Legal Notice & Privacy Policy

Legal Notice

plantbasedredhead.com is the blog of
Heidrun Kubart, living in 1020 Vienna (Austria)

Contact me via e-Mail: plantbasedredhead.cooks@gmail.com
A postal address or phone number will be provided upon request.

Type of business: food blog

All rights to the texts and images are owned by plantbasedredhead.com/Heidrun Kubart, unless noted otherwise. Please feel free to use the recipes for non-commercial use, as long as you link to my blog plantbasedredhead.com and/or Instagram site @plantbased.redhead.cooks. Feel free to get in touch with me in case you are interested in using my recipes, texts, or images for commercial use, whether it is online, digital, or print.

plantbasedredhead.com checks all external links on its site but assumes no responsibility for their functionality or content. The operators of the external links are solely responsible for their content.

Privacy Policy

Standard settings of the weblog software WordPress and the hosting provider Dreamhost are used regarding the privacy of your data. Data might be stored outside EU countries, as my provider sits in the US. Refer to their websites for privacy conventions. Note that cookies are used by these services/programs for statistics and improvements of the user experience.

Personal data (usually referred to just as “data” below) will only be processed by me to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under my own control or in conjunction with others. I also inform you below about the third-party components I use to optimize this website and improve the user experience which may result in said third parties also processing data they collect and control.

My privacy policy is structured as follows:
I. Information about me as a controller of your data
II. The rights of users and data subjects
III. Information about the data processing

I. Information about me as a controller of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:
Heidrun Kubart, living in 1020 Vienna (Austria)

Contact me via e-Mail: plantbasedredhead.cooks@gmail.com
A postal address or phone number will be provided upon request.

The controller’s data protection officer is: Heidrun Kubart

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR)

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users, and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible. 

III. Information about the data processing

Your data processed when using this website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Pinterest

I maintain an online presence on Pinterest to present my blog and services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

I would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. I also do not have access to this user data. Access is only available to Pinterest. Pinterest Inc. is certified under the Privacy Shield and committed to comply with European privacy standards. https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active

The Pinterest privacy policy can be found here: https://policy.pinterest.com/de/privacy-policy

Instagram

To advertise my products and services as well as to communicate with interested parties or customers, I have a presence on the Instagram platform.

On this social media platform, I am jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The data protection officer of Instagram can be reached via this contact form: https://www.facebook.com/help/contact/540977946302970

I have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. My legitimate interest lies in the analysis, communication, sales, and promotion of my products and services.

The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.

When accessing my online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).

This data of the user is used for statistical information on the use of my blog’s presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access my site, Facebook Ireland Ltd. will also link this data to your user account.

If you contact me via Instagram, the personal data your provide at that time will be used to process the request. I will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.

Facebook Ireland Ltd. might also set cookies when processing your data.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.

Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy: https://help.instagram.com/519522125107875

It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.

Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA. https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Social media links via graphics

I also integrate the following social media sites into my website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on my own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.

Once you click, that network may record information about you and your visit to my site. It cannot be ruled out that such data will be processed in the United States.

Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to my site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored in your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.

The following social networks are integrated into my site by linked graphics:

Facebook

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://www.facebook.com/policy.php
EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Pinterest

Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
Privacy Policy: https://policy.pinterest.com/de/privacy-policy
EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy Policy: https://policies.google.com/privacy
EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://help.instagram.com/519522125107875
EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Twitter

Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Privacy Policy: https://twitter.com/privacy
EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Whatsapp

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc, 1601 Willow Road, Menlo Park, California 94025, USA.
Privacy Policy: https://www.whatsapp.com/legal/#privacy-policy
EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active

Yummly

Yummly, 165 University Ave, Palo Alto, CA 94301, USA.
Privacy Policy: http://privacy.yummly.com/policy.html
EU-US Privacy Shield: Yummly, through Whirlpool Corporation: https://www.privacyshield.gov/participant?id=a2zt0000000TOWBAA4&status=Active

Facebook plug-in

My website uses the plug-in of the Facebook social network. Facebook.com is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is also operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook.”

Through certification according to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 
Facebook guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in improving the quality of my website.

Further information about the possible plug-ins and their respective functions is available from Facebook at https://developers.facebook.com/docs/plugins/

If the plug-in is stored on one of the pages you visit on my website, your browser will download an icon for the plug-in from Facebook’s servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to my website will also be recorded.

