Data protection

1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.

1.2 The person responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is "Planet A Foods GmbH, Fraunhoferstr. 11a, 82152 Planegg, +498941999850, hello@choviva.com". The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2.1 When you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:

• The website you visited
• Date and time of the access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Used browser
• Used operating system
• Used IP address in anonymized form

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used otherwise. However, we reserve the right to retrospectively check the server log files if concrete indications of unlawful use come to our attention.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the padlock symbol in your browser's address bar.

To make your visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and enable us to store page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings of your web browser.

If certain cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of a contract, Art. 6 para. 1 lit. a GDPR in case of given consent, or Art. 6 para. 1 lit. f GDPR for our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the visit to the website.

You can configure your browser to inform you about the setting of cookies and individually decide on their acceptance or to exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

Google Analytics
This website uses "Google Analytics," a service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for analyzing user usage of the website. The service uses "cookies" - text files that are stored on your device. The information collected by the cookies is typically sent to a Google server in the USA and stored there.

IP anonymization is active on this website. The IP address of users is shortened within the member states of the EU and the European Economic Area. This shortening removes the personal reference from your IP address. As part of the agreement on order data processing that website operators have concluded with Google Inc., this service uses the collected information to evaluate website usage and activity and provides services related to internet usage.

You can prevent the collection of information generated by cookies (including your IP address) by Google Inc. and the processing of this data by Google Inc. by using a browser plugin. The following link will take you to the appropriate plugin: https://tools.google.com/dlpage/gaoptout?hl=en. You can find further information about data usage by Google Inc. here: https://support.google.com/analytics/answer/6004245?hl=en.

4.1 IWhen contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of processing and responding to your inquiry, to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims to conclude a contract, Art. 6 para. 1 lit. b GDPR additionally constitutes a legal basis for processing. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that there are no legal retention obligations.

5.1 Signing up for our Email Newsletter

When you sign up for our email newsletter, we regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For newsletter distribution, we use the double opt-in procedure, which ensures that you only receive newsletters after confirming your consent to receive the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this process, we store your IP address as well as the date and time of registration, as entered by your internet service provider (ISP), to be able to trace any potential misuse of your email address at a later point in time. The data collected from you during the newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a corresponding message to the aforementioned controller. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or if we reserve the right to use your data for other purposes that are legally allowed and that we inform you about in this statement.

The sending of our email newsletters is carried out through the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we provide the data you provided during newsletter registration. This data transfer is based on Article 6(1)(f) of the GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is typically transferred to a MailChimp server in the USA and stored there. MailChimp uses this information to send the newsletter on our behalf. MailChimp does not use the data of our newsletter recipients to contact them directly or share with third parties. To protect your data in the USA and to enable the transmission of your personal data to MailChimp, we have concluded a data processing agreement ("Data Processing Agreement") with MailChimp based on the standard contractual clauses of the European Commission. This data processing agreement can be viewed at the following internet address: https://mailchimp.com/legal/data-processing-addendum/. You can view MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/.

5.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those you have already purchased, from our range by email. According to § 7(3) of the German Unfair Competition Act (UWG), we are not required to obtain a separate consent from you for this purpose. The data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. For this, you will only incur transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

6.1 The applicable data protection law grants you the following rights as the data subject (rights to information and intervention), with reference to the legal basis specified for each exercise requirement:

• Right to information according to Article 15 of the GDPR;
• Right to rectification according to Article 16 of the GDPR;
• Right to erasure according to Article 17 of the GDPR;
• Right to restriction of processing according to Article 18 of the GDPR;
• Right to notification according to Article 19 of the GDPR;
• Right to data portability according to Article 20 of the GDPR;
• Right to withdraw consent granted pursuant to Article 7(3) of the GDPR;
• Right to lodge a complaint according to Article 77 of the GDPR.

6.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE ONGOING RIGHT TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

In the case of processing personal data on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR, the data in question will be stored until you revoke your consent.

If there are legal retention periods for data that is processed in the context of contractual or similar legal obligations based on Article 6(1)(b) of the GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer necessary for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest on our part in continued storage.

In the case of processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

In the case of processing personal data for the purpose of direct advertising on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(2) of the GDPR.

Unless otherwise stated in the specific processing situations described in this statement, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.