Legal Disclosure

Privacy Policy for the Monsieur Cuisine website (hereinafter referred to as: MC website) and the Monsieur Cuisine app (hereinafter referred to as MC app)

1.    Information regarding the collection of personal data

1.1.    In the following, we inform you about the collection of personal data when using our MC website as well as the MC app. Personal data means any data that relates to you personally, such as name, address, email addresses, user behaviour.

1.2.    The following information applies to the MC website as well as to the MC app. At the end of this statement (Item 16) we refer to specifics that refer exclusively to the MC app.

1.3.    The Controller under Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

HOYER Handel GmbH, Tasköprüstraße 3, 22761 Hamburg, Germany
shopmonsieur-cuisinecom
00800 555 00 888

1.4.    You may contact our data protection officer at datenschutzhoyerhandelcom or our postal address with the addition "The Data Protection Officer".

1.5.    If we involve any external service providers commissioned by us for individual functions of our services, or if we wish to use your data for commercial purposes, we will inform you in detail below about the relevant procedures. In this respect, we will also indicate the defined criteria of the storage period.

2.    Your rights

2.1.    As regards to your personal data, you have the following rights in your dealings with us:

–     Right of access to information,
–     Right to rectification or erasure,
–     Right to restriction of processing,
–     Right to object to processing,
–     Right to data portability.
In order to exercise these rights, you can contact us using the contact information of the Controller (Section 1.3) or Data Protection Officer (Section 1.4) as specified above.
2.2.    Moreover, you have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3.     Objection or withdrawal of consent

3.1. If you have consented to the processing of your data, you may withdraw such consent at any time. Such a withdrawal of consent will affect the permissibility of your personal data being processed, after you have informed us of this.

4.  No obligation to disclose personal data

Neither contractual or statutory obligations nor the conclusion of a contract will require you to disclose any personal data. Any disclosure of personal data is entirely voluntary. A non-disclosure might result, however, in not being able to make full use of our website or to use it at all.

5.    Collection of personal data when visiting our website

5.1.    If you visit the website merely for information purposes, i.e. you do not register or do not transmit information otherwise, we will only collect such personal data that your browser transmits to our server. If you wish to view our website, we will collect the following data that is of technical relevance to us to show you our website and ensure stability and security (the legal basis is Art. 6 (1) sentence 1 lit. f of the GDPR):

–     IP address
–     Date and time of the request
–     Time zone difference to Greenwich Mean Time (GMT)
–     Contents of the request (specific page)
–     Access status / HTTP status code
–    Website from which the request was forwarded
–    Websites accessed by the system of the user via our website
–    Bytes transferred of the requested URL
–    Browser
–    Operating system and its interface
–    Language and version of the browser software.

We save this data for a period of 7 days in what is known as a log file. After that period the data will be erased.

5.2.    In addition to the above data, cookies are stored on your computer when you visit our website. Cookies are small text files that are stored on your hard disk with respect to the browser you use and by means of which certain information is sent to the party that has set the cookie (in this case: us). Cookies are not able to execute programs or transfer viruses to your computer. They serve to make the internet offering more user-friendly and effective.

5.3.    Use of cookies:
5.3.1.    This website uses the following types of cookies, the scope and functionality of which are explained below:
•    Necessary cookies  
•    Cookies for the production of statistics
•    Cookies that analyse your preferences
•    Cookies for marketing purposes


5.3.2.    Necessary cookies guarantee functions that enable you to use our websites as intended. Your consent is not required for the use of mandatory cookies on our website. For this reason, mandatory cookies cannot be deactivated or activated individually.

5.3.3.    Cookies for the production of statistics, for an evaluation of your preferences and for marketing purposes serve to improve our services and marketing measures and are only used with your prior explicit consent.

5.3.4.    You may configure your browser setting as you like and, for instance, refuse to accept third-party cookies or all cookies. Please note that in this case you may not be able to use all functions of this website.

5.3.5. You may modify or completely withdraw your consent to the use of cookies for the production of statistics, for an evaluation of your preferences and for marketing purposes at any time in the cookies settings section.

5.3.6. To be specific, the following cookies are used:

6.    Contact via email

6.1.    When you contact us via email or phone, the data provided by you (your email address, and if appropriate your name, telephone number and message) will be stored by us in order to be able to answer your questions. We will erase the respectively collected data once we no longer require their storage, or restrict their processing if statutory retention obligations exist.

