Privacy Policy

If you have any questions about how we use your personal data or this Privacy Policy in general, please contact us at dpo@deugro-group.com. You can also write to us:

ATTN: Compliance – Data Privacy
DEHOCO (Deutschland) GmbH
Nürnberger Strasse 2A – 4
63450, Hanau, Germany

If we are unable to resolve your concerns, you also have the right to contact your local data protection authority.

“Personal Data” refers to any information that may be used, alone or in combination with other information, to identify you.

The types of Personal Data we may collect are listed below:

• When you subscribe to our newsletter, create an account with us or you contact us via the contact form on the website we will collect your name and surname, username, business e-mail address, company name, industry area you operate in and your message and information you choose to share with us via the contact and/or subscription form;
• Details of your marketing preferences, including whether you consent to us sending you marketing communications;
• When you visit our websites, we may automatically collect information through cookies and similar technologies: your IP address, including approximate location, your operating system, browser type and version, screen resolution, HTTP referrer (last web address accessed by your browser prior to loading our website), date and time of access, server/file address of the access, size of access (download volume), access time; You can manage these when you visit our websites. For more information, please see our Cookie Policy
• As part of our business commercial discussions, such as when entering  business partnerships, we need information from our business partners, customers, vendors, service providers to ensure that our contracts are carried out. For example, we need contact details of relevant individuals (such as names, telephone numbers, and email addresses) so that we can communicate with you.
• Based on our anti-corruption and anti-bribery policies, we may conduct due diligence and Know Your Client processes to identify potential risk factors we need to take into consideration. For this, we may process data we request within our due diligence questionnaires and/or that we collect through consultation of information in publicly available databases, internet sources and media news, and other company information databases. More information about the processing of personal data for due diligence processes can be found here: (link to a separate information notice)
• We need your contact data, signature, data regarding your job position and responsibilities (such as: occupation, position, details of your employer or company your legally represent, qualifications) in order to conclude and perform the contract with you or with the company you represent. We may also need additional information, such as bank details so that we may pay for the services you provide (if this is part of the contractual arrangements between us). We may also hold other information that someone in your organization has shared with us from time to time.
• Demographical data, such as your age, gender, country of residence, preferred language, passport number, citizenship, date of birth, to meet our contractual or legal obligations to airport, port, customs, or other regulatory authorities.
• Details of your interactions with us when you contact us by email, by phone or by post using the information listed on the website, for general inquiries or inquiries about public relations.
• If you engage with us on social media, by submitting a comment, a post or sending direct messages on one of our social media platform pages (e.g., an inquiry about our services, products, images/photos or other comments on our Facebook, YouTube, Instagram, LinkedIn pages ), we may collect that comment, post and/or message, including your social media username and any other profile data associated with that comment or post.
• When we organize and carry out marketing events (such as fairtrade events, surveys, webinars, contests or campaigns) and you decide to take part at them, we may process your Personal Data, such as: name and surname, e-mail address, telephone numbers, job position, details of your employer or company you represent;
• To improve our business operations across the company group and to provide better services to our customers, we may approach our business partners by sharing online surveys and inviting you to send your feedback on the services we deliver, as well as on different strategy topics developed by us. Typically, the information in such surveys is collected in anonymized format.
• When you visit our offices, and we provide you internet access or we process certain information about you in order to register as a visitor, which may include: name, surname, e-mail address, phone number, company, position, vehicle registration number, time and date of arrival and departure;
• We may collect personal information about you through your colleagues or, where available, through publicly available sources, such as professional networking websites and general market research;
• We also collect, use, and share aggregated data such as statistical or demographic data for various purposes. “Aggregated Data” refers to information that could be derived from your personal data but which does not directly or indirectly reveal your identity, such as aggregated data relating to all visitors to our website.

This section tells you how and why we use your Personal Data and explains the legal basis we rely on in each case. Please remember that we may not be able to provide the services or products you have requested or fulfill our contractual obligations if you do not wish to share your Personal Data with us.

