Privacy Policy - Naturland WOW Organic!
Compliance with data protection laws and, consequently, the protection of your personal data is a top priority for Naturland - Verband für ökologischen Landbau e.V. Below, we would like to explain what data we collect when you use our website at www.woworganic.eu and what measures we take to protect your data.

1 What Data We Process, for How Long, and for What Purpose

1.1 Informational Use of the Website
Scope of Processing. When you use our website purely for informational purposes—that is, when you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you visit our website, we collect the following data: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request originates, browser, operating system and its user interface, language, and version of the browser software.
Purpose and Legal Basis. The processing serves the purpose of making it technically possible to access the website and ensuring its stability and security. The legal basis for the processing is the protection of our legitimate interests(rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO). Our legitimate interest in data processing is also based on the purposes mentioned above.
Retention Period. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session ends. We store IP addresses for seven days to enable us to track misuse.

1.2 Inquiries
Scope of processing. You have the option of sending us inquiries and information using the contact details provided on the website.
Purposes of processing. We will process the information provided in this context for the purpose for which it was submitted.
Legal basis. We store and process information relevant to the respective inquiry, on the one hand, to initiate or fulfill the contractual relationship with you (GDPR(rechtsgrundlage: Art. 6 Abs. 1 lit. b)) and, on the other hand, to safeguard our legitimate interest in documenting contractual agreements and correspondence for the assertion, exercise, or defend legal claims (GDPR(rechtsgrundlage: Art. 6 Abs. 1 lit. f)), as well as to comply with statutory documentation and retention requirements ((rechtsgrundlage: Art. 6 Abs. 1 lit. c)GDPR). We process any additional information voluntarily provided by you based on your consent ((rechtsgrundlage: Art. 6 Abs. 1 lit. a)GDPR).
Retention Period. The information will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. If this results in the initiation or establishment of a business relationship, all information will be stored in a customer account in our customer database.

1.3 Newsletter
Scope of Processing. When you subscribe to our newsletter, we require your name and email address. All other information is voluntary. You will first receive an email containing a link that you must click to confirm that you wish to receive the newsletter. This prevents anyone from fraudulently subscribing to the newsletter in your name. If you have consented to our analysis of how you use our newsletter, we will evaluate when you opened the newsletter, what browser you used, from which location you accessed it, and which content interested you.
Purpose and Legal Basis. Your data will be used solely for the purpose of sending our newsletter and for customer service—to contact you individually (to the extent permitted by law), possibly after gathering additional information, to make you offers and to assess your needs regarding our services. The analysis of usage serves the purpose of improving our offerings. We store your newsletter subscription, your consent to usage analysis (if applicable), and your confirmation of subscription in order to be able to verify that you have indeed subscribed. The legal basis is therefore your consent (Art. 6(1)(a) GDPR) and, insofar as it concerns proof of consent and contacting prospective customers, our legitimate interests(rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO). In this context, the legitimate interest is the defense against unjustified legal claims and the promotion of the association’s purpose.
Duration of Storage. For the purpose of sending the newsletter and analyzing usage, we store your data until you revoke your consent or until the newsletter is permanently discontinued. For the purpose of managing contacts with prospective clients, we delete your data as soon as you object to its use, or five years after your last expression of interest; for the purpose of providing proof of consent, we retain your data for up to three years after sending you the last newsletter. If you do not confirm your newsletter subscription, we will delete your data after 24 hours.

1.4 Downloading Brochures and Newsletters
If you wish to download brochures, newsletters, or other content from our website, Section 1.1 applies accordingly.

1.5 Social Plug-ins
We integrate recommendation buttons—so-called social plug-ins—from social networks into our website. In doing so, we use the so-called “two-click solution.” This allows you to use social media while protecting your privacy.
Only when you click on the button or link visible on our site is a direct connection established between the social network and you. This solution prevents you from leaving information on every page you visit.
Specifically, we use links to YouTube, Instagram, and TikTok. These plug-ins are identified on our website by their respective logos. However, we have no control over what data is transmitted when you click on these links. You should assume that at least your IP address and other device-related information (i.e., all data listed above under 1.1) will be collected and used. It is likely that YouTube, Instagram, and TikTok will attempt to store cookies on your computer. Please read the privacy policies of the respective social media providers, as your activities on our website that are published via social media are no longer covered by this privacy policy:

Instagram: https://help.instagram.com/519522125107875
TikTok: https://www.tiktok.com/legal/privacy-policy?lang=de
Legal basis: The integration is carried out to safeguard our legitimate interest in making our website attractive (legal basis: Art. 6(1)(f) GDPR). Redirection after clicking is based on your consent (legal basis: Art. 6(1)(a) GDPR).

1.6 Cookies
Scope of processing. Our website uses cookies. Cookies are text files stored on your computer by your web browser. These cookies contain a string of characters that uniquely identifies your browser when you revisit the website. We also use cookies to make our website more user-friendly. Some elements of our website require that the browser accessing the site can be identified even after changing pages. The following data is stored and transmitted via cookies: language settings, login information. We also use cookies on our website that enable us to analyze your use of our site. In this way, the following data may be transmitted: search terms entered, frequency of page views, and use of website features. When visiting our website, users are informed about the use of cookies for analytical purposes, and their consent is obtained for the processing of personal data used in this context.
Purpose and Legal Basis. We use cookies, on the one hand, to simplify the use of our websites. Other cookies are used for analytical purposes, specifically to improve the quality of our website and identify topics of interest. Cookies are set based on your consent, or—in the case of technically necessary cookies—pursuant to Section 25(2) of the TDDDG.
Storage Duration. Cookies are stored on your computer. You can find the storage duration in the overview within your browser’s cookie settings. By changing your browser settings, you can prevent or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically, e.g., when you close your browser. If cookies are disabled for our website, you may no longer be able to use all of the website’s features to their full extent.