6.2.    We process this data in order to offer you the desired/requested service. The data processing takes place on the basis of a contract (Art. 6 (1) sentence 1 lit. b of the GDPR), to the extent this relates to questions regarding your purchase in our MC accessories shop. For the performance of other customer services and for answering your requests, the data is processed for the purposes of legitimate interests (Art. 6 (1) sentence 1 lit. f of the GDPR) because it facilitates the provision of satisfactory customer consultation.

7.    Creating a user account on the website

You may create a user account in the MC app, on the website www.monsieur-cuisine.com and in the Monsieur Cuisine connect food processor. Registered users may use the following features free of charge:
•    Selection and synchronisation of favourite recipes
•    Illustration and publishing of own recipes (only possible on the website)
•    Commenting on recipes of other users
•    Access to downloadable and printable Monsieur Cuisine cookbooks (only possible on the website)
•    Creation of shopping lists (only possible in the MC app; no synchronisation with your user account takes place)
•    Synchronisation of user accounts between MC app, MC website and MC Connect

During the creation of a user account in the app or on the website we collect the following data:
•     Nickname
•     Email
•     Password
•    Automatically assigned user ID

In addition you may provide the following optional information:
•    profile image
•    appliance type used
•    own recipes (only on the website)
•    own recipes images (only on the website)
•    Comments (optional)
The data collection serves the purpose of allowing you to use the features listed above.

Your password and your email address cannot be accessed by others and they will also not be disclosed to a third party. We will also use your email address  
•    to support you if you experience problems with your user account;
•    to inform you about upcoming changes to our Terms & Conditions of Use or, if required, about changes to our Privacy Policy.
Your favourite recipes cannot be accessed by anyone other than yourself. Your user-generated recipes and comments as well as your nickname and profile photo, if uploaded, may be disclosed to third parties.
The collection and processing of this data is based on the usage agreement concluded when the user account was created and falls under Art. 6 (1) sentence 1 lit. b GDPR.
The data will be processed by service providers of the following categories:
•    Service providers for hosting and infrastructure operations
•    Service providers for support, content editing and administration of user accounts
•    Service providers for the administration of the systems
•    Service providers for email hosting
All data processing takes place exclusively on servers located within the EU.
The data will be stored for as long as your user account remains active. You are always able to delete your user account and all data associated with it in the “My Profile“ section on www.monsieur-cuisine.com website, or in the app’s “Member Area”.   
If you delete your user account as described above, your previously uploaded comments and recipes will only be anonymised and continue to be made available to other visitors to the website and the MC app. If you would like us to delete all of your comments and recipes, please submit this request expressly in a separate email to loeschungmonsieur-cuisinecom. We will then delete all of your recipes and comments.    

8.    Synchronisation of the optional information with MCC

Once you have connected your Monsieur Cuisine connect to the internet and logged in via your user account, your user account will be synchronised, i.e. the favourite recipes stored in your profile on the MC website will be coordinated with the user data already stored to your user account on the MCC, and will there be adjusted for the purpose of further use on your MCC.

This processing is done to fulfil our obligations provided in the usage agreement. The legal basis for that is Art. 6 (1) lit. b GDPR.

9.     Routine erasure and blocking of personal data

We will process and store your personal data only for the period required to achieve the processing purpose or if this is provided for by the European body issuing directives and regulations or any other legislator in laws or regulations to which we are subject. If the processing purpose is cancelled or when a data retention period specified by the European body issuing directives and regulations or another competent legislator expires, the personal data will be blocked or erased routinely and according to the statutory provisions.
 

10.    Mailchimp and Amazon Simple Mail

We send so-called transaction mails to the owners of user accounts. These are emails in which we ask you to verify your email address for a "double opt-in", send you a link to reset your password via the "Forgot Password" function, or inform you of changes to the Terms & Conditions of Use.

We send transactional emails via the services Mailchimp and "Amazon Simple Email Service from the USA. It is necessary to send these emails via a specialised service provider to ensure that they are delivered to your email account and, if possible, to reduce the likelihood that these emails are classified as spam by your email provider. With both service providers we have concluded an order processing contract within the meaning of Art. 28 GDPR. The adequate level of data protection is guaranteed by the use of the EU standard contractual clauses. It is of particular importance for us that you receive transactional emails (e.g. a request for a "double opt in"). The normal way of sending emails e.g. via the PHP script functions of the web server is not a suitable alternative. While taking into account the usual need for data protection, we consider transactional emails to offer an adequate level of protection with regard to the EU standard contractual clauses, which means that consent is not necessarily required.

The legal basis for the sending of these transactional emails is Art. 6 para. 1 (b) GDPR.

