I. Data protection information according to Art. 13 and 21 GDPR for the website of California Walnut Commission: www.walnuss.de

1. General

We, the California Walnut Commission, take the protection of your personal data and the legal obligations of this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only if the processing is comprehensible for you as the affected person (/data subject), you can be deemed to be sufficiently informed about the intention, purpose and scope of the processing. Therefore, our privacy policy explains in detail which so-called personal data (see definition below 2.1.) we process when using the website www.walnuss.de  or any other Internet sites referring to it.

“Controller” (person responsible) in terms of the General Data Protection Regulation (GDPR), the “Bundesdatenschutzgesetz” – German Federal Data Protection Act (BDSG), and other data protection regulation is:

California Walnut Commission
101 Parkshore Drive, Suite 250
Folsom, CA 95630, USA
+1 (916)932-7070
www.walnuss.de

hereafter referred to as "controller" or "we".

The (responsible) data protection officer is:

California Walnut Commission
101 Parkshore Drive, Suite 250
Folsom, CA 95630, USA
+1 (916)932-7070
info@walnuts.org
www.californiawalnuts.de

Please note that links on our website may lead you to other websites operated by third parties, not by us. Such links are either clearly identified by us or can be recognized by a change of the address bar of your browser. We are not responsible for compliance with data protection regulation and safe handling of your personal data on these websites operated by third parties.

2. Definitions

2.1 According to GDPR

This privacy policy uses the terms used in the wording of the GDPR. The definitions (Art. 4 GDPR) are available for instance at https://dejure.org/gesetze/DSGVO/4.html. The English version is available at https://gdpr-info.eu/art-4-gdpr/

2.2 Cookies

Cookies are text files that are stored or read by a website on your device. They contain letter and number combinations, e.g. reconnect to the cookie-setting site to recognize the user and his preferences, to allow log-in to a customer account, or to statistically analyze a particular usage behavior.

3. General information about data processing

We process personal data only to the extent permitted by law. A transfer of personal data to third parties takes place exclusively in the cases described below (see below 4.).

The personal data is deleted or protected by technical and organizational measures (such as pseudonymisation, encryption) as soon as the data processing purpose ceases to exist. This is also the case if a prescribed storage period expires, unless continued storage of the personal data is needed for the purpose of conclusion or performance of a contract.

Unless we are required by law to store or disclose to third parties (including law enforcement agencies), the decision as to which personal data we collect, how long they are stored and the extent to which you may disclose them, depends on which functions and features of the website you use in individual cases.

4. Data processing in connection with the use of the website

Using the website and its functions and features regularly requires the processng of certain personal data.

4.1 Use of the website for the purpose of information

If you visit our website and use it for information purposes only, e.g. without the use of additional functions or features such as order form or social media plugins, we will automatically collect personal data. These are the following information: IP address of your device as well as date and time of your access to the website. This information is provided by your browser unless you have configured it to prevent the information transmission. In addition, your IP address will be transmitted to third parties whose content is retrieved from their servers for display on our website.

The personal data is processed for the purpose of functionality and optimization of the website and to ensure the security of our information technology systems. This is at the same time our legitimate interest which is why the processing is permitted according to Art. 6 subs. 1 f) GDPR.

The personal data is stored for a period of 4 weeks. We do not share this personal information with other data sources. The data transfer to third parties only takes place, as far as this is necessary for the operation of our website. For this purpose, the personal data will be transferred to the Cekom GmbH Köln and to the DocCheck Medical Services GmbH (under: “nutritionist”). A transfer to a third country or to an international organization is not intended.

4.2 Google Web Fonts

When you visit our website, so-called web fonts are downloaded for the uniform representation of fonts. This content is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). When you visit our website, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. To do this, the browser you use must connect to Google’s Server. As a result, Google is aware that our website has been accessed via your IP address.

The use of Google Web Fonts is for the purpose of a consistent and attractive presentation of our website. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR. Data transfer to the USA is made in accordance with EU Implementing Decision (EU) 2016/1250 (EU-U.S. Privacy Shield).

Your IP address will be collected by us to allow transmission to Google. If your browser does not support web fonts or you disable this feature, there will be no data transfer.