1.6.1 Web Analytics Services
Use of the Matomo Analytics Tool
This website uses the open-source web analytics service Matomo.
Matomo enables us to collect and analyze data regarding how visitors use our website. This allows us, among other things, to determine when specific pages were viewed and from which region the visitors are coming. In addition, we collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).
The use of this analytics tool is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
IP Anonymization: When analyzing data with Matomo, we use IP anonymization. This involves truncating your IP address before analysis so that it can no longer be uniquely associated with you.
Cookie-Free Analysis: We have configured Matomo so that it does not store any cookies in your browser.
Hosting: We host Matomo exclusively on our own servers, ensuring that all analytics data remains with us and is not shared with third parties.

2 Other Recipients of Your Data
Our Data Protection Officer has access to your personal data to the extent necessary to fulfill his or her legal obligations. The Data Protection Officer is subject to a legal duty of confidentiality.
Our website and our databases may be hosted, operated, maintained, or further developed by additional data processors or other contractors. These parties may have access to your data.
We use third-party service providers for the archiving and destruction of records and data. These providers have access to your data.
To the extent that we store and process data for the purpose of fulfilling contractual obligations, we may disclose this data to vicarious agents in connection with the performance of the contract (e.g., freight forwarders).
To the extent that we use data to contact you, we may use additional data processors or other contractors (e.g., letter shops) for this correspondence, who will then have access to your data.
We work with external consultants such as management consultants, attorneys, or tax advisors. These parties have access to your data.
We have entered into (and will continue to enter into for future engagements) data processing agreements with such processors to ensure that personal data is processed only on our behalf and in accordance with our instructions. With service providers or consultants who do not process data on our behalf, we have entered into (and will enter into for future engagements) agreements that ensure confidential treatment, unless a statutory duty of confidentiality already applies.
We will transfer your personal data to competent law enforcement, regulatory, or other authorities, institutions, or agencies if we are legally obligated to do so (GDPR(rechtsgrundlage: Art. 6 Abs. 1 lit. c)) or if we have a legitimate interest in preventing coercive measures by such authorities, institutions, or agencies within the scope of their statutory authorities (GDPR(rechtsgrundlage: Art. 6 Abs. 1 lit. f)). Such legally required or necessary transfers are not covered by this Privacy Policy.
3 Data Subject Rights
We fully guarantee your rights as a data subject. You may contact us in any form to exercise your rights—in particular to withdraw any consent you may have provided—including, in particular, by contacting our Data Protection Officer. To exercise your rights, you may be required to identify yourself to us as the data subject.
Below, we briefly explain what rights you have:
3.1 Withdrawal of Consent
You may withdraw any consent you have given at any time. Such a withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal. Processing based on a legal basis other than your consent is also unaffected by the revocation. However, you may additionally exercise the statutory rights described above (e.g., the right to object) in this regard.
In particular, you may withdraw any consent you have given to the use of your email address or phone number for direct marketing at any time and object to the continued use of your email address or phone number for this purpose at any time, without incurring any costs other than your provider’s standard transmission fees.
You can also revoke consent granted via our cookie consent tool for cookies or analytics tools by using our cookie consent tool to change your selection there. Alternatively, you can configure your browser to prevent the transmission of cookies or to automatically delete stored cookies, e.g., when you close your browser. If cookies are disabled for our website, you may no longer be able to use all of the website’s features to their full extent.
3.2 Automated Decisions
We will not make any decision that has legal effects on you or similarly significantly affects you solely on the basis of automated decision-making.
3.3 General Rights of Data Subjects
Please note that you have the right to obtain information about all personal data processed regarding you, to request the correction of inaccurate personal data and the completion of incomplete personal data, and, under the conditions provided by law, to request the erasure or restriction of the processing of your personal data (Art. 15–18 GDPR). You also have the right (Art. 21 GDPR) to object at any time to certain processing activities for reasons arising from your particular situation. Likewise, provided the legal requirements are met (Art. 20 GDPR), you have the right to receive or have your personal data transferred in a structured, commonly used, and machine-readable format.
3.4 Complaints
You have the right to lodge a complaint with a supervisory authority. The data protection supervisory authority generally responsible for us is:
Bavarian State Office for Data Protection Supervision
Street Address
Promenade 27 (Schloss)
91522 Ansbach
Germany Mailing Address
P.O. Box 606
91511 Ansbach
Germany Contact Information
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Email: poststelle@lda.bayern.de
If you wish to file a complaint, you may also use the complaint form available at https://www.lda.bayern.de/de/beschwerde.html.

4 Contact
The data controller within the meaning of the GDPR is:
Naturland - Association for Organic Farming e.V.
Kleinhaderner Weg 1
82166 Gräfelfing
Phone: +49 (0)89 898082-0
naturland(at)naturland.de
If you have any questions regarding data protection, please feel free to contact our Data Protection Officer:
datenschutz(at)naturland.de
We will process your inquiries promptly and inform you of the measures we have taken.

5 Changes to This Privacy Policy
We reserve the right to change this Privacy Policy at any time. We will publish new versions here.

Version August 2026