Privacy Policy
Privacy Policy
General
- The term “personal data” means all data that can be related to you personally, as defined in Article 4(1) of the UK General Data Protection Regulation (UK GDPR). (The UK GDPR, together with the Data Protection Act 2018, forms the applicable data protection law in England and Wales and is the United Kingdom’s implementation of the EU General Data Protection Regulation.) This includes, for example, your name, address, email addresses, and user behaviour. With regard to other terms – in particular “processing”, “controller”, “processor”, and “consent”– we refer to the legal definitions in Article 4 of the UK GDPR.
- As a matter of principle, we only process personal data insofar as this is necessary to provide a functioning website and the content and services we offer. Personal data is regularly processed only if you have given us your consent (within the meaning of Article 6(1)(a) UK GDPR) or if the processing is permitted by statutory provisions (for example, as set out in the Data Protection Act 2018), in particular under one of the legal bases specified in Article 6(1)(b) to (f) UK GDPR.
- We explain the purposes underlying the processing of personal data in the following sections for each of the data processing operations mentioned. If we process personal data for a purpose other than the purpose for which the personal data was originally collected, we will inform you of this again separately.
- Insofar as we make use of commissioned service providers or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.
- Please note that you are not legally obliged to provide personal data. However, in order to provide some of the functions of our website and the content and services we offer, we sometimes require your personal data. We will inform you about this in detail below. Please also note that if you do not provide us with required data, we may not be able to offer and/or provide you with some of the functions of our website and some of the content and services we offer. However, failure to provide voluntary information will not result in any disadvantages.
- In some cases, we use external service providers for the processing of personal data, whom we have carefully selected and commissioned. These service providers are bound by our instructions and are regularly monitored by us. You will find more detailed information in the following sections of this policy.
- Your personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. In addition, data may be stored if this is provided for by law (for example, under UK law or other applicable regulations to which we are subject); in such cases, the legal basis for further storage is Article 6(1)(c) UK GDPR in conjunction with the respective law or regulation. In these cases, the data will be blocked or deleted when the prescribed storage period has expired. The above does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract; in such cases, the legal basis for further storage is Article 6(1)(b) UK GDPR.
- Insofar as third parties to whom we transfer data have their registered office in a country outside the United Kingdom (UK) or outside the European Economic Area (EEA), we will inform you of this separately in the following sections. We only transfer personal data to such third countries if an adequate level of data protection is ensured, within the meaning of Articles 44 to 49 of the UK GDPR.
Liable Party
The party responsible for data processing (the “controller,” pursuant to the definition of Article 4(7) UK GDPR and under other applicable data protection laws) is:
COMPANY
1 TRIBE ORGANICS LTD (14859594)
Dept 6212a 126 East Ferry Road, Canary Wharf, London, United Kingdom, E14 9FP
Munoz Arans Irina
Your Rights
You have the following rights regarding the personal data concerning you under applicable data protection law (in particular under the UK GDPR):
- The right to information (Article 15 UK GDPR).
- The right to rectification (Article 16 UK GDPR).
- The right to erasure (the “right to be forgotten,” Article 17 UK GDPR).
- The right to restriction of processing (Article 18 UK GDPR).
- The right to object to processing (Article 21(1) UK GDPR).
- The right to data portability (Article 20 UK GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 UK GDPR). In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).
Objecting to or Revoking the Use of Your Personal Data
- You can withdraw any consent you have given for the use of your data at any time. Revoking your consent will influence the lawfulness of processing your personal data after we have received your withdrawal.
- Insofar as we base the use of your data on a legitimate interest (i.e. a balance of interests), you have the right to object to such use. In the event of an objection, we ask you to explain the reasons why we should not process your personal data as we have been. If your objection is justified, we will examine the situation and will either stop processing your personal data, adjust how we process it, or explain our compelling legitimate grounds for continuing to process it.
- Of course, you may object at any time to the use of your personal data for purposes of advertising and data analysis.
- Please send your revocation or objection to the contact details given in our legal disclosure (mentioned above).
Use of Personal Data When Using Our Website for Informational Purposes
- If you access our website without first registering or providing information to us in any other way (“informational use”), we only collect the personal data that your web browser transmits to our server. If you want to view our website, we collect the following data (as it is technically necessary for us to display the website to you and to ensure stability and security):
- IP address
- Date and time of the request
- Time zone (relative to Greenwich Mean Time)
- Content of the request (specific page)
- Access status/HTTP status code
- Volume of data transferred on each request
- Website from which the request originated
- Browser (type and version)
- Operating system and its interface
- Language and version of the browser software
This data is also stored in so-called log files on our servers. These log files do not affect your IP address or other data that identifies you. This data is not stored together with any of your other personal data.
