DATA POLICY
1. General Information
The following privacy notice pursuant to Art. 13 GDPR provides an overview of how we process your personal data when you visit our website.
The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, this includes all information relating to an identified or identifiable natural person. This includes, for example, details such as name, postal address, email address, telephone number, or payment data.
Below, we provide detailed information on how we handle your personal data.
2. Controller and Data Protection Officer
Name and contact details of the controller:
Groneweg Verwaltungsgesellschaft mbH
Am Eggenkamp 17
48268 Greven
Germany
T +49 2571 507-0
Name and contact details of the Data Protection Officer:
Said-Elham Sadat
Martin-Luther-King-Weg 42-44
48155 Münster
Germany
T +49 251 7187903
3. Data Collection When Visiting Our Website
When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”).
When you access our website, we collect the following data, which is technically necessary to display the website to you:
-
Website visited
-
Date and time of access
-
Amount of data sent in bytes
-
Source/reference from which you accessed the page
-
Browser used
-
Operating system used
-
IP address used (possibly in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” address line and the lock symbol in your browser.
4. Cookies
We use cookies on our website. These are small text files that your browser stores on your device. Certain cookies are technically necessary to ensure that core functions of the website are provided reliably. Without these cookies, individual areas or processes may not function properly. These technically necessary cookies are usually deleted when you close your browser. The legal basis is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG, as they are strictly necessary to provide the content you have requested.
All other cookies that are not strictly necessary are only set after you have given your consent. The legal basis for this is § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. These include, for example, cookies for reach measurement or statistical analysis.
You can configure your browser to determine whether cookies may be stored and delete cookies that have already been stored at any time. Please note that without technically necessary cookies, some functions of the website may not be fully available.
For better understanding, the most common types of cookies are listed below:
-
Session cookies: These are stored during active use of a website and enable session identification so that, for example, you remain logged in when navigating between pages. They are deleted when you close your browser or when the session ends.
-
Persistent cookies: These are stored for a longer period according to their defined expiration date. This allows websites to remember settings such as your selected language on subsequent visits. They are automatically deleted after expiration.
-
Third-party cookies: These cookies originate from integrated partners. They are used, for example, for statistical analysis or marketing purposes.
-
Technically necessary cookies: These provide basic functions such as navigation or access to secure areas and are required to ensure proper operation of the website. Some content cannot be provided without these cookies, as the browser must be recognized when changing pages. These cookies are deleted when the browser is closed. The legal basis is Art. 6 para. 1 lit. f GDPR, as they serve our legitimate interest in enabling the use and provision of our website.
5. Website Hosting
Our website is hosted by an external service provider (Wix.com Ltd., Yunitsman 5 St, Tel Aviv, Israel). The personal data collected on our website is processed on the servers of the hosting provider. This may include IP addresses, meta and communication data, website access data, and other data generated via our website.
Processing is carried out for the purpose of ensuring the secure, stable, and efficient provision of our website in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the professional and reliable provision of our online services.
A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider, ensuring that the data is processed only in accordance with our instructions and protected by appropriate technical and organizational measures.
In some cases, it cannot be ruled out that personal data may be accessed from a third country as part of the technical provision of the website. For Israel, there is an adequacy decision of the European Commission pursuant to Art. 45 GDPR, ensuring an adequate level of data protection.
6. Job Application via Our Careers Page
If you use the link to our job postings on our website, you will be redirected to the careers page of our subsidiary, Freeze Dry Foods GmbH.
Freeze Dry Foods GmbH processes your personal data independently in connection with the application process and is therefore an independent controller within the meaning of the GDPR.
The privacy notices provided on that careers page apply exclusively to the processing of your data.
7. Contact
You have several options to contact us, including by email or telephone. If you contact us, we process the personal data you provide voluntarily solely for the purpose of communicating with you.
Processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in effectively handling inquiries addressed to us, or on your consent pursuant to Art. 6 para. 1 lit. a GDPR, if such consent has been requested.
The data you provide will remain with us until you request deletion, withdraw your consent, or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.Sie haben die Möglichkeit, auf mehreren Wegen mit uns in Kontakt zu treten. Per E-Mail oder per Telefon. Wenn Sie mit uns Kontakt aufnehmen, verarbeiten wir jene personenbezogenen Daten, die Sie uns in diesem Rahmen freiwillig zur Verfügung stellen, allein zum Zwecke der der individuellen Kommunikation mit Ihnen.
8. Customer and Supplier Data
These data are processed in the context of fulfilling our contracts with customers and for implementing pre-contractual measures. The purposes of data processing are based on customer needs and may include sales or consultation discussions and similar activities.
We also process personal data for the initiation and performance of contracts with suppliers and service providers on the basis of Art. 6 para. 1 lit. b GDPR.
9. Processors
We transfer your data to service providers within the scope of data processing agreements pursuant to Art. 28 GDPR, who support us in operating our website and related processes. These include, for example, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.
Below we list the processors with whom we cooperate, insofar as this has not already been stated above. If data is transferred outside the EU or EEA, we provide information on the appropriate level of data protection.
Processor
Wix.com Ltd., Yunitsman 5 St, Tel Aviv, Israel
Purpose
Hosting
Adequate level of data protection
Adequacy decision of the European Commission
10. Storage Period
Unless otherwise specified in individual cases within this notice, we store personal data only for as long as necessary to fulfill the purposes pursued. Your personal data will be deleted as soon as the purpose of processing ceases to apply. If deletion is prevented by legitimate reasons within the meaning of Art. 17 para. 3 GDPR, such as statutory retention obligations, processing will be restricted during this period.
11. Rights of Data Subjects
Within the framework of applicable legal provisions, you have the right to access, rectification or completion, deletion, data portability, restriction of processing, and objection to the processing of your personal data.
We take the protection of your data very seriously. To ensure that personal data is not disclosed to third parties, please send your request by email or post with clear identification of your person to the address stated above.
a. Right of access
You have the right to request information about your personal data processed by us, including the purposes of processing, categories of data, recipients, planned storage duration, existence of rights, origin of the data, and the existence of automated decision-making including profiling (Art. 15 GDPR).
b. Right to rectification or completion
You have the right to request the immediate correction of inaccurate or completion of your personal data (Art. 16 GDPR).
c. Right to erasure
You have the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR).
d. Right to restriction of processing
You have the right to request the restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR (Art. 18 GDPR).
e. Right to data portability
You have the right to data portability, i.e. the right to receive the personal data concerning you that we have stored in a structured, commonly used, and machine-readable format (Art. 20 GDPR).
You also have the right to have your personal data, which we process based on your consent or in the performance of a contract and by automated means, transmitted to another controller in a structured, commonly used, and machine-readable format.
If you request the direct transfer of the data to another controller, this will only take place insofar as it does not adversely affect the rights and freedoms of others.
12. Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise, or defense of legal claims.
13. Right to Withdraw Consent
If we process your personal data based on your consent, you have the right to withdraw this consent at any time with effect for the future.
Upon withdrawal, we will delete the relevant data without undue delay unless further processing is permitted by law.
The legality of processing carried out before withdrawal remains unaffected.
14. Right to Lodge a Complaint with a Supervisory Authority
You also have the right to lodge a complaint at any time with the competent data protection supervisory authority. You may contact the supervisory authority of the federal state in which you have your habitual residence or the authority of the federal state in which the controller is established.
The supervisory authority with which the complaint has been lodged will inform the complainant about the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany
T +49 211 38424-0
15. Status and Updates of this Privacy Notice
This privacy notice is dated April 2026.
We reserve the right to update this privacy notice from time to time in order to adapt it to changes in data processing or legal requirements.