1. Privacy at a glance
General information
The following information provides an overview of your personal data when you visit our website. Personal data means all data by which you can be personally identified, such as your name, your email address or the IP address of your device.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by Salomon Food World GmbH. Please find our contact details in the section on the controller further below in this privacy policy.
How do we collect your data?
Your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected by our IT systems when you visit the website. This includes technical data such as the internet browser, the operating system or the time at which a page is accessed, which is recorded automatically.
What do we use your data for?
Some data is collected to enable the technical provision of the website. Other data may be used to analyse your user behaviour. When initiating contracts, we may use your data for orders or confirmations.
What rights do you have regarding your data?
You may obtain information about the origin, recipients and purpose of the personal data.
You may request the rectification or deletion of this data.
You may revoke consent you have given for data processing at any time with effect for the future.
You may request the restriction of the processing of your personal data.
Last but not least, you have the right to lodge a complaint with the competent supervisory authority.
Analytics tools and third-party tools
When you visit this website, your browsing behaviour may be evaluated using analytics programs.
Information on these analytics programs can be found further below in this privacy policy.
2. Hosting
We host the content of our website with the following providers:
DomainFactory
The provider is DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany (hereinafter “DomainFactory”). When you visit our website, DomainFactory collects various log files, including your IP addresses.
Details can be found in DomainFactory’s privacy policy: https://www.df.eu/de/datenschutz/.
The use of DomainFactory is based on Art. 6(1)(f) GDPR as a legitimate interest in presenting our website properly.
Where we ask you for consent, processing is carried out on the basis of Art. 6(1)(a) GDPR. You may revoke your consent at any time.
Host Europe
The provider is Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany (hereinafter “Host Europe”). When you visit our website, Host Europe collects various log files, including your IP addresses.
Details can be found in Host Europe’s privacy policy: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.
The use of Host Europe is based on Art. 6(1)(f) GDPR as a legitimate interest in presenting our website properly.
Where we ask you for consent, processing is carried out on the basis of Art. 6(1)(a) GDPR. You may revoke your consent at any time.
3. General information and mandatory information
Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data by which you can be identified. This privacy policy explains which data we collect and for what purpose.
Data transmission on the internet may always involve security gaps. Complete protection of data against access by third parties is not possible.
Notice concerning the controller
The controller responsible for data processing on this website is:
Salomon FoodWorld GmbH
Nordring 13
D-63762 Großostheim
Germany
Phone: +49 6026 506-0
Email: info@salomon-foodworld.com
Storage period
Your personal data will be stored by us until the purpose of the data processing no longer applies. If you assert a deletion request or revoke consent to data processing, your data will be deleted unless other legally permissible reasons prevent deletion. These may include, for example, tax or commercial-law requirements. In such a case, we can only delete the data once these reasons no longer exist.
General information on the legal bases for data processing on this website
Where you have given consent, we process your personal data on the basis of Art. 6(1)(a) GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR.
You may revoke your consent at any time.
If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.
If there is a legal obligation, your data is processed on the basis of Art. 6(1)(c) GDPR.
Finally, data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Data Protection Officer
We have appointed a Data Protection Officer.
Mr Andreas Schwarz, VdE Service GmbH
Eduard-Pfeiffer-Straße 48
70192 Stuttgart
Germany
Phone: 0711 22 333-12
Email: aschwarz@ernaehrung.net
Notice concerning data transfer to third countries that are not secure under data protection law and transfer to US companies that are not DPF-certified
We use tools from companies based in third countries that are not secure under data protection law, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. We point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not secure under data protection law.
The level of data protection in the USA is generally comparable to that of the EU. Data transfer to the USA is permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has appropriate additional safeguards. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of personal data
Salomon Food World GmbH works with various external bodies. In some cases, this requires the transfer of personal data to these bodies. We only disclose personal data where this is necessary for the performance of a contract and where we are legally obliged to do so, for example when transferring data to tax authorities or law enforcement authorities.
If we have a legitimate interest pursuant to Art. 6(1)(f) GDPR in the transfer, or if another legal basis permits the transfer of data, we will also disclose your data.
When using processors, we only disclose personal data of our customers on the basis of a valid data processing agreement. In the case of joint processing, we enter into a joint processing agreement.
