data protection
Welcome to the website of Naturally Naughty . As the responsible body according to the General Data Protection Regulation, we are obliged to comply with the legal provisions on data protection. Of course, the protection of your personal data and fair and transparent data processing are important to us. In the following we would like to provide you with all the information you need to check and exercise your data protection rights.

1 Who is responsible for data processing?
Responsible is:

c/o KitchenTown Mollstrasse 32
10249 Berlin
Germany

ginger@naturallynaughty.love

2 How can I contact the data protection officer?
You can reach our data protection officer at:

3 Process for what purposes and on what legal basis
we personal data?

If you are a Naturally Naughty customer, create a customer account with us, participate in sweepstakes or bonus campaigns or otherwise contact us, we will receive personal data from you.

In general, we process data based on the following legal bases:
According to Art. 6 Para. 1a DSGVO, if you have given us your express consent to
authorize data processing, e.g. if we may contact you by telephone for advertising purposes or for customer satisfaction inquiries;
According to Art. 6 Para.1b GDPR, if we need to fulfill our contractual obligations
Obligations to act, e.g. when we use your e-mail address to
to confirm the delivery date of your next grocery box;
According to Art. 6 Para.1c GDPR, if we take action to fulfill legal obligations, e.g. if we check your age and identity before concluding the contract;
according to Art. 6 Para. 1f DSGVO, if we process your data on the basis of a legitimate
process the interests of us or third parties, e.g. if we use your e-mail address
use to send you our newsletter, or for advertising-optimized
design of our website.

3.1 Data processing on our website
Our website uses the shop provider Shopify (www.shopify.com). You can find their privacy policy here: https://www.shopify.com/legal/privacy

3.1.1 Shipping your orders / customer account
We are happy that we can deliver to you. When you place your order, you can create a customer account with us. In order to be able to deliver the products to you as requested, we store your contact details, your order and delivery time, as well as payment information. You can voluntarily leave your phone number so that we can contact you if there are delays or problems with the delivery. We can also use your telephone number for advertising purposes within the scope of your consent given when the contract was concluded (please refer to Section 10, Paragraph 1 of our General Terms and Conditions for the exact scope of your consent). You can revoke your consent at any time in accordance with Section 10 (3) of our General Terms and Conditions.

3.1.2 Payment for the Products
Depending on the payment method you have selected, your payment data will be transmitted to the appropriate payment service provider. The payment service provider is responsible for your payment data. Information in particular about the responsible body of the respective payment service provider, the contact details of the data protection officer of the payment service provider and the categories of personal data processed by the payment service provider can be obtained from the following addresses:

· PayPal (Europe) S.à.rl et Cie., Luxembourg, privacy policy:
paypal.com/de/webapps/mpp/ua/privacy-full

3.1.3 Contacting Us
You can ask us questions and send us messages via the contact form, our e-mail address, telephone number or our chat. In this context, we only process your data in order to communicate with you
to contact you in the desired way and to answer your inquiry.

3.1.4 Participation in Sweepstakes
If you participate in one of our competitions, we collect data that
implementation of the sweepstakes are required. These are usually a
individual competition entry (e.g. a comment or a photo), as well as your name and your contact details. It is possible that we send this data to our
Submit lottery partners, e.g. to send you the prize.
Data processing and data transfer can vary depending on the competition and is therefore specifically described in the respective conditions of participation. The
Participation in the competition and the associated data collection
of course voluntarily.

3.1.5 Dispatch of our newsletter
With us you have the opportunity to get involved in various ways
register for our newsletter, e.g. when you register, on our
home page. Advertising information will only be sent to your e-mail address as part of our newsletter if you are an existing customer or have consented to the use of your e-mail address for this purpose. You can of course revoke your consent to the sending of newsletters in both cases at any time, e.g. by clicking on the unsubscribe link in the newsletter, updating the communication settings in your customer account, or by sending a message to gingwer@naturallynaughty.love the provider Klaviyo (www.klaviyo.com). You can find their privacy policy here: https://www.klaviyo.com/privacy/dpa

3.1.6 Other advertising by Naturally Naughty
Naturally Naughty uses the e-mail address and postal address provided by the customer to provide information by e-mail and post about its own similar product and service offerings. If you do not wish to receive any further advertising information by e-mail or post, you can object to the use of your contact data for advertising purposes at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic tariffs. In addition, you may receive advertising information by telephone, since you gave us your express consent to this during registration (see Section 10 (1) of our General Terms and Conditions). You can also give this consent
of course revoked at any time.

You can submit your revocation in the following way: by telephone
0173 5666509 or in writing (Naturally Naughty GmbH, Mollstrasse 32

In addition, with regard to subscribing to the newsletter, it is possible to change the communication preferences in the customer account area at any time if you have an existing customer account.

