Policy on

Privacy

1/ GENERAL INFORMATION

In this privacy policy, we provide information about how the simplified joint-stock company "ÖKO EUROPE," registered with the Trade and Companies Register (RCS) of DIJON, France, under SIREN number 848 783 015, with its registered office located at ZONE ARTISANALE POUILLY BAS, 9 RUE DE L ARTISANAT, 21560 COUTERNON – France (hereinafter also “we” and/or “our” and/or “ÖKO EUROPE”) processes personal data. In order to provide ÖKO EUROPE’s services and various functions, it is essential that we process certain personal data. Even when you order products, the data required for the purchase and shipment of the goods is processed and, to the extent necessary, transmitted to service providers commissioned by us for the purpose of fulfilling the order. In addition, address and order data are collected and processed for our own marketing purposes. With regard to external marketing purposes, only data whose transmission is permitted under applicable data protection law are transferred.

2/ MANAGER

The data protection officer is: Zin Suh Vansinte Jan. 

3/ PURPOSES OF PROCESSING AND LEGAL BASES

In the following sections, you will find further information regarding the purposes of our processing of personal data and the respective legal bases.

3-1 Log data

Each time you visit the ÖKO EUROPE website, usage data is transmitted by your web browser and stored in log files. The records stored in this way include the following data: the date and time of the visit, the name of the page visited, the IP address, the referrer URL (the original URL from which you arrived at the web pages), the amount of data transmitted, the loading time, as well as information about the browser version and model used. Users’ IP addresses are deleted once they have finished using our pages.


We use these log file records in anonymized form to further improve our services and make them more user-friendly, to detect and resolve errors more quickly, and to manage server capacity (see also section 6). In addition, log file records are used to identify, defend against, and prosecute attacks on our services.


The legal basis for processing log data is our legitimate interest in improving our services, managing our server capacity, ensuring the uninterrupted operation of our services, and complying with our legal obligations regarding IT security.

3-2 Data Processing for the Purpose of Providing ÖKO EUROPE Services

At ÖKO EUROPE, you have the option to create a user account and a personal profile. In order to provide you with these features, we need to process data related to the device you are using as well as personal information, including your gender, first and last name, email address, username, and password.


When you post a comment, recommendation, or review regarding products, brands, and styles, we process the personal data you provide as part of the comment or review.


The information you have entered can generally be managed, updated, and/or deleted in your profile settings.


We use the aforementioned data to provide you with the various features of ÖKO EUROPE, to offer you content tailored to your interests, and to contact you.

To the extent that we process data in order to provide you with various features, the legal basis is the performance of the contract. In order to provide you with offers tailored to your interests, we process data based on the legal basis of “legitimate interest” (we have a legitimate interest in direct marketing to our customers, provided that this remains within the scope of legal requirements regarding data protection and competition). With regard to contacting you, we process data either on the legal basis of “consent” and “performance of the contract” (when you have subscribed to a newsletter) or on the legal basis of “legitimate interest” (when we send you product recommendations by email; see also section 3-5-1 in this regard).

3-3 Data Processing During Online Purchases

In addition, you can order ÖKO water bottles and other products from ÖKO EUROPE for a fee. In this context, we process personal data for the purpose of fulfilling the contract, specifically to process your order, deliver the goods, verify your creditworthiness, process payment, and handle any warranty claims. In this context, we primarily process your first and last names, gender, date of birth, shipping and billing addresses, and email address, as well as your password and phone number, if applicable.


For the purposes of contract fulfillment or billing, your personal data will only be disclosed or otherwise transferred to third parties if necessary for contract fulfillment or billing, or if you have given your prior consent. In connection with the fulfillment of your order, service providers commissioned by us (e.g., logistics and transportation companies).


In addition, we also use the data collected during the performance of the contract or the billing process to provide you with offers tailored to your interests.


To the extent that we process data for the purposes of contract performance or billing, the legal basis is the performance of the contract. In order to provide you with offers tailored to your interests, we process data based on the legal basis of “legitimate interest” (we have a legitimate interest in direct marketing to our customers, provided that this remains within the scope of legal requirements). 

3-4 Initial Contact

ÖKO EUROPE offers several ways to contact us: by email, phone, or mail. When you contact us, any personal data you voluntarily provide will be used solely for the purpose of getting in touch with you and processing your request.


The legal basis for the processing is the performance of the contract or the implementation of pre-contractual measures at the request of the data subject.

3–5 Marketing

When you subscribe to our marketing emails, we use your email address to send you promotional and informational messages. You may withdraw your consent at any time, free of charge, effective immediately, by clicking the unsubscribe link included in each email or by contacting us at info@okoeurope.com.


The legal basis for processing your email address in connection with sending you the newsletter you requested is the performance of the contract.


Marketing messages and notifications (if applicable)

By providing your phone number during checkout, you agree to receive the following via SMS or WhatsApp:

- Information about your order (including reminders about abandoned carts).

