Data protection

General information and legal basis
The following statement informs you about what kind of personal data is collected for what purpose on this website by us as the responsible body and to what extent this data is made available to third parties.

Responsible entity:

Good n’ Vegan GmbH

Hauptstraße 66, 12159 Berlin


Legal basis for processing
The processing of personal data requires a legal basis, which we would like to present to you below.

For processing of personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) DSGVO serves as the legal basis. This also includes processing operations that are necessary for the performance of pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) DSGVO serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) DSGVO serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

Log files, hosting
In the server statistics, such data is automatically stored that the browser transmits to us as part of our legitimate interest of analysis and for security reasons (so-called “log files”).

In detail, this is the following data:

language and version of the browser software
Operating system used and its interface
Referrer URL (the previously visited page)
host name of the accessing computer (IP address)
date and time of the server request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (concrete page)
Amount of data transferred
Access status/ HTTP status code.
As a rule, we cannot assign this data to specific persons. We do not combine this data with other data sources. The data is also deleted after a statistical evaluation within 7 days. Data whose further retention is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.

We make use of hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services to maintain the operation of this online offer.

In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

Contractual processing
The personal data provided by you for contractual purposes in the case of, for example, requests for quotations, such as name, address or e-mail address, will only be used internally to answer your inquiries, process your orders or provide you with access to certain contractual information.

When you contact us, e.g. by e-mail, your details will be stored by us in order to answer your questions. As a matter of principle, we do not pass on your data to third parties, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to exist and there are no other legal exceptions to the contrary.

This site uses cookies. Cookies are small text files that are stored on your computer and through which the body that sets the cookie receives certain information. They are used to make the Internet offer more user-friendly and effective or/and to facilitate your navigation on our website.

We set cookies that are not strictly necessary only with your consent. You can revoke this consent at any time for future use.

The consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and altogether, for example, refuse to accept third party cookies or all cookies or delete cookies already stored. If you do not accept cookies, please note that in this case our offer may not work properly. If we do not provide any other information on the individual topics mentioned in this data protection declaration, the lifetime of the cookies refers to 24 months.
You can find out which function on our website sets cookies below under the individual functions.

1. registration
Our website offers a registration option. The personal data entered during registration will be transmitted to the controller. The data is stored exclusively for internal use by us.
During registration, the user’s IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on the data.
The registration of data is necessary for the provision of content or services. Registered persons have the possibility to have the stored data deleted or modified at any time. The person concerned can obtain information about the personal data stored about him or her at any time.

– Disclosure of data to third parties: General and contractual purpose
We pass on data to third parties if this is necessary for the fulfillment of the contract and / or we are legally obligated and / or authorized to do so in individual cases.

1. Payment service providers: PayPal
If you select a payment with the online payment service provider PayPal in the course of your ordering process, your contact details will be transmitted to PayPal through the triggered order. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal is data that is required for order processing, as well as data related to the order, such as number of items, item number, invoice amount.
This transmission is necessary for the processing of your order with the payment method selected by you, in particular for the confirmation of your identity, the administration of your payment and the customer relationship.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. Which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal can be found in PayPal’s privacy policy at

– Transfer of data to third parties: Tools for the economic operation of the website
In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization and economic operation of the online offer. This basically requires that the third-party providers of this content, perceive the IP address of the users, because without the IP address, they could not send the content to their browser. The IP address is thus necessary for the display of this content. Third-party providers may also use so-called pixel tags (invisible graphics, also “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may further be stored in cookies on the user’s device and contain, among other things, technical information similar to log files. We list our service providers below.

If your data is to be used for other purposes, we will inform you in advance and only use the data if you have given your express prior consent.

No other tools from external service providers are currently used.

1. rights of the data subject
You have a right to information about the personal data we have stored about you. According to the legal provisions, you also have the right to correct incorrect data, blocking, data portability and deletion of your personal data. To do this, send us an e-mail with the subject “Data protection”.
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that processing of the personal data concerning you violates the legal provisions.

If you have given your consent, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You may object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for purposes of direct advertising.

1. storage period of personal data
Unless we have provided storage information on the specific points, the following applies: we store personal data for the duration of the respective statutory retention period or as long as the purpose of collection exists. After expiry of the retention period, the data is routinely deleted, unless it is necessary for the initiation or performance of a contract. If user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted as far as possible. Accordingly, the data will be blocked if possible and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.

1. security information
We make every effort to process your personal data by taking all technical and organizational possibilities to comply with the provisions of data protection laws and thus to protect this data. Our website or the communication via our website with us is encrypted via HTTPS.

This privacy policy was provided by the Sieling Law Firm – Fachanwaltskanzlei für IT-Recht.