For more information on Google web fonts, visit:
https://developers.google.com/fonts/faq.
Google's privacy policy is available at:
https://www.google.com/policies/privacy/.

4.3 Facebook

appearance of the buttons can be found at: https://developers.facebook.com/docs/plugins/.
This button is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“. When you visit our website, your browser loads the necessary code from Facebook. For this purpose, the browser you are using must connect to the Facebook servers. As a result, Facebook is aware that our website has been accessed via your IP address. At the same time Facebook can store cookies on your device, unless you have prohibited the use of cookies in your browser, or read cookies.

The use of the Facebook plug-in is for the purpose of personalizing our website and allows you to quickly view or comment on individual parts of our website on your Facebook account. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR.

Your IP address will be collected by us to allow transmission to Facebook. You are not obligated to provide this kind of personal data, but use of plugins is not possible without provision.

If you do not want Facebook to associate personal information collected through our website with your Facebook account, you must log out of Facebook before visiting our website. For more information on the purpose and scope of data collection and the further processing and use of personal data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the privacy policy of Facebook, which you can find at: https://www.facebook.com/about/privacy/

4.4 YouTube

Parts of our website use the services of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”) to display video content. When you visit the relevant pages, your browser loads the code required by YouTube for displaying the video. To do this, the browser you use must connect to YouTube’s servers. This will inform YouTube that our website has been accessed via your IP address. At the same time, YouTube can store cookies on your device unless you have prohibited the use of cookies in your browser, or read cookies.

The use of YouTube plug-ins is for the purpose of an attractive design of our website and to enable the presentation of video content. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR. Data transfer to the USA is made in accordance with the EU Commission Implementing Decision (EU) 2016/1250 (EU-U.S. Privacy Shield).

Your IP address will be collected by us to allow transmission to YouTube. You are not obligated to provide this personal information, but the use of the affected parts of our website is not possible without the provision. If you do not want YouTube to associate the personal data collected through our website with your YouTube account, you must log out from YouTube before visiting our website. For more information about YouTube, visit: https://www.youtube.com/intl/de/yt/about/. The YouTube’s Privacy Policy is part of Google’s Privacy Policy which is available at https://www.google.com/policies/privacy/.

4.5 Google Analytics

When you visit our website, the service Google Analytics for statistical evaluation of the use of the website. This service is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). This will inform YouTube that our website has been accessed via your IP address.
By using the extension “anonymizeIp()”, we ensure that Google Analytics transmits only an abridged version of your IP address to Google. Google Analytics uses cookies that are stored on your device, unless you have prohibited the use of cookies in your browser, and allow an analysis on how you use the website. The information generated by the cookie about your use of this online offer is transmitted to Google in the USA and stored there.

The use of Google Analytics is for the purpose of economic optimization and customization of our website. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR. In addition, we have concluded a contract processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. The data transfer to the USA takes place in accordance with the EU Implementing Decision (EU) 2016/1250 (EU-U.S. Privacy Shield).

Your IP address will be collected by us to allow the reduction and then the data transfer to Google. You are not obligated to provide this personal data, use of our website is possible without provision. You can prevent the provision of this personal data by installing the AddOn at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on this link which sets a cookie that prevents data from being transmitted to Google.

For more information about Google Analytics, visit: http://www.google.com/intl/de_ALL/analytics. The Google Privacy Policy can be found at: https://www.google.com/policies/privacy/.

Google Remarketing

Our website integrates Google Remarketing services. The service is provided by Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. This technology will redirect users who have already visited this site through targeted advertising on the Google Partner Network sites. The integration of Google Remarketing allows us to create user-friendly advertising and display interest-based advertising to the internet user.

Google Remarketing places a cookie on the visitor's device. By setting the cookie, Google will be able to recognize the visitor of this website, if he subsequently calls websites that are also members of the Google ad network. With every visit to a website that incorporates the Google Remarketing service, the person's Internet browser automatically identifies with Google. As part of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising.

The cookie is used to store personal information, such as the websites visited by the data subject. Each time you visit the Internet pages, personal data, including the IP address of the Internet connection used by the data subject, are transferred to Google in the USA and stored there.