- Promotional offers (only if you have checked the corresponding box to give your consent).


You can unsubscribe at any time:

- By following the instructions provided in the message you received ("STOP" or the link provided).

- By contacting us at info@okoeurope.com


When you provide us with phone numbers (yours or those of recipients), this information is used to:

- Ensure that messages are sent and tracked (delivery status and, in some cases, sales status if the purchase is completed).

- Get statistics: for example, whether a link included in the messages has been clicked.


Information (such as phone numbers) is only transmitted to our SMS or WhatsApp service provider when a campaign is sent.

3-6 Other purposes

We also process your data for the purpose of asserting, exercising, and defending our rights; the legal basis for this is our legitimate interest in safeguarding our rights.

4/ SHELF LIFE

In general, we retain your data for as long as necessary to provide this online service or as long as we have a legitimate interest in continuing to retain it (for example, even after a contract has been fulfilled following the processing of an order, we may still have a legitimate interest in using your data for advertising purposes). The only data excluded from deletion is data we need to perform outstanding tasks or to assert our rights and claims, as well as data we are required to retain under statutory retention periods. To the extent that data is not deleted simply because a retention period still applies, our processing of such data is nevertheless restricted, even without your request.

5. COOKIES

We use cookies on various pages to enhance your experience on our website and enable certain features. These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of your browsing session (so-called session cookies). These allow us to display the shopping cart across all pages of the site, where you can see exactly how many items are in your cart and the current total of your purchases.

Other cookies remain on your computer and allow us to recognize your computer during your next visit (so-called persistent cookies). These cookies are used specifically to make our website more user-friendly, efficient, and secure. For example, these files enable us to display information on the page that is tailored to your interests. These cookies are automatically deleted after one year.
To this end, our cookies collect the following information, among other things: session ID, shopping cart hash, wish list hash, user’s origin, types of categories visited, and the last page visited on ÖKO EUROPE.

The legal basis for processing information about our users through cookies is the performance of the contract and our legitimate interest in providing ÖKO EUROPE’s services in a user-friendly and secure manner.
Of course, you can configure your browser so that our cookies are not stored on your hard drive. The Help menu in most web browsers explains how to prevent your browser from accepting new cookies, how to set your browser to notify you when you receive a new cookie, and how to delete or block cookies that have already been received.

To do this, follow these steps:

In Internet Explorer:

  1. From the "Extras" menu, select "Internet Options."
  2. Click the "Data Protection" tab.
  3. Now you can configure the security settings for the Internet zone. Here, you can specify whether and which cookies should be accepted or rejected.
  4. Confirm the setting by clicking "OK."
In Firefox:
  1. From the "Extras" menu, select "Settings."
  2. Click on "Data Protection."
  3. From the drop-down menu, select "Create based on user-defined settings."
  4. You can now choose whether to accept cookies, set how long they are stored, and specify which websites you always or never want to allow to use cookies.
  5. Click "OK" to confirm your settings.
In Google Chrome:
  1. Click the Chrome menu in the list of browser icons.
  2. Now select "Settings."
  3. Click "Show advanced settings."
  4. Under "Data Protection," click "Content Settings."
  5. Under "Cookies," you can configure the following settings for cookies:
    • Delete cookies
    • Always block cookies
    • Systematically delete cookies and website data when you finish browsing
    • Allow exceptions for cookies from certain websites or domains

Please note, however, that in this case, you may not be able to take full advantage of all the features of the website in question.

6. ANALYTICS TOOLS AND INTERNET TECHNOLOGIES

The legal basis for processing your data in connection with all analytics tools and Internet technologies is our legitimate interest in analyzing website activity and the browsing behavior of ÖKO EUROPE users, as well as our interest and the interest of third parties in displaying personalized advertisements tailored to users’ interests.

6-1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files placed on your computer to help analyze your use of the website. As a rule, the information collected by the cookie regarding your use of this website is transmitted to a Google server in the United States and stored there. We have activated an IP anonymization feature on this website; in this regard, your IP address is shortened by Google within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States, where it is shortened.


Google uses this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics and shortened prior to storage is not combined with other Google data. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. Furthermore, you can prevent the transmission of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=fr.

6-2 Retargeting

This website uses retargeting technologies provided by third-party vendors. Retargeting allows us to display targeted ads on our partners’ websites to users who have previously shown interest in our store and our products. Studies show that personalized, interest-based advertising is more appealing to users than ads that lack such a personal connection. Advertisements are displayed as part of retargeting based on a cookie-based analysis of the user’s previous behavior. It goes without saying that no personal data is stored in this process, and it is equally clear that the use of retargeting technology complies with applicable data protection laws. If you do not agree to the display of this type of advertising, you can disable cookies and/or delete existing cookies via your web browser settings. To do so, please follow the instructions described below in section 9. Additionally, you can prevent cookie-based analysis going forward by saving an opt-out cookie on your device in accordance with the following information.

