Privacy Policy
Effective Date: [Date, e.g., April 10, 2025]
1. Introduction
Welcome to Green Smoothie King - www.greensmoothieking.com. We take the protection of your personal data very seriously. This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and its associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").
With regard to the terminology used, such as "processing" or "controller," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
2. Data Controller
The controller responsible for data processing on this website is:
Huetten & Lu GbR.
Rurstr. 2
50996 Cologne - Germany
Email: contact@greensmoothieking.com Telephone: 0049 221 3408905
Full details can also be found in our Legal Notice / Impressum:
https://greensmoothieking.com/pages/imprint
3. Data Protection Officer
We are not legally required to appoint a Data Protection Officer and have not appointed one. For any data protection inquiries, please use the contact details provided above.
(Note: If you are legally required to appoint a DPO, replace the above with: "We have appointed a Data Protection Officer: [DPO Name] [DPO Contact Address] [DPO Email] [DPO Phone (optional)]")
4. Overview of Processing Activities
We process personal data in the context of operating our website and providing our services. This includes:
- Providing the online offering, its functions, and contents.
- Responding to contact requests and communicating with users.
- Security measures.
- Reach measurement / Marketing / Advertising (including third-party services like Google AdSense and affiliate programs).
5. Relevant Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. If the legal basis is not mentioned in the privacy policy, the following applies:
- Consent: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR. This is particularly relevant for non-essential cookies, tracking technologies used for advertising (AdSense), affiliate marketing, and analytics. Consent for cookies and similar technologies is also based on § 25(1) TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz).
- Contract Performance & Pre-contractual Inquiries: The legal basis for processing for the performance of our services and the execution of contractual measures, as well as responding to inquiries, is Art. 6(1)(b) GDPR.
- Legal Obligation: The legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR.
- Legitimate Interests: The legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR. Our legitimate interests include the secure and functional provision of our website, analysis for optimization, and responding to general inquiries where no contract or consent applies. Processing based on legitimate interests only occurs if your interests, fundamental rights, and freedoms do not override our interests. Processing of technically essential cookies may also rely on § 25(2) TTDSG.
6. Your Rights as a Data Subject
You have the following rights regarding your personal data processed by us:
- Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether data concerning you is being processed, information about this data, and further information and a copy of the data.
- Right to Rectification (Art. 16 GDPR): You have the right to request the completion of incomplete data or the correction of incorrect data concerning you.
- Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR): You have the right to request that data concerning you be deleted immediately, provided legal grounds apply and processing is not necessary.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to request a restriction on the processing of your data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.
- Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) (public interest) or Art. 6(1)(f) GDPR (legitimate interests), including profiling based on those provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time without giving reasons.
- Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can typically manage consent for cookies and tracking via our Cookie Consent Tool.
- Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes GDPR.
The competent supervisory authority for us in North Rhine-Westphalia is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) Kavalleriestr. 2-4 40213 Düsseldorf Telephone: 0211/38424-0 Email:
Website: https://www.ldi.nrw.de
7. Data Deletion and Storage Duration
The data processed by us will be deleted or restricted in its processing in accordance with Art. 17 and 18 GDPR. Unless explicitly stated otherwise in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory storage obligations (e.g., commercial or tax law retention periods of 6 or 10 years in Germany). If data is not deleted because it is required for other legally permissible purposes, its processing will be restricted (i.e., the data is blocked and not processed for other purposes).
8. Data Processing Activities
a) Website Provision and Server Log Files
- Data Processed: When you access our website, our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes: browser type and version, operating system used, referrer URL (the previously visited page), hostname of the accessing computer (IP address), time of the server request.
- Purpose: Ensuring a smooth connection setup, ensuring comfortable use of our website, evaluating system security and stability, and for other administrative purposes. This data is not merged with other data sources. IP addresses are typically stored anonymized or pseudonymized (e.g., by masking the last octets) after a short period.
- Legal Basis: Our legitimate interest in the technically flawless presentation and security of our website pursuant to Art. 6(1)(f) GDPR.
- Storage Duration: Log files are typically stored for a short period (e.g., 7 to 14 days) for security reasons (e.g., to investigate misuse or fraud) and then deleted or anonymized. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
- Hosting Provider: [Mention your Hosting Provider Name and link to their privacy policy if possible, e.g., "Our website is hosted by Provider XY, Musterstraße 1, 12345 Musterstadt. Their privacy policy: [Link]"] We have concluded a data processing agreement (DPA/AVV) with our hosting provider in accordanceance with Art. 28 GDPR.
b) Contacting Us (Email / Contact Form)
- Data Processed: If you contact us via email or a contact form, the information you provide (e.g., name, email address, telephone number, your message) will be processed.
- Purpose: To process and respond to your inquiry.
- Legal Basis: Art. 6(1)(b) GDPR if your inquiry relates to the initiation or fulfillment of a contract; otherwise, our legitimate interest in efficiently handling inquiries pursuant to Art. 6(1)(f) GDPR, or your consent pursuant to Art. 6(1)(a) GDPR if requested.
- Storage Duration: We delete the data arising in this context after storage is no longer necessary (e.g., once your inquiry has been fully resolved), or restrict processing if statutory retention obligations exist.
c) Cookies
- Description: Our website uses "cookies." Cookies are small text files that are stored on your device via your browser. They do not harm your device. We use cookies to make our offering user-friendly, effective, and secure.