11.    Social Media plug-ins

On our website, we provide links to our profile in the following social media: Facebook, Twitter, Instagram, YouTube (Google). Within our website, these links do not set up connections to the servers of Facebook, Twitter, Instagram and YouTube. However, if you click on one of the links, you will be transferred to the respective provider. We are unable to specify, which of your data may then possibly be processed there. Please consult the provider directly; the links to the relevant privacy policies can be found below:

www.facebook.com/about/privacy
help.instagram.com/519522125107875
https://policies.google.com/privacy?hl=de
https://twitter.com/de/privacy

12.    Share buttons

On our website, you can share postings on social media (especially: Facebook). This sharing takes place via transfer to an external link – within our website no connection is established to the Facebook servers via the share buttons. Accordingly, when you access our website, as a matter of principle, data will not automatically be transferred to social networks. Only if you click on the respective button, your internet browser will establish a connection to the Facebook servers, i.e. by clicking on the respective button you consent to your internet browser’s establishing a connection to the Facebook servers and transferring user data to the respective operator of the social network.
Facebook stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is specifically performed (also for users that are not logged in) to display needs-based advertisements and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, but you will have to contact Facebook to exercise this right. Via the Share button we give you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user.
The data are transferred regardless of whether you have an account at Facebook and are logged in there. When you are logged in at Facebook, your data that we have collected on our website will be assigned directly to your existing account with the plug-in provider. We recommend logging out regularly after using a social network, but especially before activating the Share button, as this will prevent the data from being assigned to your profile with the plug-in provider.
For further information on the purpose and scope of data collection and processing, refer to the Facebook privacy policy:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 (a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many social plugins means that your data will be processed outside the EU or EEA. The consent granted by clicking on the button therefore also includes your consent to the processing of your data in the USA by the service provider Facebook in accordance with Art. 49 para. 1 sentence 1 (a) GDPR. The USA is considered by the European Court of Justice as a country with an inadequate level of data protection by EU standards. In particular, there is the risk that your data may be processed by the US authorities for surveillance and monitoring purposes, potentially without any possibility of redress. If you no longer wish for your personal data to be processed by the enabled social plugins, you can prevent any future processing by no longer clicking on the preview image or symbol of the respective social plugin.
 
13.    Embedded YouTube videos

13.1.    We have embedded YouTube videos in our website, which are stored at www.YouTube.com and can be played directly from our website. These have all been embedded in “enhanced privacy mode“, i.e. no data about you as a user will be transmitted to YouTube as long as you do not play the videos. The data specified in paragraph 2 will only be transmitted when you play the video. We have no influence on this data transmission.

13.2.    By playing the videos, YouTube receives the information that you have called up the respective sub-page of our website. In addition, the following data will be transferred

– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Contents of the request (specific page)
– Access status / HTTP status code
– Volume of data transmitted in the specific case
– Website from which the request was forwarded
– Browser
– Operating system and its interface
– Language and version of the browser software

This takes place irrespective of YouTube providing a user account, through which you are logged in, or if no user account exists. When you are logged in at Google, your data are associated with your account immediately. If you do not wish the association with your profile at YouTube, you shall have to log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is specifically performed (even for users that are not logged in) to provide needs-based advertisements and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, but you will have to contact YouTube to exercise this right.

13.3.    Embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 (a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many social plugins means that your data will be processed outside the EU or EEA. The consent granted by clicking on the button therefore also includes your consent to the processing of your data in the USA by the service provider Facebook in accordance with Art. 49 para. 1 sentence 1 (a) GDPR. The USA is considered by the European Court of Justice as a country with an inadequate level of data protection by EU standards. In particular, there is the risk that your data may be processed by the US authorities for surveillance and monitoring purposes, potentially without any possibility of redress. If you no longer wish for your personal data to be processed by the activated social plugins, you can prevent any future processing by no longer clicking on the preview image or symbol of the respective social plugin

13.4.    For additional information on the purpose and scope of the collection and processing of data, refer to the YouTube privacy policy. There, you will also receive further information on your rights and setting options regarding the protection of your privacy: www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