- The collection and temporary storage of the IP address is necessary for our website to be delivered to your device. For this purpose, your IP address must remain stored for the duration of your visit. The storage of the above-mentioned data in log files serves to ensure the website’s functionality and to optimize our website, while also safeguarding the security of our information technology systems. This data is not analyzed for marketing purposes. Our legitimate interest in processing this data lies in the purposes stated above. The legal basis for the collection and temporary storage of the aforementioned data and log files is Article 6(1)(f) UK GDPR.
- The aforementioned data collected for viewing our website will be deleted once the respective session has ended. Data in log files will be deleted after fourteen days at the latest. The collection of the above data for providing the website is absolutely necessary for the operation of the site. There is no option to object to this processing when using our website for informational purposes.
Use of Personal Data in Respect of Cookies
- In addition to the above-mentioned data, we use technical tools for various functions when you use our website – in particular cookies, which may be stored on your device. Cookies are small text files stored on your device’s storage medium (e.g. your hard drive) by a website, and they provide certain information to the party that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your device. When you visit our website (and at any time thereafter), you have the choice whether to allow cookies to be set in general or to choose specific additional functions. You can adjust these settings through our cookie consent tool on your first visit, or later via your browser settings. This website uses the following types of cookies, whose scope and functionality are explained below:
1.1. Cookies stored in your web browser:
- Transient cookies: These cookies are automatically deleted when you close your web browser. In particular, these include session cookies. Session cookies store a so-called session ID, which assigns various requests from your browser to the same session. This allows us to recognize your device when you return to our website. Session cookies are deleted as soon as you log out or close your browser.
- Persistent cookies: These cookies remain on your device for a predefined period of time, which can vary depending on the cookie. You can delete these cookies at any time in your browser’s settings.
- Other technologies: These functions do not rely on standard cookies, but on similar technical mechanisms such as Flash cookies, HTML5 storage objects, or analysis of your browser settings. You can likewise consent to or reject these technologies via our cookie settings.
1.2. Additional information stored by cookies: Cookies also store certain settings and information, such as your language selection (for multilingual support) or search terms you have entered (for our search function). Details of the cookies we use can be found on the relevant page of our website dedicated to cookies.
- The processing of personal data by these cookies serves the following purposes:
2.1. Technically necessary cookies: The technical infrastructure of our website requires us to use certain techniques (especially cookies) to provide the service properly. Without these cookies, our website cannot be displayed or used correctly, and some functions may fail. For example, some features of our site require that your browser be recognized even after a page change. In such cases, we typically use transient cookies that are deleted after your website visit ends or, at the latest, when you close your browser. You cannot opt out of these strictly necessary cookies if you wish to use our website, as they are essential for its operation. (The individual cookies in this category are listed on our website’s cookies page.) Our legitimate interest in processing data via these technically necessary cookies lies in the purposes described above. The legal basis for this processing is Article 6(1)(f) UK GDPR.
2.2. Optional cookies (with your consent): We use various cookies only after obtaining your explicit consent. You can choose these optional cookie functions during your first visit through our cookie consent tool. These cookies are only activated if you consent. We use these cookies, for example, to analyze visits to our website in order to improve our website and individual functions, to enhance the user experience (e.g. by making the site easier to use across different browsers or devices), to recognize you upon return visits, or to serve advertising (possibly including tailoring ads to your interests, measuring ad effectiveness, or showing interest-based advertising). The legal basis for processing data with these cookies is your consent under Article 6(1)(a) UK GDPR. You may revoke your consent at any time, which will affect future processing (but does not retroactively affect the lawfulness of processing before revocation). The specific functions we use (which you can view and manage via the consent tool), as well as details about the cookies, data processed, and purposes for processing, are described in detail in our cookies information on our website.
- The cookies mentioned above are stored on your device and transmit data to our server. You can fully control the use of cookies through your browser settings. For example, you can configure your browser to reject third-party cookies or all cookies. Please note that if you disable cookies entirely, you may not be able to use all functions of our website without issues. If you want to prevent data from being processed by Flash cookies, you will need to adjust the settings in your Flash player or use a browser add-on (for example, the “Adobe Flash Killer Cookie” extension for Google Chrome, or the “Better Privacy” extension for Mozilla Firefox). If you want to prevent the use of HTML5 storage objects, you can use your browser in private mode (if available). In addition, we recommend that you manually delete cookies and your browser history on a regular basis.
