Data protection4. January 2021 2022-06-15 11:06
Data protection declaration from momentosbox.de
1.1. Who collects personal data
My Tree Gonna Grow UG (limited liability), Managing Director Ms. Fatmata Westerhoff, Gustav-Heinemann-Ufer 58, 50968 Cologne
1.2. Types of data processed:
– Inventory data (e.g., names, addresses).
– Contact details (e.g., email, phone numbers).
– Usage data (e.g. websites visited, interest in content, access times).
– Meta / communication data (e.g. device information, IP addresses).
1.3. Categories of data subjects
Visitors and users of the online offer (in the following, the persons concerned are also collectively referred to as %22users%22).
1.4. Purpose of processing
– Provision of the online offer, its functions and content.
– Answering contact inquiries and communicating with users.
– Safety measures.
– Reach measurement / marketing
2.1. Terms used
“Personal data” in the sense of these data protection provisions are all information that relates to an identified or identifiable natural person (hereinafter “data subject”). This includes in particular your name, your e-mail address [and, if applicable, your address and telephone number]. Personal data also includes information about the use of our website. In this context, we collect personal data from you as follows: Information about your visits to our website, such as The extent of the data transfer, the location from which you access the data from our website and other connection data and sources that you access. This is usually done through the use of log files or cookies. You can find more information on log files and cookies below.
“Processing” is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data. The term is broad and encompasses practically every handling of data.
“Responsible” is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
2.2. Relevant legal bases
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If this is not mentioned, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, for processing in order to fulfill our services and carry out contractual measures as well as answering inquiries, this arises from Art. 6 Para. 1 lit. b GDPR, for processing in order to fulfill our legal obligations, Art. 6 Para. 1 lit. c GDPR, and for processing to safeguard our legitimate interests is Art. 6 Para. 1 lit. f GDPR is decisive. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR as the legal basis.
3.1. Cooperation with contract processors and third parties
If we disclose data to other persons and companies (contract processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is done exclusively on the basis of legal permission (e.g. if the data is transmitted to third parties in accordance with . Art. 6 para. 1 lit. b GDPR is required to fulfill the contract), you have consented to the transmission, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called %22order processing contract%22, this is done in accordance with Art. 28 GDPR.
3.2. Transfers to third countries
If we process data in a third country (outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only take place if it is for Fulfillment of our contractual obligations on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the %22Privacy Shield%22) or compliance with officially recognized special contractual obligations (so-called %22standard contractual clauses%22).
4. Your rights
You have the right to request confirmation as to whether the data relating to you is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with Article 17 DSGVO the right to demand that the relevant data be deleted immediately or, alternatively, to demand a restriction of the processing of your data in accordance with Art. 18 DSGVO.
You have the right to request that you receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.
You also have gem. Art. 77 GDPR the right to lodge a complaint with the competent supervisory authority.
You have the right to revoke your consent in accordance with. Art. 7 para. 3 GDPR to revoke with effect for the future.
For this purpose it is sufficient to send an email to the following address:
You can object to the future processing of your data in accordance with Art. 21 GDPR at any time. The objection can in particular be made against processing for direct marketing purposes. You should address your revocation to us as follows:
per email to:
After you have withdrawn your consent, we will only use your data to provide you with information about our service and we will refrain from sending you further advertising.
5. What data do we collect, process and use and for what purposes?
We only collect, process and use your personal data if you have given us your consent in accordance with Art. 6 Para. 1 letter a) GDPR or if a legal provision allows us to do so. You guarantee that the personal information you provide to us is true, correct and up-to-date according to your current situation.
We need and process your data in particular to fulfill our contractual obligations in accordance with the agreement we have with you and for the following purposes:
Collection, processing and use of data as part of the access to the website as such
If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit.f GDPR ).
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status / HTTP status code
Amount of data transferred in each case
Website from which the request came
Operating system and its interface
Language and version of the browser software
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie (in this case by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies (see b)
Persistent cookies (see c)
Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies. We point out that you may not be able to use all functions of this website.
The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your end device. These objects save the required data regardless of the browser you are using and do not have an automatic expiry date. If you do not want the Flash cookies to be processed, you must install a corresponding add-on, eg %22Better Privacy%22 for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adope -Flash killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
5.2. Collection, processing and use of data within the scope of the services offered by us and described below
As part of the services described below, we offer you the opportunity to use the form we offer to make contact inquiries via the Internet. Please note that in this case you must provide us with personal data relating to yourself in order to use the service. In the following, we would like to explain the personal data to be provided in more detail for your clarification:
Contact request You have the option of sending us a message by email using the contact request form. The information required here is: your first and last name and your email address. You do not need to provide any further personal data to use the contact form. This data is collected for personal identification, processing your request and for technical administration.
6. Deletion of data
The data processed by us will be deleted or restricted in their processing in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.
According to legal requirements in Germany, the storage takes place in particular for 6 years in accordance with § 257 Para. 1 no. 2-3, para. 4 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) as well as for 10 years in accordance with § 147 Para. 1 AO, §§ 257 Abs. 1 no. 4, para. 4, 238 HGB (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
7. Business Processing
We also process
– Contract data (e.g., subject of the contract, term, customer category).
– Payment data (e.g. bank details, payment history)
by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offer.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer based on our legitimate interests in an efficient and secure provision of this online offer in accordance with. Article 6 Section. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).
9. Collection of access data and log files
We, or our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. GDPR data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider .
For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.
10. Transfer of personal data
In principle, we do not pass your personal data on to third parties. Due to legal requirements, however, in exceptional cases we may be legally obliged to disclose user data of visitors to our website to third parties (e.g. to law enforcement authorities if a criminal offense is suspected or if our website is misused). As far as legally possible, we naturally protect your data from any access by third parties in accordance with data secrecy.