Revocation of your consent to data processing
For some data processing operations, we request your explicit consent. Once granted, this consent remains valid until you revoke it.
Right to object to data collection for direct marketing purposes (Art. 21 GDPR)
If we collect your personal data in order to send direct marketing, you may object to this form of advertising at any time.
Right to lodge a complaint with the competent supervisory authority
If you suspect a breach of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, the supervisory authority is the data protection authority of your federal state. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to data portability
You may have data that we have collected on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format.
Access, rectification and deletion
Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data. You may contact us at any time for this purpose and for any further questions relating to personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it for the exercise, defence or establishment of legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Cookies
Our websites use so-called cookies. Cookies are small data packets that are exchanged between us and your device and primarily serve to enable electronic communication between devices. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites, for example cookies for processing payment services.
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as the shopping cart function or the display of videos. Other cookies may be used to evaluate user behaviour or for advertising purposes.
Cookies that are required to carry out the electronic communication process, to provide certain functions requested by you, such as the shopping cart function, or to optimise the website, such as cookies for measuring web audience, are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. As website operator, we have a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of our services.
If you have additionally given us consent to store cookies and comparable recognition technologies, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent may be revoked at any time.
Cookie Declaration
Our Cookie Declaration was last updated on 12 May 2026 on the basis of information collected by Cookiebot.
Our website uses cookies and comparable technologies to provide certain functions, analyse the use of our website, improve content and display marketing measures. Cookies are small text files that are stored on your device. Comparable technologies may include, for example, local storage or pixel trackers.
We distinguish between necessary cookies, preference cookies, statistics cookies and marketing cookies. To the extent that cookies or comparable technologies are not technically necessary, we use them only on the basis of your consent. You can revoke or adjust your consent at any time via the cookie settings.
Necessary cookies
Necessary cookies ensure the technical functionality of our website and the secure interaction between the website and your device. Without these cookies, certain website functions cannot be properly provided.
Necessary cookies include, in particular, “ak_bmsc” from jobs.vion-karriere.de. This cookie is used to distinguish between human users and bots. The maximum storage period is one day; it is an HTTP cookie.
We also use “CookieConsent” from Cookiebot. This cookie stores the user’s consent status and documents which cookie settings have been made. The maximum storage period is one year; it is an HTTP cookie.
The “JSESSIONID” cookie from jobs.vion-karriere.de preserves the user’s status during the respective request or session. The storage period is limited to the session; it is an HTTP cookie.
In addition, “kirby_session” from www.salomon-foodworld.com is used. This cookie preserves the user’s status during the request. The maximum storage period is one day; it is an HTTP cookie.
Preference cookies
Preference cookies enable the website to remember information that influences the behaviour or appearance of the website. This includes, for example, preferred language settings or regional settings.
For this purpose, we use, among other things, “loglevel:userlike” from www.salomon-foodworld.com. This is a user identifier that can recognise the user when they return. Storage is permanent in HTML Local Storage.
Cookies named “uslkumm#_s” from BunnyCDN may also be used. These cookies are assigned to the category of preference cookies. The purpose has not yet been finally described by the provider. Storage takes place for the duration of the session; these are HTTP cookies.
Statistics cookies
Statistics cookies help us understand how visitors interact with our website. The information obtained in this way is collected and evaluated in order to improve the website technically, in terms of content and with regard to user-friendliness.
We use, among other things, the cookies “_ga” and “ga#” from Google. These cookies are used to transmit information to Google Analytics, in particular about the device used and user behaviour on our website. They may help to recognise users across devices and marketing channels. The maximum storage period is two years in each case; these are HTTP cookies.
In addition, we use “mf_initialDomQueue” from Mouseflow. This technology records data on user behaviour on the website. The evaluation serves to optimise our website. Storage takes place for the duration of the session in HTML Local Storage.
We also use “mf_transmitQueue” from Mouseflow. This technology records data on user behaviour and navigation on the website. The evaluation serves to optimise and statistically process the website. Storage takes place for the duration of the session in HTML Local Storage.
Marketing cookies
Marketing cookies are used to recognise visitors across different websites. The aim is to display relevant advertisements to users and to measure and optimise the effectiveness of advertising measures.