Further Functions and Services of Our Website
- In addition to using our website for purely informational purposes, we offer various other functions and services that you may use if you are interested. To use these additional services, you will generally need to provide additional personal data. We will use that data to provide the respective service, and the data processing principles outlined above will also apply to such data.
- We collect web traffic data (for example, page views, downloads, and other user actions) within our portal and mobile apps. For this purpose, we record, among other things, the content involved, the time of the action, as well as a user ID and/or session ID or device ID. This enables us to track various actions taken on our platform across devices, even if users are not logged in.
- A user’s location is transmitted during certain actions in the app (for example, when recording travel tracks, performing a proximity search, or loading the map). For logged-in users, these locations — including the user ID, device ID, timestamp, and any other provided information — are also stored beyond the immediate request. The collection of this data is necessary to enable certain personalised services (e.g. personalized recommendations and notifications) and to gain a more accurate understanding of the impact of various measures on our platform (for example, A/B testing different features). Furthermore, this data is used to provide our B2B partners with an overview of activity in their region (for example, via a heat map); however, any data shared in this context is completely anonymised. By using our service, users consent to the aforementioned use of their data.
- For some personalised services and analyses, location data and web traffic data are combined – including across different devices (for example, combining recorded tracks in a specific region with general web traffic in that region).
- We use external service providers to handle some of your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly audited for compliance.
- In cases where personal data is passed on to third parties as part of providing our services in conjunction with partners, you can find more detailed information in the descriptions of those individual services below (in this privacy policy or on our website).
- If these third parties are based in a country outside the United Kingdom (UK) or outside the European Economic Area (EEA), you can find more information about the implications of such international data transfers in the descriptions of the individual services provided below. (We will ensure that any transfer outside the UK or EEA is done in compliance with applicable data protection requirements, such as by using appropriate safeguards.)
Contact
- If you contact us by email, the personal data you provide to us in that email will be stored. This data will be used solely to respond to your inquiry or request. We will not transfer this data to third parties.
- The processing of the personal data described above serves only to handle your inquiry. Our legitimate interest in processing this data lies in our need to respond to your message (the purpose stated above). If you have given us your consent, the legal basis for processing this data is Article 6(1)(a) UK GDPR. Additionally, if your email inquiry implies the initiation or performance of a contract, the further legal basis for processing your data is Article 6(1)(b) UK GDPR. In other cases, where processing is necessary for our legitimate interests in effectively communicating with you, Article 6(1)(f) UK GDPR may serve as a legal basis.
- The data from your inquiry will be deleted once it is no longer required to fulfill the purpose for which we collected it. Typically, this means we will delete your data after we have completely addressed and resolved your inquiry or request.
- You can withdraw your consent to our processing of your personal data at any time, if you had provided one. You can also object at any time to the storage or use of your personal data for contacting you, for example if you no longer wish to be contacted by us. However, please be aware that if you withdraw consent or object to processing of data necessary for correspondence, we may not be able to continue handling your inquiries. Please send any notice of withdrawal of consent or objection to the contact details provided in our legal disclosure.
Registration
- In order to use additional functions of our website, we provide the option for you to register an account by providing personal data. When registering, you enter data into an input form which is transmitted to us and saved. The information that is mandatory for registration is marked as such on the form and must be provided in full; otherwise, we will not be able to register you. Any additional information you provide is voluntary. As part of the registration and login process, we obtain your consent to process this data. The data will not be passed on to third parties during the registration process. (If you choose to register or log in via a third-party single sign-on service, please see the relevant section of this privacy policy for information on how your personal data is handled in that context.)
- Registration is required to access certain content and services on our website that are only available to registered users. We use the data you provide during registration to deliver the products and services you sign up for. In the event of any important changes to our products, services, or offerings (for example, changes in scope or necessary technical updates), we will inform you at the email address provided in your registration. The legal basis for processing the data in such cases is your consent under Article 6(1)(a) UK GDPR. Insofar as registration is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, Article 6(1)(b) UK GDPR serves as an additional legal basis. If we process the data in the context of our legitimate interests (for example, to ensure the security of our service or the integrity of user accounts), Article 6(1)(f) UK GDPR provides a further legal basis.
- You can withdraw your consent at any time with future effect. The lawfulness of any data processing that has already occurred remains unaffected by the withdrawal of consent.
- The data collected during registration will be deleted as soon as it is no longer required for the purpose for which it was collected. If you cancel your registration or your user account is deleted or changed, the data associated with your account will be removed, provided that no statutory retention requirements apply. You can cancel your registration at any time by contacting us, or via the account settings if available. You can also change or update the personal data stored for your account at any time. (Statutory retention periods — for example, those required by financial or commercial laws — remain unaffected by a deletion of your account or personal data.)