3.2 Will my usage data be used for purposes
processed for website optimization and usage-based online advertising?
Naturally Naughty uses cookies with the help of which pseudonymous usage profiles are created in compliance with legal requirements, but also to make the use of our website as optimal as possible. We can evaluate the usage profiles in order to understand how our website is used, to determine target groups for our products and thus to optimize our offers. When we create pseudonymous usage profiles, we do not associate this data directly with you and therefore cannot trace any specific activities back to you. Cookies are small text files that are stored on your computer when you visit our website and enable your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or the entries you made there. This avoids having to re-enter all the necessary data each time you use it. Cookies also enable us to recognize your preferences and to tailor our website to your areas of interest. Most browsers accept cookies automatically. If you want to prevent the storage of cookies, you can select "do not accept cookies" in the browser settings. You can find out how this works in detail
Refer to your browser manufacturer's instructions. Cookies already on your
computers are stored, you can delete them at any time. However, we would like to point out that our website may only be usable to a limited extent without cookies. Alternatively, you can prevent the collection and forwarding of your data (in particular your IP address) and the processing of this data by using the

Disable execution of Java Script in your browser or a tool like
For example, install "NoScript". In addition, you can opt out of the use of cookies by third parties by visiting the Network Advertising Initiative opt-out help. However, we and the providers continue to receive statistical information on how many users have visited our website and when. We would like to explain individual services to you in more detail below:

3.2.1 Google Analytics
Our website uses Google Analytics, a service provided by Google Ireland Limited,
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics enables us to evaluate your use of the website, to compile analyzes of website activity and to use other services related to website activity and internet usage. We would like to point out that on this website Google Analytics has been expanded to include the code "gat.anonymizeIp();" in order to ensure anonymous recording of IP addresses (so-called IP masking). Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be sent to a server

Transferred to Google in the USA and shortened there. Those within the framework of Google
Analytics provided by your browser IP address is not combined with other data
merged by Google. More information about
Terms of Use and Privacy Policy can be found
at https://www.google.com/analytics/terms/de.html or
at https://www.google.de/intl/de/policies/.
In addition to the options already mentioned, you can also enable the collection of
Prevent data from Google by downloading and installing the browser add-on. By clicking the following link, an opt-out cookie will also be set, which will prevent your data from being recorded in the future when you visit this website
Website blocked: Disable Google Analytics.

In addition, we use the Google service in connection with Google Analytics
conversion tracking. This allows us to change the behavior of our
to record website visitors. For example, we are shown how often this
contact form has been filled out. It also shows us how many clicks on
Ads from external sources (AdWords, LinkedIn, Xing, Bing) on ​​ours
have maintained a website.

3.2.2 Facebook Custom Audience Pixels
This website uses Custom Audience Pixel, a service provided by Facebook Inc., USA. Custom Audience Pixel is a Java script code that we have integrated on each of our websites. We use Custom Audience Pixels to collect information about how visitors use our website. This pixel collects and reports to Facebook information about the user's browser session, a hashed version of the Facebook ID and the URL being viewed. Every Facebook user has a unique and device-independent Facebook ID, which enables us to address and recognize users across multiple devices on the social network Facebook, so that we can address our visitors again as part of Facebook ads for advertising purposes . After 180 days, the user information will be deleted until the user visits our website again. Therefore, no personal information is disclosed to à la chef about the individual website visitors and we can only target website customer groups in advertisements as soon as they have reached a significant number in terms of numbers. For more information about Facebook and its privacy settings, please refer to the privacy policy and terms of use of Facebook Inc.

4 Will my data be transmitted to third parties?
With it Naturally Naughty can process your data in accordance with the purposes described above, it may be necessary for other recipients to be able to view and process your data.

4.1 External service providers (processors)
Your data will be passed on to service partners if they work on our behalf and support Naturally Naughty in providing its services. For example, we commissioned a service partner to send out our newsletter.
Processing of your personal data by commissioned service providers
takes place within the framework of order processing in accordance with Article 28 GDPR.

4.2 Other service providers, partners and third parties
Naturally Naughty may work with other partners if it is necessary to fulfill our range of services or if we are legally obliged to release data. These may be, for example, the following partners or third parties:
Transport company (for orders)
· Partner companies in the field of production
· Partner companies in the field of customer verification
· Partner companies in the field of data storage and processing as well as the
Sending emails and other (electronic) messages
· Partner companies that provide certain IT services, such as customer management and
Offer customer feedback solutions
· Partner companies for sending newsletters
· Partner companies in the field of marketing
· Partner companies for the implementation of sweepstakes
· Credit institutions and payment service providers
· Partner companies in the field of receivables management
· Social networks
· Disclosure to public authorities or by court order

5 Will my data be processed outside the EU/EEA and how is data protection ensured?
We value processing your data within the EU/EEA. It can
However, it may happen that we use service providers who process data outside of the EU / EEA. In these cases, we ensure that an adequate level of data protection is established before the transfer of your personal data. This means that a data protection level that is comparable to the standards within the EU is achieved via EU standard contracts or an adequacy decision such as the EU-US Privacy Shield.

6 How long will my data be stored?
We delete personal data of the person concerned as soon as the purpose of storage no longer applies and statutory retention periods do not prevent deletion. At home office catering à la chef we usually delete data as follows:
· Applicant data: no later than six months after receipt of the application
· Contract data: after cancellation of a Naturally Naughty subscription, provided that there are no legal retention periods, eg from the Commercial Code or the Tax Code, to the contrary. These retention periods can be up to 10 years in individual cases

7 What rights do I have and how can I assert them?
Every customer or any other person affected by data processing has the right to information under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to deletion under Article 17 GDPR, the right to
Restriction of processing according to Art.18 GDPR, the right to object
from Art. 21 GDPR and the right to data portability from Art. 20 GDPR.
The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to the competent data protection supervisory authority.

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of
Declarations of consent that were given to us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. You can submit your objection and/or your revocation in the following way: by telephone (0173 5666509), in writing (Naturally Naughty GmbH, c/o KitchenTown Mollstrasse 32, 10249 Berlin) or via our contact form at www. naturallynaughty.store

If you no longer wish to receive our newsletter, you can unsubscribe at any time
the option of unsubscribing from the newsletter by clicking on the unsubscribe link at the end of each newsletter.