We use, among other things, “_fbp” from Meta Platforms, Inc. This cookie is used by Facebook to provide a range of advertising products, for example real-time bidding from advertisers. The maximum storage period is three months; it is an HTTP cookie.
We also use “gclau” from Google. This cookie is used to measure the efficiency of advertisements on a website, in particular by collecting data on the conversion rate of advertisements. The maximum storage period is three months; it is an HTTP cookie.
The “gclls” technology from Google is used to track the conversion rate of users and advertising banners on the website and thereby optimise the relevance of advertisements. Storage is permanent in HTML Local Storage.
We also use “lastExternalReferrer” from Meta Platforms, Inc. This technology records the last website from which a user reached our website. Storage is permanent in HTML Local Storage.
The “lastExternalReferrerTime” technology from Meta Platforms, Inc. records information about how the user reached our website from the last website visited. Storage is permanent in HTML Local Storage.
In addition, “log/error” from Meta Platforms, Inc. may be used. This technology records and tracks possible tracking errors. Storage takes place for the duration of the session; it is a pixel tracker.
We also use “mf_#” from Mouseflow. This cookie collects data about the navigation and behaviour of the user on the website in order to personalise the user experience and, where applicable, the purchasing experience. The maximum storage period is three months; it is an HTTP cookie.
Consent management with Cookiebot
Our website uses Cookiebot to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection law. The provider of this technology is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter “Cookiebot”.
When you access our website, a connection to Cookiebot’s servers is established in order to obtain your consents and other declarations regarding cookie use. Cookiebot then stores a cookie in your browser in order to be able to assign the consents you have given or their revocation.
The data collected by Cookiebot is stored until you ask us to delete it, delete the Cookiebot cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
Cookiebot is used in order to obtain and be able to demonstrate the legally required consents for the use of cookies and comparable technologies. The legal basis for this is Art. 6(1)(c) GDPR. Where technically non-essential cookies or comparable technologies are used, this is done on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Consent with Cookiebot
Our website uses Cookiebot consents to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection law. The provider of this technology is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you access our website, a connection to Cookiebot’s servers is established in order to obtain your consents and other declarations regarding cookie use. Cookiebot then stores a cookie in your browser in order to assign the consents granted or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
Cookiebot is used in order to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
Enquiries via contact form, email, telephone, fax and letter
If you send us enquiries by contact form, email, telephone, fax or letter, your details from the enquiry form will be stored by us for the purpose of processing the enquiry. The legal basis for this is Art. 6(1)(b) GDPR, as we assume that the contact is intended to initiate a contractual relationship. If this is not the case, our legitimate interest (Art. 6(1)(f) GDPR) lies in responding to enquiries from our customers, prospects and visitors.
These data are also subject to the requirements for deletion upon request or after withdrawal of consent, provided that statutory retention periods do not prevent deletion.
Communication via WhatsApp
For communication with our customers and other third parties, we use, among other services, the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5, Ireland. WhatsApp is a subsidiary of META.
Although communication is carried out using end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from accessing the content of the communication, WhatsApp does gain access to metadata generated during communication. According to its own statements, WhatsApp shares data of its users with its US-based parent company META. Further details on data processing can be found in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.
We use WhatsApp as a low-threshold communication channel with customers, prospects and other business and contractual partners (Art. 6(1)(f) GDPR), provided that you as a user already use WhatsApp and have therefore given your consent to this form of communication.
WhatsApp is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/7735.
We use WhatsApp in the “WhatsApp Business” version.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.
Use of chatbots
We use chatbots to communicate with you. Chatbots are able to respond to your questions and other inputs without human assistance. To do this, the chatbots analyse not only your inputs but also other data in order to provide suitable answers, such as names, email addresses and other contact details, customer numbers and other identifiers, orders and chat histories. In addition, your IP address, log files, location information and other metadata may be collected via the chatbot. These data are stored on the servers of the chatbot provider.
User profiles may be created on the basis of the collected data. The data may also be used to display advertising tailored to recipients, provided that the other legal requirements, in particular consent, are met. For this purpose, the chatbots may be linked to analytics and advertising tools.
The collected data may also be used to improve our chatbots and their response behaviour.