- Types of Cookies:
- Technically Necessary Cookies (Essential Cookies): These are required for the basic operation of the website and cannot be deactivated. They enable core functionalities like page navigation or access security.
- Non-Essential Cookies: These include cookies for statistics (analysis), marketing (advertising, personalization), and external media. These cookies are only set if you give your explicit consent.
- Legal Basis:
- Technically necessary cookies are processed based on our legitimate interest in providing a functional website (Art. 6(1)(f) GDPR) or based on § 25(2) TTDSG.
- All other cookies (e.g., for AdSense, affiliate tracking, analytics) are only used with your explicit consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG).
- Consent Management: We use a Consent Management Platform (CMP) / Cookie Banner to inform you about the cookies used and to obtain and manage your consent. You can withdraw your consent or change your cookie settings at any time via the CMP [Provide link or instructions on how to access the CMP, e.g., "via the 'Cookie Settings' link in the footer"].
- Browser Settings: You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.
d) Google AdSense
- Description: This website uses Google AdSense, a service for integrating advertisements provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdSense uses cookies and web beacons (invisible graphics) that enable an analysis of the use of the website and the delivery of personalized advertising.
- Data Processed: Information generated by cookies and web beacons about your use of this website (including your potentially truncated IP address) and delivery of advertising formats are transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. Google will not merge your IP address with other data stored by you. Google uses the DART cookie to enable ad serving based on users' visits to our site and other sites on the Internet.
- Purpose: Displaying interest-based advertising to finance our website offering.
- Legal Basis: Your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG, obtained via our Cookie Consent Tool.
- Data Transfer: Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, offering a level of data protection deemed adequate by the European Commission for certified companies. Alternatively or additionally, we may rely on Standard Contractual Clauses (SCCs) adopted by the European Commission as safeguards.
- Opt-Out/Settings: You can prevent the installation of cookies by setting your browser software accordingly or by managing your consent via our Cookie Consent Tool. You can also opt out of personalized advertising by Google here: https://adssettings.google.com/authenticated.
- Further Information: Google's Privacy Policy: https://policies.google.com/privacy; How Google uses data when you use partners' sites or apps: https://policies.google.com/technologies/partner-sites.
e) Affiliate Programs / Affiliate Links
- Description: We participate in affiliate programs. If you click on appropriately marked affiliate links on our website and subsequently make a purchase or perform another action on the linked third-party website (partner site), we may receive a commission. To track the success of these links, the partner site may set cookies or use similar tracking technologies (e.g., tracking pixels) on your device when you click the link. These typically store an anonymous ID and information about the click (e.g., time, originating website) but generally no directly identifying personal data unless you provide it on the partner site.
- Data Processed: Clicking the link, potentially cookie ID, time of click, referral source, information about the transaction (if completed).
- Purpose: Tracking successful referrals for commission settlement and optimizing our affiliate marketing activities.
- Legal Basis: The setting of tracking cookies or use of similar technologies for affiliate tracking requires your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG, obtained via our Cookie Consent Tool. The mere placement of the link itself might be based on our legitimate interest (Art. 6(1)(f) GDPR) in financing our site, but tracking requires consent.
- Storage Duration: The lifespan of affiliate cookies varies depending on the specific affiliate program (often 30-90 days).
- Partners: [Optionally list major affiliate partners/networks here, e.g., Amazon PartnerNet, Awin, etc., and link to their privacy policies if possible, or state generally]. When you click an affiliate link, you leave our website, and the privacy policy of the respective partner site applies.
f) Google Analytics
Description: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.1 It provides insights into how users2 find and interact with our website, helping us to understand user behavior and optimize our online presence.
Data Processed: We process the following data through Google Analytics:
- Anonymized IP address (truncated to prevent individual identification)
- Usage data, including pages visited, time spent on pages, click paths, referral sources, browser type, operating system, device type, and screen resolution.
- Approximate geographic location (derived from the anonymized IP address).
Purpose: The purpose of using Google Analytics is to analyze website usage, understand user behavior patterns, measure the effectiveness of our content and marketing efforts, and ultimately improve our website and user experience.
Legal Basis: The legal basis for processing data through Google Analytics is your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG), which is obtained via our Consent Management Platform (CMP).
Provider/Data Transfer/Opt-Out:
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Data Transfer: Data collected through Google Analytics is generally transmitted to and stored on Google servers in the United States. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on4 Google's behalf. Standard Contractual Clauses (SCCs) are in place to ensure an adequate level of data protection for these transfers.
- Opt-Out: You can withdraw your consent to the processing of your data by Google Analytics at any time by adjusting your preferences in our Consent Management Platform. Additionally, you can prevent the collection and processing of your data by Google Analytics by installing the Google Analytics opt-out browser add-on: [Insert Link to Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout?hl=en]. Please note that opting out via the browser add-on may not be effective if you delete your cookies.
9. Data Security
We implement appropriate technical and organizational security measures (TOMs) pursuant to Art. 32 GDPR to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. Measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as controlling access, input, transfer, securing availability, and its separation. This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator.
10. Data Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing/transferring data to third parties, this will only take place if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means, for example, that processing is carried out on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to that of the EU (e.g., through the EU-U.S. Data Privacy Framework for certified US companies) or compliance with officially recognized special contractual obligations (so-called "Standard Contractual Clauses" - SCCs). As mentioned above, services like Google AdSense may involve data transfers to the USA.
11. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit. We recommend that you review this privacy policy regularly.