11. Consent / Revocation
The applicable statutory provisions, in particular the General Data Protection Regulation, the Federal Data Protection Act and the Telemedia Act are decisive for the use of your data. If you provide voluntary information, you give us your consent to store such personal data. We point out that this consent can be revoked at any time with effect for the future.
You can withdraw your consent either by email firstname.lastname@example.org, using the contact form or by post to: My Tree Gonna Grow UG (limited liability), Gustav-Heinemann-Ufer 58, 50968 Cologne.
12. Provision of contractual services
We process inventory data (e.g. names and addresses as well as contact details of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with. Art. 6 para. 1 lit b GDPR.
The data is deleted after the expiry of statutory warranty and comparable obligations; the necessity of storing the data is checked every three years; In the case of the statutory archiving obligations, the deletion takes place after their expiry. Information in any customer account remains until it is deleted.
13. Contacting us
When you contact us (e.g. by email or via social media), your details will be used to process the contact request and to process it in accordance with. Art. 6 para. 1 lit. b) GDPR processed. The information can be stored in a customer relationship management system (“CRM system”) or a comparable request organization.
We delete the inquiries if they are no longer required. We review the requirement every two years; The statutory archiving obligations also apply.
In the following we would like to inform you about the content of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedure described below.
Consent to receive the newsletter: We only send newsletters with the consent of the recipient or with legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, this is decisive for your consent. Incidentally, our newsletters contain information about our offers and us.
Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This is necessary so that nobody can register with someone else’s e-mail address. The registration for the newsletter is logged in order to be able to prove the registration process in accordance with the legal requirements. This includes saving your registration and confirmation times as well as your IP address. Changes to your saved data are also recorded.
Registration data: In order to register for the newsletter, you have to enter your email address.
The dispatch of the newsletter and the success measurement associated with it is based on your consent in accordance with. Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Para. 2 No. 3 UWG or on the basis of legal permission in accordance with § 7 para. 3 UWG.
Your registration is logged on the basis of our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR. Our interest includes the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of users and also allows proof of consent.
You can cancel the receipt of our newsletter at any time, ie revoke your consent for the future. You will find a link to cancel the newsletter at the end of each newsletter. We can save the e-mail addresses that have been deleted for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims.
In the event that you request early deletion, you must confirm the previous existence of your consent to us.
15. Google Analytics
On the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f GDPR Google Analytics, a web analysis service provided by Google LLC (%22Google%22), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called %22cookies%22, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored by Google on servers in the United States.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use the above information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet. In doing so, pseudonymous user profiles can be created from the processed data.
My Tree Gonna Grow UG (limited liability) only uses Google Analytics with activated IP anonymization, so that the IP address of the users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area is shortened by Google . The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.
The transmitted IP address will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer and from processing this data by downloading and installing the browser plug-in available at the following link: http://tools.google .com / dlpage / gaoptout? hl = de.
Further information on the use of data by Google, setting and objection options can be found on the Google website: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps of our partners %22), http://www.google.com/policies/technologies/ads (%22 Use of data for advertising purposes %22), http://www.google.de/settings/ads (%22 Manage information that Google uses, to show you advertisements %22).
14. Online presence in social media
We maintain an online presence within social networks and platforms in order to be able to communicate with the customers and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection declaration, we process the data of the users as long as they communicate with us within the social networks and platforms, e.g. write articles on our online presence or send us messages.
15. Integration of services and content from third parties
We use content or service offers from third-party providers within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. Integrate services such as videos (hereinafter uniformly referred to as “content”).
This always presupposes that the third-party providers of this content perceive the IP address of the users, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as %22web beacons%22) for statistical or marketing purposes. The %22pixel tags%22 can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, and can also be linked to such information from other sources.
On the basis of our legitimate interests (analysis, optimization and economic operation of our online offer within the meaning of Art 6 Paragraph 1 lit. operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (%22Facebook%22).
The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos or are marked with the addition “Facebook Social Plugin”.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls up the function that contains such a plugin, his device establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to the user’s device, which integrates it into the online offer. In doing so, usage profiles of the users can be created from the processed data. We have no influence on the amount of data that Facebook collects with the help of this plugin.
By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out his IP address and save it. According to Facebook, only an anonymized IP address is saved in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect your privacy can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/.
If you are a Facebook member but do not want Facebook to collect data about you via its online offer and link it to your member data stored on Facebook, you must log out of Facebook before using our online offer and delete the cookies. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info / choices / or the EU page http://www.youronlinechoices.com/.
We embed the videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Data protection declaration: https://policies.google.com/privacy?hl=de, Opt-Out: https://adssettings.google.com/authenticated.
We embed the videos from the “Vimeo” platform from the provider Vimeo, Inc., 9th Floor, White Plains, NY 10601 USA.
Data protection declaration: https://vimeo.com/privacy
Functions of the Pinterest service (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) are integrated on our website. If you click the “Pinterest button” while you are logged into Pinterest, you can link the content of our pages to your Pinterest profile. This enables Pinterest to assign your visit to our website to your user account.
Functions of the Twitter service (Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA) are integrated on our website. By clicking on the Twitter button and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. This data is also transmitted to Twitter.
We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by Twitter. You can find more information on this in Twitter’s data protection declaration at: https://twitter.com/privacy?lang=de
You can ask at any time, free of charge, which personal data we have stored about you. If your data is incorrect, we will be happy to correct it. Please inform us if your data has changed.
Please send information requests, complaints or suggestions regarding our data protection to the following address:
My Tree Gonna Grow UG (limited liability)
or via email