Privacy policy
Data protection declaration.
I. Preamble
Your personal data is collected, processed and used exclusively in accordance with the legal provisions. Wherever possible, our processes are designed in such a way that data protection requirements are taken into account and personal data are made anonymous so that the data subject cannot or no longer be identified, if this does not compromise the agreed purpose. GAALA MB uses your personal data for the technical management and development of this website, for customer and user management and for marketing purposes in order to inform you about our products.
II. Sources and data used
As part of our customer relations, we process personal data that we have received directly from users and customers of the site.
We save your data which are necessary for the execution of your order, the use of the website and the settlement of payments. This includes personal data such as your address, date of birth (in the case of transactions for which age verification is required) and data required for certain payment methods. The respective order data (article(s), quantity, price, etc.) are assigned to your address.
III. Purpose of the processing and legal basis
The processing of your personal data is carried out in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the French Data Protection Act.
Concerning the fulfilment of contractual obligations (Art. 6 (1) (b) GDMP):
The processing of personal data is carried out in the context of the trade of products in the field of direct sales or through thematic boxes of African-related delicatessen products (theme). The purposes of the data processing are primarily oriented on the concrete product (e.g. physical or digital) and its possible uses or also on the order entrusted to us (e.g. dispatch of the order). You can read further details about the purposes of data processing in the general terms and conditions.
Within the framework of the balancing of interests (art. 6 paragraph 1 f RGPD):
If necessary, we process your data beyond the actual execution of the purchase contract to protect our interests. This includes the control and optimisation of needs analysis processes for the purpose of direct customer contact (sending targeted promotions), advertising or market and opinion research, provided you have not objected to the use of your data for this purpose, the assertion of legal rights and the defence in the event of legal disputes, the guarantee of GAALA MB‘s IT security and IT operations, the prevention and clarification of offences due to an order from a public authority and GAALA MB’s business conduct and product development measures.
On the basis of your consent (Art. 6 para. 1 a GDR):
Insofar as we have your consent to the processing of your personal data for special purposes (e.g. evaluation of data for marketing purposes), the lawfulness of such processing on the basis of your consent is ensured. The consent given may be revoked at any time. Revocation of consent shall not affect the lawfulness of the data processing carried out up to the time of revocation.
Due to legal requirements (Art. 6 para. 1 c GDR) or in the public interest (Art. 6 para. 1 e GDR):
This includes, for example, verification of identity and age. Except as described in detail below, no personal data is processed during the use of this website, i.e. no data is stored, modified or passed on to third parties.
IV. Transmission of data to third countries or international organisations
Data will only be passed on to organisations in countries outside the European Union (so-called third countries) if this is necessary for the execution of your orders. If prescribed by law or if you have not authorised it, GAALA MB does not transmit any personal data to bodies of third States or international organisations.
V. Registration deadlines
GAALA MB processes and saves your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted.
VI. Your rights as a person concerned
Any person concerned by the processing of personal data has the right:
Information (§ 34 BDSG, Art. 15 RGPD),
Of correction (art. 16 RGPD),
Of deletion (§ 35 BDSG, Art. 17 RGPD),
Limitation of treatment (art. 18 RGPD),
Data transferability (art. 20 RGPD) as well as
Revocation (art. 21 RGPD).
However, restrictions (Art. 23 RGPD) apply to the right of information and deletion. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DPA).
VII. Obligation to provide data
As part of your order placed on the site, you must provide us with the personal data that is necessary for the opening and execution of the order and for the fulfilment of the contractual obligations that are linked to it or that we are legally obliged to collect. Without this data, we will not be able to conclude or execute this contract, or the exercise of your legal rights (e.g. warranties) will be jeopardized.
VIII. Automated decision making and personal use of the site.
We do not use fully automated decision making in accordance with Art. 22 GDR for the preparation and execution of an order. If we use these procedures in individual cases, you will be informed separately, insofar as this is required by law. We process some of your data automatically in order to evaluate certain aspects of personal use of the site. We use profiling, e.g. to provide you with targeted information on products and services, or we use evaluation instruments. These allow for communication tailored to needs, including market and opinion research.