To the extent permitted by law, we use your Personal Data for the following purposes and based on the following legal grounds:

Consent

We may seek, either directly or through our trusted third parties, your consent to collect and process your Personal Data for a specific purpose. For example, when you choose to subscribe to our e-mail newsletter or to receive direct marketing communications from us to keep you updated about our services and products.

If you have given us your consent to process your Personal Data, you may subsequently withdraw it at any time by contacting us using the details provided in the “How to Contact Us” section or unsubscribe to our communications. This will not affect our ability to rely on your consent for any processing which took place on this basis before you withdrew your consent.

Contractual necessity

In certain circumstances, we may process your Personal Data where it is necessary to enter into a contract with you for the provision of our services or to perform our obligations under a contract.

For example, we may need to process your Personal Data to:

• Store (and update) your contact details in our systems so that we can contact you in relation to our agreements.
• Manage and maintain our relationship with you, including responding to an inquiry, question or comment made by you and providing you with other customer support.

Legal obligations

• send you information required by law regarding your orders or updates to our Privacy Notice or Terms and Conditions;
• comply with applicable legal, regulatory or professional requirements, such as: archiving and keeping records of the contracts and relevant documents; financial/accounting – tax rules; managing claims and legal files, resolving requests and addressing communications from the competent authorities.

Our legitimate interests

• manage our business relationship with you.
• process payments and to prevent fraudulent transactions.
• respond to your requests or comments, including all public relations inquiries.
• send you requests or invitations for feedback, surveys, webinars or marketing events and carry out market research so that we can improve our services or  products  and assess customer satisfaction.
• provide you with relevant content on our website and to measure and understand the effectiveness of the content we offer you.
• administer and protect our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
• use data analytics to improve our website, content, marketing, and user experience.
• prevent and detect unlawful behavior for protecting the Company from fraud, corruption and other illegal activities by conducting due-diligence and Know Your Client processes. For more information about what data we process for this purpose, please check here: Due Diligence Policy
• protect or enforce our legal rights, for example defending the Company in case of legal disputes.

We sometimes share your personal information with third parties. The types of third parties with whom we share personal data are described below:

Other deugro-group entities

We may share your Personal Data with other companies belonging to the deugro-group, including our parent company DEHOCO AG – in Switzerland, who may use your Personal Data for the purposes and in a manner consistent with the information set out in this Privacy Policy. In particular, DEHOCO (Deutschland) GmbH will process some of your Personal Data for analyzing and reporting purposes at global level based on its legitimate interests in developing deugro group’s business.

deugro group companies may disclose your personal data to third parties (such as service providers, agents and public authorities and institutions) if this is necessary for deugro group to lawfully carry out its business activities in accordance with the above purposes and as required and permitted by applicable law.

Service providers

• companies that operate this website on our behalf, including hosting services
• direct marketing companies who help us manage our electronic communications with you. We use MailChimp platform for delivering our newsletters to you and for storing our contact list data bases, when you decide to register to receive our marketing communications by e-mail. To learn more about how MailChimp process your personal data, please click here: Global Privacy Statement | Intuit
• tracking analytics service providers that allow us to manage our social media accounts, engage with our audience, schedule and publish messages, manage our customer care communications and analyze the results of your interactions with us via social platforms like Facebook, LinkedIn, Instagram, YouTube.  You may learn more about how Hootsuite may use your data here: Privacy (hootsuite.com)
• companies providing the tools and services necessary for us to conduct surveys, deploy feedback questionnaires and send online invitations to our customers and business partners.

Third parties, where required by law

We may disclose your personal data to third parties if it is necessary to comply with a legal obligation or the decision of a judicial authority, authority, or government body, or if the disclosure is necessary for national security, law enforcement or other matters of significant public interest.

Business partners

We may disclose your Personal Data to our business partners if it is necessary for providing products or services to you or the company you represent.

Professional advisors

We may share personal information with professional advisors, such as lawyers, auditors, consultants and insurers, when necessary as part of the professional services they provide to us.