The data entered by you as part of the communication will remain with us or the chatbot operator until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, in particular retention periods, remain unaffected.
The legal basis for the use of chatbots is Art. 6(1)(b) GDPR, insofar as the chatbot is used for contract initiation or in the context of contract performance. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be revoked at any time. In all other cases, use is based on our legitimate interest in the most effective customer communication possible (Art. 6(1)(f) GDPR).
5. Social media
Elements of the Facebook network are integrated on our website. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the collected data is transferred to the USA and other third countries.
An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. As the provider of the content, we have no knowledge of the content of the transmitted data or of its use by Facebook. Further information can be found in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may revoke your consent at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing the tool on our website in a manner that is secure under data protection law. Facebook is responsible for the data security of Facebook products. You may assert data subject rights relating to data processed by Facebook directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
Functions of the Instagram service are integrated on this website. These functions are offered by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website with your Instagram profile by clicking the Instagram button. This allows Instagram to assign your visit to this website to your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or of its use by Instagram.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Since personal data is collected on our website with the help of the tool and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited to the collection of the data and its transfer to Facebook or Instagram. Processing by Facebook or Instagram is not part of the joint responsibility. The joint obligations have been set out in an agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.
According to this agreement, we are responsible for providing privacy information when using Facebook or Instagram and for integrating the tool on our website. Facebook is responsible for the data security of Facebook or Instagram products. Data subject rights relating to data processed by Facebook or Instagram may be asserted directly with Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.
Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time a page of this website containing LinkedIn elements is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn can assign your visit to this website to you and your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or of its use by LinkedIn.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/data-transfers-from-the-eu-eea-and-switzerland?lang=en
Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.
6. Analytics tools and advertising
IPStack – Country-based geolocation of IP addresses
On our website, we use the IPStack service to determine the country from which our visitors access our website. The full IP address is not decrypted and no conclusions are drawn about the identity of individual persons.
The collection of the country is used exclusively to analyse website use, optimise our offering and ensure the security of the website. The data collected is not passed on to third parties without your consent unless required by law.
This service is used on the basis of Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to make the website user-friendly and secure.
Further information on data processing by IPStack can be found in IPStack’s privacy policy: https://ipstack.com/privacy
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies or perform independent analyses. It merely serves to manage and deploy the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.
Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be revoked at any time.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics
This website uses functions of the Google Analytics web analytics service. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. These data are assigned to the user’s respective device. They are not assigned to a user ID.
Furthermore, we can use Google Analytics to record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine-learning technologies in data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour, such as cookies or device fingerprinting. The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
IP anonymisation
Google Analytics IP anonymisation is activated. This means that your IP address is shortened by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities and provide the website operator with other services relating to website use and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Matomo
This website uses the open-source web analytics service Matomo.
With the help of Matomo, we collect and analyse data on the use of our website by website visitors. This enables us to find out when which page views were made and from which region they originate. We also collect various log files, such as IP address, referrer, browser and operating systems used, and can measure whether our website visitors perform certain actions, such as clicks, purchases and similar activities.
This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.
We host Matomo exclusively on our own servers, so all analytics data remains with us and is not passed on.
Mouseflow
We have integrated Mouseflow on this website. The provider is Mouseflow Inc., 106 E 6th St #900, Austin, Texas, 78701, USA.
By using Mouseflow, we can analyse the behaviour of visitors on our website. This helps to improve the operator’s website and provide visitors with a more pleasant user experience.
To achieve this objective, primarily click paths of individual visits, known as “session replay”, are collected. In the process, information is primarily collected about how users interact with the website, for example by clicking or touching, moving the mouse, scrolling and browsing pages.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
In addition, you can deactivate tracking via Mouseflow using the following link: https://mouseflow.com/opt-out/.
Further details can be found in the provider’s privacy policy at https://mouseflow.com/legal/visitor/privacy-policy/ and https://mouseflow.com/legal/gdpr/.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Targeted advertisements may also be displayed based on user data available to Google, such as location data and interests (audience targeting). As website operator, we can evaluate these data quantitatively, for example by analysing which search terms led to our advertisements being displayed and how many advertisements led to corresponding clicks.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Meta Pixel (formerly Facebook Pixel)
This website uses Meta’s visitor action pixel for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5, Ireland. It is likely that the data will also be transferred to the USA and other third countries.