14.    Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called “cookies“, text files that are stored on your computer or mobile device and facilitate an analysis of your use of the website. The information about your use of this website generated by the cookie (including your IP address) is transferred to one of Google’s servers in the USA and stored there. We use Google Analytics only with activated IP anonymisation („anonymize IP“). Thus your IP address will be truncated by Google within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.
Google will use this information to evaluate your use of the website, to compile reports about website activities for the website operator, and to provide other services relating to website and internet use, in particular also functions for Google Analytics reports on performance according to demographic characteristics and interests. With the use of Google Analytics Demographics and Interest Reporting we can process data resulting from the interest-based advertising pursued by Google and/or data from third parties relating to our advertising audience (e.g. age, gender and interests) in connection with Google Analytics for targeted and optimised advertisement activities, strategies and contents of our website.
Google may also pass on this information to third parties insofar as this is required by law or if third parties process this data on behalf of Google. Moreover, it cannot be ruled out that the data is inspected by US authorities.
The following types of data are processed by Google:
•    Online identifiers (including cookie identifiers)
•    IP address
•    Date and time of the visit
•    User data
•    Click path
•    App updates
•    Browser information
•    Device information
•    JavaScript support
•    Pages visited
•    Referrer URL
•    Downloads
•    Flash version
•    Location information
•    Widget interactions
For more detailed information about the data processed please visit https://www.google.com/intl/de/policies/privacy/#infocollect or https://privacy.google.com/businesses/adsservices/.
You can prevent the usage of cookies by selecting an appropriate setting in your browser software; however please note that if you do this, you may not be able to use the full functionality of this website. You can also opt out from the Google Analytics tracking function with effect for the future by downloading and installing the Google Analytics opt-out browser add-on for your current web browser: http://tools.google.com/dlpage/gaoptout?hl=de.

Moreover, by making the appropriate selection in the cookies settings you can prevent the use of cookies.

The IP address that your browser transfers in the framework of Google Analytics will not be associated with other data stored by Google.
In accordance with Art. 6 (1) lit. a GDPR, the legal basis for the processing of personal data described here is your declaration of consent.

For the exceptional cases in which personal data is transmitted to the USA, your consent serves as the legal basis in accordance with Art 49 I sentence 1 (a) GDPR. Please note the following: The USA is considered by the European Court of Justice as a country with an inadequate level of data protection by EU standards. In particular, there is the risk that your data may be processed by the US authorities for surveillance and monitoring purposes, potentially without any possibility of redress. You can revoke your consent to data transfer outside the EU or EEA at any time by selecting the option "Use necessary cookies only" in the cookie settings.

By integrating Google Analytics, we pursue the purpose of analysing the user behaviour on our website and being able to react to it; moreover it enables us to check and optimise the effectiveness of our online advertising activities. This helps us to continuously improve our offering.
For the exceptional cases in which personal data is transmitted to the USA, Google has committed to applying the principles of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Information of the third-party provider: Google Dublin, Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

This website also uses Google Analytics for the cross-device analysis of visitor flows based on a user ID. In your Google customer account under “My Account“ / “Personal info” you may deactivate the cross-device analysis of your use of our website.

15.    Google fonts

This website uses Google Fonts in order to integrate fonts, a service by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. To display our website, we also access Google servers, specifically fonts.googleapis.com and fonts.gstatic.com. In order to display fonts as quickly and efficiently as possible on our website, the access instances are saved by Google and the fonts and specifications of your browser temporarily saved. Google Web Fonts are used in the interests of providing a standardised and attractive presentation of our online services. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. You can find more information on this here: developers.google.com/fonts/faq

16.    ajax.googleapis.com/ jQuery

This website uses the Javascript library jQuery, which optimises loading speeds. Program libraries from Google servers are accessed in this context. The CDN (content delivery network) of Google is used. If you have previously required jQuery on other pages from Google CDN, your browser will access the copy saved in its cache. Otherwise it will be necessary to download the program library, which will pass data from your browser to Google Inc. (“Google”). This transmission takes place on the grounds of legitimate interests in the meaning of Art. 6 (1) lit. f GDPR.

17.    Particularities regarding the use of the MC app

When downloading the mobile app, the required information is transferred to the respective app store, especially the user name, email address and customer number of your account, time of the download, payment information and the unique device code. We have no influence on this data transmission and we are not responsible for it. We process data only to the extent necessary for the download of the mobile app onto your mobile device.

18.    Current version and amendment of this Privacy Policy

This is version 1.2 of the Privacy Policy of the MC website and the MC app.
We develop the MC website and app continuously to be able to provide you with a constantly improving service. This Privacy Policy will be constantly updated and adjusted accordingly if and to the extent required. We ask you to regularly read the contents of our Privacy Policy. We will adapt our Privacy Policy whenever changes to the data processing routines performed by us will require this. We will inform you if such a change requires you to cooperate (e.g. give your consent) or otherwise necessitates an individual notification.