Third parties in connection with a company sale

If we make a sale or transfer of assets or are otherwise involved in a merger or a business or asset transfer, we may transfer your Personal Data to one or more third parties as part of that transaction. If a change happens to our business, the new owners may use your personal data in the same way as set out in this Privacy Notice.

Other third parties with your consent

We may also share your Personal Data with other third parties if you consent to such disclosure.

When we share your Personal Data with our affiliated companies or other companies with whom we contract (as described in the section above on Sharing of Your Personal Data with Third Parties), such companies may be located outside the European Economic Area (“EEA”), the United Kingdom or your country of residence, as applicable, in countries with different laws for protection of Personal Data than the laws in your country of residence.

If we transfer your Personal Data outside the EEA, the United Kingdom, or your country of residence, as applicable, we will take steps to ensure that such data will receive the same level of protection as if it was being processed within the EEA, the UK or your country of residence, as applicable. For example, we include Standard Contractual Clauses adopted by the European Commission in our contracts with third parties or our group companies to ensure there are safeguards in place to protect your Personal Data. Please contact us using the details in “How to contact us” for more information about the specific measures we have taken.

DEHOCO (Deutschland) GmbH may onward transfer your Personal Data to third parties located in countries that do not provide an adequate level of data protection. Such transfers will be carried out in accordance with applicable laws, including, where applicable, contractual requirements set out in standard contractual clauses.

We will only keep your Personal Data for as long as reasonably necessary for the purposes set out in this Privacy Policy and in accordance with applicable laws. This may include satisfying any legal, accounting or reporting requirements.

We will take reasonable precautions to protect your personal data against loss, misuse, or alteration. Among other measures, we ensure the security of your Personal Data by means of encryption, password protection and by otherwise restricting access to it.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data as required by law, we cannot guarantee the security of your personal data transmitted to us using unsecured means; any such transmission is at your own risk.

You should also continue to take measures to keep your personal data safe and secure, such as avoiding the use of apparent or predictable user IDs or passwords, changing your passwords with regular intervals, making sure that you have not disclosed your password(s) to anyone else, and that you have not given consent to a third party to have access to your user account and personal data.

You have the following rights with respect to your Personal Data that we process, subject to conditions set out in the applicable laws:

• to request access to your Personal Data (commonly known as a “data subject access request”) and to certain additional information about our processing of your Personal Data that this Privacy Policy is designed to address;
• to request the correction of any inaccurate or incomplete Personal Data;
• to request the erasure of your Personal Data or the restriction of the processing of your Personal Data;
• to object to our processing of your Personal Data;
• to withdraw any consent you have given or unsubscribe from e-mail notifications;
• under certain circumstances to demand data portability;
• to lodge a complaint with your local data protection supervisory authority;
• to contest certain automated decisions we make about you that have legal or otherwise similarly-significant consequences.  We do not typically carry out such automated decision-making but, if we do, we will make it clear where such decisions are being made.

To exercise your rights, please contact us using the contact details listed in the section “How to Contact Us” or by accessing our Data Subject Access Request form here.

Third parties, whose sites you may visit after clicking on a link from our website, may have less stringent privacy policies. We do not have control over these policies and urge you to read their privacy statements before providing any personally identifiable information to such sites.

Supervisory Authorities are independent public authorities that supervise, through investigative and corrective powers, the application of the data protection law. They provide expert advice on data protection issues and handle complaints lodged against violations of the applicable data protection legislation.

Generally speaking, the main contact point for questions on data protection is the Supervisory Authority in the country where company/organization in question is based. However, if that company/organization processes data in different countries or is part of a group of companies established in different countries, that main contact point may be a Supervisory Authority in another country.

For EEA (European Economic Area) countries, find your National Supervisory Authority clicking here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. For Switzerland please click here : Homepage (admin.ch). For the United Kingdom please click here: https://ico.org.uk/ . If you are located outside the EEA and the UK, please contact the data protection authority in your country.

This Privacy Policy was last updated on December 5, 2023. We may change and update this Privacy Policy from time to time. Any changes to our Privacy Policy will be posted on this page. We encourage you to contact us for questions related to how we process your personal data.