IX. Collection of personal data when visiting our website
When you simply use the website for information purposes, i.e. when you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. When you visit our website, we therefore collect the following data which we require from a technical point of view in order to display our website and to ensure its stability and security (the legal basis is Art. 6 para. 1 sentence 1 letter f GDR):
- IP address
- Date and time of application
- Time Zone Difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Volume of data respectively transferred
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the navigation software
- Pages viewed
In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, associated with the browser you are using, and through which certain information is sent to the authority that sets the cookie. One of the purposes of this device is to analyse website performance through the use of cookies, which help us to improve our website by providing us with comprehensive statistics on the number of visitors to a page, the areas of a site that are visited most frequently and the city or location of users. These can be installed by external analysis providers that we hire. These cookies do not identify you personally. Cookies cannot run programs or deliver viruses to your computer. They simply serve to make the Internet offer more user-friendly and efficient as a whole. GAALA MB uses the following types of cookies: temporary cookies and permanent cookies.
Temporary cookies are automatically deleted when you close the browser. These store a session ID with which different requests from your browser can be assigned to the common session. This way your computer can be recognized when you visit our website again. Session cookies are deleted when you log out of the site or close the browser.
Permanent cookies are automatically deleted after a predetermined period of time, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes, e.g. refuse to accept third-party cookies or all cookies. In this case, you may not be able to fully use all the features of this website. Most browsers offer different possibilities to protect your privacy. You can, for example, accept proprietary cookies, but have third-party cookies blocked or be informed each time a website wants to set a cookie. Please note that disabling cookies in this way makes it impossible to install new cookies. You can find instructions on how to manage cookies in the Help function of your browser or in the user manual of your smartphone or the fixed or mobile product with Internet access used.
We also use cookies to be able to identify you when you revisit our site, if you have an account or a separate individual access to our offers.
X. Information on data protection for social plug-ins
Our website does not currently use social network plug-ins (Twitter, Facebook, etc.). If this were to change in the future, the social plug-ins would only start transferring data once you have activated the buttons yourself.
It is then communicated to the social network server which specific pages you have visited on our site. Other data such as, in particular, your IP address is also transmitted to it. We have no influence on the amount of data the social network collects using this plug-in. For more information, please refer to the data protection information of the respective social network, e.g.:
KLARNA:
In order to be able to offer you Klarna's payment methods, we may share your personal data in the form of contact details and order information with Klarna at checkout, so that Klarna can assess whether you can choose the payment methods, as well as to adapt them for you. Your personal data that is shared is processed according to Klarna's own data protection information. Read Klarna’s Privacy Notice.
RAKUTEN:
We partner with Rakuten Advertising, who may collect personal information when you interact with our site. The collection and use of this information is subject to the privacy policy that you can read HERE.
Under the California Consumer Protection Act if you wish to opt-out of your Personal Information being passed to Rakuten Marketing then please click here: OPT OUT
XI. Information on your right of revocation according to Art. 21 of the General Data Protection Regulations (GDPR)
You may at any time revoke your consent to the processing of your personal data given to GAÂLA. Please note that revocation has effect only for the future. Salaries carried out prior to revocation shall not be affected.
Right of revocation on a case-by-case basis
You have the right, for reasons relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out in accordance with art. 6 paragraph 1 e GDR (processing of data in the public interest); this also applies to profiling based on this provision under the terms of art. 4 no. 4 GDR. If you object, we will no longer process your personal data, unless we can justify compelling and legitimate reasons for such processing that are overriding overriding your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
If we base the processing of your personal data on the balancing of interests, you may object to this processing. If you have recourse to such a revocation, we ask you to explain why we should no longer process your personal data as we did before. In the event of a justified revocation, we will examine the situation and stop the processing of your data, adjust it or explain to you the compelling and legitimate reasons why we should continue to process your data.
Right of revocation of data processing for mailing purposes
In special cases, we process your personal data for direct mailings. You have the right to object at any time to the processing of personal data about you for the purposes of such advertising; this also applies to profiling, insofar as it relates to such direct mailings. If you object to processing for mailing purposes, we will no longer process your personal data for these purposes. The revocation is not subject to any formal requirements and should be addressed, if possible, to: contact@gaala.com.
XII. Responsible agency
The company in charge is GAALA MB located at Vilnius m. sav. Vilnius m. J. Savickio g. 4
Your right of revocation (art. 21 RGPD):
You have the right to object at any time to the processing of your personal data in accordance with Art. 6 Para. 1 Sentence 1 (e) GDR or Art. 6 Para. 1 Sentence 1 (f) GDR for reasons relating to your particular situation; this also applies to profiling based on these provisions. We will no longer process these personal data for these purposes, unless we can justify compelling and legitimate reasons for such processing that are overriding overriding your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal rights. If personal data is processed for the purpose of carrying out commercial offers or targeted advertising, you have the right to object at any time to the processing of such personal data for the purpose of such advertising; this also applies to profiling, insofar as it is related to such direct mailings.
You can notify us of your opposition at contact@gaala.com.