The processing of this personal data is for the purpose of optimizing our offers and individualized advertising. This also includes our legitimate interests, which is why processing under Article 6 (1) (f) of the GDPR is permitted. Data will be transmitted to Google in the United States in accordance with Commission Implementing Decision (EU) 2016/1250 (EU-US Privacy Shield).
If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie - for example, via a browser setting that generally disables the automatic setting of cookies. Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/.

4.6 Email contact

If you send us an e-mail, the personal data you provided will be processed by us. This information is transmitted by your browser or email client and stored in our information technology systems. The processing of this personal data is necessary for answering your request. In addition, your IP address as well as the data and time of your contact request will be saved.
The purpose of data processing is to answer your request and to ensure the security of our information technology systems.

These processing operations are legitimate because answering your request and the protection our information technology systems are legitimate interests in terms of Art. 6 subs. 1 f) of the GDPR.

The personal data will be stored as long as this is required for answering your request. If your request should lead to a later contract conclusion, the data is stored as long as this is necessary to carry out pre-contractual measures or to fulfill the contract. Thereafter, the personal data is deleted routinely every 4 weeks. We do not share this personal information with other data sources. A data transfer to third parties does not take place. A transfer to a third country or an international organization is not intended. You are not obligated to provide this personal data, but sending an e-mail is not possible without the provision.

4.7 Establishment and use of customer accounts (cookbook login, expert login and login for press releases)

You can open various customer accounts (cookbook login, expert login and press release log-in) on our website. If you do so, the personal data you provide will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of your registration will also be saved. When you log into your customer account, our website places cookies on your device to allow you to stay logged in, even if you need to reload the website in the meantime.

The processing of the personal data you enter serves the purpose of being able to assign future usage transactions to your customer account. This processing is lawful because you have given us your consent in accordance with Article 6 (1) (a) of the GDPR. The storage of IP address and time of registration is required to ensure the security of our information technology systems. This is at the same time our legitimate interest, which is why the processing under Article 6 (1) (f) of the GDPR is permitted.

The personal data entered by you will be stored until your account is terminated by us. IP address and time of registration are stored for a period of 4 weeks. The cookies lose their validity when you log out, otherwise after 4 weeks at the latest. We do not share this personal information with other data sources. A data transfer to third parties does not take place. A transfer to a third country or to an international organization is not intended. You are not obligated to provide this personal information, however, the establishment or use of a customer account is not possible without the provision.

4.8 Subscribing to the newsletter

You can subscribe to a newsletter from us (nutlet letter) on our website. If you do so, the personal data you provide when you register will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of your registration will also be saved.

The processing of the personal data you enter serves to send the newsletter. This processing is lawful because you have given us your consent under Article 6 (1) (a) of the GDPR. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is at the same time our legitimate interest, which is why the processing under Article 6 (1) (f) GDPR is permitted.

The personal data you enter will be stored until your subscription is terminated. IP address and time of registration are stored for a period of 4 weeks. We do not share this personal information with other data sources. A data transfer to third parties does not take place. A transfer to a third country or to an international organization is not intended. You are not obligated to provide this personal information, but subscribing to our newsletter is not possible without the provision.

4.9 Order form

Professionals can order information and advice materials from our website. If you do so, your personal information will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of your request will also be saved.
The processing of the personal data you enter serves the purpose of carrying out the order. This processing is lawful because it is necessary for the implementation of pre-contractual measures in accordance with Article 6 (1)(b) of the GDPR, and the answer to your request a legitimate interest from us under Article 6 paragraph 1 letter f DS-BER is. Storing the IP address and time of the request serves the purpose of ensuring the security of our information technology systems. This is at the same time our legitimate interest, which is why the processing under Article 6 (1)(f) GDPR is permitted.

The personal data you provide will be stored for as long as necessary to complete the order. IP address and time of registration are stored for a period of 4 weeks. We do not share this personal information with other data sources. A data transfer to third parties does not take place. Data transfer takes place only to the extent necessary for the fulfillment of the contract (for example, to shipping companies). A transfer to a third country or to an international organization is not intended. You are not obligated to provide this personal information, but the order is not possible without the provision.