This allows the behaviour of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Meta advertisement. This enables the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Meta so that a connection to the respective user profile on Facebook or Instagram is possible, and Meta may use the data for its own advertising purposes in accordance with Meta’s data usage policy (https://de-de.facebook.com/about/privacy/). This enables Meta to display advertisements on Facebook or Instagram pages and other advertising channels. We, as the site operator, cannot influence this use of the data.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms Ireland, Merrion Road, Dublin 4, DO4 X2K5, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing carried out by Meta after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Meta tool and for implementing the tool on our website in a manner that is secure under data protection law. Meta is responsible for the data security of Meta products. Data subject rights, such as requests for information, relating to data processed by Facebook or Instagram may be asserted directly with Meta. If you assert data subject rights with us, we are obliged to forward them to Meta.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Further information on protecting your privacy can be found in Meta’s privacy notices: https://de-de.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the advertising settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged into Facebook.
If you do not have a Facebook or Instagram account, you can deactivate usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
Meta Conversion API
We have integrated the Meta Conversion API on this website. The provider of this service is Meta Platforms Ireland, Merrion Road, Dublin 4, DO4 X2K5, Ireland. According to Meta, however, the collected data is also transferred to the USA and other third countries.
The Meta Conversion API enables us to record the interactions of website visitors with our website and pass them on to Meta in order to improve advertising performance on Facebook and Instagram.
For this purpose, in particular, the time of access, the website accessed, your IP address and your user agent, as well as any further specific data such as purchased products, basket value and currency, are recorded. A complete overview of the data that can be collected can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms Ireland, Merrion Road, Dublin 4, DO4 X2K5, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing carried out by Meta after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Meta tool and for implementing the tool on our website in a manner that is secure under data protection law. Meta is responsible for the data security of Meta products. Data subject rights, such as requests for information, relating to data processed by Facebook or Instagram may be asserted directly with Meta. If you assert data subject rights with us, we are obliged to forward them to Meta.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Further information on protecting your privacy can be found in Meta’s privacy notices: https://de-de.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the advertising settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged into Facebook.
If you do not have a Facebook or Instagram account, you can deactivate usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
Meta Custom Audiences
We use Meta Custom Audiences. The provider of this service is Meta Platforms Ireland, Merrion Road, Dublin 4, DO4 X2K5, Ireland.
When you visit or use our websites and apps, make use of our free or paid offers, transmit data to us or interact with our company’s Facebook or Instagram content, we collect your personal data. If you give us consent to use Meta Custom Audiences, we will transfer this data to Meta, enabling Meta to display suitable advertising to you. Target groups (lookalike audiences) may also be defined using your data.
Meta processes this data as our processor. Details can be found in Meta’s terms of use: https://www.facebook.com/legal/terms/customaudience.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
7. Newsletter
Newsletter dispatch
If you would like to receive our newsletter, we require an email address from you and further information that enables us to verify that you are actually the owner of this email address. No further data is collected, or only on a voluntary basis. For sending the newsletter, we work with the service provider Inxmail: Inxmail GmbH, Wentzinger Straße 17, 79106 Freiburg, Germany (hereinafter “Inxmail”).
The data you enter for the purpose of subscribing to the newsletter is processed on Inxmail’s servers.
With Inxmail, we analyse our newsletter campaigns. This allows us to see whether a message has been opened and whether links have been clicked.
We also recognise whether previously defined actions have been carried out after opening. For example, we can recognise whether you made a purchase after clicking on the newsletter.
Inxmail also enables us to divide newsletter recipients into different categories. Newsletter recipients can be subdivided, for example, by age, gender or place of residence. This allows newsletters to be better adapted to the respective target groups. If you do not want analysis by Inxmail, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose.
Inxmail’s privacy policy can be found at: https://www.inxmail.de/datenschutz.
Legal basis
Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time with effect for the future.
Storage period
The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or Inxmail until you unsubscribe from the newsletter and will be deleted from the distribution list after you unsubscribe from the newsletter. Invalid email addresses or other deletions or blocking from the distribution list are carried out at our discretion. The legal basis here is the legitimate interest under the GDPR, Art. 6(1)(f).
