, and may serve in particular to allow us to analyse and improve visits to our website, to make it easier for you to use the site across different browsers or end devices, to recognise you on a visit, or to display advertising (including, where applicable, advertising based on interests, measuring the effectiveness of ads or showing interest-based advertising). The legal basis for this processing is Art. 6 (1) sentence 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing up to the withdrawal. We describe below the functions we use, which you can select and withdraw individually via the consent manager.

§ 7 Use of our web shop

(1) If you wish to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the purpose of processing your order. Mandatory information required for the performance of contracts is marked separately; further information is voluntary. For payment, you can provide your payment data to our payment service provider, or we pass your payment data on to our house bank, in which case these third parties are each independently responsible for payment processing. The legal basis for this is Art. 6 (1) sentence 1 lit. b GDPR. If you wish, you can create a customer account, which allows us to store your data for later purchases. When you create an account at /en/account/dashboard, the data you provide is stored subject to revocation. You can delete all further data, including your user account, in the customer area at any time. We may also process the data you provide in order to inform you about other interesting products from our range or to send you emails with technical information.

(2) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, after [three] years we restrict processing, i.e. from that point your data will be used only to comply with legal obligations.

(3) To prevent unauthorised access by third parties to your personal data, the ordering process is encrypted using TLS technology.

  • Operating system
  • Language and version of the browser software.

§ 8 Newsletter

(1) You can subscribe to our newsletter, with which we inform you about our current interesting offers, by giving your consent. The goods and services advertised are named in the declaration of consent.

(2) For subscription to our newsletter we use the so-called double opt-in procedure. This means that after you sign up, we send you an email to the email address provided, in which we ask you to confirm that you are the owner of that email address and wish to receive the notifications. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your email address. Providing further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.

(4) You can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking the link provided in every newsletter email, via this form on the website, by email to orders@hive-and-harvest.example or by a message to the contact details given in the legal notice.

(5) In addition, you can also give your consent for us to evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned above [in § 3] and the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID. With the data obtained in this way we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links you click, and infer your personal interests from this. We link this data with actions you have taken on our website. You can object to this tracking at any time by clicking the separate link provided in every email or by informing us via another contact channel as described above. The information is stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical purposes and anonymously. Such tracking is also not possible if you have disabled the display of images by default in your email program. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you have the images displayed manually, the tracking described above takes place.

§ 9 Web tracking using Google Analytics

(1) This website uses Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and, through the statistics and reports obtained, to improve our offering and make it more interesting for you as a user.

(2) We record the interactions between you as a user of the website and our website primarily by means of cookies, device/browser data, IP addresses and website or app activity. Google Analytics also records your IP addresses in order to ensure the security of the service and to give us, as the website operator, information about the country, region or location the respective user comes from (so-called "IP location determination"). For your protection, however, we of course use the anonymisation function ("IP masking"), i.e. within the EU/EEA Google truncates the IP addresses by the last octet.

(3) Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (generally truncated) IP addresses about your use of this website are generally transferred to a Google server in the USA and processed there. In these cases, according to its own statements, Google has imposed on itself a standard equivalent to the former EU-US Privacy Shield and has committed to comply with applicable data protection laws in international data transfers. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in the third country.

(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) sentence 1 lit. a GDPR). You can withdraw your consent at any time without affecting the lawfulness of the processing up to the withdrawal. In apps you can reset the advertising ID in the settings of Android or iOS. The easiest way to withdraw is via our consent manager, or by installing the browser add-on from Google, which is available at the following link: tools.google.com/dlpage/gaoptout?hl=en.

(5) You can find more information on the scope of services of Google Analytics at marketingplatform.google.com/about/analytics/terms/us/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en. General information on data processing which, according to Google, is also meant to apply to Google Analytics can be found in Google's privacy policy at www.google.com/intl/en/policies/privacy/.

§ 10 Live chat and chatbot (Tidio)

When you visit our website, you can communicate with us in real time via the live chat (real-time communication) or, where applicable, interact with our chatbot. In the live chat you can write us a message, which is answered directly by one of our employees. If you contact us outside our business hours or no employee is immediately available, you can communicate with our chatbot. It will reply to you automatically and in particular ask you about your request. Your input or request is then handed over to a contact person at our company (so-called human handover), who will get in touch with you by email or, where applicable, by telephone.

When using the live chat and the chatbot, the following data in particular is processed:

  • Your name,
  • Your email address,
  • If applicable, your telephone number,
  • Your entries in the chat window (e.g. date of a desired booking),
  • Usage data (e.g. chat duration, number of interactions).

As long as there is no handover to one of our contact persons during communication with our chatbot, your data remains pseudonymous, i.e. we will not attribute it to you personally as a visitor to our website. As soon as a handover to one of our contact persons takes place, the chat history is individualised for the personal handling of your request.

To continuously improve the functioning of the live chat and the chatbot and to enable us to compile statistics, your data may be evaluated in pseudonymised or anonymised form.

The legal basis for processing activities in connection with the live chat and our chatbot is Art. 6 (1) sentence 1 lit. b GDPR insofar as it concerns the initiation or performance of a contractual relationship (rental of the premises we offer), and otherwise Art. 6 (1) sentence 1 lit. f GDPR, as we have a legitimate interest in simplified communication and contact with you and in improving and optimising our live chat and chatbot.

The data collected via the live chat and the chatbot is generally deleted after 7 days, unless we need it for longer for the purposes stated above. In such a case, we delete the data without undue delay once the purpose no longer applies.

Entering sensitive or confidential data is not necessary when using the live chat or the chatbot and is also not desired by us. In particular, we ask you not to use the live chat or the chatbot for entries that reveal sensitive data (e.g. information about your state of health, any disabilities or your religious affiliation) or that could allow conclusions to be drawn about such data. Should we become aware of sensitive data in connection with the live chat or the chatbot, e.g. through your entry in the live chat or when your statements made during communication with our chatbot are handed over to one of our contact persons, we will regularly delete such entries without undue delay.

In providing the technical service, Tidio Ltd, 220C Blythe Road, W14 0HH, London, United Kingdom (UK), Tidio LLC, 180 Steuart St., California 94119, San Francisco, USA and Tidio Poland Sp. z o.o., Wojska Polskiego 81, 70-481 Szczecin, Poland (hereinafter also together "Tidio") act in particular as so-called processors on our behalf, bound by instructions and for specified purposes.

In this context, your data may be stored in pseudonymised form on servers in countries outside the European Union (EU) or the European Economic Area (EEA), in particular the USA or the United Kingdom (UK). Any data transfers to the USA or the United Kingdom are subject to the EU standard contractual clauses concluded with Tidio. With regard to an adequate level of data protection in the United Kingdom, there is also an adequacy decision of the EU Commission (https://ec.europa.eu/info/sites/default/files/decision_on_the_adequate_protection_of_personal_data_by_the_united_kingdom_-_general_data_protection_regulation_de.pdf).

You can find further information on the live chat and our chatbot, as well as on data processing by Tidio, here:

If you do not wish to use the live chat or the chatbot, you can also obtain all information through other communication channels (e.g. our website) and contact us, for example, using the contact form.

§ 11 Google Web Fonts

To display fonts consistently, our website uses so-called web fonts provided by Google. The Google Fonts are installed on our server. A connection to Google servers therefore does not take place.

– End of the Privacy Policy –