4.10 Mahjong Highscore

You can play Mahjong on our website and then join the Mahjong Highscore. If you participate in the Mahjong Highscore, your personal data (chosen nickname, score, date of the game) will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of your registration will also be saved.
The processing of the personal data you enter is for the purpose of presenting the high score list on our website. This processing constitutes a legitimate interest within the meaning of Art. 6 (1)(f) of the GDPR in order to verify the accuracy / trustworthiness of the participant. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why the processing under Article 6 (1)(f) GDPR is permitted.

The personal data you enter will be stored for as long as necessary to present the highscore list on our website. IP address and time of participation are stored for a period of 4 weeks. We do not share this personal information with other data sources. A data transfer to third parties does not take place. A transfer to a third country or to an international organization is not intended. You are not required to provide this personal information, but you will not be able to participate in the Mahjong high score without the provision.

4.11 Blog with comments and participation in the raffle

You can post comments on a blog post on our website blog, and thus have the opportunity to participate in our raffle. If you do so, the personal data you provide will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of submission of the comment will also be saved.

The processing of the personal data you enter serves the purpose of presenting your comment on our website blog or participating in our raffle. This processing constitutes a legitimate interest within the meaning of Art. 6 (1) (f) of the GDPR in order to check the correctness / trustworthiness of the comment. The storage of the IP address and time of the submission of the commentary serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why the processing under Article 6 (1) (f) GDPR is permitted.

The personal data entered by you will be stored for as long as necessary for the presentation of the commentary and for participation in the raffle. IP address and time of delivery are stored for a period of 4 weeks. We do not share this personal information with other data sources. A data transfer to third parties does not take place. A transfer to a third country or to an international organization is not intended. You are not obligated to provide this personal data, the submission of a comment and participation in the competition is not possible without the provision.

5. Rights of data subjects

You have the right to information under Article 15 of the GDPR, the right to a correction under Article 16 of the GDPR, the right to cancellation under Article 17 of the GDPR, the right to restriction of processing according to Art. 18 GDPR and the right to data portability according to Art. 20 GDPR. The restrictions of §§ 34, 35 BDSG apply to the right of access and the right of cancellation. In addition, there is a right of appeal to a data protection supervisory authority (article 77 GDPR in conjunction with section 19 BDSG).

6. Automated case-by-case decisions including profiling

No automated case-by-case decisions are taken, including profiling.

7.1 Notification obligations of the person responsible

We shall inform all recipients to whom your personal data have been disclosed of any correction or deletion of their personal data or a restriction on the processing under Art. 16, Art. 17 (1) and Art. 18 DS-BER, unless the communication is impossible or is associated with a disproportionate effort.

We will inform you about the recipients, if you request it.

8. Right of opposition

You have the right, at any time, to object to the processing of the personal data concerning you pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from your particular situation. If personal data is processed to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

9. Right of withdrawal your consent to the processing of personal data

According to Art. 7 para. 3 sentence 4 GDPR you have the right to revoke your consent at any time. The legality of the processing carried out on the basis of the consent until the revocation is not affected. Thus, the revocation always applies only to the processing planned after the revocation. The revocation is informally possible by post or e-mail. If you object, we will not process your personal information unless otherwise permitted by law. If, however, a revocation takes place and there is no other grounds for a license, the personal data must be deleted immediately at your request in accordance with Art. 17 (2) (b) GDPR. The revocation can be free of form and should be addressed to:

California Walnut Commission
101 Parkshore Drive, Suite 250
Folsom, CA 95630, USA
+1 (916)932-7070
info@walnuts.org

II. Design notes

Please note that consent, insofar as they are obtained, must be recorded (proof of oblifation, Art. 7 (1) GDPR).

  • To the customer account (cookbook login, expert login and login for press releases): "By registering for the Cookbook Login / Expert Login / Login for press releases, I consent to the processing of my personal data. This consent can be revoked at any time. Further information can be found in the privacy policy. "(Enclosures 1-3)
  • Subscription to a newsletter (Nutletter): “I hereby consent to the processing of my personal data for sending the newsletter (Nutletter). This consent can be revoked at any time. Further information can be found in the privacy policy. "(Annex 4)
  • Blog with comment function: "To submit your comment we process your personal data. Further information can be found in the privacy policy. "(Annex 5)