After you unsubscribe, your email address will be stored by us or Inxmail in a blacklist in order to prevent clearly unwanted mailings in the future. The data from the blacklist is used only for this purpose and is not merged with other data. This blocking serves both your protection and ours in complying with statutory requirements under the German Unfair Competition Act (UWG).
8. Plugins and tools
YouTube
This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our webpages on which YouTube is embedded, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited.
YouTube will store various cookies on your device or use comparable technologies for recognition. In this way, YouTube generates information about visitors to this website. YouTube uses this information to collect video statistics, improve user-friendliness and prevent fraud attempts. The data collected in this way is further processed within the network of the parent company Google.
YouTube is used in the interest of an appealing presentation of our online offerings. The legal basis here is the legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be revoked at any time.
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=en.
Google Fonts (local hosting)
This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. Google Fonts are installed locally. No connection to Google servers is established.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Google Maps
This site uses the Google Maps map service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service, we integrate map material on our website and thus ensure that the locations we provide can be found easily. The legal basis is the legitimate interest pursuant to Art. 6(1)(f) GDPR.
To use the functions of Google Maps, it is necessary to store your IP address. This information is transferred to a Google server in the USA and stored there. Salomon Food World has no influence over this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When Google Maps is accessed, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
Lime Connect (Userlike)
To process user enquiries via our support channels or live chat systems, we use Lime Connect (Userlike), hereinafter referred to as “Userlike”. The provider is Lime Connect (Userlike) GmbH (haftungsbeschränkt), Kölnturm, Im Mediapark 8, 50670 Cologne, Germany.
Messages that you send to us may be stored in the Userlike ticket system or answered by our employees in the live chat. If you communicate with us via Userlike, we and Userlike store, among other things, your name and your email address, provided that you have provided them, as well as your chat histories. In addition, the browser you use, your operating system, your IP address and your location are collected. These data are combined in a profile.
Messages addressed to us remain with us until you ask us to delete them or the purpose for data storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Userlike is used on the basis of Art. 6(1)(f) GDPR. As a food company, we have a vital interest in processing your enquiries as quickly, reliably and efficiently as possible.
Userlike is based in the European Union but uses Amazon Web Services servers, so your data may also be transferred to the USA.
Further information can be found in Userlike’s privacy policy: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.
9. E-commerce and payment providers
Processing customer and contract data
We collect, process and use personal customer and contract data to establish, structure and amend our contractual relationships. We collect, process and use personal data relating to the use of this website (usage data) only to the extent necessary to enable the user to use the service or to invoice them. The legal basis for this is Art. 6(1)(b) GDPR.
The customer data collected will be deleted after completion of the order or termination of the business relationship and after expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.
10. Our own services
Handling applicant data
We offer you the opportunity to apply to us via various channels, such as by email, by post or via an application form. We inform you about the scope, purpose and use of your personal data collected as part of the application process.
Your personal data, such as contact and communication data, application documents and notes made during interviews, is collected because this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is Section 26 BDSG under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation) and, where you have given consent, Art. 6(1)(a) GDPR. Consent may be revoked at any time. Within our company, your personal data will only be disclosed to persons involved in processing your application.
If the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 88 GDPR for the purpose of carrying out the employment relationship.
Retention period of the data
If we are unable to offer you a position, if you reject a job offer or withdraw your application, we will retain your documents for up to 6 months from the end of the application process. The data will then be deleted or destroyed.
Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after expiry of the 6-month period, for example due to an impending or pending legal dispute, deletion will only take place when the purpose for further retention no longer applies.
If you give corresponding consent (Art. 6(1)(a) GDPR), or if statutory retention obligations prevent deletion, we will retain your application for longer.
Inclusion in the applicant pool
If we are unable to offer you a position, we may include your documents in our applicant pool in order to contact you in the event of suitable vacancies.
Inclusion in the applicant pool takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no connection with the ongoing application procedure. You may revoke your consent at any time. In this case, the data will be deleted from the applicant pool unless statutory retention reasons exist. The data from the applicant pool will be deleted no later than two years after consent has been granted.
