Privacy policy

Privacy policy

Thank you for visiting our website. The protection and security of your personal data when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the website of Kalera GmbH, which is accessible under the domain kalera.com and the various subdomains (“our website”).

Who is responsible and how do I contact you?

Controller
for the processing of personal data in the sense of the EU General Data Protection Regulation (GDPR)

Kalera GmbH
Tölzer Str. 2D
81379 München
GERMANY
local@andever.de

Data Protection Officer

FX DATA UG (haftungsbeschränkt)
Verhoevenstrasse 4
81739 München
DE
Felix Gebhard
dsb@fx-data.de

What is it about?

This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Regardless of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and if there are legal retention obligations.

Who will receive my data?

We only disclose your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or protection of legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of processing on behalf of us pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing procedures. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

Access pursuant to Art. 15 GDPR to the data stored about you in the form of detailed information on the processing, as well as a copy of your data;
Correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their erasure because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
Objection pursuant to Art. 21 GDPR against the processing of your personal data, insofar as this is carried out on the basis of Art. 6 (1) lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
Withdrawal pursuant to Art. 7 (3) GDPR of your granted consent with effect for the future.
Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling does not take place.

Providing the website

Nature and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

IP address of the requesting device
Date and time of access
Name and URL of the accessed file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest to display our website and ensure security and stability on the basis of Art. 6 (1) lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 (1) lit. c GDPR. There is no legal or contractual obligation to provide the data, however, accessing our website is technically not possible without providing the data.

Storage period

The aforementioned data is stored for the duration of the display of the website and for technical reasons beyond that for a maximum of 7 days.

Nature and scope of processing

If you register to receive our newsletter on our website, we collect your e-mail address and store this information together with the date of registration and your IP address. Subsequently, you will receive an e-mail in which you must confirm your subscription to the newsletter (double opt-in).

To send the newsletter, we use a service of The Rocket Science Group, LLC, which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Storage period

After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter).

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with the call and use of our fan pages/accounts.

Data that we process from you

If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name via which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request.

The legal basis is Art. 6 (1) lit. f GDPR (processing is necessary to protect the legitimate interests of the controller).

(Statistic) usage data we receive from social networks.

We receive automatically provided statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, details on page activities and post interactions, reach, video views/views, and details on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us through this.

Which data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, to this extent, no user account is required for the respective social network.

Please note, however, that when you call up the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the corresponding links above).

Insofar as you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

Facebook page

When you visit our Facebook page, Facebook records, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this under the following link: https://facebook.com/help/pages/insights.

It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide “publicly”.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) lit. f GDPR. Should you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) lit. a, Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with Facebook Ireland as well as with us.

The primary responsibility for the processing of Insights data lies with Facebook in accordance with the GDPR and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data, Facebook Ireland provides the essence of the Page Insights supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals.

Further information can be found directly at Facebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Instagram page

When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more detailed information on this under the following link: https://www.facebook.com/help/instagram/788388387972460?helpref=related.

By means of the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Facebook Ireland as well as with us.

The primary responsibility for the processing of Insights data lies with Instagram in accordance with the GDPR and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data, Facebook Ireland provides the essence of the Page Insights supplement to the data subjects.

Further information can be found directly on Instagram: https://help.instagram.com/519522125107875.

Twitter page

We are joint controllers with Twitter for the personal content of the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us.

The primary responsibility under the GDPR for the processing of Insights Data lies with Twitter and Twitter complies with all obligations under the GDPR with respect to the processing of Insights Data, Twitter Inc. provides the substance of the Page Insights Supplement to data subjects.

Further information can be found directly at Twitter: privacy policy.

You can request the Twitter usage concept on which the offer is based by contacting our e-mail address above with the keyword “Twitter usage concept”.

LinkedIn page

LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Businesses can create profiles where photos and other company information are uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchanges on specialized topics with people who share the same professional interests. In addition, LinkedIn is often used by businesses and other organizations to hire employees and present themselves as an interesting employer.

For more information about LinkedIn, please visit: https://about.linkedin.com/

For more information on LinkedIn privacy, please visit: https://www.linkedin.com/legal/privacy-policy

We do not collect or process any personal data via our LinkedIn company page.

AWS S3

Nature and scope of processing

We use AWS S3 to properly deliver the content of our website. AWS S3 is a service of Amazon Web Services, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Amazon Web Services, Inc. whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of AWS S3.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer according to Art. 6 (1) lit. f GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Amazon Web Services, Inc. Further information can be found in the privacy policy for AWS S3: https://aws.amazon.com/de/privacy/.

Adobe CDN

Nature and scope of processing

We use Adobe CDN to properly deliver content to our website. Adobe CDN is a service provided by Adobe Inc. which acts as a Content Delivery Network (CDN) on our website to provide functionality to other Adobe Inc. services. For said services, you will find a separate section in this Privacy Policy. This section only addresses the use of the CDN.

A CDN helps to provide content from our online offering, particularly files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Adobe Inc., San Jose, California, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the purposes described above and to maintain the security and functionality of Adobe CDN.

Purpose and legal basis

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Adobe Inc. Further information can be found in the Adobe CDN privacy policy: https://www.adobe.com/de/privacy/policy.html.

Google Analytics

Nature and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors stay.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Google Analytics, this is done on the basis of your consent pursuant to Art. 49 (1) lit. a GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Nature and scope of processing

We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

Google Tag Manager is used on the basis of our legitimate interests, i.e. interest in optimizing our services pursuant to Art. 6 (1) lit. f GDPR.

Storage period

MailChimp

Nature and scope of processing

We have integrated components of the MailChimp service on our website. MailChimp is a service of The Rocket Science Group, LLC and provides marketing automation for businesses.

MailChimp is used to store and transfer data entered in forms using cookies, to send marketing emails and automated messages, and to create targeted campaigns.

In addition, MailChimp offers us the possibility to analyze whether the sent emails have been opened, how many users have received an email and whether users have unsubscribed from the newsletter after receiving an email.

In this case, your data is passed on to the operator of MailChimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308, United States.

Purpose and legal basis

We process your data with the help of MailChimp for the purpose of optimizing our website and for marketing purposes based on your consent pursuant to Art. 6 (1) lit. a GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by The Rocket Science Group, LLC. Further information can be found in the privacy policy for MailChimp: https://mailchimp.com/legal/privacy/.

Last Updated: May 2, 2022

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Privacy policy

Newsletter

Facebook page

Instagram page

Twitter page

LinkedIn page

AWS S3

Adobe CDN

Google Analytics

Google Tag Manager

MailChimp