If you are logged in to Facebook while visiting one of my plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Facebook. The information collected may then be assigned to your personal account at Facebook. If, for example, you use the Facebook Like button, this information will be stored in your Facebook account and published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting my website or use an add-on for your browser to prevent the Facebook plug-in from loading.

Further information about the collection and use of data as well as your rights and protection options in Facebook’s privacy policy found at https://www.facebook.com/policy.php

Google Analytics

I use Google Analytics on my website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Through certification according to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

The Google Analytics service is used to analyze how my website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the analysis, optimization, and economic operation of my site.

Usage and user-related information, such as IP address, place, time, or frequency of your visits to my website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to my website and what visitors do once there. This data can also be used to provide other services related to the use of my website and of the internet in general.

Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at https://www.google.com/intl/de/policies/privacy/partners,  including options you can exercise to prevent such use of your data.

In addition, Google offers an opt-out add-on at https://tools.google.com/dlpage/gaoptout?hl=en  in addition with further information. This add-on can be installed on the most popular browsers and offers you further control over the data that Google collects when you visit my website. The add-on informs Google Analytics’ JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein.

Affiliate Links

*) The reference marked with an asterisk (*) is a so-called affiliate link. If you click on such a referral link and shop via this link, I will receive a commission from your purchase. Of course, the price doesn’t change for you! In some cases, when mentioned, you will even profit from a discount when using a special code. Win-win: You benefit from an honest recommendation and sometimes also from a discount – and I might earn a little from it.

Amazon Associates (PartnerNet)

My website participates in the Amazon Associates program, known as PartnerNet in German. This is a service provided by Amazon Europe Core S.à r.l., 5 Rue Plaetis, 2338 Luxembourg, Luxembourg. Advertisements from Amazon.de are placed on my website via the Amazon Associates program. If you click on one of these advertisements, you will be redirected to the corresponding offer on the Amazon website. If you subsequently decide to purchase the advertised product there, I will receive a commission from Amazon.

Amazon uses cookies to allow this service to work. With the help of these cookies, Amazon can verify that you were forwarded from my website to its website.

Amazon offers further information about data protection at this link: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

Dattelbär

My website also participates in the Dattelbär partner program. If you click on one of the Dattelbär-links, you will be redirected to the website of Dattelbär. If you subsequently decide to make a purchase via this link you will profit from a 10 % discount on your first Dattelbär order if you use the code partnerbaer10. And I will receive a commission from Dattelbär, if all sales via my link exceed 300,- Euros per quarter.

Please find further information about how Dattelbär uses your data at this link. This link is in German only. If you don’t understand or can’t translate by yourself, please get in touch with me. https://www.dattelbaer.at/de/datenschutz

The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in ensuring that my commissions are processed and paid by my partners mentioned above.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

Google AdWords with Conversion Tracking

My website uses Google AdWords and conversion tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

I use conversion tracking to provide targeted promotion of my site. The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the analysis, optimization, and economic operation of my site.

If you click on an ad placed by Google, the conversion tracking I use stores a cookie on your device. These so-called conversion cookies expire after 30 days and do not otherwise identify you personally.

If the cookie is still valid and you visit a specific page of my website, both I and Google can evaluate that you clicked on one of my ads placed on Google and that you were then forwarded to my website.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to my website and what visitors do once there. In addition, I receive information about the number of users who clicked on my advertisement(s) as well as about the pages on my site that are subsequently visited. Neither I nor third parties who also use Google AdWords will be able to identify you from this conversion tracking.

You can also prevent or restrict the installation of cookies by making the appropriate settings in your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

In addition, Google provides further information with regard to its data protection practices at
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
in particular information on how you can prevent the use of your data.

Google AdSense

I use Google AdSense on my website to integrate advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active 
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.

Google AdSense stores cookies and web beacons on your device via your browser. This enables Google to analyze how you use my website. In addition to your IP address and the advertising formats displayed, the information thus collected will be transmitted to Google in the USA and stored there. Google may also share this information with third parties. Google states that it will not connect your IP address to other data.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the analysis, optimization, and economic operation of my site.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

In addition, Google offers an opt-out add-on at
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
in particular on options for preventing the use of data.


Source: Model Data Protection Statement for Anwaltskanzlei Weiß & Partner.
I slightly adapted this text according to my needs.