7/ SOCIAL PLUGINS

The legal basis for processing your data in connection with the Social Plugins is the performance of the contract or, where applicable, your consent.

7-1 Facebook, Google, and YouTube

This website uses Facebook and Google Social Plugins (Google+ and YouTube). These are services provided by the U.S. company Facebook and Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)).


When you visit a page that contains such a plugin, your browser establishes a connection with Facebook or Google, and content is loaded from those sites. Your visit to this website may therefore be tracked by Facebook and Google, even if you do not actively use the social plugin feature. If you have a Facebook or Google account, you can use such a social plugin to share information with your friends. TomorrowDog has no influence over the content of the plugins or the transmission of information.


On their websites, Facebook and Google provide detailed information about the scope, type, purpose, and further processing of your data. You will also find further information here about your rights and the settings you can use to protect your privacy.


Facebook's Privacy Policy: https://www.facebook.com/about/privacy.

Google's Privacy Policy: http://www.google.com/intl/de/policies/privacy.

7-2 Instagram

This website also includes plugins from the social media platform Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The Instagram plugin can be identified by the “Instagram” button on our page.

If you click the “Instagram” button while logged into your Instagram account, you can share content from our pages on your Instagram profile. This allows Instagram to associate your visit to our pages with your user account. Please note that we have no knowledge of the content of the data transmitted or how Instagram uses it. For more information, please refer to Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.

7-3 Logout

By logging out of social media sites beforehand and deleting any cookies that have been stored, you can generally prevent social media platforms from associating the information collected about you during your visit to ÖKO EUROPE with your user account on the relevant social media platform. You can also completely prevent the loading of plugins by using browser add-ons, such as the “NoScript” script blocker, which is available at: http://noscript.net.

8. DATA PROCESSING OUTSIDE THE EUROPEAN ECONOMIC AREA

Personal data is not processed in countries that fall outside the scope of Directive 95/46/EC (European Data Protection Directive) or Regulation 2016/679 (General Data Protection Regulation, GDPR), insofar as the service providers mentioned in this privacy policy or third-party suppliers, whose registered offices are located outside the European Economic Area, are not affected. In such cases, we ensure prior to the transfer that the recipient has either an adequate level of data protection (e.g., through the recipient’s self-certification under the EU-U.S. Privacy Shield (“ EU-US Privacy Shield”) or the European Union’s standard contractual clauses with the recipient) or sufficient authorization from our users.


We can provide you with an overview of recipients in third countries as well as a copy of the specific measures agreed upon to ensure an adequate level of data protection. Please refer to the information in sections 3–4.

9. YOUR RIGHTS

If you wish to exercise your rights as a data subject, please submit your request in writing or via text message to customer service at info@okoeurope.com or in writing to ÖKO EUROPE, 25 chemin du Barra, 15000 AURILLAC – France. Please ensure that you provide us with sufficient information to clearly identify you. 

Right of access: You have the right to information regarding the personal data we process about you.

Right to rectification and erasure: You also have the option at any time to have your personal data corrected or deleted, provided the legal requirements for doing so are met. In the event of inaccuracy, we undertake to immediately correct the data stored by us upon your notification. Personal data will be deleted provided that the legal requirements are met, in particular because the purposes for which the data was collected or otherwise processed are no longer necessary, or if such data has been processed unlawfully. Excluded from deletion are only those data we need to perform pending tasks or to assert our rights and claims, as well as data we are required to retain under statutory retention periods. To the extent that data is not deleted simply because a retention period still exists, our processing of it is nevertheless restricted, even without you requesting it.

Right to restriction of processing: You may request that we restrict the processing of your data, provided that the legal conditions for doing so are met.

Right to object to data processing: You also have the right to object to our processing of your data at any time. We will then cease processing your data, unless we can demonstrate—in accordance with legal requirements—compelling legitimate grounds for continuing the processing that override your rights.

Objection to Direct Marketing: You may also object at any time to the processing of your personal data for marketing purposes (“opt-out”). However, this does not apply to data required to fulfill your order. Upon receipt of your objection, we undertake to no longer use, process, or transmit the data in question for purposes other than the fulfillment of your order, and we will cease sending advertising materials.

Objection to data processing where the legal basis is “legitimate interest”: You also have the right to object at any time to our processing of your data, provided that such processing is based on the legal basis of legitimate interest. We will then cease processing your data, unless we can demonstrate—in accordance with legal requirements—compelling legitimate grounds for continuing the processing that override your rights.

Withdrawal of Consent: If you have given us consent to process your data, you may withdraw it at any time with future effect, without affecting the lawfulness of the processing of your data prior to such withdrawal.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority. To do so, you may contact the data protection authority responsible for your place of residence.